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CUSTOMER SUPPORT 

INTEL’S COMPLETE SUPPORT SOLUTION WORLDWIDE 

Customer Support is Intel’s complete support service that provides Intel customers with hardware support, 
software support, customer training, consulting services and network management services. For detailed infor- 
mation contact your local sales offices. 

After a customer purchases any system hardware or software product, service and support become major 
factors in determining whether that product will continue to meet a customer’s expectations. Such support 
requires an international support organization and a breadth of programs to meet a variety of customer needs. 
As you might expect, Intel’s customer support is quite extensive. It can start with assistance during your 
development effort to network management. 100 Intel sales and service offices are located worldwide — in the 
U.S., Canada, Europe and the Far East. So wherever you’re using Intel technology, our professional staff is 
within close reach. 

HARDWARE SUPPORT SERVICES 

Intel’s hardware maintenance service, starting with complete on-site installation will boost your productivity 
from the start and keep you running at maximum efficiency. Support for system or board level products can be 
tailored to match your needs, from complete on-site repair and maintenance support to economical carry-in or 
mail-in factory service. 

Intel can provide support service for not only Intel systems and emulators, but also support for equipment in 
your development lab or provide service on your product to your end-user/customer. 

SOFTWARE SUPPORT SERVICES 

Software products are supported by our Technical Information Service (TIPS) that has a special toll free 
number to provide you with direct, ready information on known, documented problems and deficiencies, as 
well as work-arounds, patches and other solutions. 

Intel’s software support consists of two levels of contracts. Standard support includes TIPS (Technical Infor- 
mation Phone Service), updates and subscription service (product-specific troubleshooting guides and; 
COMMENTS Magazine). Basic support consists of updates and the subscription service. Contracts are sold in 
environments which represent product groupings (e.g., iRMX® environment). 

CONSULTING SERVICES 

Intel provides field system engineering consulting services for any phase of your development or application 
effort. You can use our systern engineers in a variety of ways ranging from assistance in using a new product, 
developing an application, personalizing training and customizing an Intel product to providing technical and 
management consulting. Systems Engineers are well versed in technical areas such as microcommunications, 
real-time applications, embedded microcontrollers, and network services. You know your application needs; 
we know our products. Working together we can help you get a successful product to market in the least 
possible time. 

CUSTOMER TRAINING 

Intel offers a wide range of instructional programs covering various aspects of system design and implementa- 
tion. In just three to ten days a limited number of individuals learn more in a single workshop than in weeks of 
self-study. For optimum convenience, workshops are scheduled regularly at Training Centers worldwide or we 
can take our workshops to you for on-site instruction. Covering a wide variety of topics, Intel’s major course 
categories include: architecture and assembly language, programming and operating systems, BITBUS™ and 
LAN applications. 

NETWORK MANAGEMENT SERVICES 

Today’s networking products are powerful and extremely flexible. The return they can provide on your invest- 
ment via increased productivity and reduced costs can be very substantial. 

Intel offers complete network support, from definition of your network’s physical and functional design, to 
implementation, installation and maintenance. Whether installing your first network or adding to an existing 
one, Intel’s Networking Specialists can optimize network performance for you. 
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OVERVIEW 
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INTRODUCTION 

Intel microprocessors and peripherals provide a complete so- 
lution in increasingly complex application environments. Quite 
often, a single peripheral device will replace anywhere from 
20 to 100 TTL devices (and the associated design time that 
goes with them). 

Built-in functions and standard Intel microprocessor/periph- 
eral interface deliver very real time and performance advan- 
tages to the designer of microprocessor-based systems. 

REDUCED TIME TO MARKET 

When you can purchase an off-the-shelf solution that replaces 
a number of discrete devices, you’re also replacing all the de- 
sign, testing, and debug time that goes with them. 

INCREASED RELIABILITY 

At Intel, the rate of failure for devices is carefully tracked. 
Highest reliability is a tangible goal that translates to higher 
reliability for your product, reduced downtime, and reduced 


repair costs. And as more and more functions are integrated 
on a single VLSI device, the resulting system requires less 
power, produces less heat, and requires fewer mechanical con- 
nections — again resulting in greater system reliability. 


LOWER PRODUCTION COST 

By minimizing design time, increasing reliability, and replac- 
ing numerous parts, microprocessor and peripheral solutions 
can contribute dramatically to lower product costs. 


HIGHER SYSTEM PERFORMANCE 

Intel microprocessors and peripherals provide the highest sys- 
tem performance for the demands of today’s (and tomorrow’s) 
microprocessor-based applications. For example, the 
Intel386'“ Microprocessor Family offers 32-bit performance 
for multitasking, multiuser systems. Intel’s peripheral products 
have been designed with the future in mind. They support all 
of Intel’s 8, 16 and 32 bit processors. 


The Intel microprocessor and peripherals family provides 
a broad range of time-saving, high performance solutions. 


SYSTEM SUPPORT 
PROGRAMMABLE LOGIC 
TIMER/COUNTERS 
PARALLEL PORT 


MEMORY CONTROLLERS 
64K RAM CONTROL 
256K RAM CONTROL 
ERROR CORRECTION j 


COPROCESSORS 
MATH COPROCESSORS 
I/O PROCESSORS 
GRAPHIC PROCESSORS 


BUS SUPPORT 
DMA CONTROL 
INTERRUPT CONTROL 
CLOCKS 
BUS CONTROL 


MICROPROCESSORS 


LOCAL DATA 
COMMUNICATION 
ETHERNET, 
STARLAN, 

BIT BUS. 
GPIB 


ASYC, BISYNC 
SDLC, HDLC, 
DATA ENCRYPTION 


SYSTEM PERIPHERALS 
FLOPPY DISKS 
HARD DISKS 


UNIVERSAL X 
PERIPHERALS/SLAVE 
PROCESSORS 
CUSTOM 
PERIPHERALS 
(KEYBOARD, PRINTERS) 
MATH PROCESSORS 








Get Your Kit Together! 

IntePs Microsystem Components Kit Solution 


CACHE 

MEMORY 


DYNAMIC RAM 


MICRO- 

PROCESSORS 

8088/80C88 

8086/80C86 

80186 

80188 

80286 

386 

386™DX/SXm. 

1486 "*^- 


SUPER CHIP SETS 

82311 

82230/31 

82335 

82350 


MATH 

COPROCESSORS 

8087 
80287 
387^" DX 
387 ™SX 


HARD COPY 
CONTROL 

UPI™ 8042/8742 


KEYBOARD 

CONTROL 

8279-5 

UPr" 8042/8742 


FLOPPY DISK 
CONTROL 

8272A 

82072 

82077AA 


HARD DISK 
CONTROL 

82064 


CPU SUPPORT 

8231 A 
8253 

8254/82C54 

8255A/82C55A 

8256AH 

8279 

82389 

82370 


PROGRAMMABLE 

LOGIC 

85C060/090 

85C220 

85C508/509 

85C960 

5AC31 2/324 

5C032 

5C060/090 

5C180 


DMA 


8253 

82380 

8237 

82480 

82285 

82560 


CACHE CONTROL 

82385/385SX 


GLOBAL 

COMMUNICATIONS 

8251 A 
82050 
82510 

8273 

8274 

8291A/92/94A 

82530 

8044/8344/8744 


LOCAL AREA 
NETWORKING 

82C501AD 

82504TA 

82505TA 

82506TB 

82521 TA/TB 

82586 

82588 

82561 

82590/92 

82596CA/DX & SX 

iMCC 


INSTRUMENTATION 
BUS (GPIB) 

8291 

8292 


MEMORY 


SUPPORT 


8203 

8207 

8206 

82C08 


SPECIAL 

PERIPHERAL 

CONTROL 

UPr" 8041 A/8741 A 
UPl'" 8042/8742 
UPl™ 80/83/87C452 


TELE- 

COMMUNICATIONS 

2910/11/12 

29C1 3/Cl 4/Cl 6/Cl 7 

29C48 

29C53AA 

ISP 188 

89024/C024XE 

89151 
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8086 Microprocessor Family 





Intel* 

8086 

16-BIT HMOS MICROPROCESSOR 

8086/8086-2/8086-r 


■ Direct Addressing Capability 1 MByte 
of Memory 

■ Architecture Designed for Powerful 
Assembly Language and Efficient High 
Level Languages 

■ 14 Word, by 16-Bit Register Set with 
Symmetrical Operations 

■ 24 Operand Addressing Modes 

■ Bit, Byte, Word, and Block Operations 

■ 8 and 16-Bit Signed and Unsigned 
Arithmetic in Binary or Decimal 
Including Multiply and Divide 


■ Range of Clock Rates: 

5 MHz for 8086, 

8 MHz for 8086-2, 

10 MHz for 8086-1 

■ MULTIBUS® System Compatible 
Interface 

■ Available in EXPRESS 

— Standard Temperature Range 
— Extended Temperature Range 

■ Available in 40-Lead Cerdip and Plastic 
Package 

(See Packaging Spec. Order #231369) 


The Intel 8086 high performance 16-bit CPU is available in three clock rates: 5, 8 and 10 MHz. The CPU is 
implemented in N-Channel, depletion load, silicon gate technology (HMOS), and packaged in a 40-pin CERDIP 
or plastic package. The 8086 operates in both single processor and multiple processor configurations to 
achieve high performance levels. 

*Changes from the 1985 handbook specification have been made for the 8086-1. See A.C. Characteristics TGVCH and TCLGL. 
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Figure 1. 8086 CPU Block Diagram 
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ADt4 
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AD10 
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ADS 
AD7 
AD6 
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NMI 
INTR 
CLK 
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C 19 


8086 

CPU 


27 




40 p Vcc 
39 p ADI 5 
DA16/S3 
37tlA17/S4 
36 DAIS/SS 
35 DAig/se 
34 □ BHE/S7 
33 □MN/MX 
32 □ ^ 
3ip^/GT0 
]^/^1 
29 P LOCK 
28p S2 


1S1 


26 DSO 
25 DQSO 
24 DQSI 
23 □TEST 
22 □READY 
21 □RESET 


(HOLD) 

(HLDA) 

(^) 

(M/IO) 

(^R) 

(DEN) 

(^) 

(iNTA) 


Figure 2. 8086 Pin 
Configuration 
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Table 1 . Pin Description 


The following pin function descriptions are for 8086 systems in either minimum or maximum mode. The “Local 
Bus” in these descriptions is the direct multiplexed bus interface connection to the 8086 (without regard to 
additional bus buffers). 


Symbol 

Pin No. 

Type 

Name and Function 

AD15-AD0 

2-16, 39 

i/0 

ADDRESS DATA BUS: These lines constitute the time multiplexed 
memory/ lO address (T-i), and data (T2, T3, Tw, T4) bus. Aq Is 
analogous to BHE for the lower byte of the data bus, pins D7-D0. It is 




LOW during Ti when a byte is to be transferred on the lower portion 
of the bus in memory or I/O operations. Eight-bit oriented devices tied 




to the lower half would normally use Aq to condition chip select 
functions. (See BHE.) These lines are active HIGH and float to 3-state 
OFF during interrupt acknowledge and local bus “hold acknowledge”. 

A19/S6, 

35-38 

0 

ADDRESS/STATUS: During T-i these are the four most significant 

A18/S5, 



address lines for memory operations. During I/O operations these 

A17/S4, 

A16/S3 



lines are LOW. During memory and I/O operations, status information 
is available on these lines during T2, T3, Tw, T4. The status of the 
Interrupt enable FLAG bit (S5) Is updated at the beginning of each 

CLK cycle. A17/S4 and A16/S3 are encoded as shown. 

This Information indicates which relocation register is presently being 




used for data accessing. 





These lines float to 3-state OFF during local bus “hold acknowledge.” | 




A17/S4 

A16/S3 

Characteristics 




0 (LOW) 

0 

Alternate Data 




0 

1 

8tack 




1 (HIGH) 

0 

Code or None 




1 

85 is 0 

1 

Data 




(LOW) 



BHE/S7 

34 

0 * 

BUS HIGH ENABLE/STATUS: During Ti the bus high enable signal 
(BHE) should be used to enable data onto the most significant half of 
the data bus, pins D15-D8. Eight-bit oriented devices tied to the upper 




half of the bus would normally use BHE to condition chip select 
functions. BHE is LOW during T-i for read, write, and interrupt 




acknowledge cycles when a byte is to be transferred on the high 
portion of the bus. The 87 status Information is available during T2, 

T3, and T4. The signal is active LOW, and floats to 3-state OFF in 
“hold”. It is LOW during T-j for the first Interrupt acknowledge cycle. 




BHE 

Ao 

Characteristics 




0 

0 

Whole word 




0 

1 

Upper byte from/to odd address 




1 

0 

Lower byte from/to even address 




1 

1 

None 


32 

0 

RFAn- Rpsirl RtrnhA Inrliratfis that the nmeeaenr ia nerfnrminn a 

memory of I/O read cycle, depending on the state of the 82 pin. This 
signal is used to read devices which reside on the 8086 local bus. RD 
is active LOW during T2, T3 and Tw of any read cycle, and is . 
guaranteed to remain HIGH in T2 until the 8086 local bus has floated. 
This signal floats to 3-state OFF in “hold acknowledge”. 
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Table 1. Pin Description (Continued) 


Symbol 

Pin No. 

Type 

Name and Function 

READY 

22 

I 

READY: is the acknowledgement from the addressed memory or I/O 
device that it will complete the data transfer. The READY signal from 
memory/ lO is synchronized by the 8284A Clock Generator to form 
READY. This signal is active HIGH. The 8086 READY input is not 
synchronized. Correct operation is not guaranteed if the setup and hold 
times are not met. 

INTR 

18 

I 

INTERRUPT REQUEST: is a level triggered input which is sampled 
during the last clock cycle of each instruction to determine if the 
processor should enter into an interrupt acknowledge operation. A 
subroutine is vectored to via an interrupt vector lookup table located In 
system memory. It can be internally masked by software resetting the 
interrupt enable bit. INTR is internally synchronized. This signal is 
active HIGH. 

TEST 

23 

I 

TEST: input is examined by the “Wait” instruction. If the TEST input is 
LOW execution continues, otherwise the processor waits in an “Idle” 
state. This input is synchronized internally during each clock cycle on 
the leading edge of CLK. 

NMI 

17 

I 

NON-MASKABLE INTERRUPT: an edge triggered input which causes 
a type 2 interrupt. A subroutine is vectored to via an interrupt vector 
lookup table located in system memory. NMI Is not maskable internally 
by software. A transition from LOW to HIGH initiates the interrupt at the 
end of the current instruction. This input is internally synchronized. 

RESET 

21 

I 

RESET: causes the processor to immediately terminate its present 
activity. The signal must be active HIGH for at least four clock cycles. It 
restarts execution, as described In the Instruction Set description, when 
RESET returns LOW. RESET is internally synchronized. 

CLK 

19 

I 

CLOCK: provides the basic timing for the processor and bus controller. 

It is asymmetric with a 33% duty cycle to provide optimized internal 
timing. 

Vcc 

40 


Vcc: + 5V power supply pin. 

GND 

1.20 


GROUND 

MH/m. 

33 

I 

MINIMUM/MAXIMUM: indicates what mode the processor is to 
operate in. The two modes are discussed in the following sections. 


The following pin function descriptions are for the 8086/8268 system in maximum mode (i.e., MN/MX = Vss)- 
Only the pin functions which are unique to maximum mode are described; all other pin functions are as 
described above. 


S 2 , S-i, So 

26-28 

0 

STATUS: active during T 4 , Ti, and T 2 and is returned to the passive state 




(1,1,1) during T 3 or during Tw when READY is HIGH. This status is used 
by the 8288 Bus Controller to^gen^te all memory and I/O access control 
signals. Any change by S 2 , Si, or Sq during T 4 is used to indicate the 
beginning of a bus cycle, and the return to the passive state in T 3 or Tw is 
used to indicate the end of a bus cycle. 
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Table 1. Pin Description (Continued) 


Symbol 

Pin No. 

Type 

Name and Function 

S 2 , S-|, So 

26-28 

0 

These signals float to 3-state OFF in “hold acknowledge”. These status 

(Continued) 



lines are encoded as shown. 





S 2 

S1 

So 

Characteristics 




0 (LOW) 

0 

0 

Interrupt Acknowledge 




0 

0 

1 

Read I/O Port 




0 

1 

0 

Write I/O Port 




0 

1 

1 

Halt 




1 (HIGH) 

0 

0 

Code Access 




1 

0 

1 

Read Memory 




1 

1 

0 

Write Memory 




1 

1 

1 

Passive 

RQ/CTo, 

RQ/GT 1 

30,31 

. I/O 

REQUEST/GRANT: pins are used by other local bus masters to force 
the processor to release the local bus at the end of the processor’s 
current bus cycle. Each pin is bidirectional with RQ/GTq having higher 




priority than RQ/GT-j. RQ/GT pins have internal pull-up resistors and 
may be left unconnected. The request/grant sequence is as follows 




(see Figure 9): 







1 . A pulse of 1 CLK wide from another local bus master indicates a local 
bus request (“hold”) to the 8086 (pulse 1 ). 

2. During a T 4 or T-| clock cycle, a pulse 1 CLK wide from the 8086 to 
the requesting master (pulse 2 ), indicates that the 8086 has allowed the 
local bus to float and that It will enter the “hold acknowledge” state at 
the next CLK. The CPU’s bus interface unit Is disconnected logically 
from the local bus during “hold acknowledge”. 

3. A pulse 1 CLK wide from the requesting master indicates to the 8086 
(pulse 3) that the “hold” request is about to end and that the 8086 can 
reclaim the local bus at the next CLK. 




Each master-master exchange of the local bus is a sequence of 3 
pulses. There must be one dead CLK cycle after each bus exchange. 




Pulses are active LOW. 






If the request is made while the CPU is performing a memory cycle, it 
will release the local bus during T 4 of the cycle when all the following 




conditions are met: 






1 . Request occurs on or before T 2 . 





2. Current cycle is not the low byte of a word (on an odd address). 

3. Current cycle is not the first acknowledge of an interrupt acknowledge 




sequence. 




j 



4. A locked instruction Is not currently executing. 

If the local bus is idle when the request is made the two possible events 




will follow: 







1 . Local bus will be released during the next clock. 

2. A memory cycle will start within 3 clocks. Now the four rules for a 
currently active memory cycle apply with condition number 1 already 




satisfied. 





LOCK 

29 

0 

LOCK: output indicates that other system bus masters are not to gain 
control of the system bus while LOCK is active LOW. The LOCK signal 




is activated by the “LOCK” prefix instruction and remains active until the 
completion of the next instruction. This signal is active LOW, and floats 
to 3-state OFF In “hold acknowledge”. 
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Table 1. Pin Description (Continued) 


Symbol 

Pin No. 

Type 

Name and Function 

QSi, QSq 

24, 25 

0 

QUEUE STATUS: The queue, status is valid during the CLK cycle after 
which the queue operation is performed. 

QS-i and QSq provide status to allow external tracking of the internal 




8086 instruction queue. 





QSi 

QSo 

Characteristics 




0 (LOW) 

0 

No Operation 




0 

1 

First Byte of Op Code from Queue 




1 (HIGH) 

0 

Empty the Queue 




1 

1 

Subsequent Byte from Queue 


The following pin function descriptions are for the 8086 in minimum mode (i.e., MN/MX = Vcc). Only the pin 
functions which are unique to minimum mode are described; all other pin functions are as described above. 


M/IO 

28 

0 

STATUS LINE: logically equivalent to S 2 in the maximum mode. It is used to 
distinguish a memory access from an I/O access. M/IO becomes valid in 
the T 4 preceding a bus cycle and remains valid until the final T 4 of the cycle 
(M = HIGH, lO = LOW). M/IO floats to 3-state OFF in local bus “hold 
acknowledge”. 

WR 

29 

0 

WRITE: indicates that the processor is perfqtrning a write memory or write 

I/O cycle, depending on the state of the M/IO signal. WR is active for T 2 , T 3 
and Tw of any write cycle. It is active LOW, and floats to 3-state OFF in 
local bus “hold acknowledge”. 

INTA 

24 

0 

INTA: is used as a read strobe for interrupt acknowledge cycles. It is active 
LOW during T 2 , T 3 and Tw of each interrupt acknowledge cycle. 

ALE 

25 

0 

ADDRESS LATCH ENABLE: provided by the processor to latch the 
address into the 8282/8283 address latch. It is a HIGH pulse active during 

Ti of any bus cycle. Note that ALE is never floated. 

DT/R 

27 

0 

DATA TRANSMIT/RECEIVE:;needed in minimum system that desires to 
use an 8286/8287 data bus transceiver. It is us^ to control the direction of 
data flow through the transceiver. Logically DT/R is equivalent to Si in the 
maximum mode, and Its timing is the same as for M/IO. (T = HIGH, R = 
LOW.) This signal floats to 3-state OFF in local bus “hold acknowledge”. 

DB5 

26 

0 

DATA ENABLE: provided as an output enable for the 8286/8287 in a 
minimum system which uses the transceiver. DEN is active LOW during 
each memory and I/O access and for INTA cycles. For a read or INTA cycle 
it is active from the middle of T 2 until the middle of T 4 , while for a write cycle 
it is active from the beginning of T 2 until the middle of T 4 . DEN floats to 3- 
state OFF In local bus “hold acknowledge”. 

HOLD, 

HLDA 

31,30 

I/O 

HOLD: indicates that another master is requesting a local bus “hold.” To be 
acknowledged, HOLD must be active HIGH. The processor receiving the 
“hold” request will issue HLDA (HIGH) as an acknowledgement in the 
middle of a T 4 or Tj clock cycle. Simultaneous with the issuance of HLDA 
the processor will float the local bus and control lines. After HOLD is 
detected as being LOW, the processor will LOWer the HLDA, and when the 
processor needs to run another cycle. It will again drive the local bus and 
control lines. Hold acknowledge (HLDA) and HOLD have internal pull-up 
resistors. 

The same rules as for ^/GT apply regarding when the local bus will be 
released. 

HOLD is not an asynchronous input. External synchronization should be 
provided if the system cannot otherwise guarantee the setup time. 
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FUNCTIONAL DESCRIPTION 


General Operation 

The internal functions of the 8086 processor are 
partitioned logically into two processing units. The 
first is the Bus Interface Unit (BIU) and the second is 
the Execution Unit (EU) as shown in the block dia- 
gram of Figure 1 . 

These units can interact directly but for the most 
part perform as separate asynchronous operational 
processors. The bus interface unit provides the func- 
tions related to instruction fetching and queuing, op- 
erand fetch and store, and address relocation. This 
unit also provides the basic bus control. The overlap 
of instruction pre-fetching provided by this unit 
serves to increase processor performance through 
improved bus bandwidth utilization. Up to 6 bytes of 
the instruction stream can be queued while waiting 
for decoding and execution. 

The instruction stream queuing mechanism allows 
the BIU to keep the memory utilized very efficiently. 
Whenever there is space for at least 2 bytes in the 
queue, the BIU will attempt a word fetch memory 
cycle. This greatly reduces “dead time” on the 
memory bus. The queue acts as a First-ln-FIrst-Out 
(FIFO) buffer, from which the EU extracts instruction 
bytes as required. If the queue Is empty (following a 
branch instruction, for example), the first byte into 
the queue Immediately becomes available to the EU. 

The execution unit receives pre-fetched instructions 
from the BIU queue and provides un-relocated oper- 
and addresses to the BIU. Memory operands are 
passed through the BIU for processing by the EU, 
which passes results to the BIU for storage. See the 
Instruction Set description for further register set 
and architectural descriptions. 

MEMORY ORGANIZATION 

The processor provides a 20-bit address to memory 
which locates the byte being referenced. The memo- 
ry is organized as a linear array of up to 1 million 


bytes, addressed as 00000(H) to FFFFF(H). The 
memory is logically divided into code, data, extra 
data, and stack segments of up to 64K bytes each, 
with each segment falling on 16-byte boundaries. 
(See Figure 3a.) 

All memory references are made relative to base ad- 
dresses contained in high speed segment registers. 
The segment types were chosen based on the ad- 
dressing needs of programs. The segment register 
to be selected is automatically chosen according to 
the rules of the following table. All information in one 
segment type share the same logical attributes (e.g. 
code or data). By structuring memory into relocat- 
able areas of similar characteristics and by automati- 
cally selecting segment registers, programs are 
shorter, faster, and more structured. 

Word (16-bit) operands can be located on even or 
odd address boundaries and are thus not con- 
strained to even boundaries as is the case in many 
16-bit computers. For address and data operands, 
the least significant byte of the word is stored in the 
lower valued address location and the most signifi- 
cant byte In the next higher address location. The 
BIU automatically performs the proper number of 
memory accesses, one If the word operand is on an 
even byte boundary and two if it is on an odd byte 
boundary. Except for the performance penalty, this 
double access is transparent to the software. This 
performance penalty does not occur for Instruction 
fetches, only word operands. 

Physically, the memory is organized as a high bank 
(Dis-Db) and a low bank (D7-D0) of 51 2K 8-bit 
bytes addressed in parallel by the processor’s ad- 
dress lines A-ig-A-j. Byte data with even addresses 
is transferred on the D7-D0 bus lines while odd ad- 
dressed byte data (Aq HIGH) is transferred on the 
D-is-Ds bus lines . The processor provides two en- 
able signals, BHE and Aq, to selectively allow read- 
ing from or writing into either an odd byte location, 
even byte location, or both. The Instruction stream is 
fetched from memory as words and Is addressed 
internally by the processor to the byte level as nec- 
essary. 


Memory 
Reference Need 

Segment Register 
Used 

Segment 

Selection Rule 

Instructions 

CODE (CS) 

Automatic with all Instruction prefetch. 

Stack 

STACK (SS) 

All stack pushes and pops. Memory references relative to BP 
base register except data references. 

Local Data 

DATA (DS) 

Data references when: relative to stack, destination of string 
operation, or explicitly overridden. 

External (Global) Data 

EXTRA (ES) 

Destination of string operations: explicitly selected using a 
segment override. 
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Figure 3a. Memory Organization 


In referencing word data the BID requires one or two 
memory cycles depending on whether or not the 
starting byte of the word is on an even or odd ad- 
dress, respectively. Consequently, in referencing 
word operands performance can be optimized by lo- 
cating data on even address boundaries. This is an 
especially useful technique for using the stack, since 
odd address references to the stack may adversely 
affect the context switching time for interrupt pro- 
cessing or task multiplexing. 




FFFFFH 

FFFFOH 


RESET BOOTSTRAP 
PROGRAM JUMP 

' 

; - 



INTERRUPT POINTER 

FOR TYPE 255 

3FFH 

3FCH 

- 



• 

7H 

4H 


INTERRUPT POINTER 

FOR TYPE 1 


INTERRUPT POINTER 

FOR TYPE 0 

3H 

OH 
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Figure 3b. Reserved Memory Locations 


Certain locations in memory are reserved for specific 
CPU operations (see Figure 3b). Locations from 


address FFFFOH through FFFFFH are reserved for 
operations including a jump to the initial program 
loading routine. Following RESET, the CPU will al- 
ways begin execution at location FFFFOH where the 
jump must be. Locations OOOOOH through 003FFH 
are reserved for interrupt operations. Each of the 
256 possible interrupt types has its service routine 
pointed to by a 4-byte pointer element consisting of 
a 16-bit segment address and a 16-bit offset ad- 
dress. The pointer elements are assumed to have 
been stored at the respective places in reserved 
memory prior to occurrence of interrupts. 


MINIMUM AND MAXIMUM MODES 

The requirements for supporting minimum and maxi- 
mum 8086 systems are sufficiently different that 
they cannot be done efficiently with 40 uniquely de- 
fined pins. Consequently, the 8086 is equipped with 
a strap pin (MN/MX) which defines the system con- 
figuration. The definition of a certain subset of the 
pins changes dependent on the condition of the 
strap pin. When MN/MX pin is strapped to GND, the 
8086 treats pins 24 through 31 in maximum mode. 
An 8288 bus controller interprets status information 
coded into Sq, S 2 , S 2 to generate bus timing and 
control signals compatible with the MULTIBUS® ar- 
chitecture. When the MN/MX pin is strapped to Vcc. 
the 8086 generates bus control signals itself on pins 
24 through 31, as shown in parentheses in Figure 2. 
Examples of minimum mode and maximum mode 
systems are shown in Figure 4. 

BUS OPERATION 

The 8086 has a combined address and data bus 
commonly referred to as a time multiplexed bus. 
This technique provides the most efficient use of 
pins on the processor while permitting the use of a 
standard 40-lead package. This “local bus” can be 
buffered directly and used throughout the system 
with address latching provided on memory and I/O 
modules. In addition, the bus can also be demulti- 
plexed at the processor with a single set of address 
latches if a standard non-multiplexed bus is desired 
for the system. 

Each processor bus cycle consists of at least four 
CLK cycles. These are referred to as Ti, T 2 , T 3 and 
T 4 (see Figure 5). The address is emitted from the 
processor during Ti and data transfer occurs on the 
bus during T 3 and T 4 . T 2 is used primarily for chang- 
ing the direction of the bus during read operations. In 
the event that a “NOT READY” indication is given 
by the addressed device, “Wait” states (Tyy) are in- 
serted between T 3 and T 4 . Each inserted “Wait” 
state is of the same duration as a CLK cycle. Periods 
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Figure 4a. Minimum Mode 8086 Typical Configuration 



Figure 4b. Maximum Mode 8086 Typical Configuration 
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can occur between 8086 bus cycles. These are re- 
ferred to as “Idle” states (Tj) or inactive CLK cycles. 
The processor uses these cycles for internal house- 
keeping. 

During T i of any bus cycle the ALE (Address Latch 
Enable) signal Is emitted (by either the processor or 
the 8288 bus controller, depending on the MN/MX 
strap). At the trailing edge of this pulse, a valid ad- 
dress and certain status information for the cycle 
may be latched. 

Status bits and §2 are used, in maximum 

mode, by the bus controller to identify the type of 
bus transaction according to the following table: 


S 2 

Si 

So 

Characteristics 

0 (LOW) 

0 

0 

Interrupt Acknowledge 

0 

0 

1 

Read I/O 

0 

1 

0 

Write I/O 

0 

1 

1 

Halt 

1 (HIGH) 

0 

0 

Instruction Fetch 

1 

0 

1 

Read Data from Memory 

1 

1 

0 

Write Data to Memory 

1 

1 

1 

Passive (no bus cycle) 


. <4 + NwaitI = Tcy - 


- (4 + NwA(r> = Tcy - 


I Ti I T2 I T3 I Twait I T4 I Ti I Tz j T3 I Twait I T4 I 

GOES INACTIVE IN THE STATE 

t - X r JUST PRIOR TO T4 / — 1 

'_/ \ ! ! \_ 







I 


I 





/ 
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Figure 5. Basic System Timing 
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Status bits S3 through S7 are multi plexed with high- 
order address bits and the BHE signal, and are 
therefore valid during T2 through T4. S3 and S4 Indi- 
cate which segment register (see Instruction Set de- 
scription) was used for this bus cycle in forming the 
address, according to the following table: 


S4 

S3 

Characteristics 

0 (LOW) 

0 

Alternate Data (extra segment) 

0 

1 

Stack 

1 (HIGH) 

0 

Code or None 

1 

1 

Data 


S5 is a reflection of the PSW interrupt enable bit. 
Se = 0 and S7 is a spare status bit. 

I/O ADDRESSING 

In the 8086, I/O operations can address up to a 
maximum of 64K i/0 byte registers or 32K I/O word 
registers. The I/O address appears in the same for- 
mat as the memory address on bus lines A-is-Aq. 
The address lines A19-A16 are zero in I/O opera- 
tions. The variable I/O instructions which use regis- 
ter DX as a pointer have full address capability while 
the direct I/O instructions directly address one or 
two of the 256 I/O byte locations in page 0 of the 
I/O address space. 

I/O ports are addressed in the same manner as 
memory locations. Even addressed bytes are trans- 
ferred on the D7-D0 bus lines and odd addressed 
bytes on D-is-De- Care must be taken to assure that 
each register within an 8-bit peripheral located on 
the lower portion of the bus be addressed as even. 


External Interface 

PROCESSOR RESET AND INITIALIZATION 

Processor initialization or start up is accomplished 
with activation (HIGH) of the RESET pin. The 8086 
RESET is required to be HIGH for greater than 4 
CLK cycles. The 8086 will terminate operations on 
the high-going edge of RESET and will remain dor- 
mant as long as RESET is HIGH. The low-going 
transition of RESET triggers an internal reset se- 
quence for approximately 1 0 CLK cycles. After this 
interval the 8086 operates normally beginning with 
the instruction in absolute location FFFFOH (see Fig- 
ure 3b). The details of this operation are specified in 
the Instruction Set description of the MCS-86 Family 
User’s Manual. The RESET input is internally syn- 
chronized to the processor clock. At initialization the 
HIGH-to-LOW transition of RESET must occur no 
sooner than 50 jus after power-up, to allow complete 
initialization of the 8086. 


NMI asserted prior to the 2nd clock after the end of 
RESET will not be honored. If NMI is asserted after 
that point and during the internal reset sequence, 
the processor may execute one instruction before 
responding to the interrupt. A hold request active 
immediately after RESET will be honored before the 
first Instruction fetch. 

All 3-state outputs float to 3-state OFF during 
RESET. Status is active in the idle state for the first 
clock after RESET becomes active and then floats 
to 3-state OFF. ALE and HLDA are driven low. 


INTERRUPT OPERATIONS 

Interrupt operations fall into two classes; software or 
hardware initiated. The software initiated interrupts 
and software aspects of hardware interrupts are 
specified in the Instruction Set description. Hard- 
ware interrupts can be classified as non-maskable or 
maskable. 

Interrupts result in a transfer of control to a new pro- 
gram location. A 256-element table containing ad- 
dress pointers to the interrupt service program loca- 
tions resides in absolute locations 0 through 3FFH 
(see Figure 3b), which are reserved for this purpose. 
Each element in the table is 4 bytes in size and 
corresponds to an interrupt “type”. An interrupting 
device supplies an 8-bit type number, during the in- 
terrupt acknowledge sequence, which is used to 
“vector” through the appropriate element to the new 
interrupt service program location. 

NON-MASKABLE INTERRUPT (NMI) 

The processor provides a single non-maskable inter- 
rupt pin (NMI) which has higher priority than the 
maskable interrupt request pin (INTR). A typical use 
would be to activate a power failure routine. The 
NMI is edge-triggered on a LOW-to-HIGH transition. 
The activation of this pin causes a type 2 interrupt. 
(See Instruction Set description.) 

NMI is required to have a duration in the HIGH state 
of greater than two CLK cycles, but is not required to 
be synchronized to the clock. Any high-going tran- 
sition of NMI is latched on-chip and will be serviced 
at the end of the current instruction or between 
whole moves of a block-type instruction. Worst case 
response to NMI would be for multiply, divide, and 
variable shift instructions. There is no specification 
on the occurrence of the low-going edge; it may oc- 
cur before, during, or after the servicing of NMI. An- 
other high-going edge triggers another response if it 
occurs after the start of the NMI procedure. The sig- 
nal must be free of logical spikes in general and be 
free of bounces on the low-going edge to avoid trig- 
gering extraneous responses. 
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MASKABLE INTERRUPT (INTR) 

The 8086 provides a single interrupt request input 
(INTR) which can be masked internally by software 
with the resetting of the interrupt enable FLAG 
status bit. The interrupt request signal Is level trig- 
gered. It is internally synchronized during each clock 
cycle on the high-going edge of CLK. To be re- 
sponded to, INTR must be present (HIGH) during 
the clock period preceding the end of the current 
instruction or the end of a whole move for a block- 
type instruction. During the interrupt response se- 
quence further interrupts are disabled. The enable 
bit is reset as part of the response to any interrupt 
(INTR, NMI, software interrupt or single-step), al- 
though the FLAGS register which is automatically 
pushed onto the stack reflects the state of the proc- 
essor prior to the interrupt. Until the old FLAGS reg- 
ister is restored the enable bit will be zero unless 
specifically set by an instruction. 

During the response sequence (Figure 6) the proc- 
essor executes two successive (back-to-back) inter- 
rupt acknowledge cycles. The 8086 emits the LOCK 
signal from T 2 of the first bus cycle until T 2 of the 
second. A local bus “hold” request will not be hon- 
ored until the end of the second bus cycle. In the 
second bus cycle a byte is fetched from the external 
interrupt system (e.g., 8259A PIC) which identifies 
the source (type) of the interrupt. This byte is multi- 
plied by four and used as a pointer into the interrupt 
vector lookup table. An INTR signal left HIGH will be 
continually responded to within the limitations of the 
enable bit and sample period. The INTERRUPT RE- 
TURN instruction includes a FLAGS pop which re- 
turns the status of the original interrupt enable bit 
when it restores the FLAGS. 


HALT 

When a software “HALT” instruction is executed the 
processor indicates that it is entering the “HALT” 
state in one of two ways depending upon which 
mode is strapped. In minimum mode, the processor 
issues one ALE with no qualifying bus control sig- 
nals. In maximum mode, the p^ocessoMssues ap- 
propriate HALT status on S 2 , S-|, and Sq; and the 
8288 bus controller issues one ALE. The 8086 will 
not leave the “HALT” state when a local bus “hold” 
is entered while in “HALT”. In this case, the proces- 
sor reissues the HALT indicator. An interrupt request 
or RESET will force the 8086 out of the “HALT” 
state. 


READ/MODIFY/WRITE (SEMAPHORE) 
OPERATIONS VIA LOCK 


The LOCK status information is provided by the 
processor when directly consecutive bus cycles are 
required during the execution of an instruc- 
tion. This provides the processor with the capability 
of performing read/modIfy/write operations on 
memory (via the Exchange Register With Memory 
instruction, for example) without the possibility of an- 
other system bus master receiving intervening mem- 
ory cycles. This is useful in multi-processor system 
configuration s to ac complish “test and set lock” op- 
erations. The LOCK signal is activated (forced LOW) 
In the clock cycle following the one in which the soft- 
ware “LOCK” prefix instruction is decoded by the 
EU. It Is deactivated at the end of the last bus cycle 
of the instructi on follo wing the “LOCK” prefix in- 
struction. While LOCK is active a request on a RQ/ 
GT pin will be recorded and then honored at the end 
of the LOCK. 
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EXTERNAL SYNCHRONIZATION VIA TEST 

As an alternative to the interrupts and general I/O 
capabilities, the 8086 pro vides a single software- 
testable input known as the TEST signal. At any time 
the program may ex ecute a WAIT instruction. If at 
that time the TEST signal is inactive (HIGH), pro- 
gram execution b ecome s suspended while the proc- 
essor waits for TEST to become active. It must 
remain active for at least 5 CLK cycles. The WAIT 
instruction is re-executed repeatedly until that time. 
This activity does not consume bus cycles. The 
processor remains in an idle state while waiting. All 
8086 drivers go to 3-state OFF if bus “Hold” is en- 
tered. If interrupts are enabled, they may occur while 
the processor is waiting. When this occurs the proc- 
essor fetches the WAIT instruction one extra time, 
processes the interrupt, and then re-fetches and re- 
executes the WAIT instruction upon returning from 
the interrupt. 


Basic System Timing 

Typical system configurations for the processor op- 
erating in minimum mode and in maximum mode are 
shown in Figures 4a and 4b, respectively. In mini- 
mum mode, the MN/MX pin is strapped to Vcc and 
the processor emits bus control signals In a manner 
similar to the 8085. In maximum mode, the MN/MX 
pin Is strapped to Vss and the processor emits cod- 
ed status information which the 8288 bus controller 
uses to generate MULTIBUS compatible bus control 
signals. Figure 5 illustrates the signal timing relation- 
ships. 



SYSTEM TIMING— MINIMUM SYSTEM 

The read cycle begins in Ti with the assertion of the 
Address Latch Enable (ALE) signal. The trailing (low- 
going) edge of this signal is used to latch the ad- 
dress information, which Is valid on th e loca l bus at 
this time, into the address latch. The BHE and Aq 
signals addre^the low, high, or both bytes. From T i 
to T 4 the M/IO signal Indicates a memory or I/O 
operation. At T 2 the address is removed from the 
local bus and the bus goes to a high Impedance 
state. The rea d control signal is also asserted at T 2 . 
The read (RD) signal causes the addressed device 
to enable its data bus drivers to the local bus. Some 
time later valid data will be available on the bus and 
the addressed device will drive the READY line 
HIGH. When the processor returns the read signal to 
a HIGH level, the addressed device will again 3- 
state its bus drivers. If a transceiver is requir ed to 
buffer the 8086 local bus, signals DT/R and DEN 
are provided by the 8086. 

A write cycle also begins with the assertjon of ALE 
and the emission of the address. The M/IO signal is 
again asserted to indicate a memory or I/O write 
operation. In the T 2 immediately following the ad- 
dress emission the processor emits the data to be 
written into the addressed location. This data re- 
mains valid until the middle of T 4 . During T 2 , T 3 , and 
Tw the processor asserts the write control signal. 
The write (WR) signal becomes active at the begin- 
ning of T 2 as opposed to the read which Is delayed 
somewhat into T 2 to provide time for the bus to float. 


The BHE and Aq signals are used to select the prop- 
er byte(s) of the memory/ lO word to be read or writ- 
ten according to the following table: 


BHE 

AO 

Characteristics 

0 

0 

Whole word 

0 

1 

Upper byte from/to 
odd address 

1 

0 

Lower byte from /to 
even address 

1 

1 

None 


I/O ports are addressed In the same manner as 
memory location. Even addressed bytes are trans- 
ferred on the D 7 -D 0 bus lines and odd addressed 
bytes on D 15 -D 8 . 

The basic difference between the Interrupt acknowl- 
edge cycle and a r ead c ycle is that the interrupt ac- 
knowledge signal (INTA) is asserted in place of the 
read (RD) signal and the address bus is floated. 
(See Figure 6 .) In the second of two successive 
INTA cycles, a byte of Information is read from bus 


2-12 





8086 


inl^ 


lines D 7 -D 0 as supplied by the inerrupt system logic 
(i.e., 8259A Priority Interrupt Controller). This byte 
identifies the source (type) of the interrupt. It is multi- 
plied by four and used as a pointer into an interrupt 
vector lookup table, as described earlier. 

BUS TIMING— MEDIUM SIZE SYSTEMS 

For medium size systems the MN/MX pin is con- 
nected to Vss and the 8288 Bus Controller is added 
to the system as well as a latch for latching the sys- 
tem address, and a transceiver to allow for bus load- 
ing greater than the 8086 is capable of handling. 
Signals ALE, DEN, and DT/R are generated by the 
8288 instead of the processor in this configuration 
although their timing remajns relatively_the same. 
The 8086 status outputs (S 2 , Si, and Sq) provide 
type-of-cycle information and become 8288 inputs. 
This bus cycle Information specifies read (code, 
data, or I/O), write (data or I/O), interrupt 


acknowledge, or software halt. The 8288 thus issues 
control signals specifying memory read or write, I/O 
read or write, or interrupt acknowledge. The 8288 
provides two types of write strobes, normal and ad- 
vanced, to be applied as required. The normal write 
strobes have data valid at the leading edge of write. 
The advanced write strobes have the same timing 
as read strobes, and hence data isn’t valid at the 
leading edge o^wrlte. The transceiver receive the 
usual DIR and G inputs from the 8288’s DT/R and 
DEN. 

The pointer into the interrupt vector table, which is 
passed during the second INTA cycle, can derive 
from an 8259A located on either the local bus or the 
system bus. If the master 8259A Priority Interrupt 
Controller is positioned on the local bus, a TTL gate 
Is required to disable the transceiver when reading 
from the master 8259A during the Interrupt acknowl- 
edge sequence and software “poll”. 
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* Notice: Stresses above those listed under Abso- 
lute Maximum Ratings” may cause permanent dam- 
age to the device. This is a stress rating only and 
functional operation of the device at these or any 
other conditions above those indicated in the opera- 
tional sections of this specification is not implied. Ex- 
posure to absolute maximum rating conditions for 
extended periods may affect device reliability. 

D.C. CHARACTERISTICS (8086: Ta = 0"Cto 70°C. Vcc = 5V ± 10 %) 


(8086-1: Ta = 0“C to 70"C, Vcc = 5V ±5%) 
(8086-2: Ta = 0°Cto 70°C, Vcc = 5V ±5%) 


Symbol 

Parameter 

Min 

Max 

Units 

Test Conditions 

V|L 

Input Low Voltage 

-0.5 

+ 0.8 

V 

(Note1) 

V|H 

Input High Voltage 

2.0 

Vcc + 0.5 

V 

(Notes 1 , 2) 

VoL 

Output Low Voltage 


0.45 

V 

Iql = 2.5 mA 

Vqh 

Output High Voltage 

2.4 


V 

Iqh == “ -^00 juA 

Icc 

Power Supply Current: 8086 


340 




8086-1 


360 

mA 

Ta = 25‘’C 


8086-2 


350 



'Ll 

Input Leakage Current 


±10 

juA 

OV ^ V|N ^ Vcc (Note 3) 

Ilo 

Output Leakage Current 


±10 

fxA 

0.45V ^ Vqut ^ Vcc 

VCL 

Clock Input Low Voltage 

-0.5 

+ 0.6 

V 


VCH 

Clock Input High Voltage 

3.9 

Vcc + 1-0 

V 


C|N 

Capacitance of Input Buffer 


15 

PF 

fc = 1 MHz 


(All input except 

ADo-AD-is, m/Wf) 





C|0 

Capacitance of I/O Buffer 
(ADo-ADi5, TO/CT) 


15 

PF 

fc = 1 MHz 


NOTES: 

1. V|L tested with MN/MX Pin = OV. V|h tested with MN/MX Pin = 5V. MN/MX Pin is a Strap Pin. 

2. Not applicable to RQ/GTO and RQ/GT1 (Pins 30 and 31). 

3. HOLD and HLDA ly min = 30 juA, max = 500 /ulA. 


ABSOLUTE MAXIMUM RATINGS* 

Ambient Temperature Under Bias 0®C to 70®C 

Storage T emperature - SS^C to + 1 50°C 

Voltage on Any Pin with 

Respect to Ground -.1 .OV to + 7V 

Power Dissipation 2.5W 
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A.C. CHARACTERISTICS (8086 : Ta = 0^*0 to yo^c, Vcc = 5V ± 10%) 

(8086-1 : Ta = 0“C to 70°C, Vcc = 5V ± 5%) 
(8086-2: Ta = 0"C to 70°C, Vcc = 5V ± 5%) 


MINIMUM COMPLEXITY SYSTEM TIMING REQUIREMENTS 


Symbol 

Parameter 

8086 

8086-1 

8086-2 

Units 

Test Conditions 

Min 

Max 

Min 

Max 

Min 

Max 

TCLCL 

CLK Cycle Period 

200 

500 

100 

500 

125 

500 

ns 


TCLCH 

CLK Low Time 

118 


53 


68 


ns 


TCHCL 

CLK High Time 

69 


39 


44 


ns 


TCH1CH2 

CLK Rise Time 


10 


10 


10 

ns 

From 1 .OV to 3.5V 

TCL2CL1 

CLK Fall Time 


10 


10 


10 

ns 

From 3.5V to 1.0V 

TDVCL 

Data in Setup Time 

30 


5 


20 


ns 


TCLDX 

Data in Hold Time 

10 


10 


10 


ns 


TR1VCL 

RDY Setup Time 
into 8284A (See 
Notes 1 , 2) 

35 


35 


35 


ns 


TCLR1X 

,RDY Hold Time 
into 8284A (See 
Notes 1 , 2) 

0 


0 


0 


ns 


TRYHCH 

READY Setup 

Time into 8086 

118 


53 


68 


ns 


TCHRYX 

READY Hold Time 
into 8086 

30 


20 


20 


ns 


TRYLCL 

READY Inactive to 
CLK (See Note 3) 

-8 


-10 


-8 


ns 


THVCH 

HOLD Setup Time 

35 


20 


20 


ns 


TINVCH 

INTR, NMI, TEST 
Setup Time (See 
Note 2) 

30 


15 


15 


ns 


TILIH 

Input Rise Time 
(Except CLK) 


20 


20 


20 

ns 

From 0.8V to 2.0V 

TIHIL 

Input Fall Time 
(Except CLK) 


12 


12 


12 

ns 

From 2.0V to 0.8V 
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A.C. CHARACTERISTICS (Continued) 
TIMING RESPONSES 


Symbol 

Parameter 

8086 

8086-1 

8086-2 

Units 

Test 

Min 

Max 

Min 

Max 

Min 

Max 

Conditions 

TCLAV 

Address Valid Delay 

10 

110 

10 

50 

10 

60 

ns • 


TCLAX 

Address Hold Time 

10 


10 


10 


ns 


TCLAZ 

Address Float 

Delay 

TCLAX 

80 

10 

40 

TCLAX 

50 

ns 


TLHLL 

ALE Width 

TCLCH-20 


TCLCH-10 


TCLCH-10 


ns 


TCLLH 

ALE Active Delay 


80 


40 


50 

ns 

' 

TCHLL 

ALE Inactive Delay 


85 


45 


55 

ns 


TLLAX 

Address Hold Time 

TCHCL-10 


TCHCL-10 


TCHCL-10 


ns 


TCLDV 

Data Valid Delay 

10 

110 

10 

50 

10 

60 

ns 

♦Cl = 20-100 pF 

TCHDX 

Data Hold Time 

10 


10 


10 


ns 

for all 8086 

Outputs (In 
addition to 8086 
selfload) 

TWHDX 

Data Hold Time 

After WR 

TCLCH-30 


TCLCH-25 


TCLCH-30 


ns 

TCVCTV 

Control Active 

Delay 1 

10 

110 

10 

50 

10 

70 

ns 


TCHCTV 

Control Active 

Delay 2 

10 

110 

10 

45 

10 

60 

ns 


TCVCTX 

Control Inactive 
Delay 

10 

110 

10 

50 

10 

70 

ns 


TAZRL 

Address Float to 
READ Active 

0 


0 


0 


ns 


TCLRL 

^ Active Delay 

10 

165 

10 

70 

10 

100 

ns 


TCLRH 

RD Inactive Delay 

10 

150 

10 

60 

10 

80 

ns 


TRHAV 

RD Inactive to Next 
Address Active 

TCLCL-45 


TCLCL-35 


TCLCL-40 


ns 


TCLHAV 

HLDA Valid Delay 

10 

160 

10 

60 

10 

100 

ns 


TRLRH 

RD Width 

2TCLCL-75 


2TCLCL-40 


2TCLCL-50 


ns 


TWLWH 

WR Width 

2TCLCL-60 


2TCLCL-35 


2TCLCL-40 


ns 


TAVAL 

Address Valid to 

ALE Low 

TCLCH-60 


TCLCH-35 


TCLCH-40 


ns 


TOLOH 

Output Rise Time 


20 


20 


20 

ns 

From 0.8V to 2.0V 

TOHOL 

Output Fall Time 


12 


12 


12 

ns 

From 2.0V to 0.8V 


NOTES: 

1 . Signal at 8284A shown for reference only. 

2. Setup requirement for asynchronous signal only to guarantee recognition at next CLK. 

3. Applies only to T2 state. (8 ns into T3). 
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A.C. TESTING INPUT, OUTPUT WAVEFORM 


- TEST POINTS - 


231455-11 


A.C. Testing: Inputs are driven at 2.4V for a Logic “1” and 0.45V 
for a Logic “0”. Timing measurements are made at 1 .5V for both 
a Logic “1” and “0". 


A.C. TESTING LOAD CIRCUIT 


DEVICE 

UNDER 

TEST 


1 

I 


Cl = 100 pF 


231455-12 


Cl Includes Jig Capacitance 


WAVEFORMS 

MINIMUM MODE 
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WAVEFORMS (Continued) 

MINIMUM MODE (Continued) 



SOFTWARE HALT— 

RD, WR, INTA = VoH 
DT/R = INDETERMINATE 


NOTES: 

1. All signals switch between Vqh and Vql unless otherwise specified. 

2. RDY is sampled near the end of T2, T3, Tw to determine If Tw machines states are to be inserted. 

3. Two INTA cycles run back-to-back. The 8086 LOCAL ADDR/DATA BUS Is floating during both INTA cycles. Control 
signals shown for second INTA cycle. 

4. Signals at 8284A are shown for reference only. 

5. All timing measurements are made at 1.5V unless otherwise noted. 
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A.C. CHARACTERISTICS 


MAX MODE SYSTEM (USING 8288 BUS CONTROLLER) 
TIMING REQUIREMENTS 


Symbol 

Parameter 

8086 

8086-1 

8086-2 

Units 

Test 

Min 

Max 

Min 

Max 

Min 

Max 

Conditions 

TCLCL 

CLK Cycle Period 

200 

500 

100 

500 

125 

500 

ns 


TCLCH 

CLK Low Time 

118 


53 


68 


ns 


TCHCL 

CLK High Time 

69 


39 


44 


ns 


TCH1CH2 

CLK Rise Time 


10 


10 


10 

ns 

From 1.0V to 3.5V 

TCL2CL1 

CLK Fall Time 


10 


10 


10 

ns 

From 3.5V to 1.0V 

TDVCL 

Data in Setup Time 

30 


5 


20 


ns 


TCLDX 

Data in Hold Time 

10 


10 


10 


ns 


TR1VCL 

RDY Setup Time 
into 8284A 
(Notes 1 , 2) 

35 


35 


35 


ns 


TCLR1X 

RDY Hold Time 
into 8284A 
(Notes 1 , 2) 

0 


0 


0 


ns 


TRYHCH 

READY Setup 

Time into 8086 

118 


53 


68 


ns 


TCHRYX 

READY Hold Time 
into 8086 

30 


20 


20 


ns 


TRYLCL 

READY Inactive to 
CLK (Note 4) 

-8 


-10 


-8 


ns 


TINVCH 

Setup Time for 
Recognition (INTR, 
NMI, TEST) 

(Note 2) 

30 


15 


15 


ns 


TGVCH 

TO/OT Setup Time 
(Note 5) 

30 


15 


15 


ns 


TCHGX 

TO Hold Time into 
8086 

40 


20 


30 


ns 


TILIH 

Input Rise Time 
(Except CLK) 


20 


20 


20 

ns 

From 0.8V to 2.0V 

TIHIL 

Input Fall Time 
(Except CLK) 


12 


12 


12 

ns 

From 2.0V to 0.8V 
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A.C. CHARACTERISTICS (Continued) 


TIMING RESPONSES 



Parameter 

8086 

8086-1 


Units 

Test 

Conditions 

Min 


I2QJI 

Max 


Max 

TCLML 

Command Active 
Delay (See Note 1) 

B 


H 

35. 

10 

35 

ns 

Cl = 20-100 pF 
for ail 8086 

Outputs (In 
addition to 8086 
self-load) 

TCLMH 

Command Inactive 
Delay (See Note 1) 

B 



35 

10 

35 

ns 

TRYHSH 

READY Active to 
Status Passive (See 
Note 3) 



1 

45 


65 

ns 

TCHSV 

Status Active Delay 

10 


10 

45 

10 

60 

ns 

TCLSH 

Status Inactive 

Delay 

10 

130 

10 

55 

10 

70 

ns 

TCLAV 

Address Valid Delay 

10 

110 

111 

50 

10 

60 

ns 

TCLAX 

Address Hold Time 

10 


m 


10 


ns 

TCLAZ 

Address Float Delay 

TCLAX 

80 

10 

Bl 

TCLAX 

50 

ns 

TSVLH 

Status Valid to ALE 
High (See Note 1) 


15 


H 


15 

ns 

TSVMCH 

Status Valid to 

MCE High (See 
Note1) 


15 

■ 

15 


15 

ns 

TCLLH 

CLK Low to ALE 

Valid (See Note 1) 


15 


15 

B 

15 

ns 

TCLMCH 

CLK Low to MCE 

High (See Note 1) 


15 


15 


15 

ns 

TCHLL 

ALE Inactive Delay 
(See Note 1) 


15 


15 

B 

15 

ns 

TCLMCL 

MCE Inactive Delay 
(See Note 1) 


15 


15 

Hill 

15 

ns 

TCLDV 

Data Valid Delay 

10 

110 

10 

50 

10 

60 

ns 

TCHDX 

Data Hold Time 

10 


10 


10 


ns 

TCVNV 1 

Control Active 

Delay (See Note 1) 

5 

45 

5 

45 

5 


ns 

TCVNX 

Control Inactive 

Delay (See Note 1) 

10 

45 

10 

45 

10 

45 

ns 

TAZRL 

Address Float to | 

READ Active 



0 




0 


ns 

TCLRL 

RD Active Delay 

10 



70 

10 


ns 

TCLRH 

^ I 

RD Inactive Delay 

10 

150 

10 

60 

10 

80 

ns 
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A.C. CHARACTERISTICS (Continued) 


TIMING RESPONSES (Continued) 


Symbol 

Parameter 

8086 

8086-1 

8086-2 

Units 

Test 

Conditions 

Min 

Max 

Min 

Max 

Min 

Max 

TRHAV 

RD Inactive to Next 
Address Active 

TCLCL-45 


TCLCL-35 


TCLCL-40 


ns 

Cl = 20-100 pF 
for all 8086 
Outputs (In 
addition to 8086 
self-load) 

TCHDTL 

Direction Control 
Active Delay 
(Note 1) 


50 


50 


50 

ns 

TCHDTH 

Direction Control 
Inactive Delay 
(Note 1) 


30 


30 


30 

ns 

TCLGL 

GT Active Delay 
(Note 5) 

0 

85 

0 

38 

0 

50 

ns 

TCLGH 

GT Inactive Delay 

0 

85 

0 

45 

0 

50 

ns 

TRLRH 

RD Width 

2TCLCL-75 


2TCLCL-40 


2TCLCL-50 


ns 

TOLOH 

Output Rise Time 


20 


20 


20 

ns 

From 0.8V to 2.0V 

TOHOL 

Output Fall Time 


12 


12 


12 

ns 

From 2.0V to 0.8V 


NOTES: 

1 . Signal at 8284A or 8288 shown for reference only. 

2. Setup requirement for asynchronous signal only to guarantee recognition at next CLK. 

3. Applies only to T3 and wait states. 

4. Applies only to T2 state (8 ns into T3). 

5. Change from 1985 Handbook. 
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WAVEFORMS 


MAXIMUM MODE 



2-22 




8086 



WAVEFORMS (Continued) 



NOTES: 

1 . All signals switch between Vqh and Vql unless otherwise specified. 

2. RDY is sampled near the end of T2, T3, Tyv to determine if Tvy machines states are to be inserted. 

3. Cascade address is valid between first and second INTA cycle. 

4. Two INTA cycles run back-to-back. The 8086 LOCAL ADDR/DATA BUS is floating during both INTA cycles. Control for 
pointer address is shown for second INTA cycle. 

5. Signals at 8284A or 8288 are shown for reference only. 

6. The issuance of the 8288 command and control signals (MRDC, MWTC, AMWC, lORC, lOWC, AlOWC, INTA and DEN) 
lags the active high 8288 CEN. 

7. All timing measurements are made at 1 .5V unless otherwise noted. 

8. Status inactive in state just prior to T4. 
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WAVEFORMS (Continued) 

ASYNCHRONOUS SIGNAL RECOGNITION 



TEST 


231455-17 


NOTE: 

1 . Setup requirements for asynchronous signals only to guarantee recognition at next CLK. 


BUS LOCK SIGNAL TIMING (MAXIMUM MODE 

ONLY) RESET TIMING 




REQUEST/GRANT SEQUENCE TIMING (MAXIMUM MODE ONLY) 




NOTE: 

The coprocessor may not drive the buses outside the region shown without risking contention. 
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WAVEFORMS. (Continued) 
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Table 2. Instruction Set Summary 


Mnemonic and 

Description 

Instruction Code 

DATA TRANSFER 









MOV = Move: 


76543210 


76543210 


76543210 


76543210 

Register/Memory to/from Register 

□ 

10001 Odw 

I 

mod reg r/m 





Immediate to Register/Memory 


1 1 0001 1 w 

n 

mod 0 0 0 r/m 

: 

data 


data if w = 1 | 

Immediate to Register 

□ 

1 0 1 1 w reg 

n: 

data 

E 

data if w = 1 

□ 


Memory to Accumulator 

C 

1 01 OOOOw 

I 

addr-low 

E 

addr-high 

□ 


Accumulator to Memory 

c 

101 OOOIw 

z; 

addr-low 

E 

addr-high 

□ 


Register/Memory to Segment Register 

c 

1 0001 1 1 0 

z 

mod 0 reg r/m 

E 




Segment Register to Register/Memory 

c 

10001100 

z 

mod 0 reg r/m 

E 




PUSH = Push: 









Register/ Memory 

c: 

11111111 

z 

mod 1 1 0 r/m 

E 




Register 

c: 

0 1 0 1 0 reg 

□ 






Segment Register 

□ 

0 0 0 reg 1 10 

□ 






POP = Pop: 









Register/Memory 

c: 

1 0001 1 1 1 

z 

mod 0 0 0 r/m 

E 




Register 

c 

0 1 0 1 1 reg 

□ 






Segment Register 

c 

0 0 0 reg 1 1 1 

□ 




' 


XCHG = Exchange: 









Register/ Memory with Register 

c 

1 00001 1 w 

z 

mod reg r/m 

E 




Register with Accumulator 

E 

1 0 0 1 0 reg 

□ 






IN = Input from: 









Fixed Port 

C 

1 1 1 001 Ow 

z 

port 

E 




Variable Port 

C 

1 1 1 01 1 Ow 

□ 






OUT = Output to: 









Fixed Port 

E 

1 1 1 001 1 w 

z 

port 

E 




Variable Port 

E 

1 1 1 0 1 1 1 w 

□ 






XLAT = Translate Byte to AL 

E 

11010111 

□ 






LEA = Load EA to Register 

E 

1 0001 1 01 

z 

mod reg r/m 

E 




LDS = Load Pointer to DS 

E 

1 1 0001 01 

z 

mod reg r/m 

E 




LES = Load Pointer to ES 

E 

1 1 0001 00 

z 

mod reg r/m 

E 




LAHF = Load AH with Flags 

E 

10011111 

□ 






SAHF = Store AH into Flags 

E 

10011110 

□ 






PUSHF = Push Flags 

E 

10011100 

□ 






POPF = Pop Flags • 

E 

10011101 

□ 







Mnemonics © Intel, 1978 
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Table 2. Instruction Set Summary (Continued) 


Mnemonic and 

Description 

Instruction Code 

ARITHMETIC 

76543210 


76543210 


7654321 0 

765432 1 0 

ADD = Add: 







Reg./Memory with Register to Either 

OOOOOOdw 

n: 

mod reg r/m 

□ 



Immediate to Register/Memory 

1 0 0 0 0 0 sw 

n: 

mod 0 0 0 r/m 

Z 

data 

1 data if s: w = 01 | 

Immediate to Accumulator 

00000 1 Ow 

□: 

data 

Z 

data if w = 1 


ADC = Add with Carry: 







Reg./Memory with Register to Either 

0001 OOdw 

z: 

mod reg r/ m 

□ 



Immediate to Register/ Memory 

1 OOOOOsw 

z 

mod 010 r/m 

z 

data 

1 data if s: w = 01 | 

Immediate to Accumulator 

0001 01 Ow 

z 

data 

z 

data if w = 1 


INC = Increment: 







Register/Memory 

1 1 1 1 1 1 1 w 

z 

mod 0 0 0 r/m 

□ 



Register 

0 1 0 0 0 reg 

□ 





AAA = ASCII Adjust for Add 

00110111 

□ 





BAA = Decimal Adjust for Add 

00100111 

□ 





SUB = Subtract: 







Reg./Memory and Register to Either 

00101 Odw 

z 

mod reg r/m 

□ 



Immediate from Register/Memory 

1 OOOOOsw 

z 

mod 101 r/m 

z 

data 

1 data if s w = 01 | 

Immediate from Accumulator 

001 01 1 Ow 

z 

data 

z 

data if w = 1 


SSB == Subtract with Borrow 







Reg./Memory and Register to Either 

0001 1 Odw 

z 

mod reg r/m 

□ 



Immediate from Register/Memory 

1 OOOOOsw 

z 

mod 0 1 1 r/m 

z 

data 

1 data if s w = 01 | 

Immediate from Accumulator 

0001 1 1 w 

z 

data' 

z 

data if w = 1 

] 

DEC = Decrement: 







Register/ memory 

1 1 1 1 1 1 1 w 

z 

mod 00 1 r/m 

□ 



Register 

0 10 0 1 reg 

□ 





NEG = Change sign 

1 1 1 1 0 1 1 w 

z 

mod 0 1 1 r/m 

□ 



CMP = Compare: 







Register/Memory and Register 

00 1 1 1 Odw 

z 

mod reg r/m 

□ 



Immediate with Register/Memory 

1 OOOOOsw 

z 

mod 111 r/m 

z 

data 

1 dataifsw = 01 1 

Immediate with Accumulator 

001 1 1 1 Ow 

z 

data 

z 

data if w = 1 

] 

AAS = ASCII Adjust for Subtract 

00111111 

□ 





DAS = Decimal Adjust for Subtract 

00101111 

□ 





MUL = Multiply (Unsigned) 

1 1 1 1 0 1 1 w 

z 

mod 10 0 r/m 

□ 



IMUL == Integer Multiply (Signed) 

1 1 1 1 0-1 1 w 

z 

mod 101 r/m 

□ 



AAM = ASCII Adjust for Multiply 

11010100 

z 

00001 01 0 

□ 



DIV = Divide (Unsigned) 

1 1 1 1 01 1 w 

z 

mod 110 r/m 

□ 



IDIV = Integer Divide (Signed) 

1 1 1 1 0 1 1 w 

z 

mod 1 1 1 r/m 

□ 



AAD = ASCII Adjust for Divide 

11010101 

z 

00001 01 0 

□ 



CBW = Convert Byte to Word 

10011 000 

□ 





CWD = Convert Word to Double Word 

10011 001 

□ 






Mnemonics © Intel, 1978 
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Table 2. Instruction Set Summary (Continued) 


Mnemonic and 

Description 

Instruction Code 

LOGiC 


76543210 


76543210 


76543210 


76543210 

NOT = Invert 

C 

1 1 1 1 0 1 1 w 

X 

mod 0 1 0 r/m 

E 




SHL/SAL = Shift Logical/Arithmetic Left 

C 

1101 OOvw 

X 

mod 10 0 r/m 

E 




SHR = Shift Logical Right 

c 

1 1 OlOOvw 

X 

mod 10 1 r/m 

E 




SAR = Shift Arithmetic Right 

E 

1101 OOvw 

X 

mod 1 1 1 r/m 

E 




ROL = Rotate Left 

E 

1101 OOvw 

X 

mod 0 00 r/m . 

E 




ROR = Rotate Right 

E 

1101 OOvw 

X 

mod 0 01 r/m 

E 




RCL = Rotate Through Carry Flag Left 

E 

1 1 01 OOvw 

X 

mod 010 r/m 

E 




^ RCR = Rotate Through Carry Right 

E 

1101 OOvw 

X 

mod Oil r/m 

E 




AND = And: 









Reg./Memory and Register to Either 

E 

001 OOOdw 

X 

mod reg r/m 

E 




Immediate to Register/Memory 

" 

1 OOOOOOw 

X 

mod 1 0 0 r/m 

X 

data 

X 

data if w = 1 | 

Immediate to Accumulator 

E 

00 1 00 1 Ow 

X 

data 

X 

data if w = 1 

E 


TEST = And Function to Flags, No Result: 









Register/ Memory and Register 

E 

1 00001 Ow 

X 

mod reg r/m 

E 




Immediate Data and Register/Memory 


1 1 1 1 0 1 1 w 

X 

mod 0 0 0 r/m 

X 

data 

X 

data if w = 1 | 

Immediate Data and Accumulator 

E 

10101 OOw 

X 

data 

X 

data if w = 1 

E 


OR = Or: 









Reg./Memory and Register to Either 

E 

00001 Odw 

X 

mod reg r/m 

E 




Immediate to Register/Memory 


1 OOOOOOw 

X 

mod 0 01 r/m 

X 

data 

X 

data if w = 1 | 

Immediate to Accumulator 

E 

00001 1 Ow 

X 

data 

X 

data if w = 1 

E 


XOR = Exclusive or: 


* 







Reg./Memory and Register to Either 

E 

001 1 OOdw 

X 

mod reg r/m 

E 




Immediate to Register/Memory 

E 

1 OOOOOOw 

X 

mod 1 1 0 r/m 

X 

data 

X 

data if w = 1 | 

Immediate to Accumulator 

E 

001 1 01 Ow 

X 

data 

X 

data if w = 1 

E 


STRING MANIPULATION 









REP = Repeat 

E 

1 1 1 1 001 z 

□ 






MOVS == Move Byte/Word 

E 

1 01 001 Ow 

□ 






CMPS = Compare Byte/Word 

E 

1 0 1 00 1 1 w 

□ 






SCAS = Scan Byte/Word 

E 

1 01 01 1 1 w 

□ 






LCDS = Load Byte/Wd to AL/AX 

E 

1 01 01 1 Ow 

□ 






STOS = Stor Byte/Wd from AL/A 

E 

1 01 01 01 w 

□ 






CONTROL TRANSFER 









CALL = Call: 









Direct within Segment 

E 

1 1 1 01000 

X 

disp-low 

X 

disp-high 

□ 


Indirect within Segment 

E 

11111111 

X 

mod 010 r/m 

E 




Direct Intersegment 

E 

10011010 

X 

offset-low 

X 

offset-high 

□ 





E 

seg-low 

X 

seg-high 

□ 


Indirect Intersegment 

E 

11111111 

X 

mod Oil r/m 

E 





Mnemonics © Intel, 1978 
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Table 2. Instruction Set Summary (Continued) 


Mnemonic and 
Description 


Instruction Code 


JMP = Unconditional Jump: 

Direct within Segment 
Direct within Segment-Short 
Indirect within Segment 
Direct Intersegment 


Indirect Intersegment 

RET = Return from CALL: 

Within Segment 

Within Seg Adding Immed to SP 
Intersegment 

Intersegment Adding Immediate to SP 

JE/JZ = Jump on Equal/Zero 
JL/JNGE = Jump on Less/Not Greater 
or Equal 

JLE/JNG = Jump on Less or Equal/ 

Not Greater 

JB/JNAE = Jump on Below/Not Above 
or Equal 

JBE/JNA = Jump on Below or Equal/ 

Not Above 

JP/JPE = Jump on Parity/Parity Even 
JO = Jump on Overflow 
JS = Jump on Sign 

JNE/JNZ = Jump on Not Equal/Not Zero 

JNL/JGE = Jump on Not Less/Greater 
or Equal 

JNLE/JG = Jump on Not Less or Equal/ 
Greater 

JNB/JAE = Jump on Not Below/ Above 
or Equal 

JNBE/JA.= Jump on Not Below or 
Equal/Above 

JNP/JPO = Jump on Not Par/Par Odd 

JNO = Jump on Not Overflow 

JNS = Jump on Not Sign 

LOOP = Loop CX Times 

LOOPZ/LOOPE = Loop While Zero/Equal 

LOOPNZ/LOOPNE = Loop While Not 
Zero/Equal 

JCXZ = Jump on CX Zero 

INT = Interrupt 

Type Specified 
Type 3 

INTO = Interrupt on Overflow 
IRET == Interrupt Return 


76543210 

11101001 

11101011 

11111111 

11101010 


11111111 


1 1 00001 1 
1 1 000010 
11001011 
11001010 
01110100 
01111100 


01111110 


01110010 


01110110 
01111010 
01 1 10000 
0111 1000 
01110101 


01111101 


01111111 


01110011 


01110111 
01111011 
01 1 10001 
01111001 
1 1 100010 
1 1 1 00001 


1 1 100000 
1 1 10001 1 


11001101 
11001 1 00 
11001110 
11001111 


76543210 76543210 


disp-low 

disp 

mod 1 0 0 r/m 
offset-low 
seg-low 
mod 1 0 1 r/m 


disp-high 


offset-high 

seg-high 


data-low | data-high 


data-low | data-high 

disp I 

disp I 


disp 


disp 


disp 

disp 

disp 

disp 

disp 


disp 


disp 


disp 


disp 

disp 

disp 

disp 

disp 

disp 


disp 

disp 


type 
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Table 2. Instruction Set Summary (Continued) 


Mnemonic and 

Description 

Instruction Code 


76543210 76543210 

PROCESSOR CONTROL 


CLC = Clear Carry 

1 1 1 1 1 000 I 

CMC = Complement Carry 

11110101 1 

STC = Set Carry 

1 1 1 1 1 001 1 

CLD = Clear Direction 

1 1 1 1 1 1 00 1 

STD = Set Direction 

11111101 1 

CLI = Clear Interrupt 

1 1 1 1 1 01 0 1 

STI = Set Interrupt 

1 1 1 1 1 01 1 1 

HLT = Halt 

11110100 1 

WAIT = Wait 

1 001 1 01 1 1 

ESC = Escape (to External Device) 

1 1 0 1 1 X X X 1 mod XXX r/m | 

LOCK = Bus Lock Prefix 

1 1 1 1 0000 I 


NOTES: 

AL = 8-bit accumulator 

AX = 16-bit accumulator 

CX = Count register 

DS = Data segment 

ES = Extra segment 

Above/below refers to unsigned value 

Greater = more positive; 

Less = less positive (more negative) signed values 
if d = 1 then “to” reg; if d = 0 then “from” reg 
if w = 1 then word instruction; if w = 0 then byte instruc- 
tion 

if mod = 1 1 then r/m is treated as a REG field 
if mod = 00 then DISP = 0*, disp-low and disp-high are 
absent 

if mod = 01 then DISP = disp-low sign-extended to 
1 6 bits, disp-high Is absent 
if mod = 1 0 then DISP = disp-high; disp-low 
if r/m = 000 then EA = (BX) + (SI) + DISP 

if r/m = 001 then EA = (BX) + (Dl) + DISP 

if r/m = 010 then EA = (BP) + (SI) -f DISP 

if r/m = Oil then EA = (BP) + (Dl) + DISP 

if r/m = .100 then EA = (SI) + DISP 
if r/m = 101 then EA = (Dl) + DISP 
if r/m = 110 then EA = (BP) + DISP* 

if r/m = 111 then EA = (BX) + DISP 

DISP follows 2nd byte of instruction (before data If re- 
quired) 

*except if mod = 00 and r/m = 110 then EA = disp-high; 
disp-low. 


if s w = 01 then 1 6 bits of immediate data form the oper- 
and 

If s w = 11 then an immediate data byte Is sign extended 
to form the 16-bit operand 

if v = 0 then “count” = 1; if v = 1 then “count” in (CL) 
X = don’t care 

2 is used for string primitives for comparison with ZF FLAG 

SEGMENT OVERRIDE PREFIX 


00 1 reg 1 1 0 


REG is assigned according to the following table: 


16-Bit (w = 1) 

8-Bit (w = 0) 

Segment 

000 AX 

000 AL 

00 ES 

001 CX 

001 CL 

01 CS 

010 DX 

010 DL 

10 SS 

oil BX 

oil BL 

11 DS 

100 SP 

100 AH 


101 BP 

101 CH 


110 SI 

110 DH 


111 Dl 

111 BH 



Instructions which reference the flag register file as a 1 6-blt 
object use the symbol FLAGS to represent the file: 

FLAGS = X:X:X:X:(OF);(DF):(IF):(TF):(SF):(ZF):X:(AF):X:(PF);X:(CF) 


Mnemonics © Intel, 1978 


DATA SHEET REVISION REVIEW 

The following list represents key differences between this and the -003 data sheet. Please review this summa- 
ry carefully. 

1. The Pin Description Table has been modified to indicate that the HOLD and HLDA pins both have internal 
pull-up resistors. The Input leakage current (Ili) in the D.C. CHARACTERISTICS section has been modified 
for these pins. 
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16-BIT CHMOS MICROPROCESSOR 


■ Pin-for-Pin and Functionally Compatible 
to Industry Standard HMOS 8086 

■ Fully Static Design with Frequency 
Range from D.C. to: 

— 8 MHz for 80C86A-2 

■ Low Power Operation 

— Operating Icc = 10 mA/MHz 
— Standby Ices == 500 jllA max 

■ Bus-Hold Circuitry Eliminates Pull-Up 
Resistors 

■ Direct Addressing Capability of 
1 MByte of Memory 


■ Architecture Designed for Powerful 
Assembly Language and Efficient High 
Level Languages 

■ 24 Operand Addressing Modes 

■ Byte, Word and Block Operations 

■ 8 and 16-Bit Signed and Unsigned 
Arithmetic 

— Binary or Decimal 
— Multiply and Divide 

■ Available in 40-Lead Plastic DIP 


The Intel 80C86A is a high performance, CHMOS version of the industry standard HMOS 8086 16-bit CPU. 
The 80C86A available in 8 MHz clock rates, offers two modes of operation: MINimum for small systems and 
MAXimum for larger applications such as multiprocessing. It is available in 40-pin DIP package. 


EXECUTION UNIT BUS INTERFACE UNIT 


RELOCATION 



CLK RESET READY MN/MX GNO 
^CC 


240029-1 

Figure 1. 80C86A 
CPU Block Diagram 


MAX 

MODE 

GND 
AD14 
A013 
A012 
AD11 
AD10 
AD9 
A08 
AD7 
AD6 
ADS 
AD4 
AD3 
A02 
AD1 
ADO 
NMI 
INTR 
CLK 
GND 


C 1 
C 2 
C 3 

C 4 

C 5 
C 6 
C 7 
C 8 

C 9 

C II 
C 1 
C 1: 
C 

C 1' 
C II 
C 11 
C 1 
C 1 


□ 19 

□ 20 


pADIS 
P AD16/ S3 
A17/S4 
A18/S5 
A19/S6 
DBHES7 
3 MN/MX 

Drd 

IRQ/GTO 

Drq/gtT 

3 LOCK 

DS2 

1S^ 

Dm 

DQSO 

|DQS1 

D READY 
3 RESET 


(HOLD) 

(HLDA) 

(^) 

(M/iO) 

(DTR) 

(DEN) 

(ALE) 

(Inta) 
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Figure 2. 80C86A 
40-Lead DIP Configuration 
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Table 1. Pin Description 


The following pin function descriptions are for 80 C 86 AA systems in either minimum or maximum mode. The 
“Local Bus” in these descriptions is the direct multiplexed bus interface connection to the 80 C 86 A (without 
regard to additional bus buffers). 


Symbol 

Pin No. 

Type 

Name and Function 

AD15-AD0 

2 - 16 , 39 

I/O 

ADDRESS DATA BUS: These lines constitute the time multiplexed 
memory/ lO address (Ti) and data (T2, T3, Tw, T4) bus. Aq is 




analogous to BHE for the lower byte of the data bus, pins D7-D0. It 




is LOW during T ^ when a byte is to be transferred on the lower 
portion of the bus in memory or I/O operations. Eight-bit oriented 
devices tied to the lower half would normally use Aq to condition 
chip select functions. (See BHE.) These lines are active HIGH and 
float to 3 -state OFF(i) during interrupt acknowledge and local bus 




“hold acknowledge.” 

^ J 

A19/S6, 

35-38 

0 

ADDRESS/STATUS: During T-j these are the four most significant 

A18/S5, 



address lines for memory operations. During I/O operations 

A17/S4, 



these lines are LOW. During memory and I/O operations. 

A16/S3 


. 

status information is available on these lines during T2, T3, Tw, 
and T4. The status of the interrupt enable FLAG bit (S5) is updated 
at the beginning of each CLK cycle. A17/S4 and A-j6/S3 are 




encoded as shown. 





This information indicates which relocation register is presently 




being used for data accessing. 





These lines float to 3 -state 0 FF( 1 ) during local bus “hold 




acknowledge.” 






A 17 /S 4 

A,6/S3 

Characteristics 




0 (LOW) 

0 

Alternate Data 




0 

1 

Stack 




1 (HIGH) 

0 

Code or None 




1 

Se Is 0 

1 

Data 




(LOW) 



WE/Sy 

34 

0 

BUS HIGH ENABLE/STATUS: During Ti the bus high enable signal 
(BHE) should be used to enable data onto the most significant half 
of the data bus, pins D-is-Ds. Eight-bit oriented devices tied to the 
upper half of the bus would normally use BHE to condition chip 




select functions. BHE is LOW during Ti for read, write, and interrupt 




acknowledge cycles when a byte is to be transferred on the high 
portion of the bus. The S7 status information Is available during T2, 
T3, and T4. The signal is active LOW, and floats to 3 -state OFF(f) In 
“hold.” It is LOW during Ti for the first Interrupt acknowledge cycle. 




BHE 

Ao 

Characteristics 




0 

0 

Whole word 




0 

1 

Upper byte from/ 
to odd address 




1 

0 

Lower byte from/ 
to even address 


i 


1 

1 

None 
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Table 1. Pin Description (Continued) 


Symbol 

Pin No. 

Type 

Name and Function 

RD 

32 

0 

READ: Read strobe indicates that the processor is performing a 
memory of I/O read cycle, depending on the state of the S 2 pin. 

This signal is used to read devices which reside on the 80C86A 
local bus. ^ is active LOW during T 2 , T 3 and Tw of any read cycle, 
and Is guaranteed to remain HIGH in T 2 until the 80C86A local bus 
has floated. 

This floats to 3-state OFF in “hold acknowledge.” 

READY 

22 

1 

READY: is the acknowledgement from the addressed memory or 

I/O device that it will complete the data transfer. The READY signal 
from memory/IO is synchronized by the 82C84A Clock Generator 
to form READY. This signal is active HIGH. The 80C86A READY 
input is not synchronized. Correct operation is not guaranteed if the 
setup and hold times are not met. 

INTR 

18 

1 

INTERRUPT REQUEST: is a level triggered input which is sampled 
during the last clock cycle of each instruction to determine if the 
processor should enter into an interrupt acknowledge operation. A 
subroutine is vectored to via an interrupt vector lookup table 
located in system memory. It can be internally masked by software 
resetting the interrupt enable bit. INTR is internally synchronized. 

This signal is active HIGH. 

TEST 

23 

1 

TEST: input is examined by the “Wait” Instruction. If the TEST input 
is LOW execution continues, otherwise the processor waits in an 
“Idle” state. This input is synchronized internally during each clock 
cycle on the leading edge of CLK. 

NMI 

17 

1 

NON-MASKABLE INTERRUPT: an edge triggered input which 
causes a type 2 interrupt. A subroutine Is vectored to via an 
interrupt vector lookup table located in system memory. NMI is not 
maskable Internally by software. A transition from a LOW to HIGH 
initiates the interrupt at the end of the current instruction. This input 
is internally synchronized. 

RESET 

21 

1 

RESET: causes the processor to immediately terminate its present 
activity. The signal must be active HIGH for at least four clock 
cycles. It restarts execution, as described in the Instruction Set 
description, when RESET returns LOW. RESET is internally 
synchronized. 

CLK 

19 

1 

CLOCK: provides the basic timing for the processor and bus 
controller. It Is asymmetric with a 33% duty cycle to provide 
optimized internal timing. 

Vcc 

40 


Vcc* + power supply pin. 

GND 

1,20 


GROUND: Both must be connected. 

MN/W( 

33 

1 

MINIMUM/MAXIMUM: indicates what mode the processor is to 
operate in. The two modes are discussed In the following sections. 
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Table 1. Pin Description (Continued) 

The following pin function descriptions are for the 80C66A/62C88 system in maximum mode (i.e., 
MN/MX= Only the pin functions which are unique to maximum mode are described; all other pin func- 
tions are as described above. 


Symbol 

Pin No. 

Type 


Name and Function 

S 2 , S-j , So 

26-28 

0 

STATUS: active during T 4 , Ti, and T 2 and is returned to the passive 
state (1,1,1) during T 3 or during Tyv when READY is HIGH. This 
status Is used by the 82C88 Bus Controller to geherate all memory 
and I/O access control signals. Any change by ^ during T 4 

is used to indicate the beginning of a bus cycle, and the return to the 
passive state in T 3 or Tyv is used to indicate the end of a bus cycle. 
These signals float to 3-state 0FF(1) in “hold acknowledge.” These 
status lines are encoded as shown. 




S 2 

Si 

So 

Characteristics 




0 (LOW) 

0 

0 

0 

1 (HIGH) 

1 

1 

1 

0 

0 

1 

1 

0 

0 

1 

1 

0 

1 

0 

1 

0 

1 

0 

1 

Interrupt 

Acknowledge 

Read I/O Port 

Write I/O Port 

Halt 

Code Access 

Read Memory 

Write Memory 

Passive 

RQ/GT 1 ’ 

30,31 

I/O 

REQUEST/GRANT: pins are used by other local bus masters to 
force the processor to release the local bus at the end of the 
processor’s current bus cycle. Each pin is bidirectional with RQ/GTo 
having higher priority than TO/CT 1 . TO/GT has an internal pull-up 
resistor so may be left unconnected. The request/grant sequence Is 
as follows (see timing diagram): 

1 . A pulse of 1 CLK wide from another local bus master indicates a 
local bus request (“hold”) to the 80C86A (pulse 1 ). 

2. During a T 4 or T-| clock cycle, a pulse 1 CLK wide from the 

80C86A to the requesting master (pulse 2), indicates that the 

80C86A has allowed the local bus to float and that It will enter the 
“hold acknowledge” state at the next CLK. The CPU’s bus interface 
unit Is disconnected logically from the local bus during “hold 
acknowledge.” 

3. A pulse 1 CLK wide from the requesting master indicates to the 
80C86A (pulse 3) that the “hold” request is about to end and that 
80C86A can reclaim the local bus at the next CLK. 

Each master-master exchange of the local bus is a sequence of 3 
pulses. There must be one dead CLK cycle after each bus exchange. 
Pulses are active LOW. 

If the request is made while the CPU is performing a memory cycle. It 
will release the local bus during T 4 of the cycle when all the following 
conditions are met: 

1 . Request occurs on or before T 2 . 

2 . Current cycle is not the low byte of a word (on an odd address). 

3. Current cycle is not the first acknowledge of an interrupt 
acknowledge sequence. 

4. A locked Instruction is not currently executing. 
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Table 1. Pin Description (Continued) 


Symbol 

Pin No. 

Type 

Name and Function 




If the local bus is idle when the request is made the two possible 




events will follow: 






1 . Local bus will be released during the next clock. 

2. A memory cycle will start within 3 clocks. Now the four rules for a 
currently active memory cycle apply with condition number 1 already 




satisfied. 



LOCK 

29 

0 

LOCK: output indicates that other system bus masters are not to gain 
control of the system bus while LOCK is active LOW. The LOCK 
signal is activated by the “LOCK” prefix instruction and remains 
active until the completion of the next instruction. This signal is active 
LOW, and floats to 3-state OFFCi) in “hold acknowledge.” 

QS-|, QSq 

24, 25 

o 

QUEUE STATUS: The queue status is valid during the CLK cycle 
after which the queue operation is performed. 

OS'! and QSq provide status to allow external tracking of the internal 




80C86A instruction queue. 





QSi 

QSo 

Characteristics 




0 (LOW) 

0 

No Operation 




0 

1 

First Byte of Op Code from Queue 




1 (HIGH) 

0 

Empty the Queue 




1 

1 

Subsequent Byte from Queue 


The following pin function descriptions are for the 80086 A in minimum mode (i.e., MN/MX= Vcc)- Only the 
pin functions which are unique to minimum mode are described; all other pin functions are described above. 


M/IO 

28 

0 

STATUS LINE: logically equivalent to S 2 in the maximum mode. It 

Is used to distinguish a memory access from an I/O access. M/IO 
becomes valid in the T 4 preceding a bus cycle and remains valid 
until the final T 4 of the cycle (M = HIGH, lO- LOW). M/IO floats to 
3-state OFFff) in local bus “hold acknowledge.” 

WR 

29 

0 

WRITE: indicates that the processor Is performing a write memory 
or write I/O cycle, depending on the state of the M/IO signal. WR is 
active for T 2 , T 3 and Tw of any write cycle. It is active LOW, and 
floats to 3-state 0FF(1) in local bus “hold acknowledge.” 

INTA 

24 

0 

INTA is used as a read strobe for interrupt acknowledge cycles. It is 
active LOW during T 2 , T 3 and Tw of each interrupt acknowledge 
cycle. 

ALE 

25 

0 

ADDRESS LATCH ENABLE: provided by the processor to latch 
the address into an address latch. It is a HIGH pulse active during 

T 1 of any bus cycle. Note that ALE is never floated. 

DT/R 

27 

0 

DATA TRANSMIT/RECEIVE: needed in minimum system that 
desires to use a data bus transceiver. It is used to control the 
direction of data flow through the transceiver. Logically DT/R is 
equivalent to S-j in the maximum mode, and its timing is the same 
as for M/iO. (T = HIGH, R = LOW.) This signal floats to 3-state 

0FF(1) in local bus “hold acknowledge.” 
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Table 1. Pin Description (Continued) 


Symbol 

Pin No. 

Type 

Name and Function 

DEN 

26 

0 

DATA ENABLE: provided as an output enable for the transceiver in 
a minimum system which uses the transceiver. DEN is active LOW 
during each memory and I/O access and for INTA cycles. For a 
read or INTA cycle it Is active from the middle of T 2 until the middle 
of T 4 , while for a write cycle It is active from the beginning of T 2 
until the middle of T 4 . DEN floats to 3-state 0FF(1) in local bus 
“hold acknowledge.” 

HOLD, 

HLDA 

31,30 

I/O 

HOLD: indicates that another master is requesting a local bus 
“hold.” To be acknowledged, HOLD must be active HIGH. The 
processor receiving the “hold” request will issue HLDA (HIGH) as 
an acknowledgement in the middle of a T 4 orTj clock cycle. 
Simultaneous with the issuance of HLDA the processor will float the 
local bus and control lines. After HOLD is detected as being LOW, 
the processor will LOWer the HLDA, and when the processor 
needs to run another cycle, it will again drive the local bus and* 
control lines. 

The same rules as for TO/GT apply regarding when the local bus 
will be released. 

HOLD Is not an asynchronous input. External synchronization 
should be provided if the system cannot otherwise guarantee the 
setup time. 


NOTE: 

1 . See the section on Bus Hold Circuitry. 

FUNCTIONAL DESCRIPTION 

STATIC OPERATION 

All 80C86A circuitry is of static design. Internal regis- 
ters, counters and latches are static and require no 
refresh as with dynamic circuit design. This elimi- 
nates the minimum operating frequency restriction 
placed on other microprocessors. The CMOS 
80C86A can operate from DC to the appropriate up- 
per frequency limit. The processor clock may be 
stopped In either state (high/low) and held there in- 
definitely. This type of operation is especially useful 
for system debug or power critical applications. 

The 80C86A can be single stepped using only the 
CPU clock. This state can be maintained as long as 
is necessary. Single step clock operation allows sim- 
ple interface circuitry to provide critical information 
for bringing up your system. 

Static design also allows very low frequency opera- 
tion. In a power critical situation, this can provide 
extremely low power operation since 80C86A power 
dissipation is directly related to operating frequency. 
As the system frequency Is reduced, so Is the oper- 
ating power until, ultimately, at a DC input frequency, 
the 80C86A power requirement is the standby cur- 
rent. 


INTERNAL ARCHITECTURE 

The internal functions of the 80C86A processor are 
partitioned logically into two processing units. The 
first Is the Bus Interface Unit (BIU) and the second is 
the Execution Unit (EU) as shown in the block dia- 
gram of Figure 1 . 

These units can interact directly but for the most 
part perform as separate asynchronous operational 
processors. The bus interface unit provides the func- 
tions related to instruction fetching and queuing, op- 
erand fetch and store, and address relocation. This 
unit also provides the basic bus control. The overlap 
of Instruction pre-fetching provided by this unit 
serves to increase processor performance through 
improved bus bandwidth utilization. Up to 6 bytes of 
the instruction stream can be queued while waiting 
for decoding and execution. 

The instruction stream queuing mechanism allows 
the BIU to keep the memory utilized very efficiently. 
Whenever there is space for at least 2 bytes in the 
queue, the BIU will attempt a word fetch memory 
cycle. This greatly reduces “dead time” on the 
memory bus. The queue acts as a First-In-First Out 
(FIFO) buffer, from which the EU extracts instruction 
bytes as required. If the queue is empty (following a 
branch instruction, for example), the first byte into 
the queue immediately becomes available to the EU. 
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Memory 
Reference Need 

Segment Register 
Used 

Segment 

Selection Rule 

Instructions 

CODE (CS) 

Automatic with all instruction prefetch. 

Stack 

STACK (SS) 

All stack pushes and pops. Memory references relative to BP 
base register except data references. 

Local Data 

DATA (DS) 

Data references when: relative to stack, destination of string 
operation, or explicitly overridden. 

External (Global) Data 

EXTRA (ES) 

Destination of string operations: Explicitly selected using a 
segment override. 


The execution units receives pre-fetched instruc- 
tions from the BIU queue and provides un-relocated 
operand addresses to the BIU. Memory operands 
are passed through the BIU for processing by the 
EU, which passes results to the BIU for storage. See 
the Instruction Set description for further register set 
and architectural descriptions. 

MEMORY ORGANIZATION 

The processor provides a 20-bit address to memory 
which locates the byte being referenced. The memo- 
ry is organized as a linear array of up to 1 million 
bytes, addressed as 00000(H) to FFFFF(H). The 
memory is logically divided into code, data, extra 
data, and stack segments of up to 64k bytes each, 
with each segment falling on 16-byte boundaries. 
(See Figure 3a.) 
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Figure 3a. Memory Organization 


All memory references are made relative to base ad- 
dresses contained in high speed segment registers. 
The segment types were chosen based on the ad- 
dressing needs of programs. The segment register 
to be selected is automatically chosen according to 
the rules of the following table. All information in one 
segment type share the same logical attributes (e.g. 
code or data). By structuring memory into relocat- 
able areas of similar characteristics and by automati- 
cally selecting segment registers, programs are 
shorter, faster, and more structured. 

Word (16-bit) operands can be located on even or 
odd address boundaries and are thus not con- 
strained to even boundaries as is the case in many 
16-bit computers. For address and data operands, 
the least significant byte of the word is stored in the 
lower valued address location and the most signifi- 
cant byte in the next higher address location. The 
BIU automatically performs the proper number of 
memory accesses, one If the word operand is on an 
even byte boundary and two if it is on an odd byte 
boundary. Except for the performance penalty, this 
double access is transparent to the software. This 
performance penalty does not occur for instruction 
fetches, only word operands. 

Physically, the memory Is organized as a high bank 
(Dis-De) and a low bank (D 7 -D 0 ) of 512k 8 -bit 
bytes addressed in parallel by the processor’s ad- 
dress lines. 

A 19 -A 1 . Byte data with even addresses Is trans- 
ferred on the D 7 -D 0 bus lines while odd addressed 
byte data (Aq HIGH) is transferred on the D 15 -D 8 
bus li nes. The processor provides two enable sig- 
nals, BHE and Aq, to selectively allow reading from 
or writing into either an odd byte location, even byte 
location, or both. The instruction stream is fetched 
from memory as words and is addressed internally 
by the processor to the byte level as necessary. 

In referencing word data the BIU requires one or two 
memory cycles depending on whether or not the 
starting byte of the word is on an even or odd ad- 
dress, respectively. Consequently, in referencing 
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word operands performance can be optimized by lo- 
cating data on even address boundaries. This is an 
especially useful technique for using the stack, since 
odd address references to the stack may adversely 
affect the context switching time for interrupt pro- 
cessing or task multiplexing. 

Certain locations in memory are reserved for specific 
CPU operations (see Figure 3b.) Locations from ad- 
dress FFFFOH through FFFFFH are reserved for op- 
erations including a jump to the initial program load- 
ing routine. Following RESET, the CPU will always 
begin execution at location FFFFOH where the jump 
must be. Locations OOOOOH through 003FFH are re- 
served for interrupt operations. Each of the 256 pos- 
sible interrupt types has its service routine pointed to 
by a 4-byte pointer element consisting of a 16-bit 
segment address and a 16-bit offset address. The 
pointer elements are assumed to have been stored 
at the respective places in reserved memory prior to 
occurrence of interrupts. 




FFFFFH 




RESET BOOTSTRAP 



PROGRAM JUMP 

FFFFOH 









3FFH 


INTERRUPT POINTER 



FOR TYPE 255 

3FCH 


• 

^ • 

1 

• 




7H 


INTERRUPT POINTER 



FOR TYPE 1 

4H 


INTERRUPT POINTER 

3H 


FOR TYPE 0 

OH 
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Figure 3b. Reserved Memory Locations 


MINIMUM AND MAXIMUM MODES 

The requirements for supporting minimum and maxi- 
mum 80C86A systems are sufficiently different that 


they cannot be done efficiently with 40 uniquely de- 
fined pins. Consequently, the 80C86A is equipped 
with a strap pin (MN/MX) which defines the system 
configuration. The definition of a certain subset of 
the pins changes dependent on the condition of the 
strap pin. When MN/MX pin is strapped to GND, the 
80C86A treats pins 24 through 31 in maximum 
mode. An 82C88 bus_controller interprets status in- 
formation coded into Sq, S-j , S 2 to generate bus tim- 
ing and control signals compatible with_the MULTI- 
BUS® architecture. When the MN/MX pin is 
strapped to Vcc» the 80C86A generates bus control 
signals Itself on pins 24 through 31, as shown in 
parentheses In Figure 2. Examples of minimum 
mode and maximum mode systems are shown in 
Figure 4. 

BUS OPERATION 

The 80C86A has a combined address and data bus 
commonly referred to as a time multiplexed bus. 
This technique provides the most efficient use of 
pins on the processor. This “local bus” can be buff- 
ered directly and used throughout the system with 
address latching provided on memory and I/O mod- 
ules. In addition, the bus can also be demultiplexed 
at the processor with a single set of address latches 
if a standard non-multiplexed bus Is desired for the 
system. 

Each processor bus cycle consists of at least four 
CLK cycles. These are referred to as T-i, T 2 , T 3 and 
T 4 (see Figure 5). The address is emitted from the 
processor during T-| and data transfer occurs on the 
bus during T 3 and T 4 . T 2 Is used primarily for chang- 
ing the direction of the bus during read operations. In 
the event that a “NOT READY” Indication is given 
by the addressed device, “Wait” states (Tw) are in- 
serted between T 3 and T 4 . Each inserted “Walt” 
state is of the same duration as a CLK cycle. Periods 
can occur between 80C86A bus cycles. These are 
referred to as “Idle” states (Tj) or inactive CLK cy- 
cles. The processor uses these cycles for Internal 
housekeeping. 

During Ti of any bus cycle the ALE (Address Latch 
Enable) signal Is emitted (by either the processor or 
the 82C88 bus controller, depending on the MN/MX 
strap). At the trailing edge of this pulse, a valid ad- 
dress and certain status information for the cycle 
may be latched. 
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Figure 4a. Minimum Mode iAPX 80C86A Typical Configuration 
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Figure 4b. Maximum Mode 80C86A Typical Configuration 
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Figure 5 . Basic System Timing 


Status bits Sq, S-j, and S2 are used, in maximum 
mode, by the bus controller to Identify the type of 
bus transaction according to the following table: 


Sa 

Si 

So 

Characteristics 

0 (LOW) 

0 

0 

Interrupt Acknowledge 

0 

0 

1 

Read I/O 

0 

1 

0 

Write I/O 

0 

1 

1 

Halt 

1 (HIGH) 

0 

0 

Instruction Fetch 

1 

0 

1 

Read Data from Memory 

1 

1 

0 

Write data to Memory 

1 

1 

1 

Passive (no bus cycle) 


therefore valid during T2 through T4. S3 and S4 indi- 
cate which segment register (see Instruction Set de- 
scription) was used for this bus cycle in forming the 
address, according to the following table: 


S4 

S3 

Characteristics 

0 (LOW) 

0 

Alternate Data (extra segment) 

0 

1 

Stack 

1 (HIGH) 

0 

Code or None 

1 

1 

Data 


55 is a reflection of the PSW interrupt enable bit. 

56 = 0 and S7 is a spare status pin. 


Status bits S3 through S7 are multi plexed with high- 
order address bits and the BHE signal, and are 
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I/O ADDRESSING 

In the 80C86A, I/O operations can address up to a 
maximum of 64k I/O byte registers or 32k I/O word 
registers. The I/O address appears in the same for- 
mat as the memory address on bus lines A15-A0. 
The address lines A19-A16 are zero in I/O opera- 
tions. The variable I/O instructions which use regis- 
ter DX as a pointer have full address capability while 
the direct I/O instructions directly address one or 
two of the 256 I/O byte locations in’ page 0 of the 
I/O address space. 

I/O ports are addressed in the same manner as 
memory locations. Even addressed bytes are trans- 
ferred on the D7-D0 bus lines and odd addressed 
bytes on D15-D8. Care must be taken to assure that 
each register within an 8-bit peripheral located on 
the lower portion of the bus be addressed as even. 


EXTERNAL INTERFACE 

PROCESSOR RESET AND INITIALIZATION 

Processor initialization or start up is accomplished 
vyith activation (HIGH) of the RESET pin. The 
80C86A RESET is required to be HIGH for four or 
more CLK cycles. The 80C86A will terminate opera- 
tions on the high-going edge of RESET and will re- 
main dormant as long as RESET is HIGH. The low- 
going transition of RESET triggers an internal reset 
sequence for approximately 7 CLK cycles. After this 
interval the 80C86A operates normally beginning 
with the instruction in absolute location FFFFOH 
(see Figure 3b). The details of this operation are 
specified in the Instruction Set description of the 
MCS®-86 Family User’s Manual. The RESET input is 
internally synchronized to the processor clock. At 



initialization the HIGH-to-LOW transition of RESET 
must occur no sooner than 50 jus after power-up, to 
allow complete initialization of the 80C86A. 

NMI asserted prior to the 2nd clock after the end of 
RESET will not be honored. If NMI is asserted after 
that point and during the internal reset sequence, 
the processor may execute one instruction before 
responding to the interrupt. A hold request active 
immediately after RESET will be honored before the 
first instruction fetch. 

All 3-state outputs float to 3-state 0FF(1) during RE- 
SET. Status is active in the idle state for the first 
clock after RESET becomes active and then floats 
to 3-state 0FF(1). ALE and HLDA are driven low. 

NOTE: 

1 . See the section on Bus Hold Circuitry. 

BUS HOLD CIRCUITRY 

To avoid high current conditions caused by floating 
inputs to CMOS devices and eliminate the need for 
pull-up/down resistors, “bus-hold” circuitry has 
been used on the 80C86A pins 2-16, 26-32, and 
34-39 (Figures 6a, 6b). These circuits will maintain 
the last valid logic state If no driving source is pres- 
ent (i.e. an unconnected pin or a driving source 
which goes to a high impedance state). To overdrive 
the “bus hold” circuits, an external driver must be 
capable of supplying 350 fxA minimum sink or 
source current at valid input voltage levels. Since 
this “bus hold” circuitry is active and not a “resis- 
tive” type element, the associated power supply cur- 
rent is negligible and power dissipation is significant- 
ly reduced when compared to the use of passive 
pull-up resistors. 



Figure 6b. Bus hold circuitry pin 26-32. 
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INTERRUPT OPERATIONS 

Interrupt operations fall into two classes; software or 
hardware initiated. The software initiated interrupts 
and software aspects of hardware interrupts are 
specified in the Instruction Set description. Hard- 
ware interrupts can be classified as non-maskable or 
maskable. 

Interrupts result in a transfer of control to a new pro- 
gram location. A 256-element table containing ad- 
dress pointers to the interrupt service program loca- 
tions resides in absolute locations 0 through 3FFH 
(see Figure 3b), which are reserved for this purpose. 
Each element in the table is 4 bytes in size and cor- 
responds to an interrupt “type”. An interrupting de- 
vice supplies an 8-bit type number, during the inter- 
rupt acknowledge sequence, which is used to “vec- 
tor” through the appropriate element to the new In- 
terrupt service program location. 

NON-MASKABLE INTERRUPT (NMI) 

The processor provides a single non-maskable inter- 
rupt pin (NMI) which has higher priority than the 
maskable interrupt request pin (INTR). A typical use 
would be to activate a power failure routine. The 
NMI is edge-triggered on a LOW-to-HIGH transition. 
The activation of this pin causes a type 2 Interrupt. 
(See Instruction Set description.) NMI is required to 
have a duration in the HIGH state of greater than 
two CLK cycles, but is not required to be synchroniz- 
ed to the clock. Any high-going transition of NMI is 
latched on-chip and will be serviced at the end of the 
current instruction or between whole moves of a 
block-type instruction. Worst case response to NMI 
would be for multiply, divide and variable shift in- 
structions. There Is no specification on the occur- 
rence of the low-going edge; it may occur before, 
during, or after the servicing of NMI. Another high- 
going edge triggers another response if it occurs af- 
ter the start of the NMI procedure. The signal must 
be free of logical spikes in general and be free of 
bounces on the low-going edge to avoid triggering 
extraneous responses. 

MASKABLE INTERRUPT (INTR) 

The 80C86A provides a single interrupt request input 
(INTR) which can be masked internally by software 


with the resetting of the interrupt enable FLAG 
status bit. The interrupt request signal is level trig- 
gered. It is internally synchronized during each clock 
cycle on the high-going edge of CLK. To be re- 
sponded to, INTR must be present (HIGH) during 
the clock period preceding the end of the current 
instruction or the end of a whole move for a block- 
type Instruction. During the interrupt response se- 
quence further Interrupts are disabled. The enable 
bit is reset as part of the response to any interrupt 
(INTR, NMI, software Interrupt or single-step), al- 
though the FLAGS register which is automatically 
pushed onto the stack reflects the state of the proc- 
essor prior to the interrupt. Until the old FLAGS reg- 
ister is restored the enable bit will be zero unless 
specifically set by an instruction. 

During the response sequence (Figure 7) the proc- 
essor executes two successive (back-to-back) inter- 
rupt acknowledge cycles. The 80C86A emits the 
LOCK signal from T 2 of the first bus cycle until T 2 of 
the second. A local bus “hold” request will not be 
honored until the end of the second bus cycle. In the 
second bus cycle a byte is fetched from the external 
interrupt system (e.g., 82C59 PIC) which identifies 
the source (type) of the interrupt. This byte Is multi- 
plied by four and used as a pointer into the Interrupt 
vector lookup table. An INTR signal left HIGH will be 
continually responded to within the limitations of the 
enable bit and sample period. The INTERRUPT RE- 
TURN instruction Includes a FLAGS pop which re- 
turns the status of the original interrupt enable bit 
when it restores the FLAGS. 


HALT 

When a software “HALT” Instruction is executed the 
processor indicates that It is entering the “HALT” 
state in one of two ways depending upon which 
mode is strapped. In minimum mode, the processor 
issues one ALE with no qualifying bus control sig- 
nals. In Maximum Mode, the processorjssues ap- 
propriate HALT status on S 2 , Si and Sq and the 
82C88 bus controller issues one ALE. The 80C86A 
will not leave the “HALT” state when a local bus 
“hold” is entered while in “HALT”. In this case, the 
processor reissues the HALT indicator. An interrupt 
request or RESET will force the 80C86A out of the 
“HALT” state. 
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READ/MODIFY/WRITE (SEMAPHORE) 
OPERATIONS VIA LOCK 


The LOCK status information is provided by the 
processor when directly consecutive bus cycles are 
required during the execution of an iristruction. This 
provides the processor with the capability of per- 
forming read/modify/write operations on memory 
(via the Exchange Register With Memory instruction, 
for example) without the possibility of another sys- 
tem bus master receiving intervening memory cy- 
cles. This is useful in mutliprocessor system configu- 
ratio ns to a ccomplish “test and set lock” operations. 
The LOCK signal Is activated (forced LOW) in the 
clock cycle following the one in which the software 
“LOCK” prefix instruction is decoded by the EU. It is 
deactivated at the end of the last bus cycle of the 
instru ction fo llowing the “LOCK” prefix Instruction. 
While LOCK is active a request on a RQ/GT pin will 
be recorded and then honored at the end of the 
LOCK. 


EXTERNAL SYNCHRONIZATION VIA TEST 

As an alternative to the interrupts and general I/O 
capabilities, the 80C86A pr ovides a single software- 
testable input known as the TEST signal. At any time 
the program may ex ecute a WAIT instruction. If at 
that time the TEST signal is inactive (HIGH), pro- 


gram execution becom es suspended while the proc- 
essor waits for TEST to become active. It must re- 
main active for at least 5 CLK cycles. The WAIT in- 
struction is re-executed repeatedly until that time. 
This activity does not consume bus cycles. The 
processor remains in an idle state while waiting. All 
80C86A drivers go to 3-state OFF if bus “Hold” is 
entered. If interrupts are enabled, they may occur 
while the processor Is waiting. When this occurs the 
processor fetches the WAIT Instruction one extra 
time, processes the interrupt, and then re-fetches 
and re-executes the WAIT instruction upon returning 
from the interrupt. 


BASIC SYSTEM TIMING 

Typical system configurations for the processor op- 
erating in minimum mode and in maximum mode are 
shown In Figures 4a _and 4b, respectively. In mini- 
mum mode, the MN/MX pin Is strapped to Vcc and 
the processor emits bus control signals in a manner 
similar to the 8085. In maximum mode, the MN/MX 
pin is strapped to Vss and the processor emits cod- 
ed status information which the 82C88 bus control- 
ler uses to generate MULTIBUS compatible bus 
control signals. Figure 5 illustrates the signal timing 
relationships. 
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Figure 8. 80C86A Register Model 

SYSTEM TIMING— MINIMUM SYSTEM 

The read cycle begins in T i with the assertion of the 
Address Latch Enable (ALE) signal. The trailing (low- 
going) edge of this signal Is used to latch the ad- 
dress information, which is valid on the local bus at 
this time, into a latch. The BHE and Aq signals ad- 
dre^ the low, high, or both bytes. From T-| to T 4 the 
M/IO signal indicates a memory or I/O operation. At 
T 2 the address Is removed from the local bus and 
the bus goes to a high impedance state. The read 
control signal is also asserted at T 2 . The read (RD) 
signal causes the addressed device to enable its 
data bus drivers to the local bus. Some time later 
valid data will be available on the bus and the ad- 
dressed device will drive the READY line HIGH. 
When the processor returns the read signal to a 
HIGH level, the addressed device will again 3-state 
Its bus drivers. If a transceiver is required to bu ffer 
the 80C86A local bus, signals DT/R and DEN are 
provided by the 80C86A. 

A write cycle also begins with the assertjon of ALE 
and the emission of the address. The M/IO signal is 
again asserted to indicate a memory or I/O write 
operation. In the T 2 immediately following the ad- 
dress emission the processor emits the data to be 
written, into the addressed location. This data re- 
mains valid until the middle of T 4 . During T 2 , T 3 , and 
Tw the processor asserts the write control signal. 
The write (WR) signal becomes active at the begin- 
ning of T 2 as opposed to the read which is delayed 
somewhat into T 2 to provide time for the bus to float. 

The BHE and Aq signals are used to select the prop- 
er byte(s) of the memory/ lO word to be read or writ- 
ten according to the following table: 


AX 

AH 

AL 

BX 

BH 

BL 

CX 

CH 

CL 

DX 

DH 

DL 



1 

SP 


BP 


SI 


Dl 





H 

If I 



FLAGSh 

FLAGSl 







cs 


DS 


SS 


ES 


BHE 

AO 

Characteristics 

0 

0 

Whole word 

0 

1 

Upper byte from/ 
to odd address 

1 

0 

Lower byte from/ 
to even address 

1 

1 

None 


I/O ports are addressed in the same manner as 
memory location. Even addressed bytes are trans- 
ferred on the D 7 -D 0 bus lines and odd addressed 
bytes on D 15 -D 8 . 


The basic difference between the interrupt acknowl- 
edge cycle and a r ead c ycle is that the interrupt ac- 
knowledge signal (INTA) is asserted in place of the 
read (RD) signal and the address bus is floated. 
(See Figure 7.) In the second of two successive 
INTA cycles, a byte of Information is read from bus 
lines D 7 -D 0 as supplied by the interrupt system, log- 
ic (i.e., 82C59A Priority Interrupt Controller). This 
byte identifies the source (type) of the interrupt. It Is 
multiplied by four and used as a pointer into an Inter- 
rupt vector lookup table, as described earlier. 


BUS TIMING— MEDIUM SIZE SYSTEMS 

For medium size systems the MN/]^ pin is con- 
nected to Vss and the 82C88 Bus Controller is add- 
ed to the system as well as a latch for latching the 
system address, and a transceiver to allow for bus 
loading greater than the 80C86A is_capable of han- 
dling. Signals ALE, DEN, and DT/R are generated 
by the 82C88 Instead of the processor in this config- 
uration although their timing remain^ rdatively 
same. The 80C86A status outputs (S 2 , S-i, and Sq) 
provide type-of-cycle Information and become 
82C88 inputs. This bus cycle information specifies 
read (code, data, or I/O), write (data or I/O), inter- 
rupt acknowledge, or software halt. The 82C88 thus 
issues control signals specifying memory read or 
write, I/O read or write, or interrupt acknowledge. 
The 82C88 provides two types of write strobes, nor- 
mal and advanced, to be applied as required. The 
normal write strobes have data valid at the leading 
edge of write. The advanced write strobes have the 
same timing as read strobes, and hence data isn’t 
valid at the leading edge of write. The transceiver 
receives the usual T and OE inputs from the 82C88 
DT/R and DEN. 

The pointer into the interrupt vector table, which is 
passed during the second INTA cycle, can derive 
from an 82C59A located on either the local bus or 
the system bus. If the master 82C59A Priority Inter- 
rupt Controller is positioned on the local bus, a TTL 
gate is required to disable the transceiver when 
reading from the master 82C59A during the interrupt 
acknowledge sequence and software “poll”. 
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ABSOLUTE MAXIMUM RATINGS* 

Supply Voltage 

(With respect to ground) -0.5 to 7.0V 

Input Voltage Applied 

(w.r.t. ground) -0.5 to Vcc + 0.5V 

Output Voltage Applied 

(w.r.t. ground) -0.5 to Vqc + 0.5V 

Power Dissipation 1 .OW 

Storage Temperature -65°C to 150®C 

Ambient Temperature Under Bias 0°C to yo^C 


* Notice: Stresses above those listed under “Abso- 
lute Maximum Ratings” may cause permanent dam- 
age to the device. This is a stress rating only and 
functional operation of the device at these or any 
other conditions above those indicated in the opera- 
tional sections of this specification is not implied. Ex- 
posure to absoiute maximum rating conditions for 
extended periods may affect device reliability. 


D.C. CHARACTERISTICS 

(Ta = 0°c to 70*’C, Vcc = 5V ±5%) 


Symbol 

Parameter 

80C86A-2 

Units 

Test Conditions 

Min 

Max 

V|L 

Input Low Voltage 

-0.5 

+ 0.8 

V 


VlH 

Input High Voltage 
(All inputs except clock) 

2.0 


V 


VCH 

Clock Input High Voltage 

< 

o 

o 

I 

p 

bo 


V 


VoL 

Output Low Voltage 


0.45 

V 

Iql = 2.5 mA 

VOH 

Output High Voltage 

3.0 

Vcc -0.4 


V 

Iqh = -2.5 mA 

Iqh = -100 jaA 

•cc 

Power Supply Current 


10 mA/MHz 

V|l = GND,V,h = Vcc ' 

Ices 

Standby Supply Current 


500 

jaA 

V|N = Vcc or GND 

Outputs Unloaded 

CLK = GND or Vcc 

III 

Input Leakage Current 


±1.0 

JLtA 

OV ^ V|N ^ Vcc 

Ibhl 

Input Leakage Current 
(Bus Hold Low) 

50 

400 

jaA 

V|N = 0.8V 
(Note 4) 

Ibhh 

Input Leakage Current 
(Bus Hold High) 

-50 

-400 

jaA 

V|N = 3.0V 
(Note 5) 

Ibhlo 

Bus Hold Low Overdrive 


600 

jliA 

(Note 2) 

Ibhho 

Bus Hold High Overdrive 


-600 

jllA 

(Note 3) 

Ilo 

Output Leakage Current 


±10 

jaA 

VoUT = GND or Vcc 

C|N 

Capacitance of Input Buffer 
(All inputs except 

ADo-ADi5, RQ/GT) 


5 

PF 

(Notel) 

Cio 

Capacitance of I/O Buffer 
(ADo-ADi5, RQ/GT) 


20 

PF 

(Note 1) 

Gout 

Output Capacitance 


15 

pF 

(Note 1) 


NOTES: 

1. Characterization conditions are a) Frequency = 1 MHz; b) Unmeasured pins at GND; c) V|n at +5.0V or GND. 

2. An external driver must source at least Ibhlo to switch this node from LOW to HIGH. 

3. An external driver must sink at least Ibhho to switch this node from HIGH to LOW. 

4. Test Condition is to lower V|n to GND and then raise V|n to 0.8V on pins 2-16 & 34-39. 

5. Test Condition is to raise V|n to Vqc and then lower V|n to 3.0V on pins 2-16, 26-32 & 34-39. 
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A.C. CHARACTERISTICS 

(Ta = 0°c to 70°C, Vcc = 5V ±5%) 


MINIMUM COMPLEXITY SYSTEM TIMING REQUIREMENTS 


Symbol 

Parameter 

80C86A-2 

Units 

Test 

Min 

Max 

Conditions 

TCLCL 

CLK Cycle Period 

125 

D.C. 

ns 


TCLCH 

CLK Low Time 

68 


ns 


TCHCL 

CLK High Time 

44 


ns 


TCH1CH2 

CLK Rise Time 


10 

ns 

From 1 .OV to 3.5 V 

TCL2CL1 

CLK Fall Time 


10 

ns 

From 3.5V to 1.0V 

TDVCL 

Data in Setup Time 

20 


ns 


TCLDX 

Data in Hold Time 

10 


ns 


TR1VCL 

RDY Setup Time 
into 82C84A 
(Notes 1 , 2) 

35 


ns 


TCLR1X 

RDY Hold Time 
into 82C84A 
(Notes 1 , 2) 

0 


ns 


TRYHCH 

READY Setup 

Time into 80C86A 

68 


ns 


TCHRYX 

READY Hold Time 
into 80C86A 

20 


ns 


TRYLCL 

READY Inactive to 

CLK (Note 3) 

-8 


ns 


THVCH 

HOLD Setup Time 

20 


ns 


TINVCH 

INTR, NMI, TEST 
Setup Time 
(Note 2) 

15 


ns 


TILIH 

Input Rise Time 
(Except CLK) 


15 

ns 

From 0.8V to 2.0V 

TIHIL 

Input Fall Time 
(Except CLK) , 


■>5 

ns 

From 2.0V to 0.8V 
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A.C, CHARACTERISTICS (Continued) 
(Ta = 0“C to 70‘’C, Vcc = 5V ±5%) 

Timing Responses 


Symbol 

Parameter 

80C86A-2 

Units 

Test 

Min 

Max 

Conditions 

TCLAV 

Address Valid Delay 

10 

60 

ns 


TCLAX 

Address Hold Time 

10 


ns 


TCLAZ 

Address Float 

Delay 

TCLAX 

50 

ns 


TLHLL 

ALE Width 

TCLCH-10 


ns 


TCLLH 

ALE Active Delay 


50 

ns 


TCHLL 

ALE Inactive Delay 


55 

ns 


TLLAX 

Address Hold Time 
to ALE Inactive 

TCHCL-10 


ns 


TCLDV 

Data Valid Delay 

10 

60 

ns 


TCHDX 

Data Hold Time 

10 


ns 


TWHDX 

Data Hold Time 

After WR 

TCLCH-30 


ns 


TCVCTV 

Control Active 

Delay 1 

10 

70 

ns 


TCHCTV 

Control Active 

Delay 2 

10 

60 

ns 


TCVCTX 

Control Inactive 

Delay 

10 

70 

ns 


TAZRL 

Address Float to 

READ Active 

0 


ns 


TCLRL 

RD Active Delay 

10 

100 

ns 


TCLRH 

^ Inactive Delay 

10 

80 

ns 


TRHAV 

RD Inactive to Next 
Address Active 

TCLCL-40 


ns 


TCLHAV 

HLDA Valid Delay 

10 

100 

ns 


TRLRH 

RD Width 

2TCLCL-50 


ns 


TWLWH 

WR Width 

2TCLCL-40 


ns 


TAVAL 

Address Valid to 

ALE Low 

TCLCH-40 


ns 


TOLOH 

Output Rise Time 


15 

ns 

From 0.8V to 2.0V 

TOHOL 

Output Fall Time 


15 

ns 

From 2.0V to 0.8V 


NOTES: 

1 . Signal at 82C84A shown for reference only. See 82C84A data sheet for the most recent specifications. 

2. Setup requirement for asynchronous signal only to guarantee recognition at next CLK. 

3. Applies only to T2 state. (8 ns into T3). 
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WAVEFORMS (Continued) 

MINIMUM MODE (Continued) 



NOTES: 

1. All output timing measurements are made at 1.5V unless otherwise noted. 

2. RDY is sampled near the end of T 2 , T 3 , Tw to determine if Tw machines states are to be inserted. 

3. Two INTA cycles run back-to-back. The 80C86A local ADDR/DATA BUS is floating during both INTA cycles. Control 
signals shown for second INTA cycle. 

4. Signals at 82C84A are shown for reference only. 
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A.C. CHARACTERISTICS 

MAX MODE SYSTEM (USING 82C88 BUS CONTROLLER) 
TIMING REQUIREMENTS 


Symbol 

Parameter 

80C86A-2 

Units 

Test 

Min 

Max 

Conditions 

TCLCL 

CLK Cycle Period 

125 

D.C. 

ns 

■ 

TCLCH 

CLK Low Time 

68 


ns 


TCHCL 

CLK Hrgh Time 

44 


ns 


TCH1CH2 

CLK Rise Time 


10 

ns 

From 1 .OV to 3.5V 

TCL2CL1 

CLK Fall Time 


10 

ns 

From 3.5V to 1.0V 

TDVCL 

Data in Setup Time 

20 


ns 


TCLDX 

Data in Hold Time 

10 


ns 


TR1VCL 

RDY Setup Time into 82C84A 
(Notes 1,2) 

35 


' 

ns 


TCLR1X 

RDY Hold Time into 82C84A 
(Notes 1 , 2) 

0 


ns 


TRYHCH 

READY Setup Time into 80C86A 

68 


ns 


TCHRYX 

READY Hold Time into 80C86A 

20 


ns 


TRYLCL 

READY Inactive to 

CLK (Note 4) 

-8 


ns 


TINVCH 

Setup Time for Recognition 
(INTR, NMI, TEST) 

(Note 2) 

15 


ns 


TGVCH 

Setup Time 

15 


ns 


TCHGX 

RQ Hold Time Into 80C86A 

30 


ns 


TILIH 

Input Rise Time 
(Except CLK) (Note 5) 


15 

ns 

From 0.8V to 2.0V 

TIHIL 

Input Fall Time 
(Except CLK) (Note 5) 


15 

1 

ns 

From 2.0V to 0.8V 
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A.C. CHARACTERISTICS (Continued) 


TIMING RESPONSES 


Symbol 

Parameter 

80C86A-2 

Units 

Test 

Min 

Max 

Conditions 

TCLML 

Command Active 

Delay (Note 1) 

5 

35 

ns 


TCLMH 

Command Inactive 

Delay (Note 1) 

5 

35 

ns 


TRYHSH 

READY Active to 

Status Passive (Note 3) 


65 

ns 


TCHSV 

Status Active Delay 

10 

60 

ns 


TCLSH 

Status Inactive Delay 

10 

70 

ns 


TCLAV 

Address Valid Delay 

10 

60 

ns 


TCLAX 

Address Hold Time 

10 


ns 


TCLAZ 

Address Float Delay 

TCLAX 

50 

ns 


TSVLH 

Status Valid to ALE High (Note 1) 


20 

ns 


TSVMCH 

Status Valid to 

MCE High (Note 1) 


30 

ns 


TCLLH 

CLK Low to ALE Valid (Note 1) 


20 

ns 


TCLMCH 

CLK Low to MCE High (Note 1) 


25 

ns 


TCHLL 

ALE Inactive Delay (Note 1) 

4 

18 

ns 


TCLDV 

Data Valid Delay 

10 

60 

ns 


TCHDX 

Data Hold Time 

10 


ns 


TCVNV 

Control Active Delay (Note 1 ) 

5 

45 

ns 


TCVNX 

Control Inactive Delay (Note 1) 

10 

45 

ns 


TAZRL 

Address Float to Read Active 

0 


ns 


TCLRL 

RD Active Delay 

10 

100 

ns 


TCLRH 

RD Inactive Delay 

10 

80 

ns 


TRUAV 

RD Inactive to 

Next Address Active 

TCLCL-40 


ns 


TCHDTL 

Direction Control 

Active Delay (Note 1 ) 


50 

ns 


TCHDTH 

Direction Control 

Inactive Delay (Note 1) 


30 

ns 


TCLGL 

GT Active Delay 

0 

50 

ns 


TCLGH 

GT Inactive Delay 

0 

50 

ns 


TRLRH 

RD Width 

2TCLCL-50 


ns 


TOLOH 

Output Rise Time 


15 

ns 

From 0.8V to 2.0V 

TOHOL 

Output Fall Time 


15 

ns 

From 2.0V to 0.8V 


NOTES: 

1 . Signal at 82C84A or 82C88 shown for reference only. See 82C84A and 82C88 for the most recent specifications. 

2. Setup requirement for asynchronous signal only to guarantee recognition at next CLK. 

3. Applies only to T3 and wait states. 

4. Applies only to T2 state (8 ns into T3). 

5. These parameters are characterized and not 100% tested. 
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A.C. TESTING INPUT, OUTPUT WAVEFORM 


INPUT/ OUTPUT 


X' 




240029-16 

A.C. Testing inputs are driven at 2.4V for a logic “1” and 0.45V for 
a logic “0”. Timing measurements are made at 1.5V 


A.C. TESTING LOAD CIRCUIT 


DEVICE 

UNDER 

TEST 


r 


240029-17 


Cl Includes Jig Capacitance 


WAVEFORMS 

MAXIMUM MODE 
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WAVEFORMS (Continued) 

MAXIMUM MODE (Continued) 



240029-19 


NOTES: 

1 . All timing measurements are made at 1 .5V unless otherwise noted. 

2. RDY is sampled near the end of T 2 , T 3 , Tw to determine if Tyv machines states are to be inserted. 

3. Cascade address is valid between first and second INTA cycle. 

4. Two INTA cycles run back-to-back. The 80G86A local ADDR/DATA BUS is floating during both INTA cycles. Control for 
pointer address is shown for second INTA cycle. 

5. Signals at 82C84A or 82C88 are shown for reference only. 

6 . The issuance of the 82C88 command and control signals (MRDC, MWTC, AMWC, lORC, lOWC, AlOWC, INTA and DEN) 
lags the active high 82C88 CEN. 

7. Status inactive in state just prior to T 4 . 
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WAVEFORMS (Continued) 


ASYNCHRONOUS SIGNAL RECOGNITION 



BUS LOCK SIGNAL TIMING RESET TIMING 

(MAXIMUM MODE ONLY) I 




REQUEST/GRANT SEQUENCE TIMING (MAXIMUM MODE ONLY) 


ANY CLK ^ 0 CLK 



240029-23 


NOTE: The coprocessor may not drive the buses outside the region shown without risking contention. 
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WAVEFORMS (Continued) 

HOLD/HOLD ACKNOWLEDGE TIMING (MINIMUM MODE ONLY) 


> 1 CLK CYCLE 


1 OR 2 CYCLES 



— 1 L— THVCH 


— THVCH 

\ ^ 


HOLO^ / 





HLDA 

[— TCLHAV — 



h^TC 

LHAV 

AD,5-AOo. _ 

TCLAZ 


Aij/Sg-A^j/Sj, ' * • 

80C86 

auc/c ujin , i 

)(_ 

COPROCESSOR 

ZJ 

— — ^ 80C86^ 

DT/R, WR. ^ 




240029-24 


Table 2. instruction Set Summary 


Mnemonic and 

Description 

Instruction Code 

DATA TRANSFER 






MOV = Move: 

76543210 


76543210 

76543210 

76543210 

Register/Memory to/from Register” 

10001 Odw 


mod reg r/m ] 



Immediate to Register/Memory 

1 1 0001 1 w 

□I 

mod 0 0 0 r/m | 

data 

data if w = 1 | 

Immediate to Register 

1 0 1 1 w reg 

□I 

data 1 

data if w = 1 


Memory to Accumulator 

lOIOOOOw 

zc 

addr-low | 

addr-high 


Accumulator to Memory 

1 01 0001 w 

n: 

addr-low | 

addr-high 


Register/Memory to Segment Register** 

10001 1 1 0 

m 

mod 0 reg r/m | 



Segment Register to Register/Memory 

10001 1 00 

in 

mod 0 reg r/m | 



PUSH = Push: 






Register/Memory 

11111111 

m 

mod 1 1 0 r/m | 



Register 

0 1010 reg 

□ 




Segment Register 

0 0 0 reg 1 1 0 

□ 




POP = Pop: 






Register/Memory 

1 0001 1 1 1 

IE 

mod 0 0 0 r/m | 



Register 

0 1 0 1 1 reg 

□ 




Segment Register 

0 0 0 reg 1 1 1 

□ 




XCHG = Exchange: 






Register/ Memory with Register 

1 00001 1 w 

IE 

mod reg r/m | 



Register with Accumulator 

1 0 0 1 0 reg 

□ 




IN = Input from: 






Fixed Port 

1 1 1 001 Ow 

IE 

port 1 



Variable Port 

1 1 1 01 1 Ow 

□ 




OUT = Output to: 






Fixed Port 

1 1 1 001 1 w 

IE 

port 1 



Variable Port 

1 1 1 01 1 1 w 

□ 




XLAT = Translate Byte to AL 

11010111 

□ 




LEA = Load EA to Register 

1 0001 101 

IE 

mod reg r/m 1 



LDS = Load Pointer to DS 

1 1 0001 0 1 

IE 

mod reg r/m | 



LES = Load Pointer to ES 

1 1000100 

IE 

mod reg r/m 1 



LAHF = Load AH with Flags 

10011111 

□ 




SAHF = Store AH into Flags 

10011110 

□ 




PUSHF = Push Flags 

10011100 

□ 




POPF = Pop Flags 

10011101 

□ 
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Table 2. Instruction Set Summary (Continued) 


Mnemonic and 

Description 

Instruction Code 

ARITHMETiC 

76543210 


76543210 


76543210 

76543210 

ADD = Add: 







Reg. /Memory with Register to Either 

OOOOOOdw 

X 

mod reg r/m 

□ 



Immediate to Register/Memory 

1 OOOOOsw 

X 

mod 0 0 0 r/m 

X 

data 

1 data if s w = 01 [ 

Immediate to Accumulator 

00000 1 Ow 

X 

data 

X 

data if w = 1 


ADC = Add with Carry: 







Reg. /Memory with Register to Either 

0001 OOdw 

X 

mod reg r/m 

□ 



Immediate to Register/Memory 

1 OOOOOsw 

X 

mod 010 r/m 

X 

data . 

1 dataifsw = 01 | 

Immediate to Accumulator 

0001 01 Ow 

X 

data 

X 

data if w = 1 


INC = Increment: 







Register/Memory 

1 1 1 1 1 1 1 w 

X 

mod 0 0 0 r/m 

□ 



Register 

01 0 0 0 reg 

□ 





AAA = ASCII Adjust for Add 

00110111 

□ 





DAA = Decimal Adjust for Add 

00100111 

□ 





SUB = Subtract: 







Reg./Memory and Register to Either 

001 01 Odw 

X 

mod reg r/m 

□ 



Immediate from Register/Memory 

1 OOOOOsw 

X 

mod 1 0 1 r/m 

X 

data 

1 dataifsw = 01 | 

Immediate from Accumulator 

00 1 01 1 Ow 

X 

data 

X 

data if w = 1 


SBB = Subtract with Borrow 







Reg./Memory and Register to Either 

0001 1 Odw 

X 

mod reg r/m 

□ 



Immediate from Register/ Memory 

lOOOOOsw 

X 

mod 0 1 1 r/m 

X 

data 

1 data if s w = 01 | 

Immediate from Accumulator 

000 1 1 1 Ow 

X 

data 

X 

data if w = 1 

] 

DEC = Decrement: 







Register/Memory 

1 1 1 1 1 1 1 w 

X 

mod 0 0 1 r/m 

□' 



Register 

010 01 reg 

□ 





NEG = Change Sign 

1 1 1 1 0 1 1 w 

X 

mod Oil r/m 

□ 



CMP = Compare: 







Register/ Memory and Register 

00111 Odw 

X 

mod reg r/m 

□ 



Immediate with Register/Memory 

lOOOOOsw 

X 

mod 111 r/m 

X 

data 

1 data if s w = 01 | 

Immediate with Accumulator 

001 1 1 1 Ow 

X 

data 

X 

data if w = 1 

] 

AAS = ASCII Adjust for Subtract 

00111111 

□ 





DAS = Decimal Adjust for Subtract 

00101111 

□ 





MUL = Multiply (Unsigned) 

1 1 1 1 01 1 w 

X 

mod 10 0 r/m 

□ 



IMUL = Integer Multiply (Signed) 

1 1 1 1 01 1 w 

X 

mod 1 0 1 r/m 

□ 



AAM = ASCII Adjust for Multiply 

11010100 

X 

00001010 

□ 



DIV = Divide (Unsigned) 

1 1 1 1 01 1 w 

X 

mod 1 1 0 r/m 

□ 



IDIV = Integer Divide (Signed) 

1 1 1 1 01 1 w 

X 

mod 111 r/m 

□ 



AAD = ASCII Adjust for Divide 

11010101 

X 

00001 01 0 

□ 



CBW = Convert Byte to Word 

10011000 

□ 





CWD = Convert Word to Double Word 

10011001 

□ 
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8086/8088 Instruction Set Summary (Continued) 


Mnemonic and 

Description 

Instruction Code 

LOGIC 

76543210 


76543210 


76543210 


76543210 

NOT = Invert 

1 1 1 1 01 1 w 

X 

mod 0 1 0 r/m 

□ 




SHL/SAL = Shift Logical/Arithmetic Left 

1 1 0 1 0 0 V w 

X 

mod 10 0 r/m 

□ 




SHR == Shift Logical Right 

1101 OOvw 

X 

mod 101 r/m 

□ 




SAR = Shift Arithmetic Right 

1 1 01 OOvw 

X 

mod 1 1 1 r/m 

□ 




ROL = Rotate Left 

1 1 01 OOvw 

X 

mod 0 0 0 r/m 

□ 




ROR = Rotate Right 

1 1 01 OOvw 

X 

mod 0 01 r/m 

□ 




RCL = Rotate Through Carry Flag Left 

1 1 01 OOvw 

X 

mod 010 r/m 

□ 




RCR = Rotate Through Carry Right 

1101 OOvw 

X 

mod 0 1 1 r/m 

□ 




AND = And: 








Reg./Memory and Register to Either 

001 OOOdw 

X 

mod reg r/m 

□ 




Immediate to Register/Memory 

1 OOOOOOw 

X 

mod 10 0 r/m 

X 

data 

X 

data if w = 1 | 

Immediate to Accumulator 

00 1 00 1 Ow 

X 

data 

X 

data if w = 1 

□ 


TEST = And Function to Flags, No Result: 








Register/ Memory and Register 

1 0000 1 Ow 

X 

mod reg r/m 

□ 




Immediate Data and Register/Memory 

1 1 1 1 01 1 w 

X 

mod 0 0 0 r/m 

X 

data 

X 

data if w = 1 | 

Immediate Data and Accumulator 

1010 1 OOw 

X 

data 

X 

data if w = 1 

□ 


O 

33 

II 

O 








Reg./Memory and Register to Either 

00001 Odw 

X 

mod reg r/m 

□ 




Immediate to Register/ Memory 

1 OOOOOOw 

X 

mod 0 0 1 r/m 

X 

data 

X 

data if w = 1 | 

Immediate to Accumulator 

00001 1 Ow 

X 

data 

X 

data if w = 1 

□ 


XOR = Exclusive OR: 








Reg./Memory and Register to Either 

001 1 OOdw 

X 

mod reg r/m 

□ 




Immediate to Register/Memory 

1 OOOOOOw 

X 

mod 110 r/m 

X 

data 

X 

data if w = 1 | 

Immediate to Accumulator 

001 1 01 Ow 

X 

data 

X 

data if w = 1 

□ 


STRING MANIPULATION 








REP = Repeat 

1 1 1 1 001 z 

□ 






MOVS = Move Byte/Word 

1 0 1 001 Ow 

□ 






CMPS = Compare Byte/Word 

1 01 001 1 w 

□ 






SCAS = Scan Byte/Word 

1 0 1 0 1 1 1 w 

□ 






LODS = Load Byte/Wd to AL/AX 

10101 10w 

□ 






STOS = Stor Byte/Wd from AL/A 

1 01 01 01 w 

□ 






CONTROL TRANSFER 








CALL = Call: 








Direct Within Segment 

1 1 101000 

X 

disp-low 

X 

disp-high 

□ 


Indirect Within Segment 

11111111 

X 

mod 0 10 r/m 

□ 




Direct Intersegment 

10011010 

X 

offset-low 

X 

offset-high 

□ 




c 

seg-low 

X 

seg-high 

□ 


Indirect Intersegment 

1 11111111 

X 

mod Oil r/m 

□ 
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Table 2. Instruction Set Summary (Continued) 


Mnemonic and 

Description 

Instruction Code 

CONTROL TRANSFER (Continued) 





JMP = Unconditional Jump: 

765432 1 0 

76543210 

76543210 


Direct Within Segment 

1 1 1 01.001 1 

disp-low 

1 disp-high | 


Direct Within Segment-Short 

11101011 1 

disp 



Indirect Within Segment 

11111111 1 

mod 10 0 r/m 



Direct Intersegment 

11101010 1 

offset-low 

offset-high | 



c 

seg-low 

seg-high | 


Indirect Intersegment 

11111111 1 

mod 101 r/m 



RET = Return from CALL: 





Within Segment 

11000011 1 




Within Seg. Adding Immed to SP 

1 1 00001 0 1 

data-low 

1 data-high | 


Intersegment 

11001011 1 




Intersegment Adding Immediate to SP 

11001010 1 

data-low 

1 data-high | 


JE/JZ = Jump on Equal/Zero 

01110100 1 

disp 

1 


JL/JNGE = Jump on Less/ Not Greater 

01111100 1 

disp 



or Equal 





JLE/JNG = Jurnp on Less or Equal/ 

01111110 1 

disp 

1 


Not Greater 





JB/JNAE = Jump on Below/Not Above 

01110010 1 

disp 



JBE/JNA = Jump on Below or Equal/ 

01110110 1 

disp 



Not Above 





JP/JPE = Jump on Parity/Parity Even 

01111010 i 

disp 



JO = Jump on Overflow 

0111 0000 1 

disp 



JS = Jump on Sign 

01 1 1 1 000 1 

disp 



JNE/JNZ = Jump on Not Equal/Not Zero 

01110101 1 

disp 

] 


JNL/JGE = Jump on Not Less/Greater 

01111101 1 

disp 

1 


or Equal 



J 


JNLE/JG = Jump on Not Less or Equal/ 

01111111 1 

disp 

] 


Greater 



J 


JNB/ JAE = Jump on Not Below/ Above 

01110011 1 

disp 

] 


or Equal 





JNBE/JA ~ Jump on Not Below or 

01110111 1 

disp 

] 


Equal /Above 



J 


JNP/JPO = Jump on Not Par/Par Odd 

01111011 1 

disp 

] 


JNO = Jump on Not Overflow 

01 1 1 0001 1 

disp 

] 


JNS = Jump on Not Sign 

01111001 1 

disp 

] 


LOOP = Loop CX Times 

1 1 1 0001 0 1 

disp 

] 


LOOPZ/LOOPE = Loop While Zero/Equal 

1 1 1 00001 1 

disp 

] 


LOOPNZ/LOOPNE = Loop While Not 

11100000 1 

disp 

] 


Zero/Equal 





JCXZ = Jump on CX Zero 

1 1 1 0001 1 1 

disp 

] 


INT = Interrupt 





Type Specified 

11001101 1 

type 

] 


Type 3 

11001100 1 




INTO = Interrupt on Overflow 

11001110 1 




IRET = Interrupt Return 

11001111 1 
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Table 2. Instruction Set Summary (Continued) 


NOTES: 

AL = 8-bit accumulator 

AX = 1 6-bit accumulator 

CX = Count register 

DS = Data segment 

ES = Extra segment 

Above/below refers to unsigned value. 

Greater = more positive: 

Less = less positive (more negative) signed values 
if d = 1 then “to” reg; if d = 0 then “from” reg 
if w = 1 then word instruction; if w = 0 then byte instruc- 
tion 

if mod = 1 1 then r/m is treated as a REG field 
if mod == 00 then DISP = 0*. disp-low and disp-high are 
absent 

if mod = 01 then DISP = disp-low sign-extended to 
16 bits, disp-high is absent 
if mod = 10 then DISP = disp-high: disp-low 
if r/m = 000 then EA = (BX) + (SI) + DISP 

If r/m = 001 then EA = (BX) + (Dl) + DISP 

If r/m = 010 then EA = (BP) + (SI) + DISP 

if r/m = oil then EA = (BP) + (Dl) + DISP 

If r/m = 100 then EA = (SI) -f DISP 
if r/m = 101 then EA = (Dl) + DISP 
if r/m = 110 then EA = (BP) + DISP* 

if r/m = 1 1 1 then EA = (BX) + DISP 

DISP follows 2nd byte of instruction (before data If re- 
quired) 

*except if mod = 00 and r/m =110 then EA = disp-high: 
disp-low. 

**MOV CS. REG/MEMORY not allowed. 


DATA SHEET REVISION REVIEW 

The following list represents key differences between this and the -001 data sheet. Please review this summa- 
ry carefully. 

1. In the Pin Description Table (Table 1), the description of the HLDA signal being Issued has been corrected. 
HLDA will be issued in the middle. of either the T4 or Tj state. 


if s w = 01 then 16 bits of immediate data form the oper- 
and 

if s w = 11 then an immediate data byte is sign extended 
to form the 16-bit operand 

if V = 0 then “count” = 1; if v = 1 then “count” in (CL) 
register 

x = don’t care 

z is used for string primitives for comparison with ZF FLAG 

SEGMENT OVERRIDE PREFIX 

0 0 1 reg 1 1 0 

REG is assigned according to the following table: 


16-Bit (w = 1) 

8-Bit (w 

= 0) 

Segment 

000 

AX 

000 

AL 

00 

ES 

001 

CX 

001 

CL 

01 

CS 

010 

DX 

010 

DL 

10 

SS 

011 

BX 

011 

BL 

11 

DS 

100 

SP 

100 

AH 



101 

BP 

101 

CH 



110 

SI 

110 

DH 



111 

Dl 

111 

BH 




Instructions which reference the flag register file as a 16-blt 
object use the symbol FLAGS to represent the file: 

FLAGS = 

X:X:X:X:(OF):(DF):(IF):(TF):(SF):(ZF):X:(AF):X:(PF):X:(CF) 
Mnemonics © Intel, 1978 
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8088 

8-BIT HMDS MICROPROCESSOR 
8088 / 8088-2 


■ 8-Bit Data Bus Interface 

■ 16-Bit Internal Architecture 

■ Direct Addressing Capability to 1 Mbyte 
of Memory 

■ Direct Software Compatibility with 8086 
CPU 

■ 14- Word by 16-Bit Register Set with 
Symmetricai Operations 

■ 24 Operand Addressing Modes 


■ Byte, Word, and Biock Operations 

■ 8-Bit and 16-Bit Signed and Unsigned 
Arithmetic in Binary or Decimal, 
Including Muitiply and Divide 

■ Two Clock Rates: 

— 5 MHz for 8088 

— 8 MHz for 8088-2 

■ Available in EXPRESS 

— Standard Temperature Range 
— Extended Temperature Range 


The Intel® 8088 is a high performance microprocessor implemented in N-channel, depletion load, silicon gate 
technology (HMOS), and packaged In a 40-pln CERDIP package. The processor has attributes of both 8- and 
1 6-blt microprocessors. It is directly compatible with 8086 software and 8080/8085 hardware and peripherals. 



MIN I MAX ] 
MODE [MODE] 

GND 
A14 
A13 
A12 
A11 
AID 
A9 
A8 
AD7 
AD6 
ADS 
AD4 
AD3 
A02 
ADI 
ADO 
NMI 
INTR 
CLK 
GND 



(HIGH) 


(RQ/ST^) 

(RQ/eri) 

(l6ck) 

(M) 

m 

(M) 

(OSO) 

(QS1) 


231456-2 

Figure 2. 8088 Pin Configuration 
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Table 1. Pin Description 


The following pin function descriptions are for 8088 systems in either minimum or maximum mode. The “local 
bus” in these descriptions is the direct multiplexed bus interface connection to the 8088 (without regard to 
additional bus buffers). 


Symbol 

Pin No. 

Type 

Name and Function 

AD7-AD0 

9-16 

I/O 

ADDRESS DATA BUS: These lines constitute the time multiplexed 
memory/10 address (T1) and data (T2, T3, Tw, T4) bus. These lines are 
active HIGH and float to 3-state OFF during interrupt acknowledge and 
local bus “hold acknowledge”. 

A15-A8 

2-8, 39 

0 

ADDRESS BUS: These linbs provide address bits 8 through 1 5 for the 
entire bus cycle (T1 -T4). These lines do not have to be latched by ALE 
to remain valid. A15-A8 are active HIGH and float to 3-state OFF 
during interrupt acknowledge and local bus “hold acknowledge”. 

A19/S6. A18/S5. 
A17/S4, A16/S3 

35-38 

o 

ADDRESS/STATUS: During T1 , these are the four most significant 
address lines for memory operations. During I/O operations, these lines 
are LOW. During memory and I/O operations, status information is 
available on these lines during T2, T3, Tw, and T4. S6 is always low. 

The status of the interrupt enable flag bit (S5) is updated at the 
beginning of each clock cycle. S4 and S3 are encoded as shown. 

This information indicates which segment register is presently being 
used for data accessing. 

These lines float to 3-state OFF during local bus “hold acknowledge”. 




S4 

S3 

Characteristics 




0 (LOW) 

0 

1 (HIGH) 

1 

S6 is 0 (LOW) 

0 

1 

0 

1 

Alternate Data 

Stack 

Code or None 

Data 

RD 

32 

0 

READ: Read strobe indicates that the processor is performin^a 
memory or I/O read cycle, depending on the state of the 10/ M pin or 

S2. This signal Is used to read devices which reside on the 8088 local 
bus. RD is active LOW during T2, T3 and Tw of any read cycle, and is 
guaranteed to remain HIGH in T2 until the 8088 local bus has floated. 
This signal floats to 3-state OFF in “hold acknowledge”. 

READY 

22 

1 

READY: is the acknowledgement from the addressed memory or I/O 
device that it will complete the data transfer. The RDY signal from 
memory or I/O is synchronized by the 8284 clock generator to form 
READY. This signal Is active HIGH. The 8088 READY input Is not 
synchronized. Correct operation Is not guaranteed if the set up and hold 
times are not met. 

INTR 

18 

1 

INTERRUPT REQUEST: is a level triggered Input which is sampled 
during the last clock cycle of each Instruction to determine if the 
processor should enter Into an Interrupt acknowledge operation. A 
subroutine is vectored to via an interrupt vector lookup table located In 
system memory. It can be internally masked by software resetting the 
interrupt enable bit. INTR is internally synchronized. This signal is active 
HIGH. 

TEST 

23 

1 

TEST: Input is examined by the “wait for test” Instruction. If the TEST 
input Is LOW, execution continues, otherwise the processor waits in an 
“Idle” state. This input is synchronized internally during each clock 
cycle on the leading edge of CLK. 
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Table 1. Pin Description (Continued) 


Symbol 

Pin No. 

Type 

Name and Function 

NMI 

17 

1 

NON-MASKABLE INTERRUPT: is an edge triggered input which causes a 
type 2 interrupt. A subroutine is vectored to via an interrupt vector lookup 
table located In system memory. NMI is not maskable internally by 
software. A transition from a LOW to HIGH initiates the interrupt at the end 
of the current instruction. This Input is internally synchronized. 

RESET 

21 

1 

RESET: causes the processor to immediately terminate its present activity. 
The signal must be active HIGH for at least four clock cycles. It restarts 
execution, as described In the instruction set description, when RESET 
returns LOW. RESET is internally synchronized. 

CLK 

19 

1 

CLOCK: provides the basic timing for the processor and bus controller. It is 
asymmetric with a 33% duty cycle to provide optimized internal timing. 

Vcc 

40 


Vcc^ is the + 5V ±10% power supply pin. 

GND 

1,20 


GND: are the ground pins. 

MN/MX 

33 

1 

MINIMUM/MAXIMUM: indicates what mode the processor is to operate in. 
The two modes are discussed In the following sections. 


The following pin function descriptions are for the 8088 minimum mode (i.e., MN/MX = Vcc)> Only the pin 
functions which are unique to minimum mode are described; all other pin functions are as described above. 


Symbol 

Pin No. 

Type 

Name and Function 

lO/M 

28 

0 

STATUS LINE: Is an Inverted maximum mode S2. It Is used to distinguish a 
memory access from an I/O access. lO/M becomes valid in the T4 preceding a 
bus cycle ^d remains valid until the final T4 of the cycle (I/O = HIGH, M = 

LOW). lO/M floats to 3-state OFF in local bus “hold acknowledge”. 

Wr 

29 

0 

WRITE: strobe Indicates that the processor is performing a write memory or write 
I/O cycle, depending on the state of the lO/M, signal. WR is active for T2, T3, and 
Tw of any write cycle. It is active LOW, and floats to 3-state OFF in local bus 
“hold acknowledge”. 

INTA 

24 

0 

INTA: is used as a read strobe for Interrupt acknowledge cycles. It is active LOW 
during T2, T3, and Tw of each interrupt acknowledge cycle. 

ALE 

25 

o 

ADDRESS LATCH ENABLE: is provided by the processor to latch the address 

Into an address latch. It is a HIGH pulse active during clock low of T1 of any bus 
cycle. Note that ALE Is never floated. 

DT/R 

27 

o 

DATA TRANSMIT/RECEIVE: is needed in a minimum system that desires to use 
a data bus transceiver. It Is _used to control the direction of data flow through the 
transceiver. Logically, DT/R js equivalent to SI in the maximum mode, and Its 
timing is the same as for lO/M (T = HIGH, R = LOW). This signal floats to 

3-state OFF in local “hold acknowledge”. 

DEN 

26 

0 

I 

DATA ENABLE: Is provided as an output enable for the data bus transceiver In a 
minimum system which uses the transceiver. DEN Is active LOW during each 
memory and I/O access, and for INTA cycles. For a read or INTA cycle, it Is 
active from the middle of T2 until the middle of T4, while for a write cycle, It Is 
active from the beginning of T2 until the middle of T4. DEN floats to 3-state OFF 
during local bus “hold acknowledge”. 
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Table 1. Pin Description (Continued) 


Symbol 

Pin No. 

Type 

Name and Function 

HOLD, 

31,30 

i,o 

HOLD: indicates that another master is requesting a local bus “hold”. To be 

HLDA 



acknowledged, HOLD must be active HIGH. The processor receiving the “hold” 




request will Issue HLDA (HIGH) as an acknowledgement, in the middle of a T4 or 




Ti clock cycle. Simultaneous with the issuance of HLDA the processor will float 




the local bus and control lines. After HOLD is detected as being LOW, the 




processor lowers HLDA, and when the processor needs to run another cycle, it 




will again drive the local bus and control lines. HOLD and HLDA have internal 




pull-up resistors. 






Hold is not an asynchronous Input. External synchronization should be provided If 




the system cannot otherwise guarantee the set up time. 

SSO 

34 

0 

STATUS LINE: is logically equivalent to SO in the maximum mode. The 




combination of SSO, lO/M and DT/R allows the system to completely decode the 




current bus cycle status. 






lO/M 

DT/R 

SSO 

Chairacteristics 




1(HIGH) 

0 

0 

Interrupt Acknowledge 




1 

0 

1 

Read I/O Port 




1 

1 

0 

Write I/O Port 




1 

1 

1 

Halt 




O(LOW) 

0 

0 

Code Access 




0 

0 

1 

Read Memory 




0 

1 

0 

Write Memory 




0 

1 

1 

Passive 


The following pin function descriptions are for the 8088/8288 system in maximum mode (i.e., MN/MX = 
GND). Only the pin functions which are unique to maximum mode are described; aii other pin functions are as 
described above. 


Symbol 

Pin No. 

Type 

Name and Function 

ST,^ 

26-28 

0 

STATUS: is active during clock high of T4, TI , and T2, and is returned to the 
passive state (1,1 ,1) during T3 or during Tw when READY is HIGH. This status Is 
used by the 8288 bus controller to generate all memory and I/O access control 
signals. Any change by S2, SI , or SO during T4 is used to indicate the beginning 
of a bus cycle, and the return to the passive state in T3 and Tw is used to 




Indicate the end of a bus cycle. 





These signals float to 3-state OFF during “hold acknowledge”. During the first 
clock cycle after RESET becomes active, these signals are active HIGH. After 
this first clock, they float to 3-state OFF. 




S2 

SI 

so 

Characteristics 




O(LOW) 

0 

0 

Interrupt Acknowledge 




0 

0 

1 

Read I/O Port 




0 

1 

0 

Write I/O Port 




0 

1 

1 

Halt 




1(HIGH) 

0 

0 

Code Access 




1 

0 

1 

Read Memory 




1 

1 

0 

Write Memory 




1 

1 

1 

Passive 
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Tabie 1. Pin Description (Continued) 


Symbol 

Pin No. 

Type 

Name and Function 

to/gTo, 

RQ/GT1 

30,31 


REQUEST/GRANT: pins are used by other local bus masters to force the 
processor to release the local bus at the end of the processor’s current bus 
cycle. Each pin is bidirectional with RQ/GTO having higher priority than RQ/ 
GT 1 . RQ/GT has an internal pull-up resistor, so may be left unconnected. 

The request/grant sequence is as follows (See Figure 8): 

1 . A pulse of one CLK wide from another local bus master Indicates a local 
bus request (“hold”) to the 8088 (pulse 1). 

2. During a T4 or Tl clock cycle, a pulse one clock wide from the 8088 to the 
requesting master (pulse 2), Indicates that the 8088 has allowed the local 
bus to float and that it will enter the “hold acknowledge” state at the next 

CLK. The CPU’s bus interface unit is disconnected logically from the local 
bus during “hold acknowledge”. The same rules as for HOLD/HOLDA apply 
as for when the bus is released. 

3. A pulse one CLK wide from the requesting master Indicates to the 8088 
(pulse 3) that the “hold” request is about to end and that the 8088 can 
reclaim the local bus at the next CLK. The CPU then enters T4. 

Each master-master exchange of the local bus is a sequence of three 
pulses. There must be one idle CLK cycle after each bus exchange. Pulses 
are active LOW. 

If the request Is made while the CPU Is performing a memory cycle, It will 
release the local bus during T4 of the cycle when all the following conditions 
are met; 

1 . Request occurs on or before T2. 

2. Current cycle is not the low bit of a word. 

3. Current cycle is not the first acknowledge of an interrupt acknowledge 
sequence. 

4. A locked instruction is not currently executing. 

If the local bus is idle when the request is made the two possible events will 
follow: 

1 . Local bus will be released during the next clock. 

2. A memory cycle will start within 3 clocks. Now the four rules for a currently 
active memory cycle apply with condition number 1 already satisfied. 

LOCK 

j 

29 

0 

LOCK: indicates that other system bus masters are not to gain control of the 
system bus while LOCK Is active (LOW). The LOCK signal is activated by 
the “LOCK” prefix Instruction and remains active until the completion of the 
next Instruction. This signal Is active LOW, and floats to 3-state off in “hold 
acknowledge”. 

QS1,QS0 

24. 25 

0 

QUEUE STATUS: provide status to allow external tracking of the Internal 

8088 instruction queue. 

The queue status is valid during the CLK cycle after which the queue 
operation is performed. 

QS1 

QSO 

Characteristics 

O(LOW) 

0 

1(HIGH) 

1 

0 

. 1 

0 

1 

No Operation 

First Byte of Opcode from Queue 

Empty the Queue 

Subsequent Byte from Queue 

— 

34 

0 

Pin 34 is always high in the maximum mode. 
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Figure 3. Memory Organization 


FUNCTIONAL DESCRIPTION 


Memory Organization 

The processor provides a 20-bit address to memory 
which locates the byte being referenced. The memo- 
ry is organized as a linear array of up to 1 million 
bytes, addressed as 00000(H) to FFFFF(H). The 
memory is logically divided into code, data, extra 
data, and stack segments of up to 64K bytes each, 
with each segment falling on 16-byte boundaries 
(See Figure 3). 

All memory references are made relative to base ad- 
dresses contained in high speed segment registers. 
The segment types were chosen based on the ad- 


dressing needs of programs. The segment register 
to be selected is automatically chosen according to 
the rules of the following table. All information in one 
segment type share the same logical attributes (e.g. 
code or data). By structuring memory into relocat- 
able areas of similar characteristics and by automati- 
cally selecting segment registers, programs are 
shorter, faster, and more structured. 

Word (16-blt) operands can be located on even or 
odd address boundaries. For address and data oper- 
ands, the least significant byte of the word is stored 
in the lower valued address location and the most 
significant byte in the next higher address location. 
The BIU will automatically execute two fetch or write 
cycles for 1 6-bit operands. 


Memory 
Reference Used 

Segment 
Register Used 

Segment Selection Rule 

Instructions 

CODE (CS) 

Automatic with all instruction prefetch. 

Stack 

STACK (SS) 

All stack pushes and pops. Memory references 
relative to BP base register except data references. 

Local Data 

DATA (DS) 

Data references when: relative to stack, destination 
of string operation, or explicity overridden. 

External (Global) Data 

EXTRA (ES) 

Destination of string operations: Explicitly selected 
using a segment override. 
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Certain locations in memory are reserved for specific 
CPU operations (See Figure 4). Locations from ad- 
dresses FFFFOH through FFFFFH are reserved for 
operations including a jump to the initial system ini- 
tialization routine. Following RESET, the CPU will al- 
ways begin execution at location FFFFOH where the 
jump must be located. Locations OOOOOH through 
003FFH are reserved for interrupt operations. Four- 
byte pointers consisting of a 1 6-bit segment address 
and a 16-bit offset address direct program flow to 
one of the 256 possible interrupt service routines. 
The pointer elements are assumed to have been 
stored at their respective places in reserved memory 
prior to the occurrence of interrupts. 


Minimum and Maximum Modes 

The requirements for supporting minimum and maxi- 
mum 8088 systems are sufficiently different that 
they cannot be done efficiently with 40 uniquely de- 
fined pins. Consequently, the 8088 Is equipped with 
a strap pin (MN/MX) which defines the system con- 



Figure 4. Reserved Memory Locations 


figuration. The definition of a certain subset of the 
pins changes, dependent on the condition of the 
strap pin. When the MN/MX pin Is strapped to GND, 
the 8088 defines pins 24 through 31 and 34 in maxi- 
mum mode. When the MN/MX pin Is strapped to 
Vcc. the 8088 generates bus control signals itself on 
pins 24 through 31 and 34. 

The minimum mode 8088 can be used with either a 
multiplexed or demultiplexed bus. The multiplexed 
bus configuration is compatible with the MCS- 85 TM 
multiplexed bus peripherals. This configuration (See 
Figure 5) provides the user with a minimum chip 
count system. This architecture provides the 8088 
processing power in a highly Integrated form. 

The demultiplexed mode requires one latch (for 64K 
addressability) or two latches (for a full megabyte of 
addressing). A third latch can be used for buffering if 
the address bus loading requires it. A transceiver 
can also be used if data bus bu fferin g is requjred 
(See Figure 6). The 8088 provides DEN and DT/R to 
control the transceiver, and ALE to latch the ad- 
dresses. This configuration of the minimum mode 
provides the standard demultiplexed bus structure 
with heavy bus buffering and relaxed bus timing re- 
quirements. 

The maximum mode employs the 8288 bus control- 
ler (See Figure 7). The 8288 decodes status lines 
SO, SI , and S2, and provides the system with all bus 
control signals. Moving the bus control to the 8288 
provides better source and sink current capability to 
the control lines, and frees the 8088 pins for extend- 
ed large system features. Hardware lock, queue 
status, and two request/grant interfaces are provid- 
ed by the 8088 In maximum mode. These features 
allow co-processors in local bus and remote bus 
configurations. 
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Figure 5. Multiplexed Bus Configuration 
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Figure 6. Demultiplexed Bus Configuration 



Figure 7. Fully Buffered System Using Bus Controller 
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Bus Operation 

The 8088 address/data bus is broken into three 
parts — the lower eight address/data bits (ADO- 
AD?), the middle eight address bits (A8-A15), and 
the upper four address bits (A16-A19). The ad- 
dress/data bits and the highest four address bits are 
time multiplexed. This technique provides the most 
efficient use of pins on the processor, permitting the 
use of a standard 40 lead package. The middle eight 
address bits are not multiplexed, i.e. they remain val- 


id throughout each bus cycle. In addition, the bus 
can be demultiplexed at the processor with a single 
address latch if a standard, non-multiplexed bus Is 
desired for the system. 

Each processor bus cycle consists of at least four 
CLK cycles. These are referred to as T1 , T2, T3, and 
T4 (See Figure 8). The address is emitted from the 
processor during T1 and data transfer occurs on the 
bus during T3 and T4. T2 Is used primarily for chang- 



Figure 8. Basic System Timing 
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Ing the direction of the bus during read operations. In 
the event that a “NOT READY” indication is given 
by the addressed device, “wait” states (Tw) are in- 
serted between T3 and T4. Each inserted “wait” 
state is of the same duration as a CLK cycle. Periods 
can occur between 8088 driven bus cycles. These 
are referred to as “idle” states (Tl), or inactive CLK 
cycles. The processor uses these cycles for Internal 
housekeeping. 

During T 1 of any bus cycle, the ALE (address latch 
enable) signal is emitted (by either the processor or 
the 8288 bus controller, depending on the MN/MX 
strap). At the trailing edge of this pulse, a valid ad- 
dress and certain status information for the cycle 
may be latched. 

Status bits SO, and S2 are used by the bus con- 
troller, in maximum mode, to identify the type of bus 
transaction according to the following table: 


S2 

SI 

so 

Characteristics 

O(LOW) 

0 

0 

Interrupt Acknowledge 

0 

0 

1 

Read I/O 

0 

1 

0 

Write I/O 

0 

1 

1 

Halt 

1(HIGH) 

0 

0 

Instruction Fetch 

1 

0 

1 

Read Data from Memory 

1 

1 

0 

Write Data to Memory 

1 

1 

1 

Passive (No Bus Cycle) 


Status bits S3 through S6 are multiplexed with high 
order address bits and are therefore valid during T2 
through T4. S3 and S4 indicate which segment reg- 
ister was used for this bus cycle in forming the ad- 
dress according to the following table: 


S4 

S3 

Characteristics 

O(LOW) 

0 

Alternate Data (Extra Segment) 

0 

1 

Stack 

1(HIGH) 

0 

Code or None 

1 

1 

Data 


S5 Is a reflection of the PSW interrupt enable bit. S6 
is always equal to 0. 


I/O Addressing 

In the 8088, I/O operations can address up to a 
maximum of 64K I/O registers. The I/O address ap- 
pears in the same format as the memory address on 
bus lines A15-A0. The address lines A19-A16 are 
zero in I/O operations. The variable I/O Instructions, 


which use register DX as a pointer, have full address 
capability, while the direct I/O instructions directly 
address one or two of the 256 I/O byte locations in 
page 0 of the I/O address space. I/O ports are ad- 
dressed in the same manner as memory locations. 

Designers familiar with the 8085 or upgrading an 
8085 design should note that the 8085 addresses 
I/O with an 8-bit address on both halves of the 16- 
bit address bus. The 8088 uses a full 1 6-blt address 
on its lower 1 6 address lines. 


EXTERNAL INTERFACE 


Processor Reset and Initialization 

Processor initialization or start up is accomplished 
with activation (HIGH) of the RESET pin. The 8088 
RESET is required to be HIGH for greater than four 
clock cycles. The 8088 will terminate operations on 
the high-going edge of RESET and will remain dor- 
mant as long as RESET is HIGH. The low-going 
transition of RESET triggers an internal reset se- 
quence for approximately 7 clock cycles. After this 
interval the 8088 operates normally, beginning with 
the instruction in absolute locations FFFFOH (See 
Figure 4). The RESET Input is Internally synchroniz- 
ed to the processor clock. At Initialization, the HIGH 
to LOW transition of RESET must occur no sooner 
than 50 jjls after power up, to allow complete initiali- 
zation of the 8088. 

NMI asserted prior to the 2nd clock after the end of 
RESET will not be honored. If NMI is asserted after 
that point and during the internal reset sequence, 
the processor may execute one instruction before 
responding to the interrupt. A hold request active 
immediately after RESET will be honored before the 
first instruction fetch. 

All 3-state outputs float to 3-state OFF during 
RESET. Status is active in the idle state for the first 
clock after RESET becomes active and then floats 
to 3-state OFF. ALE and HLDA are driven low. 


Interrupt Operations 

Interrupt operations fall into two classes: software or 
hardware Initiated. The software initiated interrupts 
and software aspects of hardware interrupts are 
specified in the instruction set description In the 
lAPX 88 book or the lAPX 86,88 User’s Manual. 
Hardware interrupts can be classified as nonmaska- 
ble or maskable. 
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Interrupts result in a transfer of control to a new pro- 
gram location. A 256 element table containing ad- 
dress pointers to the interrupt service program loca- 
tions resides in absolute locations 0 through 3FFH 
(See Figure 4), which are reserved for this purpose. 
Each element in the table is 4 bytes in size and cor- 
responds to an interrupt “type.” An interrupting de- 
vice supplies an 8-bit type number, during the inter- 
rupt acknowledge sequence, which is used to vector 
through the appropriate element to the new interrupt 
service program location. 


Non-Maskable Interrupt (NMI) 

The processor provides a single non-maskable inter- 
rupt (NMI) pin which has higher priority than the 
maskable interrupt request (INTR) pin. A typical use 
would be to activate a power failure routine. The 
NMI is edge-triggered on a LOW to HIGH transition. 
The activation of this pin causes a type 2 interrupt. 

NMI is required to have a duration in the HIGH state 
of greater than two clock cycles, but is not required 
to be synchronized to the clock. Any higher going 
transition of NMI is latched on-chip and will be serv- 
iced at the end of the current instruction or between 
whole moves (2 bytes in the case of word moves) of 
a block type instruction. Worst case response to 
NMI would be for multiply, divide, and variable shift 
instructions. There is no specification on the occur- 
rence of the low-going edge; it may occur before, 
during, or after the servicing of NMI. Another high- 
going edge triggers another response if It occurs af- 
ter the start of the NMI procedure. The signal must 
be free of logical spikes in general and be free of 
bounces on the low-going edge to avoid triggering 
extraneous responses. 


Maskable Interrupt (INTR) 

The 8088 provides a single interrupt request input 
(INTR) which can be masked internally by software 
with the resetting of the interrupt enable (IF) flag bit. 
The interrupt request signal is level triggered. It is 
internally synchronized during each clock cycle on 
the high-going edge of CLK. To be responded to, 
INTR must be present (HIGH) during the clock peri- 
od preceding the end of the current instruction or the 
end of a whole move for a block type instruction. 
During Interrupt response sequence, further inter- 
rupts are disabled. The enable bit is reset as part of 
the response to any interrupt (INTR, NMI, software 
Interrupt, or single step), although the FLAGS regis- 
ter which is automatically pushed onto the stack re- 
flects the state of the processor prior to the inter- 
rupt. Until the old FLAGS register is restored, the 


enable bit will be zero unless specifically set by an 
instruction. 

During the response sequence (See Figure 9), the 
processor executes two successive (back to back) 
interrupt acknowledge cycles. The 8088 emits the 
LOCK signal (maximum mode only) from T2 of the 
first bus cycle until T2 of the second. A local bus 
“hold” request will not be honored until the end of 
the second bus cycle. In the second bus cycle, a 
byte Is fetched from the external interrupt system 
(e.g., 8259A PIC) which identifies the source (type) 
of the interrupt. This byte is multiplied by four and 
used as a pointer into the interrupt vector lookup 
table. An INTR signal left HIGH will be continually 
responded to within the limitations of the enable bit 
and sample period. The interrupt return instruction 
includes a flags pop which returns the status of the 
original interrupt enable bit when it restores the 
flags. 


HALT 

When a software HALT instruction is executed, the 
processor indicates that it is entering the HALT state 
in one of two ways, depending upon which mode is 
strapped. In minimum mode, the processor issues 
ALE, delayed by one clock cycle, to allow the sys- 
tem tojatch the halt status . Halt status is available 
on lO/M, DT/R, and SSO. In maximum mode, the 
processor issues appropriate HALT status on S2, 
S1, and SO, and the 8288 bus controller Issues one 
ALE. The 8088 will not leave the HALT state when a 
local bus hold is entered while in HALT. In this case, 
the processor reissues the HALT indicator at the 
end of the local bus hold. An interrupt request or 
RESET will force the 8088 out of the HALT state. 


Read/Modify/Write (Semaphore) 
Operations via LOCK 

The LOCK status information is provided by the 
processor when consecutive bus cycles are required 
during the execution of an Instruction. This allows 
the processor to perform read/ modify /write opera- 
tions on memory (via the “exchange register with 
memory” instruction), without another system bus 
master receiving intervening memory cycles. This Is 
useful in multiprocessor system configurations to ac- 
complish “test and set lock” operations. The LOCK 
signal is activated (LOW) in the clock cycle following 
decoding of the LOCK prefix instruction. It is deacti- 
vated at the end of the last bus cycl e of the instruc- 
tion following the LOCK prefix. While LOCK is active, 
a request on a RQ/GT pin will be recorded, and then 
honored at the end of the LOCK. 
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External Synchronization via TEST 

As an alternative to interrupts, the 8088 provides a 
single software-testable input pin (TEST). This input 
is utilized by executing a WAIT instruction. The sin- 
gle W AIT instruction is repeatedly executed until the 
TEST input goes active (LOW). The execution of 
WAIT does not consume bus cycles once the queue 
is full. 

If a local bus request occurs during WAIT execution, 
the .8088 3-states all output drivers. If Interrupts are 
enabled, the 8088 will recognize interrupts and pro- 
cess them. The WAIT instruction is then refetched, 
and reexecuted. 


Basic System Timing 

In minimum mode, the MN/MX pin Is strapped to 
Vcc and the processor emits bus control signals 
compatible wit h the 8085 bus structure. In maximum 
mode, the MN/MX pin is strapped to GND and the 
processor emits coded status information which the 
8288 bus controller uses to generate MULTIBUS 
compatible bus control signals. 


System Timing— Minimum System 

(See Figure 8) 

The read cycle begins in T 1 with the assertion of the 
address latch enable (ALE) signal. The trailing (low 


going) edge of this signal is used to latch the ad- 
dress information, which is valid on the address/ 
data bus (AD0-AD7) at this time, into the 
8282/8283 latch. Address lines A8 through A1 5 do 
not need to be latched because they remain valjd 
throughout the bus cycle. From T1 to T4 the lO/M 
signal indicates a memory or I/O operation. At T2 
the address is removed from the address/data bus 
and the bus goes to a high impedance state. The 
read control signal is also asserted at T2. The read 
(RD) signal causes the addressed device to enable 
Its data bus drivers to the local bus. Some time later, 
valid data will be available on the bus and the ad- 
dressed device will drive the READY line HIGH. 
When the processor returns the read signal to a 
HIGH level, the addressed device will again 3-state 
its bus drivers. If a transceiver js req uired to buffer 
the 8088 local bus, signals DT/R and DEN are pro- 
vided by the 8088. 

A write cycle also begins with the assertion of ALE 
and the emission of the address. The lO/M signal is 
again asserted to indicate a memory or I/O write 
operation. In T2, Immediately following the address 
emission, the processor emits the data to be written 
into the addressed location. This data remains valid 
until at least the middle of T4. During T2, T3, and 
Tw, the processor asserts the write control signal. 
The write (WR) signal becomes active at the begin- 
ning of T2, as opposed to the read, which is delayed 
somewhat into T2 to provide time for the bus to 
float. 


2-72 



8088 


iny 


The basic difference between the interrupt acknowl- 
edge cycle and a read cycle is that the interrupt ac- 
knowledge (INTA) signal is asserted in place of the 
read (RD) signal and the address bus is fl oated. 
(See Figure 9) In the second of two successive INTA 
cycles, a byte of information is read from the data 
bus, as supplied by the interrupt system logic (i.e. 
8259A priority interrupt controller). This byte identi- 
fies the source (type) of the interrupt. It is multiplied 
by four and used as a pointer into the interrupt vec- 
tor lookup table, as described earlier. 


Bus Timing — Medium Complexity 
Systems 

(See Figure 10) 

For medium complexity systems, the MN/^ pin is 
connected to GND and the 8288 bus controller is 
added to the system, as well as a latch for latching 
the system address, and a transceiver to allow for 
bus loading greater than t he 8088 incapable of han- 
dling. Signals ALE, DEN, and DT/R are generated 
by the 8288 Instead of the processor in this configu- 
ration, although their timing remains relatively the 
same. The 8088 status outputs (S2, SI , and SO) pro- 
vide type of cycle information and become 8288 in- 
puts. This bus cycle information specifies read 
(code, data, or I/O), write (data or I/O), interrupt ac- 
knowledge, or software halt. The 8288 thus Issues 
control signals specifying memory read or write, I/O 
read or write, or interrupt acknowledge. The 8288 
provides two types of write strobes, normal and ad- 
vanced, to be applied as required. The normal write 
strobes have data valid at the leading edge of write. 
The advanced write strobes have the same timing 
as read strobes, and hence, data is not valid at the 
leading edge of write. The transceiver receives the 
usual T and OE inputs from the 8288’s DT/R and 
DEN outputs. 

The pointer into the interru pt vec tor table, which is 
passed during the second INTA cycle, can derive 
from an 8259A located on either the local bus or the 
system bus. If the master 8289A priority interrupt 
controller is positioned on the local bus, a TTL gate 
is required to disable the transceiver when reading 
from the master 8259A during the interrupt acknowl- 
edge sequence and software “poll”. 


The 8088 Compared to the 8086 

The 8088 CPU is an 8-bit processor designed 
around the 8086 Internal structure. Most Internal 
functions of the 8088 are identical to the equivalent 
8086 functions. The 8088 handles the external bus 


the same way the 8086 does with the distinction of 
handling only 8 bits at a time. Sixteen-bit operands 
are fetched or written In two consecutive bus cycles. 
Both processors will appear identical to the software 
engineer, with the exception of execution time. The 
internal register structure Is identical and all instruc- 
tions have the same end result. The differences be- 
tween the 8088 and 8086 are outlined below. The 
engineer who is unfamiliar with the 8086 is referred 
to the iAPX 86, 88 User’s Manual, Chapters 2 and 4, 
for function description and instruction set Informa- 
tion. Internally, there are three differences between 
the 8088 and the 8086. All changes are related to 
the 8-bit bus Interface. 

• The queue length is 4 bytes In the 8088, whereas 
the 8086 queue contains 6 bytes, or three words. 
The queue was shortened to prevent overuse of 
the bus by the BIU when prefetching instructions. 
This was required because of the additional time 
necessary to fetch instructions 8 bits at a time. 

• To further optimize the queue, the prefetching al- 
gorithm was changed. The 8088 BIU will fetch a 
new instruction to load into the queue each time 
there is a 1 byte hole (space available) in the 
queue. The 8086 waits until a 2-byte space is 
available. 

• The internal execution time of the Instruction set 
is affected by the 8-bit Interface. All 1 6-blt fetches 
and writes from/to memory take an additional 
four clock cycles. The CPU is also limited by the 
speed of instruction fetches. This latter problem 
only occurs when a series of simple operations 
occur. When the more sophisticated instructions 
of the 8088 are being used, the queue has time to 
fill and the execution proceeds as fast as the exe- 
cution unit will allow. 

The 8088 and 8086 are completely software com- 
patible by virtue of their Identical execution units. 
Software that is system dependent may not be com- 
pletely transferable, but software that is not system 
dependent will operate equally as well on an 8088 
and an 8086. 

The hardware interface of the 8088 contains the ma- 
jor differences between the two CPUs. The pin as- 
signments are nearly identical, however, with the fol- 
lowing functional changes: 

• A8-A15 — These pins are only address outputs 
on the 8088. These address lines are latched in- 
ternally and remain valid throughout a bus cycle 
in a manner similar to the 8085 upper address 
lines. 

• BHE has no meaning on the 8088 and has been 
eliminated. 
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• SSO provides the SO status information in the 
minimum mode. This output occurs on pin 3 4 in 
minimum mode only. DT/R, lO/M, and SSO pro- 
vide the complete bus status in minimum mode. 


• lO/M has been inverted to be compatible with the 
MCS-85 bus structure. 

• ALE Is delayed by one clock cycle in the mini- 
mum mode when entering HALT, to allow the 
status to be latched with ALE. 






8088 


int^ 


ABSOLUTE MAXIMUM RATINGS^ 

Ambient Temperature Under Bias 0®C to + 70^0 

Case Temperature (Plastic) O'^C to + 95°C 

Case Temperature (CERDIP) 0°Cto +75°C 

Storage Temperature — 65®C to + 1 50°C 

Voltage on Any Pin with 

Respect to Ground - 1 .0 to + 7V 

Power Dissipation 2.5 Watt 

D.C. CHARACTERISTICS 

(Ta = O^’C to 70‘’C, Tcase (Plastic) = 0“C to 95°C, Tcase (CERDIP) = 0”C to 75°C, 

Ta = 0“C to 55°C and Tcase = 0°C to 75®C for P8088-2 only 
Ta is guaranteed as long as Tcase 's not exceeded) 

(Vcc = 5V ±10% for 8088, Vcc = 5V ±5% for 8088-2 and Extended Temperature EXPRESS) 


Symbol 

Parameter 

Min 

Max 

Units 

Test Conditions 

V|L 

Input Low Voltage 

-0.5 

+ 0.8 

V 

(Note 1) 

V|H 

Input High Voltage 

2.0 

Vcc + 0-5 

V 

(Notes 1 , 2) 

VoL 

Output Low Voltage 


0.45 

V 

Iql = 2.0 mA 

VOH 

Output High Voltage 

2.4 


V 

Iqh == -400 |liA 

icc 

8088 


340 

mA 

Ta = 25”C 


Power Supply Current; 8088-2 


350 




P8088 


250 



Ili 

Input Leakage Current 


±10 

jxA 

dv ^ V|N ^ Vcc (Note 3) 

•lo 

Output and I/O Leakage Current 


±10 

jxA 

0.45V ^ VouT ^ Vcc 

VcL 

Clock Input Low Voltage 

-0.5 

+ 0.6 

V 


VCH 

Clock Input High Voltage 

3.9 

Vcc + 1-0 

V 


C|N 

Capacitance If Input Buffer 
(All Input Except 

AD0-AD7. RQ/GT) 


15 

i 

PF 

fc = 1 MHz 

C|0 

Capacitance of I/O Buffer 
AD0-AD7, RQ/GT) 


15 

PF 

fc = 1 MHz 


NOTES: 

1. V|i_ tested with MN/MX Pin = OV 

V|H tested with MN/1^ Pin = 5V 
MN/MX Pin is a s trap Pin 

2. Not applicable to RQ/GTO and RQ/GT1 Pins (Pins 30 and 31) 

3. HOLD and HLDA ly Min = 30 /xA, Max = 500 juA 


* Notice: Stresses above those listed under “Abso- 
lute Maximum Ratings” may cause permanent dam- 
age to the device. This is a stress rating only and 
functional operation of the device at these or any 
other conditions above those indicated in the opera- 
tional sections of this specification is not implied. Ex- 
posure to absolute maximum rating conditions for 
extended periods may affect device reliability. 
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A.C. CHARACTERISTICS 

(Ta = O'C to 70°C, Tcase (Plastic) = O^C to QS'C, Tcase (CERDIP) = O'C to 75“C, 

Ta = 0°c to SS'C and Tcase = 0°C to 80°C for P8088-2 only 
Ta is guaranteed as long as Tqase is not exceeded) 

(Vcc = SV +10% for 8088, Vcc = 5V +5% for 8088-2 and Extended Temperature EXPRESS) 


MINIMUM COMPLEXITY SYSTEM TIMING REQUIREMENTS 


Symbol 

Parameter 

8088 

8088-2 

Units 

Test 

Conditions 

Min 

Max 

Min 

Max 

TCLCL 

CLK Cycle Period 

200 

500 

125 

500 

ns 


TCLCH 

CLK Low Time 

118 


68 


ns 

TCHCL 

CLK High Time 

69 


44 


ns 

TCH1CH2 

CLK Rise Time 


10 


10 

ns 

From 1.0V to 3.5V 

TCL2CL2 

CLK Fall Time 


10 


10 

ns 

From 3.5V to 1 .OV 

TDVCL 

Data in Setup Time 

30 


20 


ns 


TCLDX 

Data in Hold Time 

10 


10 


ns 

TR1VCL 

RDY Setup Time into 8284 
(Notes 1 , 2) 

35 


35 


ns 

TCLR1X 

RDY Hold Time into 8284 
(Notes 1 , 2) 

0 


0 


ns 


TRYHCH 

READY Setup Time 
into 8088 

118 


68 


ns 


TCHRYX 

READY Hold Time 
into 8088 

30 


20 


ns 


TRYLCL 

READY Inactive to CLK 
(Note 3) 

-8 


-8 


ns 


THVCH 

HOLD Setup Time 

35 


20 


ns 


TINVCH 

INTR, NMI, TEST Setup Time 
(Note 2) 

30 


15 


ns 


TILIH 

Input Rise Time (Except CLK) 


20 


20 

ns 

From 0.8V to 2.0V 

TIHIL 

Input Fall Time (Except CLK) 


12 


12 

ns 

From 2.0V to 0.8V 
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A.C. CHARACTERISTICS (Continued) 
TIMING RESPONSES 


Symbol 

Parameter 

8088 

8088-2 

Units 

Test 

Conditions 

Min 

Max 

Min 

Max 

TCLAV 

Address Valid Delay 

10 

110 

10 

60 

ns 


TCLAX 

Address Hold Time 

10 

— 

10 


ns 

TCLAZ 

Address Float Delay 

TCLAX 

80 

TCLAX 

50 

ns 

TLHLL 

ALE Width 

TCLCH-20 


TCLCH-10 


ns 

TCLLH 

ALE Active Delay 


80 


50 

ns 

TCHLL 

ALE Inactive Delay 


85 


55 

ns 

TLLAX 

Address Hold Time to 

ALE Inactive 

TCHCL-10 


. TCHCL-10 


ns 

TCLDV 

Data Valid Delay 

10 

110 

10 

60 

ns 

TCHDX 

Data Hold Time 

10 


10 


ns 

TWHDX 

Data Hold Time after WR 

TCLCH-30 


TCLCH-30 


ns 

TCVCTV 

Control Active Delay 1 

10 

110 

10 

70 

ns 

TCHCTV 

Control Active Delay 2 

10 

110 

10 

60 

ns 

TCVCTX 

Control Inactive Delay 

10 

110 

10 . 

70 

ns 

TAZRL 

Address Float to READ 
Active 

0 


0 


ns 

TCLRL 

^ Active Delay 

10 

165 

10 

100 

ns 

TCLRH 

RD Inactive Delay 

10 

150 

10 

80 

ns 

TRHAV 

TO Inactive to Next 
Address Active 

TCLCL-45 


TCLCL-40 


ns 

TCLHAV 

HLDA Valid Delay 

10 

160 

10 

100 

ns 

TRLRH 

TO Width 

2TCLCL-75 


2TCLCL-50 


ns 

TWLWH 

WR Width 

2TCLCL-60 


2TCLCL-40 


ns 

TAVAL 

Address Valid to ALE Low 

TCLCH-60 


TCLCH-40 


ns 

TOLOH 

Output Rise Time 


20 


20 

ns 

From 0.8V to 2.0V 

TOHOL 

Output Fall Time 


12 


12 

ns 

From 2.0V to 0.8V 


NOTES: 

1 . Signal at 8284A shown for reference only. See 8284A data sheet for the most recent specifications. 

2. Set up requirement for asynchronous signal only to guarantee recognition at next CLK. 

3. Applies only to T2 state (8 ns into T3 state). 
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A.C. TESTING INPUT, OUTPUT WAVEFORM 


A.C. TESTING LOAD CIRCUIT 



A.C. Testing: Inputs are driven at 2.4V for a logic “1" and 0.45V 
for a logic “0”. Timing measurements are made at 1 .5V for both a 
logic “1" and logic “0”. 



WAVEFORMS 


BUS TIMING— MINIMUM MODE SYSTEM 
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WAVEFORMS (Continued) 
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A.C. CHARACTERISTICS 

MAX MODE SYSTEM (USING 8288 BUS CONTROLLER) 


TIMING REQUIREMENTS 


Symbol 

Parameter 

8088 

8088-2 

Units 

Test 

Min 

Max 

Min 

Max 

Conditions 

TCLCL 

CLK Cycle Period 

200 

500 

125 

500 

ns 


TCLCH 

CLK Low Time 

118 


68 


ns 


TCHCL 

CLK High Time 

69 


44 


ns 


TCH1CH2 

CLK Rise Time 


10 


10 

ns 

From 1.0V to 3.5V 

TCL2CL1 

CLK Fall Time 


10 


10 

ns 

From 3.5V to 1.0V 

TDVCL 

Data in Setup Time 

30 


20 


ns 


TCLDX 

Data in Hold Time 

10 


10 


ns 


TR1VCL 

RDY Setup Time Into 8284 
(Notes 1 , 2) 

35 


35 


ns 


TCLR1X 

RDY Hold Time into 8284 
(Notes 1 , 2) 

0 


0 


ns 


TRYHCH 

READY Setup Time into 8088 

118 


68 


ns 


TCHRYX 

READY Hold Time Into 8088 

30 


20 


ns 


TRYLCL 

READY Inactive to CLK 
(Note 4) 

-8 


-8 


ns 


TINVCH 

Setup Time for Recognition 
(INTR, NMI, TEST) (Note 2) 

30 


15 


ns 


TGVCH 

RQ/GT Setup Time 

30 


15 


ns 


TCHGX 

RQ Hold Time into 8088 

40 


30 


ns 


TILIH 

Input Rise Time (Except CLK) 


20 


20 

ns 

From 0.8V to 2.0V 

TIHIL 

Input Fall Time (Except CLK) 


12 


12 

ns 

From 2.0V to 0.8V 
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A.C. CHARACTERISTICS (Continued) 


TIMING RESPONSES 


Symbol 

Parameter 

8088 

8088-2 

Units 

Test 

Conditions 

Min 

Max 

Min 

Max 

TCLML 

Command Active Delay 
(Note 1 ) 

10 

35 

10 

35 

ns 


TCLMH 

Command Inactive Delay 
(Note 1) 

10 

35 

10 

35 

ns 

TRYHSH 

READY Active to 

Status Passive (Note 3) 


110 


65 

ns 

TCHSV 

Status Active Delay 

10 

110 

10 

60 

ns 

TCLSH 

Status Inactive Delay 

10 

130 

10 

70 

ns 

TCLAV 

Address Valid Delay 

10 

110 

10 

60 

ns 

TCLAX 

Address Hold Time 

10 


10 


ns 

Cl = 20-100 pFfor 
All 8088 Outputs 
in Addition to 

Internal Loads 

TCLAZ 

Address Float Delay 

TCLAX 

80 

TCLAX 

50 

ns 

TSVLH 

Status Valid to ALE High 
(Note 1 ) 


15 


15 

ns 

TSVMCH 

Status Valid to MCE High 
(Note 1 ) 


15 


15 

ns 

TCLLH 

CLK Low to ALE Valid 
(Note 1 ) 


15 


15 

ns 

TCLMCH 

CLK Low to MCE (Notel) 


15 


15 

ns 

TCHLL 

ALE Inactive Delay (Note 1) 


15 


15 

ns 

TCLMCL 

MCE Inactive Delay (Note 1) 


15 


15 

ns 

TCLDV 

Data Valid Delay 

10 

110 

10 

60 

ns 

TCHDX 

Data Hold Time 

10 


10 


ns 

TCVNV 

Control Active Delay 
(Note 1 ) 

5 

45 

5 

45 

ns 

TCVNX 

Control Inactive Delay 
(Note 1) 

10 

45 

10 

45 

ns 

TAZRL 

Address Float to 

Read Active 

0 


0 


ns 

TCLRL 

^ Active Delay 

10 

165 

10 

100 

ns 

TCLRH 

RD Inactive Delay 

10 

150 

10 

80 

ns 

TRHAV 

^ Inactive to Next 

Address Active 

TCLCL-45 


TCLCL-40 


ns 

TCHDTL 

Direction Control 

Active Delay (Note 1 ) 


50 


50 

ns 

TCHDTH 

Direction Control 

Inactive Delay (Note 1) 


30 


30 

ns 

TCLGL 

GT Active Delay 


85 


50 

ns 

TCLGH 

GT Inactive Delay 


85 


50 

ns 

TRLRH 

RD Width 

2TCLCL-75 


2TCLCL-50 


ns 

TOLOH 

Output Rise Time 


20 


20 

ns 

From 0.8V to 2.0V 

TOHOL 

Output Fall Time 


12 


12 

ns 

From 2.0V to 0.8V 


NOTES: 

1 . Signal at 8284 or 8288 shown for reference only. 

2. Setup requirement for asynchronous signal only to guarantee recognition at next CLK. 

3. Applies only to T3 and wait states. 

4. Applies only to T2 state (8 ns into T3 state). 
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A.C. TESTING INPUT, OUTPUT WAVEFORM A.C. TESTING LOAD CIRCUIT 



WAVEFORMS (Continued) 

BUS TIMING—MAXIMUM MODE SYSTEM 
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WAVEFORMS (Continued) 

BUS TIMING— MAXIMUM MODE SYSTEM (USING 8288) 



\ / V 

NOTES: 231456-16 

1 . All signals switch between Vqh and Vql unless othen^^ise specified. 

2. RDY Is sampled near the end of 12,13, Tw to determine if Tw machines states are to be Inserted. 

3. Cascade address is valid between first and second INTA cycles. 

4. Two INTA cycles run back-to-back. The 8088 local ADDR/DATA bus is floating during both INTA cycles. Control for 
pointer address is shown for second INTA cycle. 

5. Signals at 8284 or 8288 are shown for reference only. 

6. The issuance of the 8288 command and control signals (MRDC, MWTC, AMWC, lORC, lOWC, AlOWC, INTA and 
DEN) lags the active high 8288 CEN. 

7. All timing measurements are made at 1.5V unless otherwise noted. 

8. Status inactive in state just prior to T4. 
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WAVEFORMS (Continued) 

ASYNCHRONOUS SIGNAL RECOGNITION 



BUS LOCK SIGNAL TIMING 



REQUEST/GRANT SEQUENCE TIMING (MAXIMUM MODE ONLY) 



1 . The coprocessor may not drive the busses outside the region shown without risking contention. 
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8086/8088 Instruction Set Summary 


Mnemonic and 

Description 

Instruction Code 

DATA TRANSFER 








MOV = Move: 

765432 1 0 


765432 1 0 


76543210 


76543210 

Register/Memory to/from Register 

10001 Odw 

1 

mod reg r/m 





Immediate to Register/Memory 

1 1 0001 1 w 

□: 

mod 0 0 0 r/m 

n 

data 


data if w = 1 | 

Immediate to Register 

10 1 1 w reg 

I 

data 

n 

data if w = 1 



Memory to Accumulator 

1 01 OOOOw 

X 

addr-low 

n 

addr-high 



Accumulator to Memory 

1 0 1 000 1 w 

X 

addr*low 

n 

addr-high 



Register/Memory to Segment Register 

10001110 

X 

mod 0 reg r/m 





Segment Register to Register/Memory 

10001100 

X 

mod 0 reg r/m 





PUSH = Push: 








Register/Memory 

11111111 

X 

mod 1 1 0 r/m 

j 




Register 

0 1 0 1 0 reg 

□ 






Segment Register 

0 0 0 reg 1 10 

□ 






POP = Pop: 








Register/Memory 

1 0001 1 1 1 

X 

mod 0 0 0 r/m 





Register 

0 1 0 1 1 reg 

□ 






Segment Register 

0 0 0 reg 1 1 1 

□ 






XCHG = Exchange: 








Register/Memory with Register 

1 00001 1 w 

X 

mod reg r/m 

D 




Register with Accumulator 

1 0 0 1 0 reg 

□ 






IN = Input from: 








Fixed Port 

1 11 001 Ow 

X 

port 

D 




Variable Port 

1 1 1 0 1 1 Ow 

□ 






OUT = Output to: 








Fixed Port 

1 1 1 001 1 w 

X 

port 

D 




Variable Port 

1 1 1 01 1 1 w 

□ 






XLAT = Translate Byte to AL 

11010111 

□ 






LEA = Load EA to Register 

1 0001 1 01 

X 

mod reg r/m 

D 

1 



LDS = Load Pointer to DS 

1 1 0001 01 

X 

mod reg r/m 

D 




LES = Load Pointer to ES 

11000100 

X 

mod reg r/m 





LAHF = Load AH with Flags 

10011111 

□ 






SAHF = Store AH into Flags 

10011110 

□ 






PUSHF = Push Flags 

10011100 

□ 






POPF = Pop Flags 

10011101 

□ 
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8086/8088 Instruction Set Summary (Continued) 


Mnemonic and 

Description 

Instruction Code 

ARITHMETIC 

76543210 


76543210 


76543210 

76543210 

ADD = Add: 







Reg./Memory with Register to Either 

OOOOOOdw 

X 

mod reg r/m 

1 



Immediate to Register/Memory 

1 OOOOOsw 

X 

mod 0 0 0 r/m 

X 

data 

1 data if s:w = 01 | 

Immediate to Accumulator 

000001 Ow 

X 

data 

X 

data If w = 1 


ADC = Add with Carry: 







Reg./Memory with Register to Either 

0001 OOdw 

X 

mod reg r/m 

□ 



Immediate to Register/Memory 

1 OOOOOsw 

X 

mod 010 r/m 

X 

data 

1 data if s:w = 01 | 

Immediate to Accumulator 

0001 01 Ow 

X 

data 

X 

data if w = 1 


INC = Increment: 







Register/ Memory 

1 1 1 1 1 1 1 w 

X 

mod 0 0 0 r/m 

□ 



Register 

0 1 0 0 0 reg 

□ 





AAA = ASCII Adjust for Add 

00110111 

□ 





BAA = Decimal Adjust for Add 

00100111 

□ 





SUB = Subtract: 







Reg./Memory and Register to Either 

001 01 Odw 

X 

mod reg r/m 

□ 



Immediate from Register/Memory 

1 OOOOOsw 

X 

mod 101 r/m 

X 

data 

1 data if s:w = 01 j 

Immediate from Accumulator 

001 01 1 Ow 

X 

data 

X 

data if w = 1 


SSB = Subtract with Borrow 







Reg./MemorV and Register to Either 

0001 1 Odw 

X 

mod reg r/m 

□ 



Immediate from Register/ Memory 

1 OOOOOsw 

X 

mod 0 1 1 r/m 

X 

data 

1 data if s:w = 01 | 

Immediate from Accumulator 

0001 1 1 w 

X 

data 

X 

data if w = 1 

] 

DEC = Decrement: 







Register/memory 

1 1 1 1 1 1 1 w 

X 

mod 0 01 r/m 

□ 



Register 

010 0 1 reg 

□ 





NEG = Change sign 

1 1 1 1 0 1 1 w 

X 

mod 0 1 1 r/m 

□ 



CMP = Compare: 







Register/ Memory and Register 

001 1 1 Odw 

X 

mod reg r/m 

□ 



Immediate with Register/Memory 

1 OOOOOsw 

X 

mod 1 1 1 r/m 

X 

data 

1 data if s:w = 01 | 

Immediate with Accumulator 

0 0 1 1 1 1 0 w 

X 

data 

X 

data if w = 1 

] 

AAS = ASCII Adjust for Subtract 

00111111 

□ 





DAS = Decimal Adjust for Subtract 

00101111 

□ 





MUL = Multiply (Unsigned) 

1 1 1 1 01 1 w 

X 

mod 10 0 r/m 

□ 



IMUL = Integer Multiply (Signed) 

1 1 1 1 01 1 w 

X 

mod 101 r/m 

□ 



AAM = ASCII Adjust for Multiply 

11010100 

X 

00001 010 

□ 



DIV = Divide (Unsigned) 

1 1 1 1 0 1 1 w 

X 

mod 1 1 0 r/m 

□ 



IDIV = Integer Divide (Signed) 

1 1 1 1 01 1 w 

X 

mod 111 r/m 

□ 



AAD = ASCII Adjust for Divide 

11010101 

X 

0000 1 0 1 0 

□ 



CBW = Convert Byte to Word 

1001 1000 

□ 





CWD = Convert Word to Double Word 

10011001 

□ 
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8086/8088 Instruction Set Summary (Continued) 


Mnemonic and 

Description 

Instruction Code 

LOGiC 

76543210 


76543210 


76543210 


76543210 

NOT = Invert 

1 1 1 1 0 1 1 w 


mod 0 1 0 r/m 

Z 




SHL/SAL = Shift Logical/Arithmetic Left 

1101 OOvw 

□: 

mod 10 0 r/m 

Z 




SHR = Shift Logical Right 

1 1 01 00v\w 

I 

mod 101 r/m 

z 




SAR = Shift Arithmetic Right 

1 1 01 OOvw 

z: 

mod 1 1 1 r/m 

□ 




ROL = Rotate Left 

1 1 01 OOvw 

□: 

mod 0 0 0 r/m 

z 




ROR = Rotate Right 

1 1 01 OOvw 

z: 

mod 0 0 1 r/m 

z 




RCL = Rotate Through Carry Flag Left 

1101 OOvw 

□: 

mod 0 1 0 r/m 

z 




RCR = Rotate Through Carry Right 

1101 OOvw 

z: 

mod Oil r/m 

□ 




AND = And: 








Reg. /Memory and Register to Either 

001 OOOdw 


mod reg r/m 

z 




Immediate to Register/Memory 

1 OOOOOOw 

□: 

mod 1 0 0 r/m 

X 

data 

X 

data if w = 1 | 

Immediate to Accumulator 

001 001 Ow 

X 

data 

X 

data if w = 1 

Z 


TEST = And Function to Fiags. No Result: 








Register/Memory and Register 

1 0000 1 Ow 

X 

mod reg r/m 

□ 




Immediate Data and Register/Memory 

1 1 1 1 0 1 1 w 

X 

mod 0 0 0 r/m 

X 

data 

X 

data if w = 1 | 

Immediate Data and Accumulator 

1 01 01 OOw 

X 

data 

X 

data if w = 1 

□ 


OR = Or: 








Reg. /Memory and Register to Either 

00001 Odw 

X 

mod reg r/m 

□ 




Immediate to Register/Memory 

1 OOOOOOw 

X 

mod 0 01 r/m 

X 

data 

X 

data if w = 1 | 

Immediate to Accumulator 

00001 1 Ow 

X 

data 

X 

data if w = 1 

□ 


XOR = Exclusive or: 








Reg./Memory and Register to Either 

0011 OOdw 

X 

mod reg r/m 

□ 




Immediate to Register/ Memory 

1 OOOOOOw 

X 

mod 1 1 0 r/m 

X 

data 

X 

data if w = 1 | 

Immediate to Accumulator 

001 1 01 Ow 

X 

data 

X 

data if w = 1 

z 


STRING MANIPULATION 








REP = Repeat 

1 1 1 1 001 z 

□ 






MOVS = Move Byte/Word 

1 0 1 00 1 Ow 

□ 






CMPS = Compare Byte/Word 

1 01 001 1 w 

□ 






SCAS = Scan Byte/Word 

1 01 01 1 1 w 

□ 






LODS = Load Byte/Wd to AL/AX 

1 01 01 1 Ow 

□ 






STOS = Stor Byte/Wd from AL/A 

1 01 01 01 w 

□ 






CONTROL TRANSFER 








CALL = Call: 








Direct Within Segment 

1 1 101000 

X 

disp-low 

X 

disp-high 

z 


Indirect Within Segment 

11111111 

X 

mod 010 r/m 

□ 




Direct intersegment 

10011010 

X 

offset-low 

X 

offset-high 

□ 




c 

seg-low 

X 

seg-high 

z 


Indirect Intersegment | 

11111111 

X 

mod Oil r/m 

□ 
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8086/8088 instruction Set Summary (Continued) 


Mnemonic and 

Description 

Instruction Code 

JMP = Unconditionai Jump: 

7654321 0 

7654321 0 

76543210 

Direct Within Segment 

11101001 i 

disp-low 

1 disp-high | 

Direct Within Segment-Short 

11101011 1 

disp 


Indirect Within Segment 

11111111 1 

mod 10 0 r/m 


Direct Intersegment 

11101010 1 

offset-low 

1 offset-high | 


[ 

seg-low 

1 seg-high | 

Indirect Intersegment 

11111111 1 

mod 101 r/m 


RET = Return from CALL: 




Within Segment 

1 1 00001 1 1 



Within Seg Adding Immed to SP 

1 1 00001 0 I 

data-low 

1 data-high | 

Intersegment 

11001011 1 



Intersegment Adding Immediate to SP 

1 1001010 1 

data-low 

1 data-high 1' 

JE/ JZ = Jump on Equal/Zero 

01110100 1 

disp 


JL/JNGE = Jump on Less/Not Greater 

01111100 1 

disp 


or Equal 




JLE/JNG = Jump on Less or Equal/ 

01111110 1 

disp 


Not Greater 




JB/JNAE = Jump on Below/Not Above 

01110010 1 

disp 


or Equal 




JBE/JNA = Jump on Below or Equal/ 

01110110 1 

disp 


Not Above 




JP/JPE = Jump on Parity/Parity Even 

01111010 1 

disp 


JO = Jump on Overflow 

01 1 1 0000 1 

disp 


JS Jump on Sign 

01 1 1 1 000 1 

disp 


JNE/JNZ = Jump on Not Equal/Not Zero 

01110101 1 

disp 

] 

JNL/JGE = Jump on Not Less/Greater 

01111101 1 

disp 

] 

or Equal 




JNLE/JG = Jump on Not Less or Equal/ 

01111111 1 

disp 

1 

Greater 



J 

JNB/JAE = Jump on Not Below/Above 
or Equal 

01110011 1 

disp 

] 

JNBE/JA = Jump on Not Below or 

01110111 1 

disp 

1 

Equal/Above 



J 

JNP/JPO = Jump on Not Par/Par Odd 

01111011 1 

disp 

] 

JNO = Jump on Not Overflow 

0111 0001 1 

disp 

] 

JNS = Jump on Not Sign 

01111001 1 

disp 

] 

LOOP = Loop CX Times 

1 1 1 00010 1 

disp 

] 

LOOPZ/LOOPE = Loop While Zero/Equal 

1 1 1 00001 1 

disp 

] 

LOOPNZ/LOOPNE = Loop While Not 

11100000 1 

disp 

] 

Zero/Equal 



J 

JCXZ = Jump on CX Zero 

1 1 1 0001 1 1 

disp 

] 

INT = Interrupt 




Type Specified 

11001101 1 

type 

] 

Type 3 

11001100 1 



INTO = Interrupt on Overflow 

11001110 1 



IRET = Interrupt Return 

11001111 1 
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8086/8088 Instruction Set Summary (Continued) 


Mnemonic and 

Description 

instruction Code 


76543210 76543210 

PROCESSOR CONTROL 


CLC = Clear Carry 

11111 000 I 

CMC = Complement Carry 

11110101 I 

STC = Set Carry 

11111001 1 

CLD = Clear Direction 

1 1 1 1 1 1 00 1 

STD = Set Direction 

11111101 I 

CLi = Clear Interrupt 

11111010 1 

STI = Set Interrupt 

11111011 1 

HLT = Halt 

11110100 1 

WAIT = Wait 

10011011 1 

ESC = Escape (to External Device) 

11011 XXX 1 mod XXX r/m | 

LOCK = Bus Lock Prefix 

1 1 1 10000 1 


NOTES: 

AL = 8-bit accumulator 

AX = 1 6-bit accumulator 

CX = Count register 

DS = Data segment 

ES = Extra segment 

Above/below refers to unsigned value 

Greater = more positive: 

Less = less positive (more negative) signed values 
If d = 1 then “to” reg; if d = 0 then “from” reg 
If w = 1 then word instruction; if w = 0 then byte 
instruction 

If mod = 1 1 then r/m is treated as a REG field 
if mod = 00 then DISP = 0*. disp-low and disp-high are 
absent 

if mod = 01 then DISP = disp-low sign-extended to 
1 6 bits, disp-high is absent 
if mod = 10 then DISP = disp-high; disp-low 
if r/m = 000 then EA = (BX) -f (SI) + DISP 

if r/m = 001 then EA = (BX) + (Dl) + DISP 

if r/m = 010 then EA = (BP) + (SI) + DISP 

if r/m = oil then EA = (BP) + (Dl) + DISP 

if r/m = 100 then EA = (SI) + DISP 
if r/m = 101 then EA = (Dl) + DISP 
if r/m = 110 then EA = (BP) -f DISP* 

if r/m = 111 then EA = (BX) + DISP 

DISP follows 2nd byte of instruction (before data If re- 
quired) 

^except if mod = 00 and r/m = then EA = disp-high: 
disp-low. 

if s:w = 01 then 1 6 bits of immediate data form the oper- 
and 

if s:w =11 then an immediate data byte is sign extended 
to form the 16-bit operand 

if V = 0 then “count” = 1; if v = 1 then “count” in (CL) 
register 

X = don’t care 

z is used for string primitives for comparison with ZF FLAG 
SEGMENT OVERRIDE PREFIX 


0 0 1 reg 1 1 0 


REG is assigned according to the following table: 


16-Bit (w = 1) 

8-Bit (w = 0) 

Segment 

000 AX 

000 AL 

00 ES 

001 CX 

001 CL 

01 CS 

010 DX 

010 DL 

10 SS 

011 BX 

Oil BL 

11 DS 

100 SP 

100 AH 


101 BP 

101 CH 


110 SI 

110 DH 


111 Dl 

111 BH 



Instructions which reference the flag register file as a 16-bit 
object use the symbol FLAGS to represent the file: 

FLAGS = 

X:X:X:X:(OF):(DF):(IF):(TF):(SF):(ZF):X:(AF):X:(PF):X:(CF) 
Mnemonics © Intel, 1978 


DATA SHEET REVISION REVIEW 

The following list represents key differences be- 
tween this and the -004 data sheet. Please review 
this summary carefully. 

1. The Pin Description Table has been modified to 
indicate that the HOLD and HLDA pins both have 
internal pull-up resistors. The input leakage cur- 
rent (I Li) In the D.C. Characteristics section has 
been modified for these pins. 
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80C88A 

8-BIT CHMOS MICROPROCESSOR 



■ Pin-for-Pin and Functionally Compatible 
to Industry Standard HMOS 8088 

■ Direct Software Compatibility with 
80C86, 8086, 8088 

■ Fully Static Design with Frequency 
Range from D.C. to: 

— 8 MHz for 80C88A-2 

■ Low Power Operation 

— Operating Ice = 10 mA/MHz 
— Standby Iccs 500 jmA max 

■ Bus-Hold Circuitry Eliminates Pull-Up 
Resistors 


■ Direct Addressing Capability of 1 
MByte of Memory 

■ Architecture Designed for Powerful 
Assembly Language and Efficient High 
Level Languages 

■ 24 Operand Addressing Modes 

■ Byte, Word and Block Operations 

■ 8 and 16-Bit Signed and Unsigned 
Arithmetic 

— Binary or Decimal 
— Multiply and Divide 

■ Available in 40-Lead Plastic DIP 

(See Packaging Spec., Order #231369) 


The Intel 80C88A is a high performance, CHMOS version of the industry standard HMOS 8088 8-bit CPU. The 
processor has attributes of both 8 and 16-bit microprocessors. The 80C88A, available In 8 MHz clock rate, 
offers two modes of operation: MINimum for small systems and MAXimum for larger applications such as 
multi-processing. It is available In 40-pln DIP. 
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Figure 1.80C88 A CPU 
Functional Block Diagram 


GNO 

A14 

A13 

A12 

A11 

A10 

A9 

A8 

A07 

A06 

AOS 

A04 

AD3 

AD2 

ADI 

ADO 

NMI 

INTR 

CLK 

GND 


C 1 
C 2 

C 3 
C 4 
i: 5 

C 6 

C 7 

C 8 
C 9 
C 10 
C 11 
C 12 

C 13 
C 14 
C 15 

C 16 
C 17 

r: 18 

C 19 
L 20 



MIN 

I MAX I 


MODE 

[mode] 

□ 

Vec 


□ 

A15 


□ 

A16/S3 


□ 

A17yS4 


□ 

A18/S5 


□ 

A19/S6 


□ 

SSO 

(HIGH) 

□ 

MN/MX 


□ 

RD 


□ 

HOLD 

(RQ/BtO) 

□ 

HLDA 

(Ra/STi) 

□ 

WR 

(l5ck) 

□ 

lO/M 

(M) 

□ 

DT/R 

(SI) 

□ 

Mn 


□ 

ALE 

(OSO) 

□ 

INTA 

(OSD 

□ 

Test 


□ 

READY 


□ 

RESET 
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Figure 2. 80C88A 40-Lead 
DIP Configuration 
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Table 1. Pin Description 


The following pin function descriptions are for 60C68A systems in either minimum or maximum mode. The 
“local bus” in these descriptions is the direct multiplexed bus interface connection to the 80C88A (without 
regard to additional bus buffers). 


Symbol 

Pin No. 

Type 

Name and Function 

AD7-AD0 

I 

9-16 

I/O 

ADDRESS DATA BUS: These lines constitute the time 
multiplexed memory/lO address (T1) and data (T2, T3, Tw, and 

T4) bus. These lines are active HIGH and float to 3-state 0FF(1) 
during interrupt acknowledge and local bus “hold acknowledge”. 

A15-A8 

2-8, 39 

0 

ADDRESS BUS: These lines provide address bits 8 through 1 5 for 
the entire bus cycle {T 1 -T4). These lines do not have to be 
latched by ALE to remain valid. A1 5-A8 are active HIGH and float 
to 3-state 0FF(1) during Interrupt acknowledge and local bus 




“hold acknowledge”. 


A19/S6, A18/S5, 

35-38 

0 

ADDRESS/STATUS: During T 1 , these are the four most 

A17/S4, A16/S3 



significant address lines for memory operations. During I/O 
operations, these lines are LOW. During memory and I/O 
operations, status information is available on these lines during 

T2, T3, Tw, and T4. S6 is always low. The status of the interrupt 
enable flag bit (S5) is updated at the beginning of each clock 
cycle. S4 and S3 are encoded as shown. 




This information indicates which segment register is presently 




being used for data accessing. 





These lines float to 3-state 0FF(1) during local bus “hold 




acknowledge”. 






S4 

S3 

CHARACTERISTICS 




O(LOW) 

0 

Alternate Data 




0 

1 

Stack 




1(HIGH) 

0 

Code or None 




1 

S6 is O(LOW) 

1 

Data 

RD 

32 

0 

READ: Read strobe indicates that the processor is performing a 
memory or I/O read cycle, depending on the state of the lO/M pin 
or S2. This signal Is used to read devices which reside on the 




80C88A local bus. RD is active LOW during T2, T3 and Tw of any 




read cycle, and is guaranteed to remain HIGH in T2 until the 




80C88A local bus has floated. 





This signal floats to 3-state 0FF(1) in “hold acknowledge”. 

READY 

22 

I 

READY: Is the acknowledgement from the addressed memory or 
I/O device that It will complete the data transfer. The RDY signal 
from memory or I/O is synchronized by the 82C84A clock 
generator to form READY. This signal is active HIGH. The 80C88A 
READY input is not synchronized. Correct operation is not 
guaranteed If the set up and hold times are not met. 
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Table 1. Pin Description (Continued) 


Symbol 

Pin No. 

Type 

Name and Function 

INTR 

18 

1 

INTERRUPT REQUEST: Is a level triggered input which Is sampled 
during the last clock cycle of each instruction to determine if the 
processor should enter Into an interrupt acknowledge operation. A 
subroutine is vectored to via an Interrupt vector lookup table located 
in system memory. It can be internally masked by software resetting 
the interrupt enable bit. INTR Is Internally synchronized. This signal Is 
active HIGH. 

TEST 

23 

1 

TEST: input is examined by the “wait for test” Instruction. If the 

TEST Input is LOW, execution continues, otherwise the. processor 
waits In an “Idle” state. This input is synchronized Internally during 
each clock cycle on the leading edge of CLK. 

NMI 

17 

1 

NON-MASKABLE INTERRUPT: Is an edge triggered input which 
causes a type 2 Interrupt. A subroutine Is vectored to via an interrupt 
vector lookup table located in system memory. NMHs not maskable 
internally by software. A transition from a LOW to HIGH Initiates the 
Interrupt at the end of the current instruction. This Input Is Internally 
synchronized. 

RESET 

21 

1 

RESET: causes the processor to immediately terminate its present 
activity. The signal must be active HIGH for at least four clock cycles. 

It restarts execution, as described in the instruction set description, 
when RESET returns LOW. RESET is internally synchronized. 

CLK 

19 

1 

CLOCK: provides the basic timing for the processor and bus 
controller. It is asymmetric with a 33% duty cycle to provide 
optimized Internal timing. 

Vcc 

40 


Vcc’- the + 5V ±10% power supply pin. 

GND 

1,20 


GND: are the ground pins. Both must be connected. 

MN/MX 

33 

1 

MINIMUM/MAXIMUM: indicates what mode the processor is to 
operate in. The two modes are discussed In the following sections. 


The following pin function descriptions are for the 80C88A minimum mode (i.e., MN/MX = Vcc)- Only the pin 
functions which are unique to minimum mode are described; aii other pin functions are as described above. 


lO/M 

28 

0 

STATUS LINE: is an inverted maximum mode S2. It is used to 
distinguish a memory access from an I/O access. lO/M becomes 
valid in the T4 preceding a bus cycle and remains valid until the final 

T4 of the cycle (I/O = HIGH, M = LOW). lO/M floats to 3-state 
0FF(1) in local bus “hold acknowledge”. 

WR 

29 

0 

WRITE: strobe indicates that the processor Is performing a write 
memory or write I/O cycle, depending on the state of the lO/M 
signal. WR is active for T2, T3, and Tw of any write cycle. It Is active 
LOW, and floats to 3-state 0FF(1) in local bus “hold acknowledge”. 

INTA 

! 

24 

0 

INTA: is used as a read strobe for interrupt acknowledge cycles. It is 
active LOW during T2, T3, and Tw of each Interrupt acknowledge 
cycle. 
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Table 1. Pin Description (Continued) 


Symbol 

Pin No. 

Type 

Name and Function 

ALE 

25 

0 

ADDRESS LATCH ENABLE: is provided by the processor to latch 
the address into an address latch. It is a HIGH pulse active during 
clock low of T1 of any bus cycle. Note that ALE is never floated. 

DT/R 

27 

0 

DATA TRANSMIT/RECEIVE: is needed in a minimum system that 
desires to use a data bus transceiver. It is used to control the 
direction of data flow through the transceiver. Logically, DT/R is 
equivalent to ST in the maximum mode, and Its timing is the same as 




for lO/M (T = HIGH, R = 

LOW). This signal floats to 3-state 0FF(1) 




in local “hold acknowledge”. 


DEN 

26 

0 

DATA ENABLE: is provided as an output enable for the transceiver 




in a minimum system which uses the transceiver. DEN is active LOW 




during each memory and I/O access, and for INTA cycles. For a read 
or INTA cycle, it is active from the middle of T2 until the middle of T4, 
while for a write cycle, it is active from the beginning of T2 until the 
middle of T4. DEN floats to 3-state OFFC) during local bus “hold 




acknowledge”. 




HOLD, HLDA 

30, 31 

l.o 

HOLD: indicates that another master is requesting a local bus 
“hold”. To be acknowledged, HOLD must be active HIGH. The 
processor receiving the “hold” request will issue HLDA (HIGH) as an 
acknowledgement, in the middle of a T4 or Tl clock cycle. 
Simultaneous with the issuance of HLDA the processor will float the 
local bus and control lines. After HOLD is detected as being LOW, 
the processor lowers HLDA, and when the processor needs to run 
another cycle, it will again drive the local bus and control lines. 




Hold Is not an asynchronous Input. External synchronization should 
be provided if the system cannot otherwise guarantee the set up 




time. 





34 

0 

STATUS LINE: is logically equivalent to ^ in the maximum mode. 

The combination of SSO, lO/M and DT/R allows the system to 
completely decode the current bus cycle status. 




lO/M 

DT/R 

SSO 

CHARACTERISTICS 




1(HIGH) 

0 

0 

Interrupt Acknowledge 




1 

0 

1 

Read I/O port 




1 

1 

0 

Write I/O port 




1 

1 

1 

Halt 




O(LOW) 

0 

0 

Code access 




0 

0 

1 

Read memory 




0 

1 

0 

Write memory 




0 

1 

1 

Passive 
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Table 1. Pin Description (Continued) 

The following pin function descriptions are for the 80C68A/62C68 system in maximum mode (i.e., 
MN/MX = GND.) Only the pin functions which are unique to maximum mode are described; all other pin 
functions are as described above. 


Symbol 

Pin No. 

Type 

Name and Function 

§2, ST.SO 

26-28 

0 

STATUS: is active during clock high of T4, T1 , and T2, and is 
returned to the passive state (1,1,1) during T3 or during Tw when 
READY is HIGH. This status Is used by the 82C88 bus controller to 




generate all memory and I/O access control signals. Any change by 
§2, ST, or SO during T4 is used to indicate the beginning of a bus 




cycle, and the return to the passive state in T3 or Tw is used to 




indicate the end of a bus cycle. 





These signals float to 3-state 0FF(1) during “hold acknowledge”. 
During the first clock cycle after RESET becomes active, these 
signals are active HIGH. After this first clock, they float to 3-state 




OFF. 







S2 

SI 

SO 

CHARACTERISTICS 




O(LOW) 

0 

0 

Interrupt Acknowledge 




0 

0 

1 

Read I/O port 




0 

1 

0 

Write I/O port 




0 

1 

1 

Halt 




1(HIGH) 

0 

0 

Code access 




1 

0 

1 

Read memory 




1 

1 

0 

Write memory 




1 

1 

1 

Passive 

rq/gTo, 

30,31 

I/O 

REQUEST/GRANT: pins are used by other local bus masters to 

RQ/GT1 



force the processor to release the local bus at the end of the 
processor’s current bus cycle. Each pin is bidirectional with TO/GTO 
having higher priority than M/GTI. TO/GT has an internal pull-up 
resistor, so may be left unconnected. The request/grant sequence is 




as follows (see timing diagram): 





1 . A pulse of one CLK wide from another local bus master indicates a 
local bus request (“hold”) to the 80C88A (pulse 1). 




2. During a T4 or T1 clock cycle, a pulse one clock wide from the 
80C88A to the requesting master (pulse 2), Indicates that the 

80C88A has allowed the local bus to float and that it will enter the 
“hold acknowledge” state at the next CLK. The CPU’s bus interface 
unit Is disconnected logically from the local bus during “hold 




acknowledge”. 

The same rules as for HOLD/HOLDA apply as for 




when the bus is released. 






3. A pulse one CLK wide from the requesting master indicates to the 
80C88A (pulse 3) that the “hold” request Is about to end and that the 
80C88A can reclaim the local bus at the next CLK. The CPU then 




enters T4. 
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Table 1. Pin Descriptions (Continued) 


Symbol 

Pin No. 

Type 

Name and Function 

RQ/^, 

30,31 

I/O 

Each master-master exchange of the local bus is a sequence of 

RQ/GT1 



three pulses. There must be one idle CLK cycle after each bus 




exchange. Pulses are active LOW. 





If the request is made while the CPU is performing a memory cycle, 

It will release the local bus during T4 of the cycle when all the 




following conditions are met: 





1 . Request occurs on or before T2. 





2. Current cycle is not the low bit of a word. 

3. Current cycle is not the first acknowledge of an interrupt 




acknowledge sequence. 





4. A locked instruction is not currently executing. 

If the local bus is Idle when the request is made the two possible 




events will follow: 






1 . Local bus will be released during the next clock. 

2. A memory cycle will start within 3 clocks. Now the four rules for a 
currently active memory cycle apply with condition number 1 




already satisfied. 



LOCK 

29 

0 

LOCK: indicates that other system bus masters are not to gain 
control of the system bus while LOCK is active (LOW). The LOCK 
signal is activated by the “LOCK” prefix instruction and remains 
active until the completion of the next Instruction. This signal is 
active LOW, and floats to 3-state OFFfi) in “hold acknowledge”. 

QS1,QS0 

24, 25 

0 

QUEUE STATUS: provide status to allow external tracking of the 




Internal 80C88A instruction queue. 





The queue status is valid during the CLK cycle after which the 




queue operation is performed. 





QS1 

QSO 

CHARACTERISTICS 




O(LOW) 

0 

No operation 




0 

1 

First byte of opcode from queue 

I 



1(HIGH) 

0 

Empty the queue 




1 

1 

Subsequent byte from queue 

— 



0 

Pin 34 is always high in the maximum mode. 


NOTE: 

1 . See the section on Bus Hold Circuitry. 
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FUNCTIONAL DESCRIPTION 

STATIC OPERATION 

All 80C88A circuitry is of static design. Internal regis- 
ters, counters and latches are static and require no 
refresh as with dynamic circuit design. This elimi- 
nates the minimum operating frequency restriction 
placed on other microprocessors. The CMOS 
80C88A can operate from DC to the appropriate up- 
per frequency limit. The processor clock may be 
stopped In either state (high/low) and held there in- 
definitely. This type of operation is especially useful 
for system debug or power critical applications. 

The 80C88A can be single stepped using only the 
CPU clock. This state can be maintained as long as 
is necessary. Single step clock operation allows sim- 
ple interface circuitry to provide critical information 
for bringing up your system. 

Static design also allows very low frequency opera- 
tion. In a power critical situation, this can provide 
extremely low power operation since 80C88A power 
dissipation is directly related to operating frequency. 
As the system frequency is reduced, so is the oper- 
ating power until ultimately, at a DC input frequency, 
the 80C88A power requirement is the standby cur- 
rent. 
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Figure 3. Memory Organization 


MEMORY ORGANIZATION 

The processor provides a 20-bit address to memory 
which locates the byte being referenced. The memo- 
ry is organized as a linear array of up to 1 million 
bytes, addressed as 00000(H) to FFFFF(H). The 
memory is logically divided into code, data, extra 
data, and stack segments of up to 64 K bytes each, 
with each segment falling on 16-byte boundaries. 
(See Figure 3.) 

All memory references are made relative to base ad- 
dresses contained in high speed segment registers. 
The segment types were chosen based on the ad- 
dressing needs of programs. The segment register 
to be selected Is automatically chosen according to 
the rules of the following table. All Information in one 
segment type share the same logical attributes (e.g. 
code or data). By structuring memory into relocat- 
able areas of similar characteristics and by automati- 
cally selecting segment registers, programs are 
shorter, faster, and more structured. 

Word (16-bit) operands can be located on even or 
odd address boundaries. For address and data oper- 
ands, the least significant byte of the word is stored 
in the lower valued address location and the most 
significant byte in the next higher address location. 
The BIU will automatically execute two fetch or write 
cycles for 1 6-bit operands. 

Certain locations in memory are reserved for specific 
CPU operations. (See Figure 4.) Locations from ad- 
dresses FFFFOH through FFFFFH are reserved for 
operations including a jump to the initial system 



Figure 4. Reserved Memory Locations 
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Memory 
Reference Need 

Segment Register 
Used 

Segment 

Selection Rule 

Instructions 

CODE (CS) 

Automatic with all instruction prefetch. 

Stack 

STACK (SS) 

All stack pushes and pops. Memory references relative to BP 
base register except data references. 

Local Data 

DATA (DS) 

Data references when; relative to stack, destination of string 
operation, or explicitly overridden. 

External (Global) Data 

EXTRA (ES) 

Destination of string operations: Explicitly selected using a 
segment override. 


initialization routine. Following RESET, the CPU will 
always begin execution at location FFFFOH where 
the jump must be located. Locations OOOOOH 
through 003FFH are reserved for interrupt opera- 
tions. Four-byte pointers consisting of a 16-bit seg- 
ment address and a 1 6-bit offset address direct pro- 
gram flow to one of the 256 possible Interrupt serv- 
ice routines. The pointer elements are assumed to 
have been stored at their respective places in re- 
served memory prior to the occurrence of interrupts. 

MINIMUM AND MAXIMUM MODES 

The requirements for supporting minimum and maxi- 
mum 80C88A systems are sufficiently different that 
they cannot be done efficiently with 40 uniquely de- 
fined pins. Consequently, the 80C88A is equipped 
with a strap pin (MN/MX) which defines the system 
configuration. The definition of a certain subset of 
the pins changes, depend^t on the condition of the 
strap pin. When the MN/MX pin is strapped to GND, 
the 80C88A defines pins 24 through 31 and 34 in 
maximum mode. When the MN/MX pin is strapped 
to Vcc. the 80C88A generates bus control signals 
itself on pins 24 through 31 and 34. 

The minimum mode 80C88A can be used with either 
a multiplexed or demultiplexed bus. The multiplexed 
bus configuration is compatible with the MCS®-85 


multiplexed bus peripherals (8155, 8156, 8355, 
8755A, and 8185). This configuration (See Figure 5) 
provides the user with a minimum chip count sys- 
tem. This architecture provides the 80C88A pro- 
cessing power in a highly integrated form. 

The demultiplexed mode requires one latch (for 64k 
addressability) or two latches (for a full megabyte of 
addressing). A third latch can be used for buffering if 
the address bus loading requires it. A transceiver 
can also be used If data bus bufferi ng is required. 
(§ee Figure 6.) The 80C88A provides DEN and DT/ 
R to control the transceiver, and ALE to latch the 
addresses. This configuration of the minimum mode 
provides the standard demultiplexed bus structure 
with heavy bus buffering and relaxed bus timing re- 
quirements. 

The maximum mode employs the 82C88 bus con- 
troller's^ Figure 7.) The 82C88 decodes status 
lines SO, SI , and S2, and provides the system with 
all bus control signals. Moving the bus control to the 
82C88 provides better source and sink current capa- 
bility to the control lines, and frees the 80C88A pins 
for extended large system features. Hardware lock, 
queue status, and two request/grant interfaces are 
provided by the 80C88A In maximum mode. These 
features allow co-processors in local bus and re- 
mote bus configurations. 
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Figure 5. Multiplexed Bus Configuration 
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Figure 6. Demultiplexed Bus Configuration 
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Figure 7. Fully Buffered System Using Bus Controller 
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Bus Operation 

The 80C88A address/data bus is broken into three 
parts — the lower eight address/data bits (AD0-AD7), 
the middle eight address bits (A8-A15), and the up- 
per four address bits (A16~A19). The address/data 
bits and the highest four address bits are time multi- 
plexed. This technique provides the most efficient 
use of pins on the processor. The middle eight ad- 
dress bits are not multiplexed, i.e. they remain valid 
throughout each bus cycle. In addition, the bus can 
be demultiplexed at the processor with a single ad- 
dress latch If a standard, non-multiplexed bus Is de- 
sired for the system. 


Each processor bus cycle consists of at least four 
CLK cycles. These are referred to as T1 , T2, T3, and 
T4. (See Figure 8). The address is emitted from the 
processor during T 1 and data transfer occurs on the 
bus during T3 and T4. T2 is used primarily for chang- 
ing the direction of the bus during read operations. In 
the event that a “NOT READY” indication is given 
by the addressed device, “wait” states (Tw) are in- 
serted between T3 and T4. Each inserted “wait” 
state is of the same duration as a CLK cycle. Periods 
can occur between 80C88A driven bus cycles. 
These are referred to as “idle” states (Ti), or inac- 
tive CLK cycles. The processor uses these cycles 
for internal housekeeping. 
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During T1 of any bus cycle, the ALE (address latch 
enable) signal is emitted (by either the processor or 
the 82C88 bus controller, depending on the MN/MX 
strap). At the trailing edge of this pulse, a valid ad- 
dress and certain status information for the cycle 
may be latched. 


Status bits SO, S1 , and S2 are used by the bus con- 
troller, In maximum mode, to identify the type of bus 
transaction according to the following table: 


Sa 

Si 

So 

CHARACTERISTICS 

0 (LOW) 

0 

0 

Interrupt Acknowledge 

0 

0 

1 

Read I/O 

0 

1 

0 

Write I/O 

0 

1 

1 

Halt 

1 (HIGH) 

0 

0 

Instruction Fetch 

1 

0 

1 

Read Data from Memory 

1 

1 

0 

Write Data to Memory 

1 

1 

1 

Passive (no bus cycle) 


Status bits S3 through S6 are multiplexed with high 
order address bits and are therefore valid during T2 
through T4. S3 and S4 indicate which segment reg- 
ister was used for this bus cycle in forming the ad- 
dress according to the following table: 


S4 

S3 

CHARACTERISTICS 

0 (LOW) 

0 

Alternate Data (extra segment) 

0 

1 

Stack 

1 (HIGH) 

0 

Code or None 

1 

1 

Data 


S5 is a reflection of the PSW interrupt enable bit. S6 
is equal to 0. 

I/O ADDRESSING 

In the 80C88A, I/O operations can address up to a 
maximum of 64k I/O registers. The I/O address ap- 
pears in the same format as the memory address on 
bus lines A15-A0. The address lines A19-A16 are 
zero in I/O operations. The variable I/O instructions, 
which use register DX as a pointer, have full address 


capability, while the direct I/O Instructions directly 
address one or two of the 256 I/O byte locations in 
page 0 of the I/O address space. I/O ports are ad- 
dressed in the same manner as memory locations. 

Designers familiar with the 8085 or upgrading an 
8085 design should note that the 8085 addresses 
I/O with an 8-bit address on both halves of the 16- 
bit address bus. The 80C88A uses a full 16-bit ad- 
dress on Its lower 16 address lines. 


EXTERNAL INTERFACE 

PROCESSOR RESET AND INITIALIZATION 

Processor initialization or start up is accomplished 
with activation (HIGH) of the RESET pin. The 
80C88A RESET is required to be HIGH for four or 
more clock cycles. The 80C88A will terminate oper- 
ations on the high-going edge of RESET and will 
remain dormant as long as RESET is HIGH. The 
low-going transition of RESET triggers an internal 
reset sequence for approximately 7 clock cycles. Af- 
ter this interval the 80C88A operates normally, be- 
ginning with the instruction in absolute location 
FFFFOH. (See Figure 4.) The RESET input is inter- 
nally synchronized to the processor clock. At Initiali- 
zation, the HIGH to LOW transition of RESET must 
occur no sooner than 50 /xs after power up, to allow 
complete initialization of the 80C88A. 

NMI asserted prior to the 2nd clock after the end of 
RESET will not be honored. If NMI is asserted after 
that point and during the internal reset sequence, 
the processor may execute one instruction before 
responding to the interrupt. A hold request active 
immediately after RESET will be honored before the 
first Instruction fetch. 

All 3-state outputs float to 3-state 0FF(1) during RE- 
SET. Status is active In the idle state for the first 
clock after RESET becomes active and then floats 
to 3-state 0FF(1). ALE and HLDA are driven low. 

NOTE: 

1 . See the section on Bus Hold Circuitry. 
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BUS HOLD CIRCUITRY 

To avoid high current conditions caused by floating 
inputs to CMOS devices and to eliminate the need 
for pull-up/down resistors, “bus-hold” circuitry has 
been used on the 80C88A pins 2-16, 26-32, and 
34-39 (Figure 9a, 9b). These circuits will maintain 
the last valid logic state if no driving source is pres- 
ent (i.e. an unconnected pin or a driving source 
which goes to a high impedance state). To overdrive 
the “bus hold” circuits, an external driver must be 
capable of supplying 350 jmA minimum sink or 
source current at valid input voltage levels. Since 
this “bus hold” circuitry is active and not a “resis- 
tive” type element, the associated power supply 


current is negligible and power dissipation is signifi- 
cantly reduced when compared to the use of pas- 
sive pull-up resistors. 

INTERRUPT OPERATIONS 

Interrupt operations fall Into two classes: software or 
hardware initiated. The software initiated interrupts 
and software aspects of hardware interrupts are 
specified in the Instruction set description In the 
iAPX 88 book or the lAPX 86,88 User’s Manual. 
Hardware interrupts can be classified as nonmaska- 
ble or maskable. 


"Pull-Up/Pull-Down” 



240028-9 


Input buffer exists only on I/O pins 


Figure 9a. Bus hold circuitry pin 2-16, 35-39. 


“Pull-Up” 
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Input buffer exists only on I/O pins 


Figure 9b. Bus hold circuitry pin 26-32, 34. 
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Interrupts result in a transfer of control to a new pro- 
gram location. A 256 element table containing ad- 
dress pointers to the interrupt service program loca- 
tions resides in absolute locations 0 through 3FFH 
(See Figure 4), which are reserved for this purpose. 
Each element in the table is 4 bytes in size and cor- 
responds to an interrupt “type.” An interrupting de- 
vice supplies an 8-bit type number, during the inter- 
rupt acknowledge sequence, which is used to vector 
through the appropriate element to the new interrupt 
service program location. 

NON-MASKABLE INTERRUPT (NMI) 

The processor provides a single non-maskable inter- 
rupt (NMI) pin which has higher priority than the 
maskable Interrupt request (INTR) pin. A typical use 
would be to activate a power failure routine. The 
NMI is edge-triggered on a LOW to HIGH transition. 
The activation of this pin causes a type 2 interrupt. 

NMI Is required to have a duration in the HIGH state 
of greater than two clock cycles, but is not required 
to be synchronized to the clock. Any higher going 
transition of NMI is latched on-chip and will be serv- 
iced at the end of the current instruction or between 
whole moves (2 bytes in the case of word moves) of 
a block type instruction. Worst case response to 
NMI would be for multiply, divide, and variable shift 
Instructions. There Is no specification on the occur- 
rence of the low-going edge; it may occur before, 
during, or after the servicing of NMI. Another high- 
going edge triggers another response if it occurs af- 
ter the start of the NMI procedure. The signal must 


be free of logical spikes in general and be free of 
bounces on the low-going edge to avoid triggering 
extraneous responses. 

MASKABLE INTERRUPT (INTR) 

The 80C88A provides a single interrupt request input 
(INTR) which can be masked internally by software 
with the resetting of the Interrupt enable (IF) flag bit. 
The interrupt request signal is level triggered. It is 
internally synchronized during each clock cycle on 
the high-going edge of CLK. To be responded to, 
INTR must be present (HIGH) during the clock peri- 
od preceding the end of the current instruction or the 
end of a whole move for a block type instruction. 
During interrupt response sequence, further inter- 
rupts are disabled. The enable bit is reset as part of 
the response to any interrupt (INTR, NMI, software 
interrupt, or single step), although the FLAGS regis- 
ter which Is automatically pushed onto the stack re- 
flects the state of the processor prior to the inter- 
rupt. Until the old FLAGS register is restored, the 
enable bit will be zero unless specifically set by an 
Instruction. 

During the response sequence (See Figure 10), the 
processor executes two successive (back to back) 
interrupt acknowledge cycles. The 80C88A emits 
the LOCK signal (maximum mode only) from T2 of 
the first bus cycle until T2 of the second. A local bus 
“hold” request will not be honored until the end of 
the second bus cycle. In the second bus cycle, a 
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byte is fetched from the external interrupt system 
(e.g., 82C59A PIC) which identifies the source (type) 
of the interrupt. This byte is multiplied by four and 
used as a pointer into the interrupt vector lookup 
table. An INTR signal left HIGH will be continually 
responded to within the limitations of the enable bit 
and sample period. The interrupt return instruction 
includes a flags pop which returns the status of the 
original interrupt enable bit when it restores the 
flags. 


HALT 

When a software HALT Instruction is executed, the 
processor indicates that It is entering the HALT state 
In one of two ways, depending upon which mode is 
strapped. In minimum mode, the processor Issues 
ALE, delayed by one clock cycle, to allow the sys- 
tem to Jatch the halt status . Halt status is available 
on lO/M, DT/R, and SSO. In maximum mode, the 
processor issues appropriate HALT status on S2, 
S1 , and SO, and the 82C88 bus controller issues one 
ALE. The 80C88A will not leave the HALT state 
when a local bus hold Is entered while in HALT. In 
this case, the processor reissues the HALT indicator 
at the end of the local bus hold. An interrupt request 
or RESET will force the 80C88A out of the HALT 
state. 


READ/MODIFY/WRITE (SEMAPHORE) 
OPERATIONS VIA LOCK 

The LOCK status Information Is provided by the 
processor when consecutive bus cycles are required 
during the execution of an instruction. This allows 
the processor to perform read/modify/write opera- 
tions on memory (via the “exchange register with 
memory” instruction), without another system bus 
master receiving intervening memory cycles. This is 
useful In multiprocessor system configurations to ac- 
complish “test and set lock” operations. The LOCK 
signal Is activated (LOW) in the clock cycle following 
decoding of the LOCK prefix Instruction. It Is deacti- 
vated at the end of the last bus cycl e of the instruc- 
tion following the LOCK prefix. While LOCK is active, 
a request on a RQ/GT pin will be recorded, and then 
honored at the end of the LOCK. 


EXTERNAL SYNCHRONIZATION VIA TEST 

As an alternative to interrupts, the 8 0C88A provides 
a single software-testable Input pin (TEST). This in- 
put is utilized by executing a WAIT Instruction. The 
sin gle WA IT instruction is repeatedly executed until 
the TEST input goes active (LOW). The execution of 
WAIT does not consume bus cycles once the queue 
Is full. 


If a local bus request occurs during WAIT execution, 
the 80C88A 3-states all output drivers. If interrupts 
are enabled, the 80C88A will recognize Interrupts 
and process them. The WAIT Instruction is then re- 
fetched, and reexecuted. 


BASIC SYSTEM TIMING 

In minimum mode, the MN/^ pin Is strapped to 
Vcc and the processor emits bus control signals 
compatible withjhe 8085 bus structure. In maximum 
mode, the MN/MX pin is strapped to GND and the 
processor emits coded status information which the 
82C88 bus controller uses to generate MULTIBUS 
compatible bus control signals. 


System Timing — Minimum System 

(See Figure 8.) 

The read cycle begins in T1 with the assertion of the 
address latch enable (ALE) signal. The trailing (low 
going) edge of this signal is used to latch the ad- 
dress information, which is valid on the address/ 
data bus (AD0-AD7) at this time, into a latch. Ad- 
dress lines A8 through A15 do not need to be 
latched because they remain v^id throughout the 
bus cycle. From T1 to T4 the lO/M signal Indicates a 
memory or I/O operation. At T2 the address is re- 
moved from the address/data bus and the bus goes 
to a high impedance state. The read control signal is 
also asserted at T2. The read (RD) signal causes the 
addressed device to enable Its data bus drivers to 
the local bus. Some time later, valid data will be 
available on the bus and the addressed device will 
drive the READY line HIGH. When the processor 
returns the read signal to a HIGH level, the ad- 
dressed device will again 3-state Its bus drivers, if a 
transceiver is reqjjired t o buf fer the 80C88A local 
bus, signals DT/R and DEN are provided by the 
80C88A. 

A write cycle also begins with the assertion of ALE 
and the emission of the address. The lO/M signal Is 
again asserted to Indicate a memory or I/O write 
operation. In T2, immediately following the address 
emission, the processor emits the data to be written 
into the addressed location. This data remains valid 
until at least the middle of T4. During T2, T3, and 
Tw, the processor asserts the write control signal. 
The write (WR) signal becomes active at the begin- 
ning of T2, as opposed to the read, which is delayed 
somewhat into T2 to provide time for the bus to 
float. 
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The basic difference between the interrupt acknowl- 
edge cycle and a read cycle is that the interrupt ac- 
knowledge (INTA) signal is asserted in place of the 
read (RD) signal and the address bus is floated. 
(See Figure 10.) In the second of two successive 
INTA cycles, a byte of information is read from the 
data bus, as supplied by the interrupt system logic 
(i.e. 82C59A priority interrupt controller). This byte 
identifies the source (type) of the interrupt. It Is multi- 
plied by four and used as a pointer into the Interrupt 
vector lookup table, as described earlier. 


BUS TIMING — MEDIUM COMPLEXITY 
SYSTEMS 

(See Figure 1 1 .) 

For medium complexity systems, the MN/MX pin is 
connected to GND and the 82C88 bus controller Is 
added to the system, as well as a latch for latching 
the system address, and a transceiver to allow for 
bus loading greater th an th e 80C88/Us capable of 
handling. Signals ALE, DEN, and DT/R are generat- 
ed by the 82C88 instead of the processor In this 
configuration, although their timing remains relatively 
the same. The 80C88A status outputs (S2, SI , and 
SO) provide type of cycle information and become 
82C88 inputs. This bus cycle information specifies 
read (code, data, or I/O), write (data or I/O), inter- 
rupt acknowledge, or software halt. The 82C88 thus 
issues control signals specifying memory read or 
write, I/O read or write, or interrupt acknowledge. 
The 82C88 provides two types of write strobes, nor- 
mal and advanced, to be applied as required. The 
normal write strobes have data valid at the leading 
edge of write. The advanced write strobes have the 
same timing as read strobes, and hence, data is not 
valid at the leading edge of write. The transceiver 
receives the usua l T and OE inputs from the 
82C88’s DT/R and DEN outputs. 

The pointer into the interru pt vec tor table, which is 
passed during the second INTA cycle, can derive 
from an 82C59A located on either the local bus or 
the system bus. If the master 82C59A priority inter- 
rupt controller is positioned on the local bus, a TTL 
gate is required to disable the transceiver when 
reading from the master 82C59A during the interrupt 
acknowledge sequence and software “poll”. 

THE 80C88A COMPARED TO THE 80C86 

The 80C88A CPU is an 8-bit processor designed 
around the 80C86 internal structure. Most Internal 
functions of the 80C88A are identical to the equiva- 


lent 80C86 functions. The 80C88A handles the ex- 
ternal bus the same way the 80C86 does with the 
distinction of handling only 8 bits at a time. Sixteen- 
bit operands are fetched or written In two consecu- 
tive bus cycles. Both processors will appear identical 
to the software engineer, with the exception of exe- 
cution time. The internal register structure is identi- 
cal and all instructions have the same end result. 
The differences between the 80C88A and 80C86 
are outlined below. The engineer who is unfamiliar 
with the 80C86 is referred to the lAPX 86, 88 User’s 
Manual, Chapters 2 and 4, for function description 
and Instruction set Information. Internally, there are 
three differences between the 80C88A and the 
80C86. All changes are related to the 8-bit bus inter- 
face. 

• The queue length is 4 bytes in the 80C88A, 
whereas the 80C86 queue contains 6 bytes, or 
three words. The queue was shortened to pre- 
vent overuse of the bus by the BIU when pre- 
fetching instructions. This was required because 
of the additional time necessary to fetch instruc- 
tions 8 bits at a time. 

• To further optimize the queue, the prefetching al- 
gorithm was changed. The 80C88A BIU will fetch 
a new Instruction to load into the queue each 
time there Is a 1 byte hole (space available) in the 
queue, The 80C86 waits until a 2-byte space Is 
available. 

• The internal execution time of the instruction set 
is affected by the 8-bit interface. All 1 6-bit fetches 
and writes from/to memory take an additional 
four clock cycles. The CPU is also limited by the 
speed of instruction fetches. This latter problem 
only occurs when a series of simple operations 
occur. When the more sophisticated Instructions 
of the 80C88A are being used, the queue has 
time to fill and the execution proceeds as fast as 
the execution unit will allow. 

The 80C88A and 80C86 are completely software 
compatible by virture of their identical execution 
units. Software that Is system dependent may not be 
completely transferable, but software that is not sys- 
tem dependent will operate equally as well on an 
80C88A or an 80C86. 

The hardware interface of the 80C88A contains the 
major differences between the two CPUs. The pin 
assignments are nearly Identical, however vyith the 
following functional changes: 

• A8-A15 — These pins are only address outputs 
on the 80C88A. These address lines are latched 
internally and remain valid throughout a bus cycle 
In a manner similar to the 8085 upper address 
lines. 
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• BHE has no meaning on the 80C88A and has 
been eliminated. 

• SSO provides the SO status information in the 
minimum mode. This output oc<^rs on pin 3 4 in 
minimum mode only. DT/R, lO/M, and SSO pro- 
vide the complete bus status in minimum mode. 


• 10 / M has been inverted to be compatible with the 
MCS-85 bus structure. 

• ALE is delayed by one clock cycle in the mini- 
mum mode when entering HALT, to allow the 
status to be latched with ALE. 
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Figure 11. Medium Complexity System Timing 
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ABSOLUTE MAXIMUM RATINGS* 

Supply Voltage 

(With respect to ground) -0.5 to 7.0V 

Input Voltage Applied 

(w.r.t. ground) -0.5 to Vcc + 0-5V 

Output Voltage Applied 

(w.r.t, ground) -0.5 to Vcc + 0-5V 

Power Dissipation 1 .OW 

Storage Temperature - 65°C to + 1 50^0 

Ambient Temperature Under Bias 0°C to ^-yo^C 


* Notice: Stresses above those listed under “Abso- 
lute Maximum Ratings” may cause permanent dam- 
age to the device. This is a stress rating only and 
functional operation of the device at these or any 
other conditions above those indicated in the opera- 
tional sections of this specification is not implied. Ex- 
posure to absolute maximum rating conditions for 
extended periods may affect device reliability. 


D.C. CHARACTERISTICS Ta = o°c to 70°C, Vcc = 5V ±5% 


Symbol 

Parameter 

80C88A-2 

Units 

Test Conditions 

Min 

Max 

V|L 

Input Low Voltage 

-0.5 

+ 0.8 

V 


VlH 

Input High Voltage (All inputs 
except clock) 

2.0 


V 


VCH 

Clock High Voltage 

00 
d 

1 

0 

0 

> 


V 


VoL 

Output Low Voltage 


0.45 

V 

Iql = 2.5 mA 

VOH 

Output High Voltage 

3.0 

Vcc ~ 0.4 


V 

Iqh ~ ~2.5 mA 

Iqh "" -100 fiA 

Icc 

Power Supply Current 


10mA/MHz 

V|L = GND. V|H = Vcc 

Ices 

Standby Supply Current 


500 

JLtA 

V|n = Vqq or GND 
Outputs Unloaded 

CLK = GND or Vcc 

Ili 

Input Leakage Current 


+ 1.0 

JLtA 

0V<V,N<Vcc 

Ibhl 

Input Leakage Current 
(Bus Hold Low) 

50 

400 

jilA 

ViN = 0.8V 
(Note 4) 

■bhh 

Input Leakage Current 
(Bus Hold High) 

-50 

-400 

jitA 

V|N = 3.0V 
(Note 5) 

■bhlo 

Bus Hold Low Overdrive 


600 

jliA 

(Note 2) 

Ibhho 

Bus Hold High Overdrive 


-600 

JLtA 

(Note 3) 

Ilo 

Output Leakage Current 


+ 10 

fxA 

Vqut == GND or Vcc 

Qn 

Capacitance of Input Buffer 

(All Inputs except ADo-ADy^ RQ/GT) 


5 

PF 

(Note 1) 

Qo 

Capacitance of I/O Buffer 
(AD0-AD7, TO/CT) 


20 

PF 

(Note 1) 

Gout 

Output Capacitance 


15 

pF 

(Note 1) 


NOTES: 

1. Characterization conditions are a) Frequency = 1 MHz, b) Unmeasured pins at GND 

c) V|N at +5.0V or GND. 

2. An external driver must source at least Ibhlo to switch this node from LOW to HIGH. 

3. An external driver must sink at least Ibhho to switch this node from HIGH to LOW. 

4. Test condition is to lower Vjn to GND and then raise V|n to 0.8V on pins 2-16 and 34-39. 

5. Test condition is to raise V|n to Vcc and then lower Vin to 3.0V on pins 2-16, 26-32 and 34-39. 
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A.C. CHARACTERISTICS Ta = o°C to 70°C, Vcc = 5V ±5% 

MINIMUM COMPLEXITY SYSTEM TIMING REQUIREMENTS 


Symbol 

Parameter 

80C88A-2 

Units 

Test 

Min 

Max 

Conditions 

TCLCL 

CLK Cycle Period 

125 

D.C. 

ns 


TCLCH 

CLK Low Time 

68 


ns 


TCHCL 

CLK High Time 

44 


ns 


TCH1CH2 

CLK Rise Time 


10 

ns 

From 1.0V to 3.5V 

TCL2CL1 

CLK Fall Time 


10 

ns 

From 3.5V to 1.0V 

TDVCL 

Data in Setup Time 

20 


ns 


TCLDX 

Data in Hold Time 

10 


ns 


TR1VCL 

RDY Setup Time into 82C84A 
(Notes 1,2) 

35 


ns 


TCLR1X 

RDY Hold Time into 82C84A 
(Notes 1 , 2) 

0 


ns 


TRYHCH 

READY Setup Time into 80C88A 

68 


ns 


TCHRYX 

READY Hold Time into 80C88A 

20 


ns 


TRYLCL 

READY Inactive to CLK (Note 3) 

-8 


ns 


THVCH 

HOLD Setup Time 

20 


ns 


TINVCH 

INTR, NMI, TEST Setup Time 
(Note 2) 

15 


ns 


TILIH 

Input Rise Time (Except CLK) 

(Note 4) 


15 

ns 

From 0.8V to 2.0V 

TIHIL 

Input Fall Time (Except CLK) 

(Note 4) 


15 

ns 

From 2.0V to 0.8V 
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A.C. CHARACTERISTICS (Continued) 
TIMING RESPONSES 


Symbol 

Parameter 

80C88A-2 

Units 

Test 

Min 

Max 

Conditions 

TCLAV 

Address Valid Delay 

10 

60 

ns 


TCLAX 

Address Hold Time 

10 


ns 


TCLAZ 

Address Float Delay 

TCLAX 

50 

ns 


TLHLL 

ALE Width 

TCLCH-10 


ns 


TCLLH 

ALE Active Delay 


50 

ns 


TCHLL 

ALE Inactive Delay 


55 

ns 


TLLAX 

Address Hold Time to ALE Inactive 

TCHCL-10 


ns 


TCLDV 

Data Valid Delay 

10 

60 

ns 


TCHDX 

Data Hold Time 

10 


ns 


TWHDX 

Data Hold Time After WR 

TCLCH-30 


ns 


TCVCTV 

Control Active Delay 1 

10 

70 

ns 


TCHCTV 

Control Active Delay 2 

10 

60 

ns 


TCVCTX 

Control Inactive Delay 

10 

70 

ns 


TAZRL 

Address Float to READ Active 

0 


ns 


TCLRL 

^ Active Delay 

10 

100 

ns 


TCLRH 

RD Inactive Delay 

10 

80 

ns 


TRHAV 

RD Inactive to Next Address Active 

TCLCL-40 


ns 


TCLHAV 

HLDA Valid Delay 

10 

100 

ns 


TRLRH 

RD Width 

2TCLCL-50 


ns 


TWLWH 

WR Width 

2TCLCL-40 


ns 


TAVAL 

Address Valid to ALE Low 

TCLCH-40 


ns 


TOLOH 

Output Rise Time (Note 4) 


15 

ns 

From 0.8V to 2.0V 

TOHOL 

Output Fall Time (Note 4) 


15 

ns 

From 2.0V to 0.8V 


NOTES: 

1 . Signal at 82C84A shown for reference only. See 82C84A data sheet for the most recent specifications. 

2. Setup requirement for asynchronous signal only to guarantee recognition at next CLK. 

3. Applies only to T2 state (8 ns into T3 state). 

4. These parameters are characterized and not 100% tested. 
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A.C. TESTING INPUT, OUTPUT WAVEFORM 



A.C. TESTING LOAD CIRCUIT 


DEVICE 

UNDER 

TEST 



100 pF 


240028-14 


Cl Includes Jig Capacitance 


WAVEFORMS 

BUS TIMING — MINIMUM MODE SYSTEM 
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WAVEFORMS (Continued) 


BUS TIMING — MINIMUM MODE SYSTEM (Continued) 
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A.C. CHARACTERISTICS 

MAX MODE SYSTEM (USING 82C88 BUS CONTROLLER) 
TIMING REQUIREMENTS 


Symbol 

Parameter 

80C88A-2 

Units 

Test Conditions 

Min 

Max 

TCLCL 

CLK Cycle Period 

125 

D.C. 

ns 


TCLCH 

CLK Low Time 

68 


ns 


TCHCL 

CLK High Time 

44 


ns 


TCH1CH2 

CLK Rise Time 


10 

ns 

From 1.0V to 3.5V 

TCL2CL1 

CLK Fall Time 


10 

ns 

From 3.5V to 1.0V 

TDVCL 

Data In Setup Time 

20 


ns 


TCLDX 

Data In Hold Time 

10 


ns 


TR1VCL 

RDY Setup Time into 82C84 
(See Notes 1 , 2) 

35 


ns 


TCLR1X 

RDY Hold Time into 82C84 
(See Notes 1 , 2) 

0 


ns 


TRYHCH 

READY Setup Time into 80C88A 

68 


ns 


TCHRYX 

READY Hold Time into 80C88A 

20 


ns 


TRYLCL 

READY Inactive to CLK 
(See Note 4) 

-8 


ns 


TINVCH 

Setup Time for Recognition 
(INTR, NMI, TEST) (See Note 2) 

15 


ns 


TGVCH 

RQ/GT Setup Time 

1 

15 


ns 


TCHGX 

RQ Hold Time into 80C88A 

30 


ns 


TILIH 

Input Rise Time (Except CLK) 

(Note 5) 


15 

ns 

From 0.8V to 2.0V 

TIHIL 

Input Fall Time (Except CLK) 

(Note 5) 


15 

ns 

From 2.0V to 0.8V ^ 
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A,C. CHARACTERISTICS 

TIMING RESPONSES 


Symbol 

Parameter 

80C88A-2 

Units 

Test Conditions 

Min 

Max 

TCLML 

Command Active Delay (Note 1) 

5 

35 

ns 


TCLMH 

Command Inactive Delay (Note 1) 

5 

35 

ns 


TRYHSH 

READY Active to Status Passive (Note 3) 


65 

ns 


TCHSV 

Status Active Delay 

10 

60 

ns 


TCLSH 

Status Inactive Delay 

10 

70 

ns 


TCLAV 

Address Valid Delay 

10 

60 

ns 


TCLAX 

Address Hold Time 

10 


ns 


TCLAZ 

Address Float Delay 

TCLAX 

50 

ns 


TSVLH 

Status Valid to ALE High (Note 1) 


20 

ns 


TSVMCH 

Status Valid to MCE High (Note 1) 


30 

ns 


TCLLH 

CLK Low to ALE Valid (Note 1) 


20 

ns 


TCLMCH 

CLK Low to MCE High (Note 1) 


25 

ns 


TCHLL 

ALE Inactive Delay (Note 1) 

4 

18 

ns 


TCLDV 

Data Valid Delay 

10 

60 

ns 


TCHDX 

Data Hold Time 

10 


ns 


TCVNV 

Control Active Delay (Note 1) 

5 

45 

ns 


TCVNX 

Control Inactive Delay (Note 1) 

10 

45 

ns 


TAZRL 

Address Float to Read Active 

0 


ns 


TCLRL 

RD Active Delay 

10 

100 

ns 


TCLRH 

RD Inactive Delay 

10 

80 

ns 


TRHAV 

RD Inactive to Next Address Active 

TCLCL-40 


ns 


TCHDTL 

Direction Control Active Delay (Note 1) 


50 

ns 


TCHDTH 

Direction Control Inactive Delay (Note 1) 


30 

ns 


TCLGL 

GT Active Delay 

0 

50 

ns 


TCLGH 

GT Inactive Delay 

0 

50 

ns 


TRLRH 

RD Width 

2TCLCL-50 


ns 


TOLOH 

Output Rise Time (Note 5) 


15 

ns 

From 0.8V to 2.0V 

TOHOL 

Output Fall Time (Note 5) 


15 

ns 

From 2.0V to 0.8V 


NOTES: 

1 . Signal at 82C84A or 82C88 shown for reference only. See 82C84A and 82C88 data sheets for the most recent 
specifications. 

2. Setup requirement for asynchronous signal only to guarantee recognition at next CLK. 

3. Applies only to T3 and wait states (8 ns into T3 state). 

4. Applies only to T2 state (8 ns into T3 state). 

5. These parameters are characterized and not 100% tested. 
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A.C. TESTING INPUT, OUTPUT WAVEFORM 

Input/Output 


1.5 


0 . 45 - 

240028-17 

A.C. Testing inputs are driven at 2.4V for a logic “1” and 0.45V 
for a logic “0”. Timing measurements are made. at 1.5V. 


A.C. TESTING LOAD CIRCUIT 


DEVICE 

UNDER 

TEST 




100 pF 


240028-18 


Cl Includes Jig Capacitance 


WAVEFORMS 

BUS TIMING— MAXIMUM MODE 
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WAVEFORMS (Continued) 


BUS TIMING — MAXIMUM MODE SYSTEM (USING 82C88) 



HALT - (DEN = Vql; RD, MRDC, IORC. MWTC, AMWC, IOWC, AIOWC. INTA,DT/R = Vq^- 


ADy-ADg, A,5-Ag — — — ^ 

I) 

^ INVALID ADDRESS 

TCLAV^ 

n 

h- 


240028-20 


NOTES: 

1 . All output timing measurements are made at 1 .5V unless otherwise noted. 

2. RDY is sampled near the end of T 2 , T 3 , Tw to determine if Tw machines states are to be inserted. 

3. Cascade address is valid between first and second INTA cycles. 

4. Two INTA cycles run bacMo-back. The 80C88A local ADDR/Data bus is floating during both INTA cycles. Control for 
pointer address is shown for second INTA cycle. 

5. Signals at 82C84A or 82C88 are shown for reference only. 

6 . The issuance of the 82C88 command and control signals (MRDC, MWTC, AMWC, IORC, lOWC, AlOWC, INTA and 
DEN) lags the active high 82C88 CEN. 

7. Status inactive in state just prior to T 4 . 
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REQUEST/GRANT SEQUENCE TIMING (MAXIMUM MODE ONLY) 



240028-23 


NOTE: The coprocessor may not drive the busses outside the region shown without risking contention. 


HOLD/HOLD ACKNOWLEDGE TIMING (MINIMUM MODE ONLY) 



BUS LOCK SIGNAL TIMING 
(MAXIMUM MODE ONLY) 


CUK - 

^NY CLK CYCLE ^ | 

ANY CLK CYCLE , 

V A 

TCLAV— * 


TCLAV 

LOCK 
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WAVEFORMS (Continued) 

ASYNCHRONOUS SIGNAL RECOGNITION 



/~\ 

NMI 

► — tin VC H (see note) 

INTR 

)<L _ , 

TEST 

240028-21 

NOTE: Setup requirements for asynchronous signals 
only to guarantee recognition at next CLK. 
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80C86A/80C88A INSTRUCTION SET SUMMARY 


Mnemonic and 

Description 

Instruction Code 

DATA TRANSFER 






MOV = Move: 

76543210 


765432 1 0 

76543210 

76543210 

Register/Memory to/from Register 

lOOOIOdw 

I 

mod reg r/m | 



Immediate to Register/ Memory 

1 1 000 1 1 w 

I 

mod 0 0 0 r/m | 

data 

data if w 1 | 

Immediate to Register 

1 0 1 1 w reg 

I 

data 1 

data if w 1 


Memory to Accumulator 

1 01 OOOOw 

n 

add-low 1 

addr-high 


Accumulator to Memory 

1 0 1 000 1 w 

I 

addr-low | 

addr-high 


Register/Memory to Segment Register** 

1 0001 1 1 0 

I 

mod 0 reg r/m | 



Segment Register to Register/ Memory 

10001 100 

I 

mod 0 reg r/m | 



PUSH = Push: 






Register/Memory 

11111111 

I 

mod 110 r/m | 



Register 

0 1 0 1 0 reg 

□ 




Segment Register 

0 0 0 reg 1 1 0 

□ 




POP = Pop: 






Register/Memory 

10001111 

I 

mod 0 0 0 r/m | 



Register 

0 1 0 1 1 reg 

□ 




Segment Register 

0 0 0 reg 1 1 1 

□ 




XCHG = Exchange: 






Register/Memory with Register 

1 00001 1 w 

I 

mod reg r/m | 



Register with Accumulator 

1 0 0 1 0 reg 

□ 




IN = Input from: 






Fixed Port 

1 1 1 001 Ow 

I 

port I 



Variable Port 

1 1 1 01 1 Ow 

□ 




OUT = Output to: 






Fixed Port 

1 1 1 00 1 1 w 

I 

port I 



Variable Port 

, 1 1 1 01 11 w 

□ 




XLAT = Translate Byte to AL 

11010111 

□ 




LEA = Load EA to Register 

1 0001 1 01 

z: 

mod reg r/m | 



LDS = Load Pointer to DS 

11000101 

I 

mod reg r/m | 



LES = Load Pointer to ES 

1 1 0001 00 

T 

mod reg r/m | 



LAHF = Load AH with Flags 

10011111 

D 




SAHF = Store AH into Flags 

10011110 

□ 




PUSHF = Push Flags 

10011100 

□ 




POPF = Pop Flags 

10011101 

□ 
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80C86A/80C88A INSTRUCTION SET SUMMARY (Continued) 


Mnemonic and 

Description 

Instruction Code 

ARITHMETIC 

76543210 


76543210 


76543210 

76543210 

ADD = Add: 







Reg./Memory with Register to Either 

OOOOOOdw 

X 

mod reg r/m 

D 



Immediate to Register/Memory 

1 0 0 0 0 0 sw 

X 

mod 0 0 0 r/m 

X 

data 

1 data if s:w = 01 | 

Immediate to Accumulator 

000001 Ow 

X 

data 

X 

data if w = 1 


ADC = Add with Carry: 







Reg./Memory with Register to Either 

0001 OOdw 

X 

mod reg r/m 

D 



Immediate to Register/ Memory 

1 OOOOOsw 

X 

mod 010 r/m 

X 

data 

1 data if s:w = 01 | 

Immediate to Accumulator 

0001 0 1 Ow 

X 

data 

X 

data if w = 1 


INC = Increment: 







Register/Memory 

1 1 1 1 1 1 1 w 

X 

mod 0 0 0 r/m 

D 



Register 

0 1 0 0 0 reg 

□ 





AAA = ASCII Adjust for Add 

00110111 

□ 





DAA = Decimal Adjust for Add 

00100111 

D 





SUB = Subtract: 







Reg./Memory and Register to Either 

00101 Odw 

X 

mod reg r/m 

□ 



Immediate from Register/ Memory 

lOOOOOsw 

X 

mod 101 r/m 

X 

data 

1 data if s;w = 01 | 

Immediate from Accumulator 

001 01 1 Ow 

X 

data 

X 

data if w = 1 


SBB = Subtract with Borrow 







Reg./Memory and Register to Either 

00011 Odw 

X 

mod reg r/m 

□ 



Immediate from Register/Memory 

lOOOOOsw 

X 

mod Oil r/m 

X 

data 

1 data if s:w = 01 | 

Immediate from Accumulator 

0001 1 1 Ow 

X 

data 

X 

data if w = 1 

] 

DEC = Decrement: 







Register/Memory 

1 1 1 1 1 1 1 w 

X 

mod 0 0 1 r/m 

□ 



Register 

010 01 reg 

□ 





NEG = Change Sign 

1 1 1 1 01 1w 

X 

mod 0 1 1 r/m 

□ 



CMP = Compare: 







Register/Memory and Register 

00 1 1 1 Odw 

X 

mod reg r/m 

□ 



Immediate with Register/ Memory 

1 OOOOOsw 

X 

mod 111 r/m 

X 

data 

1 data if s:w = 01 | 

Immediate with Accumulator 

001 1 1 1 Ow 

X 

data 

X 

data if w = 1 

] 

AAS = ASCII Adjust for Subtract 

00111111 

□ 





DAS = Decimal Adjust for Subtract 

00101111 

□ 





MUL = Multiply (Unsigned) 

1 1 1 1 0 1 1 w 

X 

mod 10 0 r/m 

□ 



IMUL = Integer Multiply (Signed) 

1 1 1 1 01 1 w 

X 

mod 101 r/m 

□ 



AAM = ASCII Adjust for Multiply 

11010100 

X 

0000101 0 

□ 



DIV = Divide (Unsigned) 

1 1 1 1 01 1 w 

X 

mod 110 r/m 

□ 



IDIV = integer Divide (Signed) 

' 1 1 1 1 01 1 w 

X 

mod 111 r/m 

□ 



AAD = ASCII Adjust for Divide 

11010101 

X 

00001010 

□ 



CBW = Convert Byte to Word 

10011000 

□ 





CWD = Convert Word to Double Word 

10011001 

□ 
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80C86A/80C88A INSTRUCTION SET SUMMARY (Continued) 


Mnemonic and 

Description 

Instruction Code 

LOGIC 

76543210 


76543210 


76543210 


76543210 

NOT = Invert 

1 1 1 1 01 1 w 

I 

mod 0 1 0 r/m 

□ 




SHL/SAL = Shift Logical/Arithmetic Left 

1101 OOvw 

X 

mod 1 0 0 r/m 

□ 




SHR = Shift Logical Right 

1101 OOvw 

X 

mod 101 r/m 

□ 




SAR = Shift Arithmetic Right 

1101 OOvw 

X 

mod 1 1 1 r/m 

□ 




ROL = Rotate Left 

1101 OOvw 

X 

mod 0 0 0 r/m 

□ 




ROR = Rotate Right 

1101 OOvw 

X 

mod 0 01 r/m 

□ 




RCL = Rotate Through Carry Flag Left 

1101 OOvw 

X 

mod 0 1 0 r/m 

□ 




RCR = Rotate Through Carry Right 

1101 OOvw 

X 

mod Oil r/m 

□ 




AND - And: 








Reg./Memory and Register to Either 

00 1 OOOdw 

X 

mod reg r/m 

□ 




Immediate to Register/Memory 

1 OOOOOOw 

X 

mod 1 0 0 r/m 

X 

data 

X 

data if w = 1 | 

Immediate to Accumulator 

00 1 00 1 Ow 

X 

data 

X 

data if w = 1 

□ 


TEST = And Function to Flags, No Result: 








Register/ Memory and Register 

1 00001 Ow 

X 

mod reg r/m 

□ 




Immediate Data and Register/Memory 

1 1 1 1 0 1 1 w 

X 

mod 0 0 0 r/m 

X 

data 

X 

data if w = 1 | 

Immediate Data and Accumulator 

10101 OOw 

X 

data 

X 

data if w = 1 

□ 


OR = Or: 








Reg./Memory and Register to Either 

00001 Odw 

X 

mod reg r/m 

□ 




Immediate to Register/ Memory 

1 OOOOOOw 

X 

mod 0 01 r/m 

X 

data 

X 

data if w = 1 | 

Immediate to Accumulator 

00001 1 Ow 

X 

data 

X 

data if w = 1 

□ 


XOR = Exclusive or: 








Reg./Memory and Register to Either 

0011 OOdw 

X 

mod reg r/m 

□ 




Immediate to Register/Memory 

1 OOOOOOw 

X 

mod 1 1 0 r/m 

X 

data 

X 

data if w = 1 j 

Immediate to Accumulator 

001 1 01 Ow 

X 

data 

X 

data if w = 1 

□ 


STRING MANIPULATION 








REP = Repeat 

1 1 1 1 001 z 

□ 






MOVS = Move Byte/Word 

1 01 001 Ow 

□ 






CMPS = Compare Byte/Word 

1 01 001 1 w 

□ 






SCAS = Scan Byte/Word 

1 0 1 0 1 1 1 w 







LODS = Load Byte/Wd to AL/AX 

1 01 01 1 Ow 

□ 





' 

STOS = Stor Byte/Wd from AL/A 

1 01 01 01 w 

□ 






CONTROL TRANSFER 








CALL = Call: 








Direct Within Segment 

11101 000 

X 

disp-low 

X 

disp-high 

□ 


Indirect Within Segment 

11111111 

X 

mod 010 r/m 

□ 




Direct Intersegment 

10011010 

X 

offset-low 

X 

offset-high 

□ 




c 

seg-low 

X 

seg-high 

□ 


Indirect Intersegment | 

11111111 

X 

mod 0 1 1 r/m 

□ 
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80C86A/80C88A INSTRUCTION SET SUMMARY (Continued) 


Mnemonic and 

Description 

Instruction Code 

JMP == Unconditionai Jump: 

76543210 

76543210 

76543210 

Direct Within Segment 

11101001 1 

disp-low 

1 disp-high | 

Direct Within Segment-Short 

11101011 1 

disp 


Indirect Within Segment 

11111111 1 

mod 10 0 r/m 


Direct Intersegment 

11101010 1 

offset-low 

1 offset-high | 


c 

seg-low 

1 seg-high | 

Indirect Intersegment 

11111111 1 

mod 101 r/m 


RET = Return from CALL: 




Within Segment 

1 1 00001 1 1 



Within Seg Adding Immed to SP 

1 1 00001 0 1 

data-low 

1 data-high | 

Intersegment 

11001011 1 



Intersegment Adding Immediate to SP 

11001010 1 

data-low 

1 data-high | 

JE/JZ = Jump on Equal/Zero 

01110100 i 

disp 


JL/JNGE = Jump on Less/Not Greater 

01111100 1 

disp 


or Equal 




JLE/JNG = Jump on Less or Equal/ 

01111110 1 

disp 


Not Greater 




JB/JNAE = Jump on Below/Not Above 

01110010 1 

disp 


or Equal 




JBE/JNA = Jump on Below or Equal/ 

01110110 1 

disp 


Not Above 




JP/JPE = Jump on Parity/Parity Even 

01111010 1 

disp 


JO = Jump on Overflow 

01 1 1 0000 I 

disp 


JS = Jump on Sign 

01 1 1 1 000 1 

disp 


JNE/JNZ = Jump on Not Equal/Not Zero 

01110101 1 

disp 

] 

JNL/JGE = Jump on Not Less/Greater 

01111101 1 

disp 

1 

or Equal 



J 

JNLE/JG = Jump on Not Less or Equal/ 

01111111 1 

disp 

] 

Greater 



j 

JNB/JAE = Jump on Not Below/Above 

01110011 1 

disp 

] 

or Equal 




JNBE/JA = Jump on Not Below or 

01110111 1 

disp 

] 

Equal/Above 




JNP/JPO = Jump on Not Par/Par Odd 

01111011 1 

disp 

] 

JNO = Jump on Not Overflow 

0111 0001 1 

disp 

] 

JNS = Jump on Not Sign 

01111001 1 

disp 

] 

LOOP = Loop CX Times 

1 1 1 0001 0 I 

disp 

] 

LOOPZ/LOOPE = Loop While Zero/Equal 

1 1 1 00001 1 

disp 

] 

LOOPNZ/LOOPNE = Loop While Not 

1 1 1 00000 1 

disp 

] 

Zero/Equal 



J 

“I 

JCXZ = Jump on CX Zero 

11100011 1 

disp 

] 

iNT = Interrupt 




Type Specified 

1 1 001 101 1 

type 

] 

Type 3 

11001100 1 



INTO = Interrupt on Overflow 

11001110 1 



IRET = Interrupt Return 

11001111 1 
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80C86A/80C88A INSTRUCTION SET SUMMARY (Continued) 


Mnemonic and 

Description 

Instruction Code 


76543210 76543210 

PROCESSOR CONTROL 


CLC = Clear Carry 

11111 000 I 

CMC = Complement Carry 

11110101 1 

STC = Set Carry 

11111001 1 

CLD = Clear Direction 

11111100 1 

STD == Set Direction 

11111101 1 

CLI = Clear Interrupt 

11111010 1 

STI = Set Interrupt 

11111011 1 

HLT = Halt 

11110100 1 

WAIT = Wait 

10011011 1 

ESC = Escape (to External Device) 

11011XXX I mod X X X r/m I 

LOCK = Bus Lock Prefix 

1111 0000 1 


NOTES: 

AL = 8-bit accumulator 
AX = 1 6-bit accumulator 
CX = Count register 
DS = Data segment 
ES = Extra segment 
Above/below refers to unsigned value. 

Greater = more positive; 

Less = less positive (more negative) signed values 
if d = 1 then “to” reg; if d = 0 then "from” reg 
if w = 1 then word instruction; if w = 0 then byte instruc- 
tion 

if mod = 1 1 then r/m is treated as a REG field 
if mod = 00 then DISP = 0*, disp-low and disp-high are 
absent 

if mod = 01 then DISP = disp-low sign-extended to 
16 bits, disp-high is absent 
if mod = 10 then DISP = disp-high: disp-low 
if r/m = 000 then EA = (BX) + (SI) + DISP 

if r/m = 001 then EA = (BX) + (Dl) + DISP 

if r/m = 010 then EA = (BP) + (SI) + DISP 

if r/m = 01 1 then EA = (BP) + (Dl) + DISP 

if r/m = 100 then EA = (SI) + DISP 
if r/m = 101 then EA = (Dl) + DISP 
if r/m = 110 then EA = (BP) + DISP* 

if r/m = 111 then EA = (BX) + DISP 

DISP follows 2nd byte of instruction (before data if re- 
quired) 

*except if mod = 00 and r/m = 110 then EA = disp- 
high: disp-low. 

**MOV CS, REG/MEMORY not allowed. 

DATA SHEET REVISION REVIEW 

The following list represents key differences between this and the -001 data sheet. Please review this summa- 
ry carefully. 

1. In the Pin Description Table (Table 1), the description of the HLDA signal being issued has been corrected. 
HLDA will be Issued in the middle of either the T4 or Ti state. 


if s:w = 01 then 16 bits of immediate data form the oper- 
and. 

if s:w = 1 1 then an immediate data byte Is sign extended 
to form the 1 6-bit operand. 

if V = 0 then “count” = 1; if v = 1 then “count” in (CL) 
X = don’t care 

z is used for string primitives for comparison with ZF FLAG. 

SEGMENT OVERRIDE PREFIX 


0 0 1 reg 1 1 0 


REG is assigned according to the following table: 


16-Bit (w = 1) 

8-Bit (w = 0) 

Segment 

000 

AX 

000 

AL 

00 

ES 

001 

CX 

001 

CL 

01 

CS 

010 

DX 

010 

DL 

10 

SS 

oil 

BX 

oil 

BL 

11 

DS 

100 

SP 

100 

AH 



101 

BP 

101 

CH 



110 

SI 

110 

DH 



111 

Dl 

111 

BH 




Instructions which reference the flag register file as a 1 6-bit 
object use the symbol FLAGS to represent the file: 

FLAGS = 

X:X:X:X:(OF):(DF):(IF):(TF):(SF):(ZF):X:(AF):X:(PF):X:(CF) 
Mnemonics © Intel, 1978 
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MATH COPROCESSOR 


intel* 


■ Adds Arithmetic, Trigonometric, 

Exponential, and Logarithmic 
Instructions to the Standard 8086/8088 
and 80186/80188 Instruction Set for All 
Data Types 

■ CPU/8087 Supports 7 Data Types: 16-, 

32-, 64-Bit Integers, 32-, 64-, 80-Bit 
Floating Point, and 18-Digit BCD 
Operands 

■ Compatible with IEEE Floating Point 
Standard 754 

The Intel 8087 Math Coprocessor is an extension to the Intel 8086/8088 microprocessor architecture. When 
combined with the 8086/8088 microprocessor, the 8087 dramatically increases the processing speed of 
computer applications which utilize mathematical operations such as CAM, numeric controllers, CAD or graph- 
ics. 

The 8087 Math Coprocessor adds 68 mnemonics to the 8086 microprocessor instruction set. Specific 8087 
math operations include logarithmic, arithmetic, exponential, and trigonometric functions. The 8087 supports 
Integer, floating point and BCD data formats, and fully conforms to the ANSI /IEEE floating point standard. 

The 8087 is fabricated with HMOS III technology and packaged in a 40-pln cerdip package. 


■ Available in 5 MHz (8087), 8 MHz (8087- 
2) and 10 MHz (8087-1): 8 MHz 80186/ 
80188 System Operation Supported 
with the 8087-1 

■ Adds 8 X 80-Bit individually 
Addressable Register Stack to the 
8086/8088 and 80186/80188 
Architecture 

■ 7 Built-In Exception Handling Functions 

■ MULTIBUS® System Compatible 
Interface 
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Table 1. 8087 Pin Description 


Symbol 

Type 

Name and Function 

AD15-AD0 

I/O 

ADDRESS DATA: These lines constitute the time multiplexed memory address (T-i) 
and data (T 2 , T 3 , Tyv, T 4 ) bus. AO is analogous to the BHE for the lower byte of the data 
bus, pins D7-D0. It Is LOW during Ti when a byte is to be transferred on the lower 
portion of the bus in memory operations. Eight-bit oriented devices tied to the lower half 
of the bus would normally use AO to condition chip select functions. These lines are 
active HIGH. They are input/output lines for 8087-driven bus cycles and are inputs 
which the 8087 monitors when the CPU is in control of the bus. A1 5-A8 do not require 
an address latch in an 8088/8087 or 80188/8087. The 8087 will supply an address for 
the T- 1 --T 4 period. 

A19/S6, 

A18/S5, 

A17/S4. 

A16/S3 

I/O 

ADDRESS MEMORY: During T-i these are the four most significant address lines for 
memory operations. During memory operations, status information is available on these 
lines during T 2 , T 3 , Tw. and T 4 . For 8087-controlled bus cycles, S 6 , S4, and S3 are 
reserved and currently one (HIGH), while S5 is always LOW. These lines are inputs 
which the 8087 monitors when the CPU is in control of the bus. 

BHE/S7 

I/O 

BUS HIGH ENABLE: During T-j the bus high enable signed (BHE) should be used to 
enable data onto the most significant half of the data bus, pins D15~D8. Eight-bit- 
oriented devices tied to the upper half of the bus would normally use BHE to condition 
chip select functions. BHE is LOW during T-j for read and write cycles when a byte is to 
be transferred on the high portion of the bus. The S7 status information Is available 
during T 2 , T 3 , Tw, and T 4 . The signal is active LOW. S7 Is an Input which the 8087 
monitors during the CPU-controlled bus cycles. 

S 2 , ST.SO 

I/O 

STATUS: For 8087-driven, these status lines are encoded as follows: 

S2 ST SO 

0 (LOW) X X Unused 

1 (HIGH) 0 0 Unused 

1 0 1 Read Memory 

1 1 0 Write Memory 

1 1 1 Passive 

Status Is driven active during T 4 , remains valid during Ti and T 2 , and is returned to the 
passive state (1,1, 1) during T 3 or during Tw when READY Is HIGH. This status Is used 
by the 8288 Bus Controller (or the 82188 Integrated Bus Controller with an 80186/ 

801 88 CPU) to generate all memory access control signals. Any change in S2, S 1 , or 

SO during T 4 is used to indicate the beginning of a bus cycle, and the return to the 
passive state in T 3 or Tw is used to indicate the end of a bus cycle. These signals are 
monitored by the 8087 when the CPU is in control of the bus. 

F0/GT6 i 

i 

I/O 

REQUEST/GRANT: This request/grant pin Is used by the 8087 to gain control of the 
local bus from the CPU for operand transfers or on behalf of another bus master. It 
must be connected to one of the two processor request/grant pins. The request/grant 
sequence on this pin is as follows: 

1 . A pulse one clock wide is passed to the CPU to indicate a local bus request by either 
the 8087 or the master connected to the 8087 RQ/GT 1 pin. 

2. The 8087 waits for the grant pulse and when it is received will either initiate bus 
transf^ activity in the clock cycle following the grant or pass the grant out on the . 
RQ/GT 1 pin In this clock if the initial request was for another bus master. 

3. The 8087 will generate a release pulse to the CPU one clock cycle after the 
completion of the last 8087 bus cycle or on receipt of the release pulse from the bus 
master on RQ/GT 1 . 

For 80186/801 88 systems the same sequence applies except RQ/CT signals are 
converted to appropriate HOLD, HLDA signals by the 82188 Integrated Bus Controller. 
This is to conform with 801 86/801 88’s HOLD, HLDA bus exchange protocol. Refer to 
the 82188 data sheet for further information. 
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Table 1. 8087 Pin Description (Continued) 


Symbol 

Type 

Name and Function 


I/O 

REQUEST/GRANT: This request/grant pin is used by another local bus master to 
force the 8087 to request the local bus. If the 8087 is not in control of the bus when the 
r^uest is made the request/grant sequence is passed through the 8087 on the RQ/ 
GTO pin one cycle later. Subsequent grant and release pulses are also passed through 
the 8087 with a two and one clock delay, respectively, for resynchronization. RQ/GT1 
has an internal pullup resistor, and so may be left unconnected. If the 8087 has control 
of the bus the request/grant sequence is as follows: 

1 . A pulse 1 CLK wide from another local bus master Indicates a local bus request to 
the 8087 (pulse 1). 

2. During the 8087’s next T 4 or Ti a pulse 1 CLK wide from the 8087 to the requesting 
master (pulse 2) indicates that the 8087 has allowed the local bus to float and that It 
will enter the “RQ/GT acknowledge” state at the next CLK. The 8087’s control unit 
is disconnected logically from the local bus during “RQ/GT acknowledge.” 

3. A pulse 1 CLK wide from the requesting master indicates to the 8087 (pulse 3) that 
the “RQ/GT” request is about to end and that the 8087 can reclaim the local bus at 
the next CLK. 

Each master-master exchange of the local bus is a sequence of 3 pulses. There must 
be one dead CLK cycle after each bus exchange. Pulses are active LOW. 

For 80186/80188 system, the RQ/GT 1 line may be connected to the 82188 Integrated 
Bus Controller. In this case, a third processor with a HOLD, HLDA bus exchange 
system may acquire the bus from the 8087. For this configuration, RQ/GT1 will only be 
used if the 8087 is the bus master. Refer to 821 88 data sheet for further Information. 

QSI.QSO 

1 

QS1, QSO: QS1 and QSO provide the 8087 with status to allow tracking of the CPU 
Instruction queue. 

QS1 QSO 

0 (LOW) 0 No Operation 

0 1 First Byte of Op Code from Queue 

1 (HIGH) 0 Empty the Queue 

1 1 Subsequent Byte from Queue 

INT 

0 

INTERRUPT: This line is used to Indicate that an unmasked exception has occurred 
during numeric instruction execution when 8087 interrupts are enabled. This signal is 
typically routed to an 8259A for 8086/8088 systems and to INTO for 80186/80188 
systems. INT is active HIGH. 

BUSY 

0 

BUSY: This signal indicates that the 8087 NEU is executing a numeric instruction. It Is 
connected to the CPU’s TEST pin to provide synchronization. In the case of an 
unmasked exception BUSY remains active until the exception is cleared. BUSY is 
active HIGH. 

READY 

1 

READY: READY is the acknowledgement from the addressed memory device that It 
will complete the data transfer. The RDY signal from memory Is synchronized by the 
8284A Clock Generator to form READY for 8086 systems. For 801 86/801 88 systems, 
RDY is synchronized by the 82188 Integrated Bus Controller to form READY. This 
signal is active HIGH. 

RESET 

1 

RESET: RESET causes the processor to immediately terminate its present activity. 

The signal must be active HIGH for at least four clock cycles. RESET is internally 
synchronized. 

CLK 

1 

CLOCK: The clock provides the basic timing for the processor and bus controller. It Is 
asymmetric with a 33% duty cycle to provide optimized internal timing. 

Vcc 


POWER: Vcc is the + 5V power supply pin. 

GND 


GROUND: GND are the ground pins. 


NOTE: 

For the pin descriptions of the 8086, 8088, 80186 and 80188 CPUs, reference the respective data sheets (8086, 8088, 
80186,80188). 
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APPLICATION AREAS 

The 8087 provides functions meant specifically for 
high performance numeric processing requirements. 
Trigonometric, logarithmic, and exponential func- 
tions are built into the coprocessor hardware. These 
functions are essential in scientific, engineering, 
navigational, or military applications. 

The 8087 also has capabilities meant for business or 
commercial computing. An 8087 can process Binary 
Coded Decimal (BCD) numbers up to 1 8 digits with- 
out roundoff errors. It can also perform arithmetic on 
integers as large as 64 bits ±1018). 


PROGRAMMING LANGUAGE 
SUPPORT 

Programs for the 8087 can be written in Intel’s high- 
level languages for 8086/8088 and 80186/80188 
Systems; ASM-86 (the 8086, 8088 assembly lan- 
guage), PL/M-86, FORTRAN-86, and PASCAL-86. 


RELATED INFORMATION 

For 8086, 8088, 80186 or 80188 details, refer to the 
respective data sheets. For 80186 or 80188 sys- 
tems, also refer to the 82188 Integrated Bus Con- 
troller data sheet. 


FUNCTIONAL DESCRIPTION 

The 8087 Math Coprocessor’s architecture is de- 
signed for high performance numeric computing In 
conjunction with general purpose processing. 


The 8087 is a numeric processor extension that pro- 
vides arithmetic and logical instruction support for a 
variety of numeric data types. It also executes nu- 
merous built-in transcendental functions (e.g., tan- 
gent and log functions). The 8087 executes Instruc- 
tions as a coprocessor to a maximum mode CPU. It 
effectively extends the register and instruction set of 
the system and adds several new data types as well. 
Figure 3 presents the registers of the CPU + 8087. 
Table 2 shows the range of data types supported by 
the 8087. The 8087 Is treated as an extension to the 
CPU, providing register, data types, control, and in- 
struction capabilities at the hardware level. At the 
programmer’s level the CPU and the 8087 are 
viewed as a single unified processor. 


System Configuration 

As a coprocessor to an 8086 or 8088, the 8087 Is 
wired in parallel with the CPU as shown in Figure '4. 
Figure 5 shows the 80186/80188 system configura- 
tion. The CPU’s status (S0-S2) and queue status 
lines (QS0-QS1) enable the 8087 to monitor and 
decode instructions in synchronization with the CPU 
and without any CPU overhead. For 80186/80188 
systems, the queue status signals of the 80186/ 
80188 are synchronized to 8087 requirements by 
the 8288 Integrated Bus Controller. Once started, 
the 8087 can process In parallel with, and indepen- 
dent of, the host CPU. For resynchronization, the 
8087’s BUSY signal Informs the CPU that the 8087 
is executing an instruction and the CPU WAIT In- 
struction tests this signal to insure that the 8087 Is 
ready to execute subsequent instructions. The 8087 
can interrupt the CPU when it detects an error or 
exception. The 8087’s interrupt request line is typi- 
cally routed to the CPU through an 8259A Program- 
mable Interrupt Controller for 8086, 8088 systems 
and INTO for 80186/80188. 
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Figure 3. CPU + 8087 Architecture 
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The 8087 uses one of the request/grant tines of the 
8086/8088 architecture (typically RQ/GTO) to ob- 
tain control of the local bus for data transfers. The 
other request/grant line Is available for general sys- 
tem use (for instance by an I/O processor In LOCAL 
mode). A bus master can also be connected to the 
8087’s RQ/GT1 line. In this configuration the 8087 
will pass the request/grant handshake signals be- 
tween the CPU and the attached master when the 
8087 is not in control of the bus and will relinquish 
the bus to the master directly when the 8087 is in 
control. In this way two additional masters can be 
configured in an 8086/8088 system; one will share 
the 8086/8088 bus with the 8087 on a first-come 
first-served basis, and the second will be guaranteed 
to be higher in priority than the 8087. 

For 80186/80188 systems, RQ/CTO and TO/GT1 
are connected to the corresponding Inputs of the 
82188 Integrated Bus Controller. Because the 
80186/80188 has a HOLD, HLDA bus exchange 
protocol, an interface is needed which will translate 
RQ/GT signals to corresponding HOLD, HLDA sig- 
nals and vice versa. One of the functions of the 
82188 IBC is to provide this translation. RQ/GTO is 
translated to HOLD, HLDA signals which are then 
directly connected to the 80186/80188. The RQ/ 
GT1 line is also translated into HOLD, HLDA signals 
(referred to as SYSHdLD, SYSHLDA signals) by the 
82188 IBC. This allows a third processor (using a 
HOLD, HLDA bus exchange protocol) to gain control 
of the bus. 


Table 2. 8087 Data Types 


Data 

Formats 

Range 

Precision 

Most Significant Byte 

o 

o 

7 07 0 

0 

0 

0 

0 

7 0 

7 0 

Word Integer 

104 

16 Bits 

hs >0 

Two’s Complement 

Short Integer 

109 

32 Bits 

*31 ' b 

Two’s Complement 


Long Integer 

1018 

64 Bits 

•63 >0 

Two’s 

Complement 


Packed BCD 

1018 

1 8 Digits 

i 

— D 17 D 16 


Di Do 

Short Real 

10±38 

24 Bits 

1 

E 7 EoF 

1 F 23 

Fq Implicit 


Long Real 

10±308 

I 

53 Bits 

1 

E 10 Eq 

Fi F 52 

Fq Implicit 

Temporary Real 

10 ±4932 

64 Bits 

i 

El 4 Eq Fq F63 


Integer: I 

Packed BCD: (- 1)S(Di7...Do) 
Real: (-1)S(2E-Bias)(Fo«Fi...) 
bias = 1 27 for Short Real 
1 023 for Long Real 
16383 for Temp Real 


Unlike an 8086/8087 system, RQ/GT is only used 
when the 8087 has bus control. If the third processor 
requests the bus when the current bus master Is the 
80186/80188, the 82188 IBC will directly pass the 
request onto the 80186/80188 without going 
through the 8087. The third processor has the high- 
est bus priority in the system. If the 8087 requests 
the bus while the third processor has bus control, 
the grant pulse will not be issued until the third proc- 
essor releases the bus, (using SYSHOLD). In this 
configuration, the third processor has the highest 
priority, the 8087 has the next highest, and the 
80186/80188 has the lowest bus priority. 


Bus Operation 

The 8087 bus structure, operation and timing are 
identical to all other processors in the 8086/8088 
series (maximum mode configuration). The address 
is time multiplexed with the data on the first 16/8 
lines of the address/data bus. A1 6 through A1 9 are 
time multiplexed with four status lines S3-S6. S3, 
S4 and S6 are always one (HIGH) for 8087-drlven 
bus cycles while S5 is always zero (LOW). When the 
8087 is monitoring CPU bus cycles (passive mode) 
S6 is also monitored by the 8087 to differentiate 
8086/8088 activity from that of a local I/O proces- 
sor or any other local bus master. (The 8086/8088 
must be the only processor on the local bus to drive 
S6 LOW ). S7 is multiplexed with and has the same 
value as BHE for all 8087 bus cycles. 
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The first three status lines, SO-S2, are used with an 
8288 bus controller or 82188 Integrated Bus Con- 
troller to determine the type of bus cycle being run: 


S2 

S1 

so 


0 

X 

X 

Unused 

1 

0 

0 

Unused 

1 

0 

1 

Memory Data Read 

1 

1 

0 

Memory Data Write 

1 ' 

1 

1 

Passive (no bus cycle) 


Programming Interface 

The 8087 includes the standard 8086, 8088 instruc- 
tion set for general data manipulation and program 
control. It also includes 68 numeric instructions for 
extended precision integer, floating point, trigono- 
metric, logarithmic, and exponential functions. Sam- 
ple execution times for several 8087 functions are 
shown In Table 3. Overall performance is up to 100 
times that of an 8086 processor for numeric instruc- 
tions. 

Any instruction executed by the 8087 is the com- 
bined result of the CPU and 8087 activity. The CPU 
and the 8087 have specialized functions and regis- 
ters providing fast concurrent operation. The CPU 
controls overall program execution while the 8087 
uses the coprocessor interface to recognize and 
perform numeric operations. 

Table 2 lists the seven data types the 8087 supports 
and presents the format for each type. Internally, the 

8087 holds all numbers in the temporary real format. 
Load and store instructions automatically convert 
operands represented in memory as 16-, 32-, or 64- 
blt integers, 32- or 64-bit floating point numbers or 
18-digit packed BCD numbers Into temporary real 
format and vice versa. The 8087 also provides the 
capability to control round off, underflow, and over- 
flow errors In each calculation. 

Computations In the 8087 use the processor’s regis- 
ter stack. These eight 80-bit registers provide the 
equivalent capacity of 20 32-bit registers. The 8087 
register set can be accessed as a stack, with in- 
structions operating on the top one or two stack ele- 
ments, or as a fixed register set, with instructions 
operating on explicitly designated registers. 

Table 5 lists the 8087’s instructions by class. All ap- 
pear as ESCAPE instructions to the host. Assembly 
language programs are written in ASM-86, the 8086, 

8088 assembly language. 


Table 3. Execution Times for Selected 
8086/8087 Numeric Instructions and 
Corresponding 8086 Emulation 


Floating Point 
Instruction 

Approximate 
Time | 

Execution 

jXS) 

8086/8087 
(8 MHz 
Clock) 

8086 

Emulation 

Add/Subtract 

10.6 

1000 

Multiply (Single 



Precision) 

11.9 

1000 

Multiply (Extended 



Precision) 

16.9 

1312 

Divide 

24.4 

2000 

Compare 

-5.6 

812 

Load (Double Precision) 

-6.3 

1062 

Store (Double Precision) 

13.1 

750 

Square Root 

22.5 

12250 

Tangent 

56.3 

8125 

Exponentiation 

62.5 

10687 


NUMERIC PROCESSOR 
EXTENSION ARCHITECTURE 

As shown in Figure 1 , the 8087 is internally divided 
into two processing elements, the control unit (CU) 
and the numeric execution unit (NEU). The NEU ex- 
ecutes all numeric instructions, while the CU re- 
ceives and decodes instructions, reads and writes 
memory operands and executes 8087 control in- 
structions, The two elements are able to operate in- 
dependently of one another, allowing the CU to 
maintain synchronization with the CPU while the 
NEU is busy processing a numeric instruction. 


Control Unit 

The CU keeps the 8087 operating in synchronization 
with its host CPU. 8087 instructions are intermixed 
with CPU instructions in a single instruction stream. 
The CPU fetches all in structio ns from memory; by 
monitoring the status (S0-S2, S6) emitted by the 
CPU, the control unit determines when an Instruction 
is being fetched. The CPU monitors the data bus in 
parallel with the CPU to obtain instructions that per- 
tain to the 8087. 
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Figure 4. 8086/8087, 8088/8087 System Configuration 
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Figure 5. 80186/8087, 80188/8087 System Configuration 
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The CU maintains an instruction queue that is identi- 
cal to the queue in the host CPU. The CU automati- 
cally determines if the CPU is an 8086/80186 or an 
808 8/80 188 immediately after reset (by monitoring 
the BHE/S7 line) and matches its queue length ac- 
cordingly. By monitoring the CPU’s queue status 
lines (QSO, QS1), the CU obtains and decodes in- 
structions from the queue in synchronization with the 
CPU. 

A numeric instruction appears as an ESCAPE in- 
struction to the CPU. Both the CPU and 8087 de- 
code and execute the ESCAPE instruction together. 
The 8087 only recognizes the numeric instructions 
shown in Table 5. The start of a numeric operation is 
accomplished when the CPU executes the ESCAPE 
instruction. The instruction may or may not identify a 
memory operand. 

The CPU does, however, distinguish between ESC 
instructions that reference memory and those that 
do not. If the instruction refers to a memory operand, 
the CPU calculates the operand’s address using any 
one of its available addressing modes, and then per- 
forms a “dummy read’’ of the word at that location. 
(Any location within the 1M byte address space is 
allowed.) This is a normal read cycle except that the 
CPU ignores the data it receives. If the ESC instruc- 
tion does not contain a memory reference (e.g. an 
8087 stack operation), the CPU simply proceeds to 
the next instruction. 

An 8087 instruction can have one of three memory 
reference options: (1) not reference memory; (2) 
load an operand word from memory into the 8087; or 
(3) store an operand word from the 8087 into memo- 
ry. If no memory reference is required, the 8087 sim- 
ply executes its instruction. If a memory reference is 
required, the CU uses a “dummy read” cycle Initiat- 
ed by the CPU to capture and save the address that 
the CPU places on the bus. If the instruction is a 
load, the CU additionally captures the data word 
when it becomes available on the local data bus. If 
data required Is longer than one word, the CU imme- 
diately obtains the bus from the CPU using the 
request/grant protocol and reads the rest of the in- 
formation in consecutive bus cycles. In a store oper- 
ation, the CU captures and saves the store address 
as in a load, and ignores the data word that follows 
in the “dummy read” cycle. When the 8087 is ready 
to perform the store, the CU obtains the bus from 
the CPU and writes the operand starting at the spec- 
ified address. 


Numeric Execution Unit 

The NEU executes all instructions that involve the 
register stack; these include arithmetic, logical, tran- 
scendental, constant and data transfer instructions. 
The data path in the NEU is 84 bits wide (68 frac- 
tions bits, 15 exponent bits and a sign bit) which 
allows internal operand transfers to be performed at 
very high speeds. 

When the NEU begins executing an instruction, it 
activates the 8087 BUSY signal. This signal can be 
used in conjunction with the CPU WAIT instruction to 
resynchronize both processors when the NEU has 
completed its current instruction. 


Register Set 

The CPU + 8087 register set is shown in Figure 3. 
Each of the eight data registers in the 8087’s regis- 
ter stack is 80 bits and is divided into “fields” corre- 
sponding to the 8087’s temporary real data type. 

At a given point in time the TOP field in the control 
word Identifies the current top-of-stack register. A 
“push” operation decrements TOP by 1 and loads a 
value into the new top register. A “pop” operation 
stores the value from the current top register and 
then Increments TOP by 1 . Like CPU stacks in mem- 
ory, the 8087 register stack grows “down” toward 
lower-addressed registers. 

Instructions may address the data registers either 
implicitly or explicitly. Many instructions operate on 
the register at the top of the stack. These instruc- 
tions implicitly address the register pointed to by the 
TOP. Other instructions allow the programmer to ex- 
plicitly specify the register which is to be used. Ex- 
plicit register addressing is “top-relative.” 


Status Word 

The status word shown in Figure 6 reflects the over- 
all state of the 8087; it may be stored in memory and 
then inspected by CPU code. The status word Is a 
16-bit register divided into fields as shown in Figure 
6. The busy bit (bit 15) indicates whether the NEU is 
either executing an instruction or has an interrupt 
request pending (B = 1), or is Idle (B = 0). Several 
instructions which store and manipulate the status 
word are executed exclusively by the CU, and these 
do not set the busy bit themselves. 
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15 0 


E 

□ 

TOP 

0 

0 

0 

J1 

0 




0 


□ 


EXCEPTION FLAGS (1 = EXCEPTION HAS OCCURRED) 

- INVALID OPERATION 

- DENORMALIZED OPERAND 

- ZERO DIVIDE 

- OVERFLOW 

- UNDERFLOW 

- PRECISION 

- (RESERVED) 

-- INTERRUPT REQUEST'’* 

- CONDITION CODE'*' 

- TOP OF STACK POINTER'** 

- NEU BUSY 

205835-6 


NOTES: 

1 . IR is set if any unmasked exception bit is set, cleared otherwise. 

2. See Table 3 for condition code interpretation. 

3. Top Values: 

000 = Register 0 is Top of Stack. 

001 = Register 1 is Top of Stack. 


111 = Register 7 is Top of Stack. 


Figure 6. 8087 Status Word 


The four numeric condition code bits (C 0 -C 3 ) are 
similar to flags In a CPU: various Instructions update 
these bits to reflect the outcome of the 8087 opera- 
tions. The effect of these instructions on the condi- 
tion code bits Is summarized in Table 4. 

Bits 14-12 of the status word point to the 8087 reg- 
ister that is the current top-of-stack (TOP) as de- 
scribed above. 

Bit 7 is the Interrupt request bit. This bit is set if any 
unmasked exception bit Is set and cleared other- 
wise. 

Bits 5-0 are set to indicate that the NEU has detect- 
ed an exception while executing an instruction. 


Tag Word 

The tag word marks the content of each register as 
shown in Figure 7. The principal function of the tag 
word Is to optimize the 8087’s performance. The tag 
word can be used, however, to interpret the con- 
tents of 8087 registers. 


Instruction and Data Pointers 

The Instruction and data pointers (see Figure 8 ) are 
provided for user-written error handlers. Whenever 
the 8087 executes a math instruction, the CU saves 
the instruction address, the operand address (if 
present) and the instruction opcode. 8087 instruc- 
tions can store this data into memory. 


15 0 


TAG|(7) 

TAG|(6) 

TAG|(5) 

TAGj(4) 

TAG|(3) 

TAG|(2) 

TAG|(1) 

TAG|(0) 


TAG VALUES: 

00 = VALID 

01 = ZERO 

10 = SPECIAL 

11 = EMPTY 


Figure 7. 8087 Tag Word 
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Table 4a. Condition Code interpretation 


Instruction 

Type 

C3 

C2 

C1 

Co 

Interpretation 

Compare, Test 

0 

0 

X 

0 

ST > Source or 0 (FTST) 


0 

0 

X 

1 

ST < Source or 0 (FTST) 


1 

0 

X 

0 

ST = Source or 0 (FTST) 


1 

1 

X 

1 

ST is not comparable 

Remainder 

Q1 

0 

Qo 

Qz 

Complete reduction with 
three low bits of quotient 
(See Table 4b) 


u 

1 

u 

u 

Incomplete Reduction 

Examine 

0 

0 

0 

0 

Valid, positive unnormalized 


0 

0 

0 

1 

Invalid, positive, exponent = 0 


0 

0 

1 

0 

Valid, negative, unnormalized 


0 

0 

1 

1 

Invalid, negative, exponent = 0 


0 

1 

0 

0 

Valid, positive, normalized 


0 

1 

0 

1 

Infinity, positive 


0 

1 

1 

0 

Valid, negative, normalized 


0 

1 

1 

1 

Infinity, negative 


1 

0 

0 

0 

Zero, positive 


1 

0 

0 

1 

Empty 


1 

0 

1 

0 

Zero, negative 


1 

0 

1 

1 

Empty ' 


1 

1 

0 

0 

Invalid, positive, exponent = 0 


1 

1 

0 

1 

Empty 


1 

1 

1 

0 

Invalid, negative, exponent = 0 

i 

1 

1 

1 

1 

Empty 


NOTES: 

1. ST == Top of stack 

2. X = value is not affected by instruction 

3. U = value is undefined following instruction 

4. Qn = Quotient bit n 


Table 4b. Condition Code Interpretation 
after FPREM Instruction As a 
Function of Divided Value 


Dividend Range 

Qa 

Qi 

Qo 

Dividend < 2 * Modulus 

C31 

C1I 

Qq 

Dividend < 4 * Modulus 

C31 

Qi 

Qo 

Dividend ^ 4 * Modulus 

O2 

Qi 

Qo 


NOTE: 

1 . Previous value of indicated bit, not affected by FPREM 
instruction execution. 


MEMORY 

OFFSET 


15 


0 


CONTROL WORD 

-f 0 

STATUS WORD 

+ 2 

TAG WORD 

+ 4 

INSTRUCTION POINTER (15-0) 

+ 6 

INSTRUCTION 
POINTER (19-16) 

0 

INSTRUCTION 
OPCODE (10-0) 

+ 8 

DATA POINTER (15-0) 

+ 10 

DATA POINTER 
(19-16) 

0 

+ 12 


15 12 11 0 


Figure 8. 8087 Instruction and Data Pointer 
Image in Memory 
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Control Word 

The 8087 provides several processing options which 
are selected by loading a word from memory into the 
control word. Figure 9 shows the format and encod- 
ing of the fields in the control word. 

The low order byte of this control word configures 
8087 interrupts and exception masking. Bits 5-0 of 
the control word contain individual masks for each of 
the six exceptions that the 8087 recognizes and bit 7 
contains a general mask bit for all 8087 interrupts. 
The high order byte of the control word configures 
the 8087 operating mode including precision, round- 
ing, and infinity controls. The precision control bits 
(bits 9-8) can be used to set the 8087 iriternal oper- 
ating precision at less than the default of temporary 
real precision. This can be useful in providing com- 
patibility with earlier generation arithmetic proces- 
sors of smaller precision than the 8087. The round- 
ing control bits (bits 11-10) provide for directed 
rounding and true chop as well as the unbiased 
round to nearest mode specified in the proposed 
IEEE standard. Control over closure of the number 
space at infinity is also provided (either affine clo- 
sure, ± oo , or projective closure, oo , is treated as 
unsigned, may be specified). 


Exception Handling 

The 8087 detects six different exception conditions 
that can occur during instruction execution. Any or 
all exceptions will cause an interrupt if unmasked 
and interrupts are enabled. 

If Interrupts are disabled the 8087 will simply contin- 
ue execution regardless of whether the host clears 
the exception. If a specific exception class Is 
masked and that exception occurs, however, the 
8087 will post the exception in the status register 
and perform an on-chip default exception handling 
procedure, thereby allowing processing to continue. 
The exceptions that the 8087 detects are the follow- 
ing: 

1. INVALID OPERATION: Stack overflow, stack un- 
derflow, indeterminate form (0/0, oo - oo, etc.) 
or the use of a Non-Number (NAN) as an oper- 
and. An exponent value is reserved and any bit 
pattern with this value in the exponent field is 
termed a Non-Number and causes this exception. 
If this exception is masked, the 8087’s default re- 
sponse Is to generate a specific NAN called IN- 
DEFINITE, or to propagate already existing NANs 
as the calculation result. 


15 0 


XXX 


_1L 

p c 

1 » 1 

“ 

□ 


0 

OM 


"I 

3 


EXCEPTION MASKS (1 = EXCEPTION IS MASKED) 

INVALID OPERATION 
DENORMALIZED OPERAND 
ZERO DIVIDE 
OVERFLOW 
UNDERFLOW 
PRECISION 
(RESERVED) 

INTERRUPT MASK (1 = INTERRUPTS ARE MASKED) 
PRECISION CONTROL'” 

ROUNDING control'” 

INFINITY CONTROL (0 = PROJECTIVE, 1 = AFFINE) 
(RESERVED) 

205835-7 


NOTES: 

1 . Precision Control 

00 = 24 bits 

01 = Reserved 

1 0 = 53 bits 

1 1 = 64 bits 


2. Rounding Control 

00 = Round to Nearest or Even 

01 = Round Down (toward -oo) 

10 = Round Up (toward + «>) 

1 1 = Chop (truncate toward zero) 


Figure 9. 8087 Control Word 
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2. OVERFLOW; The result is too large in magnitude 
to fit the specified format. The 8087 will generate 
an encoding for infinity if this exception is 
masked. 

3. ZERO DIVISOR: The divisor is zero while the divi- 
dend is a non-infinite, non-zero number. Again, 
the 8087 will generate an encoding for infinity if 
this exception is masked. 

4. UNDERFLOW: The result Is non-zero but too 
small in magnitude to fit in the specified format. If 
this exception is masked the 8087 will denormal- 


ABSOLUTE MAXIMUM RATINGS^ 


Ambient Temperature Under Bias 0°C to 70®C 

Storage Temperature - 65°C to + 1 50®C 

Voltage on Any Pin with 

Respect to Ground - 1 .OV to + 7V 

Power Dissipation 3.0 Watt 


ize (shift right) the fraction until the exponent is in 
range. This process is called gradual underflow. 

5. DENORMALIZED OPERAND: At least one of the 
operands or the result is denormallzed; it has the 
smallest exponent but a non-zero significand. 
Normal processing continues if this exception is 
masked off. 

6. INEXACT RESULT: If the true result is not exactly 
representable in the specified format, the result is 
rounded according to the rounding mode, and this 
flag is set. If this exception is masked, processing 
will simply continue. 


* Notice: Stresses above those listed under “Abso- 
lute Maximum Ratings” may cause permanent dam- 
age to the device. This is a stress rating only and 
functional operation of the device at these or any 
other conditions above those indicated in the opera- 
tional sections of this specification is not implied. Ex- 
posure to absolute maximum rating conditions for 
extended periods may affect device reliability. 


D.C. CHA 

RACTERISTICS Ta = 0°C to 70°C, Vcc = 5V +5% 

Symbol 

Parameter 

Min 

Max 

Units 

Test Conditions 

V|L 

Input Low Voltage 

-0.5 

0.8 

V 


V|H 

Input High Voltage 

2.0 

Vcc + 0-5 

V 


VoL 

Output Low Voltage (Note 8) 


0.45 

V 

Iql = 2.5 mA 

Vqh 

Output High Voltage 

2.4 


V 

Iqh = “400 jixA 

Icc 

Power Supply Current 


475 

mA 

Ta = 25“C 

Ili 

Input Leakage Current 


±10 

jlaA 

OV < V|N ^ Vcc 

•lo 

Output Leakage Current 


±10 

jixA 

Ta = 25“C 

VcL 

Clock Input Low Voltage 

-0.5 

0.6 

V 


VCH 

Clock Input High Voltage 

3.9 

Vcc + i-O 

V 


C|N 

Capacitance of Inputs 


10 

PF 

fc = 1 MHz 

C|o 

Capacitance of I/O Buffer 
(ADO-15, A16-A19, BHE, S2-S0, 
RQ/GT) and CLK 


15 

PF 

fc = 1 MHz 

Gout 

Capacitance of Outputs 

BUSY INT 


10 

pF 

fc = 1 MHz 
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A.C. CHARACTERISTICS Ta = O'^cto 70 °c, Vcc = 5V ±5% 

TIMING REQUIREMENTS 


Symbol 

Parameter 

8087 

8087-2 

8087-1 
(See Note 7) 

Units 

Test Conditions 

Min 

Max 

Min 

Max 

Mirr 

Max 

TCLCL 

CLK Cycle Period 

200 

500 

125 

500 

100 

500 

ns 


TCLCH 

CLK Low Time 

118 


68 


53 


ns 


TCHCL 

CLK High Time 

69 


44 


39 


ns 


TCH1CH2 

CLK Rise Time 


10 


10 


15 

ns 

From 1.0V to 3.5V 

TCL2CL2 

CLK Fall Time 


10 

' 

10 


15 

ns 

From 3.5V to 1.0V 

TDVCL 

Data In Setup Time 

30 


20 


15 


ns 


TCLDX 

Data In Hold Time 

10 


10 


10 


ns 


TRYHCH 

READY Setup Time 

118 


68 


53 


ns 


TCHRYX 

READY Hold Time 

30 


20 


5 


ns 


TRYLCL 

READY Inactive to CLK (Note 6) 

-8 


-8 


-10 


ns 


TGVCH 

RQ/GT Setup Time (Note 8) 

30 


15 


15 


ns 


TCHGX 

RQ/GT Hold Time 

40 


30 


20 


ns 


TQVCL 

QSO-1 Setup Time (Note 8) 

30 


30 


30 


ns 


TCLQX I 

QSO-1 Hold Time 

10 


10 


5 


ns 


TSACH 

Status Active Setup Time 

30 




10 ^ 




TSNCL 

Status Inactive Setup Time 

30 








TILIH 

Input Rise Time (Except CLK) 


20 


20 





TIHIL 

Input Fall Time (Except CLK) 


12 


12 


15 

ns 

From 2.0V to 0.8V 


TIMING RESPONSES 


Symbol 

Parameter 

8087 

8087-2 

8087-1 
(See Note 7) 

Units 

Test Conditions 

Min 

Max 

Min 

Max 

Min 

Max 

TCLML 

Command Active Delay 
(Notes 1 , 2) 

10/0 

35/70 

10/0 

35/70 

10/0 

35/70 

ns 

Cl = 20-100 pF 
for all 8087 Outputs 
(in addition to 8087 
self-load) 

TCLMH 

Command Inactive Delay 
(Notes 1 , 2) 

10/0 

35/55 

10/0 

35/55 

10/0 

35/70 

ns 

TRYHSH 

Ready Active to Status 
Passive (Note 5) 


110 


65 


45 

ns 

TCHSV 

Status Active Delay 

10 

110 

10 

60 

10 

45 

ns 

TCLSH 

Status Inactive Delay 

10 

130 

10 

70 

10 

55 

ns 

TCLAV 

Address Valid Delay 

10 

110 

10 

60 

10 

55 

ns 

TCLAX 

Address Hold Time 

10 


10 


10 

1 

ns 
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A.C. CHARACTERISTICS Ta = 0°Cto70X, Vcc = 5V ±5% (Continued) 


TIMING RESPONSES (Continued) 


Symbol 

Parameter 

8087 

8087-2 

8087-1 
(See Note 7) 

Units 

Test Conditions 



Min 

Max 

Min 

Max 

Min 

Max 



TCLAZ 

Address Float Delay 

TCLAX 

80 

TCLAX 

50 

TCLAX 

45 

ns 

Cl = 20-100 pF 

TSVLH 

Status Valid to ALE High 
(Notes 1 , 2) 


15/30 


15/30 


15/30 

ns 

for all 8087 Outputs 
(in addition to 8087 
self-load) 

TCLLH 

CLK Low to ALE Valid 
(Notes 1 , 2) 


15/30 


15/30 


15/30 

ns 

TCHLL 

ALE Inactive Delay 
(Notes 1 , 2) 


15/30 


15/30 


15/30 

ns 


TCLDV 

Data Valid Delay 

10 

110 

10 

60 

10 

50 

ns 


TCHDX 

Status Hold Tinne 

10 


10 


10 

45 

ns 


TCLDOX 

Data Hold Time 

10 


10 


10 


ns 


TCVNV 

Control Active Delay 
(Notes 1 , 3) 

5 

45 

5 

45 

5 

45 

ns 


TCVNX 

Control Inactive Delay 
(Notes 1 , 3) 

10 

45 

10 

45 

10 

45 

ns 


TCHBV 

BUSY and INT Valid Delay 

10 

150 

10 

85 

10 

65 

ns 


TCHDTL . 

Direction Control Active 
Delay (Notes 1 , 3) 


50 


50 


50 

ns 


TCHDTH 

Direction Control Inactive 
Delay (Notes 1 , 3) 


30 


30 


30 

ns 


TSVDTV 

STATUS to DT/R Delay 
(Notes 1 , 4) 

0 

30 

0 

30 

0 

30 

ns 


TCLDTV 

DT/R Active Delay 
(Notes 1 , 4) 

0 

55 

0 

55 

0 

55 

ns 


TCHDNV 

DEN Active Delay 
(Notes 1 , 4) 

0 

55 

0 

55 

0 

55 

ns 


TCHDNX 

DEN Inactive Delay 
(Notes 1 , 4) 

5 

55 

5 

55 

5 

55 

ns 


TCLGL 

RQ/GT Active Delay 
(Note 8) 

0 

85 

0 

50 

0 

38 

ns 

Cl = 40 pF (in 
addition to 8087 

TCLGH 

RQ/GT Inactive Delay 

0 

85 

0 

50 

0 

45 

ns 

self-load) 

TOLOH 

Output Rise Time 


20 


20 


15 

ns 

From 0.8V to 2.0V 

TOHOL 

Output Fall Time 


12 


12 


12 

ns 

From 2.0V to 0.8V 


NOTES: 

1. Signal at 8284A, 8288, or 82188 shown for reference only. 

2. 8288 timing/82188 timing. 

3. 8288 timing. 

4. 82188 timing. 

5. Applies only to T3 and wait states. 

6. Applies only to T2 state (8 ns into T3). 

7. IMPORTANT SYSTEM CONSIDERATION; Some 8087-1 timing parameters are constrained relative to the corresponding 
8086-1 specifications. Therefore, 8086-1 systems incorporating the 8087-1 should be designed with the 8087-1 specifica- 
tions. 

8. Changes since last revision. 
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A.C. TESTING INPUT, OUTPUT WAVEFORM 



A.C. TESTING LOAD CIRCUIT 


DEVICE 

UNDER 

TEST 


T. 

I 


Cl - 100 pF 


Cl Includes Jig Capacitance 


205835-9 


WAVEFORMS 

MASTER MODE (with 8288 references) 


T, T, T, 



NOTES: 205835-10 

1 . All signals switch between Vql ancJ Vqh unless otherwise specified. 

2. READY is sampled near the end of T2, T3 and Tyv to determine if Tyv machine states are to be inserted. 

3. The local bus floats only If the 8087 is returning control to the 8086/8088. 

4. ALE rises at later of (TSVLH, TCLLH). 

5. Status inactive in state just prior to T4. 

6. Signals at 8284A or 8288 are shown for reference only^ 

7. The issuance of 8288 command and control signals (MRDC, (MWTC, AMWC, and DEN) lags the active high 8288 
CEN. 

8. All timing measurements are made at 1.5V unless otherwise noted. 
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WAVEFORMS (Continued) 

MASTER MODE (with 82188 references) 





1 . All signals switch between Vql and Vqh unless otherwise specified. 

2. READY is sampled near the end of T2, T3 and Tw to determine if Tyv machine states are to be inserted. 

3. The local bus floats only if the 8087 is returning control to the 80186/80188. 

4. ALE rises at later of (TSVLH, TCLLH). 

5. Status inactive in state just prior to T4. 

6. Signals at 8284A or 82188 are shown for reference only^ 

7. The issuance of 8288 command and control signals (MRDC, (MWTC, AMWC, and DEN) lags the active high 8288 
CEN. 

8. All timing measurements are made at 1 .5V unless otherwise noted. 

9. DT/R becomes valid at the later of (TSVDTV, TCLDTV). 
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WAVEFORMS (Continued) 




BUSY AND INTERRUPT TIMING 


CLK \ ^ 






BUSY, INT 

ID 

c 

TCHBV 


1 


205835-16 
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Table 5. 8087 Extensions to the 86/186 Instructions Sets 


Clock Count Range 


Data Transfer 

FLD - LOAD MF 

Integer/Real Memory to ST(0) | ESCAPE MF 1 | MOD 0 0 0 R/M | 

Long Integer Memory to ST(0) | ESCAPE 1 1 1 | MOD 1 0 1 R/M | 

Temporary Real Memory to [^ESCAPE 0 1 i | MOD 1 0 1 R/M| 

ST(0) 

BCD Memory to ST(0) ESCAPE 1 1 1 MOD 1 0 0 R/M 

ST(i) to ST(0) I ESCAPE 0 0 1 I 1 1 0 0 0 ST(i) I 


FST - STORE 

ST(0) to Integer/Real Memory 


FSTP = STORE AND POP 
ST(0) to Integer/Real Memory 

ST(0) to Long Integer Memory 

ST{0) to Temporary Real 
Memory 

ST(0) to BCD Memory 
ST(0) to ST(i) 


I ESCAPE MF 1 I MOD 0 1 0 R/M | 

ESCAPE 10 1 110 10 ST(i) 

ESCAPE MF 1 MOD 0 1 1 R/M 

I ESCAPE 1 1 1 MOD 1 1 1 R/M 

ESCAPE 0 1 1 MOD 1 1 1 R/M 

ESCAPE 1 1 1 MOD 1 1 0 R/M 

ESCAPE 1 0 1 I 1 1 01 1 ST(i) I 


32 Bit 

32 Bit 

64 Bit 

16 Bit 

Real 

Integer 

Real 

Integer 

00 

01 

10 

11 

38-56 

52-60 

40-60 

46-54 

+ EA 

-l-EA 

-fEA 

-fEA 

60- 

-68 + EA 



53- 

65 -fEA 



290- 

-310 +EA 



17- 

-22 



84-90 

82-92 

96-104 

80-90 

-t-EA 

-t-EA 

-fEA 

-fEA 

15- 

-22 



86-92 

84-94 

98-106 

82-92 

-t-EA 

•fEA 

-fEA 

-fEA 

94- 

105 -fEA 



52- 

-58 -fEA 




520-540 +EA 


FXCH = Exchange ST(i) and 
ST(0) 

Comparison 

FCOM = Compare 
Integer/Real Memory to ST(0) 


ESCAPE 0 0 1 1 1 0 0 1 ST(i) 


I ESCAPE MF 0 I MOD 0 1 0 R/M | 
I ESCAPE 0 0 0 I 1 1 0 1 0 ST(i) I 


60-70 78-91 65-75 72-86 

+ EA + EA + EA + EA 


FCOMP = Compare and Pop 

Integer/Real Memory to ST(0) | ESCAPE MF 0 | MOD 0 1 1 R/M 

ST(i) to ST(0) I ESCAPE 0 0 0 1 1 1 0 1 1 ST(i) 


63-73 80-93 67-77 74-88 

+ EA + EA + EA + EA 
45-52 


FCOMPP = Compare ST(1) to [ESCAPE 110|l1 011001 

ST(0) and Pop Twice 


FTST = Test ST(0) 
FXAM = Examine ST(0) 


I ESCAPE 001[11 100100 

I ESCAPE 0 0 1 Tl 1 1 5 0 10 1 
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Table 5. 8087 Extensions to the 86/186 Instructions Sets (Continued) 


Constants 


FLDZ - LOAD + 0.0 into ST(0) 

FLD1 = LOAD + 1.0 into ST(0) 

FLDPI = LOAD TT into ST(0) 

FLDL2T = LOAD log 2 10 into 
ST(0) 

FLDL2E = LOAD log 2 e into 
ST{0) 

FLDLG2 = LOAD logic 2 into 
ST(0) 

FLDLN2 = LOAD loge2 into 
ST(0) 

Arithmetic 

FADD = Addition 
Integer/Real Memory with ST(0) 

ST(i) and ST(0) 

FSUB = Subtraction 
Integer/Real Memory with ST(0) 

ST(i) and ST(0) 


FMUL = Multiplication 
Integer/Real Memory with ST(0) 

ST{i) and ST(0) 

FDIV = Division 

Integer/Real Memory with ST(0) 
ST(i) and ST{0) 


FSQRT = Square Root of ST(0) 
FSCALE = Scale ST(0) by ST{1) 

FPREM = Partial Remainder of 
ST(0) -ST(1) 

FRNDINT = Round ST{0) to 
Integer 



Optional 

1 Clock Count Range 



8,16 Bit 

32 Bit 

32 Bit 

64 Bit 

16 Bit 


Displacement 

Real 

Integer 

Real 

Integer 

MF 

00 

01 

10 

11 


I ESCAPE 00l|l1 101110 I 11-17 

I ESCAPE 0 0 1 I 1 1 1 0 1 0 0 0 | 15-21 

I ESCAPE 0 0 1 n 1 1 0 1 0~~1 1~| 16-22 

I ESCAPE 001 |l1 lOIOO'l I 16-22 

I ESCAPE 00l|l1 101010 I 15-21 

I ESCAPE 00l|l1 101100 I 18-24 

I ESCAPE 00l|l1 101101 I 17-23 


ESCAPE MF 


MOD 0 0 0 R/M 


90-120 108-143 95-125 102-137 

+ EA + EA + EA + EA 


I ESCAPE d P 0 I 1 1 0 0 0 ST(i) 


70-100 (Note 1) 


1 ESCAPE MF 0 

1 MOD 

1 0 R R/M I 


1 ESCAPE d P 0 

1 1 1 0 R R/M 


DISP 


90-120 108-143 95-125 102-137 

+ EA + EA + EA + EA 

70-100 (Note 1) 


ESCAPE 

MF 0 

MOD 

0 

0 1 

R/M 

1 DISP 1 








1 ESCAPE 

d P 0 

1 ^ 

0 

0 1 

R/M 









1 ESCAPE 

MF 0 

MOD 

1 

1 R 

R/M 

DISP 1 


1 ESCAPE d P 0 

1 1 1 1 R R/M 1 


ESCAPE 0 0 1 

11 1110 10 


ESCAPE 0 0 1 

11 11110 1 1 


ESCAPE 0 0 1 

11 1110 0 0 


ESCAPE 0 0 1 

1 1 1 1 1 1 0 0 1 


110-125 130-144 112-168 124-138 
+ EA + EA + EA -f EA 

90-145 (Note 1) 


215-225 230-243 220-230 224-238 
+ EA + EA + EA + EA 

193-203 (Note 1) 


180-186 


32-38 


15-190 


16-50 


205835-18 


NOTE: 

1. If P = 1 then add 5 clocks. 
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Table 5. 8087 Extensions to the 86/186 Instructions Sets (Continued) 


Optional 
8,16 Bit 
Displacement 


Clock Count Range 


FXTRACT - Extract 
Components of St(0) 


ESCAPE 00111 110100 


FABS - Absolute Value of ESCAPE 00111 100001 

ST(0) * * 

FCHS - Change Sign of ST(0) I ESCAPE 0 0 1 I 1 1 1 0 0 0 0 0 


Transcendental 


FPTAN = Partial Tangent of 
ST(0) 


ESCAPE 00111 110010 


FPATAN = Partial Arctangent 
of ST(0) -ST(1) 

F2XM1 = 


ESCAPE 00111 110011 


ESCAPE 00111 110000 


FYL2X = ST(1)- Log2 
IST(0)| 

FYL2XP1 - ST(1)* Log2 
[ST(O)^I) 

Processor Control 

FINIT = Initialized 8087 


ESCAPE 00111 110001 


ESCAPE 00111 111001 


ESCAPE 01111 100011 


FENI = Enable Interrupts 


ESCAPE 01111 100000 


FDISI = Disable Interrupts 


ESCAPE 01111 100001 


FLDCW = Load Control Word ESCAPE 0 0 1 MOD 1 0 1 R/M 


FSTCW = Store Control Word ESCAPE 0 0 1 MOD 1 1 1 R/M 


FSTSW - Store Status Word 


ESCAPE 10 1 mod 1 1 1 R/M 


FCLEX == Clear Exceptions 


ESCAPE 01111 100010 


FSTENV = Store Environment ESCAPE 0 0 1 MOD 1 1 0 R/M 


FLDENV = Load Environment ESCAPE 0 0 1 MOD 1 0 0 R/M 


FSAVE = Save State 


FRSTOR = Restore State 


ESCAPE 10 1 mod 1 1 0 R/M 


ESCAPE 10 1 mod 1 0 0 R/M 


197- 207+ EA 


FINCSTP = Increment Stack 
Pointer 


ESCAPE 00111 110111 


FDECSTP = Decrement Stack 
Pointer 


ESCAPE 00111 110110 
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Table 5. 8087 Extensions to the 86/186 Instructions Sets (Continued) 



NOTES: 

1. if mod = 00 then DISP = 0*, disp-low and disp-high are absent 

if mod = 01 then DISP = disp-low sign-extended to 16-bits, disp-high is absent 
if mod = 10 then DISP = disp-high; disp-low 
if mod = 11 then r/m is treated as an ST(i) field 

2. if r/m = 000 then EA = (BX) + (SI) + DISP 

if r/m = 001 then EA = (BX) -h (Dl) + DISP 

if r/m = 010 then EA = (BP) + (SI) + DISP 

if r/m = 01 1 then EA = (BP) + (Dl) + DISP 

if r/m = 100 then EA = (SI) -i- DISP 

if r/m = 101 then EA = (Dl) + DISP 
if r/m = 110 then EA = (BP) -f DISP 

if r/m = 1 1 1 then EA = (BX) + DISP 

’except if mod = 000 and r/m = 110 then EA = disp-high; disp-low. 

3. MF = Memory Format 

00- 32-bit Real 

01 - 32-bit Integer 

10- 64-bit Real 

11 - 16-bit Integer 

4. ST(0) = Current stack top 

ST(i) = ith register below stack top 

5. d = Destination 

0 — Destination is ST(0) 

1 — Destination is ST(i) 

6. P = Pop 

0 — No pop 

1— Pop ST(0) 

7. R = Reverse: When d = 1 reverse the sense of R 

0— Destination (op) Source 

1 — Source (op) Destination 

8. For FSQRT: -0 ^ ST(0) ^ 4- qo 

For FSCALE: -215 ^ ST(1) < +215 and ST(1) integer 
For F2XM1: 0 ^ ST(0) ^ 2-1 

For FYL2X: 0 < ST(0) < oo 

- oo < ST(1) < +00 

ForFYL2XP1: 0 ^ IST(0)l < (2 - V2)/2 
-oo < ST(1) < oo 
For FPTAN: 0 ^ ST(0) ^ 7r/4 
For FPATAN: 0 ^ ST(0) < ST(1) < + oo 


2-143 






80286 Microprocessor Family 





Intel 




80C286 

HIGH PERFORMANCE CHMOS MICROPROCESSOR 
WITH MEMORY MANAGEMENT AND PROTECTION 


■ High Speed CHMOS III Technology 

■ Pin for Pin, Clock for Clock, and 
Functionally Compatible with the HMOS 
80286 

(See 80286 Data Sheet, Order #210253) 

■ Stop Clock Capability 

— Uses Less Power (see Ices 
Specification) 

INTRODUCTION 


■ 12.5 MHz Clock Rate 

■ Available in a Variety of Packages: 

— 68 Pin PLCC (Plastic Leaded Chip 
Carrier) 

— 68 Pin PGA (Pin Grid Array) 

(See Packaging Spec., Order #231369) 


The 80C286 is an advanced 16 bit CHMOS III microprocessor designed for multi-user and multi-tasking 
applications that require low power and high performance. The 80C286 is fully compatible with its predecessor 
the HMOS 80286 and object-code compatible with the 8086 and 80386 family of products. In addition, the 
80C286 has a power down mode which uses less power, making it ideal for mobile applications. The 80C286 
has built-in memory protection that maintains a four level protection mechanism for task isolation, a hardware 
task switching facility and memory management capabilities that map 2^0 bytes (one gigabyte) of virtual 
address space per task (per user) Into 224 bytes (16 megabytes) of physical memory. 


The 80C286 is upward compatible with 8086 and 8088 software. Using 8086 real address mode, the 80C286 
Is object code compatible with existing 8086, 8088 software. In protected virtual address mode, the 80C286 Is 
source code compatible with 8086, 8088 software which may require upgrading to use virtual addresses 
supported by the 80C286’s Integrated memory management and protection mechanism. Both modes operate 
at full 80C286 performance and execute a superset of the 8086 and 8088 instructions. 


The 80C286 provides special operations to support the efficient implementation and execution of operating 
systems. For example, one instruction can end execution of one task, save its state, switch to a new task, load 
its state, and start execution of the new task. The 80C286 also supports virtual memory systems by providing a 
segment-not-present exception and restartable instructions. 



V ^23 - Aq. 
BHE, M/iS 


► peACk 

- PEREQ 

READY, HOLD 

COD/WfA 
HLDA 


-K ST.se, 
■V C6eR,K 


- RESET 

- CLK 
“ Vss 

- Vcc 

- CAP 


Figure 1. 80C286 Internal Block Diagram 
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Component Pad Views — As viewed from underside of 
component when mounted on the board. 


P.C. Board Views — As viewed from the component 
side of the P.C. board. 


Plastic Leaded Chip Carrier 



NOTE: 

N.C. signals must not be connected 


Pin Grid Array 


: s s 



CLK Vcc 
RESET A5 


MO 

A12 


Figure 2. 80C286 Pin Configuration 


Table 1. Pin Description 

The following pin function descriptions are for the 80C286 microprocessor : 


Symbol 

Type 

Name and Function 

CLK 

I 

SYSTEM CLOCK provides the fundamental timing for 80C286 systems. It is 
divided by two inside the 80C286 to generate the processor clock. The internal 
divide-by-two circuitry can be synchronized to an external clock generator by a 

LOW to HIGH transition on. the RESET input. 

Di5-Do 

I/O 

DATA BUS inputs data during memory, I/O, and interrupt acknowledge read 
cycles: outputs data during memory and I/O write cycles. The data bus is active 

HIGH and floats to 3-state OFF* during bus hold acknowledge. 

A 23 -A 0 

0 

ADDRESS BUS outputs physical memory and I/O port addresses. AO is LOW 
when data is to be transferred on pins Dy.Q. A 23 -A 16 are LOW during I/O 
transfers. The address bus is active HIGH and floats to 3-state OFF* during bus 
hold acknowledge. 

BHE 

0 

BUS HIGH ENABLE indicates transfer or data on the upper byte of the data bus. 
Di 5 _ 8 . Eight-bit oriented devices assigned to the upper byte of the data bus would 
normally use BHE to condition chip select functions. BHE is active LOW and floats 
to 3-state OFF* during bus hold acknowledge. 


‘See bus hold circuitry section. 
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Table I. Pin Description (Continued) 


Symbol 

Type 

Name and Function 

BHE 


BHE and AO Encodings 

(Continued) 


BHE Value 

AO Value 

Function 



0 

0 

Word transfer 




0 

1 

Transfer on upper half of data bus (D-| s-Ds) 



1 

0 

Byte transfer on lower half of data bus (D 7 -D 0 ) 



1 

1 

Will never occur 


^,S 0 

0 

BUS CYCLE STATUS indicates initiation of a bus cycle and, along with M/IO and COD/ 

INTA, defines the type of bus cycle. The bus is in a Ts state whenever one or both are LOW, 
S 1 and SO are active LOW and float to 3-state OFF’^ during bus hold acknowledge. 



80C286 Bus Cycle Status Definition 



COD/INTA 

M/IO 

S1 

so 

Bus Cycle Initiated 



0 (LOW) 

0 

0 

0 

Interrupt acknowledge 



0 

0 

0 

1 

Will not occur 



0 

0 

1 

0 

Will not occur 



0 

0 

1 

1 

None; not a status cycle 



0 

1 

0 

0 

IF A1 = 1 then halt; else shutdown 



0 

1 

0 

1 

Memory data read 



0 

1 

1 

0 

Memory data write 



0 

1 

1 

1 

None; not a status cycle 



1 (HIGH) 

0 

0 

0 

Will not occur 



1 

0 

0 

1 

I/O read 



1 

0 

1 

0 

I/O write 



1 

0 

1 

1 

None; not a status cycle 



1 

1 

0 

0 

Will not occur 



1 

1 

0 

1 

Memory instruction read 



1 

1 

1 

0 

Will not occur 



1 

1 

1 

1 

None; not a status cycle 

M/lO 

0 

MEMORY I/O SELECT distinguishes memory access from I/O access. If HIGH during Tg, a 
memory cycle or a halt/shutdown cycle is in progress. If LOW, an I/O cycle or an interrupt 
acknowledge cycle is in progress. M/IO floats to 3-state OFF* during bus hold 



acknowledge. 





cod/inTa 

0 

CODE/INTERRUPT ACKNOWLEDGE distinguishes instruction fetch cycles from memory 
data read cycles. Also distinguishes interrupt acknowledge cycles from I/O cycles. COD/ 
INTA floats to 3-state OFF* during bus hold acknowledge. Its timing is the same as M/IO. 

LOCK 

0 

BUS LOCK indicates that other system bus masters are not to gain control of the system 
bus for the current and the following bus cycle. The LOCK signal may be activated explicitly . 
by the “LOCK” instruction prefix or automatically by 80C286 hardware during memory 

XCHG instructions, interrupt acknowledge, or descriptor table access. LOCK is active LOW 
and floats to 3-state OFF* during bus hold acknowledge. 

READY 

1 

BUS READY terminates a bus cycle. Bus cycles are extended without limit until terminated 



by READY LOW. READY is an active LOW synchronous input requiring setup and hold 
times relative to the system clock be met for correct operation. READY is ignored during 



bus hold acknowledge. 




HOLD 

1 

BUS HOLD REQUEST AND HOLD ACKNOWLEDGE control ownership of the 80C286 

HLDA 

0 

local bus. The HOLD input allows another local bus master to request control of the local 
bus. When control is granted, the 80C286 will float its bus drivers to 3-state OFF* and then 
activate HLDA, thus entering the bus hold acknowledge condition. The local bus will remain 
granted to the requesting master until HOLD becomes inactive which results in the 80C286 
deactivating HLDA and regaining control of the local bus. This terminates the bus hold 
acknowledge condition. HOLD may be asynchronous to the system clock. These signals 



are active HIGH. 





INTR 

1 

INTERRUPT REQUEST requests the 80C286 to suspend its current program execution 
and service a pending external request. Interrupt requests are masked whenever the 



interrupt enable bit in the flag word is cleared. When the 80C286 responds to an interrupt 
request, it performs two interrupt acknowledge bus cycles to read an 8 -bit interrupt vector 



that identifies the source of the interrupt To assure program interruption, INTR must remain 
active until the first interrupt acknowledge cycle is completed. INTR is sampled at the 
beginning of each processor cycle and must be active HIGH at least two processor cycles 
before the current instruction ends in order to interrupt before the next instruction. INTR is 
level sensitive, active HIGH, and may be asynchronous to the system clock. 


See bus hold circuitry section. 
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Table 1. Pin Description (Continued) 


Symbol 

Type 

Name and Function 

NMI 

I 

NON-MASKABLE INTERRUPT REQUEST interrupts the 80C286 with an 
internally supplied vector value of 2. No interrupt acknowledge cycles are 
performed. The interrupt enable bit in the 80C286 flag word does not affect 
this input. The NMI input is active HIGH, may be asynchronous to the system 
clock, and is edge triggered after internal synchronization. For proper 
recognition, the input must have been previously LOW for at least four system 
clock cycles and remain HIGH for at least four system clock cycles. 

PEREQ 

PEACK 

I 

0 

PROCESSOR EXTENSION OPERAND REQUEST AND ACKNOWLEDGE 

extend the memory management and protection capabilities of the 80C286 to 
processor extensions. The PEREQ input requests the 80C286 to perform a 
data operand transfer for a processor extension. The PEACK output signals 
the processor extension when the requested operand is being transferred. 

PEREQ is active HIGH and floats to 3-state OFF* during bus hold 



acknowledge. PEACK may be asynchronous to the system clock. PEACK is 
active LOW. 

BUSY 

ERROR 

I 

I 

PROCESSOR EXTENSION BUSY AND ERROR indicate the operating 
condition of a processor extension to the 80C286. An active BUSY input 
stops 80C286 program execution on WAIT and some ESC instructions until 

BUSY becomes inactive (HIGH). The 80C286 may be interrupted while 
waiting for BUSY to become inactive. An active ERROR input causes the 

80C286 to perform a processor extension interrupt when executing WAIT or 
some ESC instructions. These inputs are active LOW and may be 
asynchronous to the system clock. These inputs have internal pull-up 
resistors. 

RESET 

i 

SYSTEM RESET clears the internal logic of the 80C286 and is active HIGH. 

The 80C286 may be reinitialized at any time with a LOW to HIGH transition on 
RESET which remains active for more than 16 system clock cycles. During 
RESET active, the output pins of the 80C286 enter the state shown below: 



80C286 Pin State During Reset 



Pin Value 

Pin Names 



1 (HIGH) 

0 (LOW) 

3-state OFF* 

SO, SI, PEACK, A23-A0, BHE, LOCK 

M/IO, COD/INTA, HLDA (Note 1) 

Di5-Do 



Operation of the 80C286 begins after a HIGH to LOW transition on RESET. 

The HIGH to LOW transition of RESET must be synchronous to the system 
clock. Approximately 38 CLK cycles from the trailing edge of RESET are 
required by the 80C286 for internal initialization before the first bus cycle, to 
fetch code from the power-on execution address, occurs. 

A LOW to HIGH transition of RESET synchronous to the system clock will 
end a processor cycle at the second HIGH to LOW transition of the system 
clock. The LOW to HIGH transition of RESET may be asynchronous to the 
system clock; however, in this case it cannot be predetermined which phase 
of the processor clock will occur during the next system clock period. 
Synchronous LOW to HIGH transitions of RESET are required only for 
systems where the processor clock must be phase synchronous to another 
clock. 

Vss 

I 

SYSTEM GROUND: 0 Volts. 

Vcc 

I 

SYSTEM POWER: + 5 Volt Power Supply. 

CAP 

I 

SUBSTRATE FILTER CAPACITOR: a 0.047 /xF ± 20% 12V capacitor can 
be connected between this pin and ground for compatibility with the HMOS 
80286. For systems using only an 80C286, this pin can be left floating. 


*See bus hold circuitry section. 


NOTE: 

1. HLDA is only Low if HOLD is inactive (Low). 


3-4 






80C286 




inW 


FUNCTIONAL DESCRIPTION 
Introduction 


addressing modes. The 80C286 processor is up- 
ward compatible with the 8086, 8088, and 80186 
CPU’s and fully compatible with the HMOS 80286. 


The 80C286 is an advanced, high-performance mi- 
croprocessor with specially optimized capabilities for 
multiple user and multi-tasking systems. Depending 
on the application, a 12 MHz 80C286’s performance 
is up to ten times faster than the standard 5 MHz 
8086’s, while providing complete upward software 
compatibility with Intel’s 8086, 88, and 186 family of 
CPU’s. 

The 80C286 operates in two modes: 8086 real ad- 
dress mode and protected virtual address mode. 
Both modes execute a superset of the 8086 and 88 
instruction set. 

In 8086 real address mode programs use real ad- 
dresses with up to one megabyte of address space. 
Programs use virtual addresses in protected virtual 
address mode, also called protected mode. In pro- 
tected mode, the 80C286 CPU automatically maps 1 
gigabyte of virtual addresses per task into a 16 
megabyte real address space. This mode also pro- 
vides memory protection to isolate the operating 
system and ensure privacy of each tasks’ programs 
and data. Both modes provide the same base in- 
struction set, registers, and addressing modes. 

The following Functional Description describes first, 
the base 80C286 architecture common to both 
modes, second, 8086 real address mode, and third, 
protected mode. 

80C286 BASE ARCHITECTURE 


Register Set 

The 80C286 base architecture has fifteen registers 
as shown in Figure 3. These registers are grouped 
into the following four categories: 

General Registers: Eight 16-bit general purpose 
registers used to contain arithmetic and logical oper- 
ands. Four of these (AX, BX, CX, and DX) can be 
used either in their entirety as 16-bit words or split 
into pairs of separate 8-bit registers. 

Segment Registers: Four 16-bit special purpose 
registers select, at any given time, the segments of 
memory that are immediately addressable for code, 
stack, and data. (For usage, refer to Memory Organi- 
zation.) 

Base and Index Registers: Four of the general pur- 
pose registers may also be used to determine offset 
addresses of operands in memory. These registers 
may contain base addresses or indexes to particular 
locations within a segment. The addressing mode 
determines the specific registers used for operand 
address calculations. 

Status and Control Registers: The 3 16-bit special 
purpose registers in figure 3A record or control cer- 
tain aspects of the 80C286 processor state including 
the Instruction Pointer, which contains the offset ad- 
dress of the next sequential instruction to be execut- 
ed. 


The 8086, 88, 186, and 286 CPU family all contain 
the same basic set of registers, instructions, and 


16-BIT 

REGISTER 

NAME 


BYTE 

ADDRESSABLE 

{8-BlT 

REGISTER 

NAMES 

SHOWN) 


7 0 7 0 

AX 

DX 
CX 
BX 

BP 

SI 

Dl 

SP 


15 


0 


SPECIAL 

REGISTER 

FUNCTIONS 


MULTIPLY/DIVIDE 
I/O INSTRUCTIONS 


LOOP/SHIFT/REPEAT/COUNT 


BASE REGISTERS 


INDEX REGISTERS 


STACK POINTER 


GENERAL 

REGISTERS 


15 0 



REGISTERS 


CODE SEGMENT SELECTOR 
DATA SEGMENT SELECTOR 
STACK SEGMENT SELECTOR 
EXTRA SEGMENT SELECTOR 


STATUS WORD 

INSTRUCTION POINTER 


Figure 3. Register Set 
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Flags Word Description Table 2. Flags word Bit Functions 

The Flags word (Flags) records specific characteris- 
tics of the result of logical and arithmetic instructions 
(bits 0, 2, 4, 6, 7, and 11) and controls the operation 
of the 80C286 within a given operating mode (bits 8 
and 9). Flags is a 16-bit register. The function of the 
flag bits is given in Table 2. 


Instruction Set 


The Instruction set is divided into seven categories: 
data transfer, arithmetic, shift/rotate/ logical, string 
manipulation, control transfer, high level instruc- 
tions, and processor control. These categories are 
summarized in Figure 4. 

An 80C286 instruction can reference zero, one, or 
two operands; where an operand resides in a regis- 
ter, in the instruction itself, or in memory. Zero-oper- 
and instructions (e.g. NOP and HLT) are usually one 
byte long. One-operand instructions (e.g. INC and 
DEC) are usually two bytes long but some are en- 
coded in only one byte. One-operand instructions 
may reference a register or memory location. Two- 
operand instructions permit the following six types of 
instruction operations: 

— Register to Register 
—Memory to Register 
—Immediate to Register 
— Memory to Memory 
— Register to Memory 
—Immediate to Memory 


Bit 

Position 

Name 

Function 

0 

CF 

Carry Flag — Set on high-order bit 
carry or borrow; cleared otherwise 

2 

PF 

Parity Flag — Set if low-order 8 bits 
of result contain an even number of 

1 -bits; cleared otherwise 

4 

AF 

Set on carry from or borrow to the 
low order four bits of AL; cleared 
otherwise 

6 

ZF 

Zero Flag— Set if result is zero; 
cleared otherwise 

7 

SF 

Sign Flag — Set equal to high-order 
bit of result (0 if positive, 1 if negative) 

11 

OF 

Overflow Flag — Set if result is a too- 
large positive number or a too-small 
negative number (excluding sign-bit) 
to fit in destination operand; cleared 
otherwise 

8 

TF 

Single Step Flag — Once set, a sin- 
gle step interrupt occurs after the 
next instruction executes. TF is 
cleared by the single step interrupt. 

9 

IF 

Interrupt-enable Flag— When set, 
maskable interrupts will cause the 

CPU to transfer control to an inter- 
rupt vector specified location. 

10 

DF 

Direction Flag— Causes string 
instructions to auto decrement 
the appropriate index registers 
when set. Clearing DF causes 
auto increment. 
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Two-operand instructions (e.g. MOV and ADD) are 
usually three to six bytes long. Memory to memory 
operations are provided by a special class of string 
instructions requiring one to three bytes. For de- 
tailed instruction formats and encodings refer to the 
instruction set summary at the end of this document. 


For detailed operation and usage of each instruc- 
tion, see Appendix B of the 80286/80287 Program- 
mer’s Reference Manual (Order No. 210498). 


GENERAL PURPOSE | 

MOV 

Move byte or word 

PUSH 

Push word onto stack 

POP 

Pop word off stack 

PUSHA 

Push all registers on stack 

POPA 

Pop all registers from stack 

XCHG 

Exchange byte or word 

XLAT 

Translate byte 

INPUT/OUTPUT I 

IN 

Input byte or word 

OUT 

Output byte or word 

ADDRESS OBJECT | 

LEA 

Load effective address 

LDS 

Load pointer using DS 

LES 

Load pointer using ES 

FLAG TRANSFER | 

LAHF 

Load AH register from flags 

SAHF 

Store AH register in flags 

PUSHF 

Push flags onto stack 

POPF 

Pop flags off stack 


Figure 4a. Data Transfer Instructions 


MOVS 

Move byte or word string 

INS 

Input bytes or word string 

OUTS 

Output bytes or word string 

CMPS 

Compare byte or word string 

SCAS 

Scan byte or word string 

LODS 

Load byte or word string 

STOS 

Store byte or word string 

REP 

Repeat 

REPE/REPZ 

Repeat while equal/zero 

REPNE/REPNZ 

Repeat while not equal /not zero 


Figure 4c. String Instructions 


ADDITION I 

ADD 

Add byte or word 

ADC 

Add byte or word with carry 

INC 

Increment byte or word by 1 

AAA 

ASCII adjust for addition 

DAA 

Decimal adjust for addition 

SUBTRACTION | 

SUB 

Subtract byte or word 

SBB 

Subtract byte or word with borrow 

DEC 

Decrement byte or word by 1 

NEG 

Negate byte or word 

CMP 

Compare byte or word 

AAS 

ASCII adjust for subtraction 

DAS 

Decimal adjust for subtraction 

MULTIPLICATION | 

MUL 

Multiple byte or word unsigned 

IMUL 

Integer multiply byte or word 

AAM 

ASCII adjust for multiply 

DIVISION I 

DIV 

Divide byte or word unsigned 

IDIV 

Integer divide byte or word 

AAD 

ASCII adjust for division 

CBW 

Convert byte to word 

CWD 

Convert word to doubleword 


Figure 4b. Arithmetic Instructions 


LOGICALS I 

NOT 

“Not” byte or word 

AND 

“And” byte or word 

OR 

“Inclusive or” byte or word 

XOR 

“Exclusive or” byte or word 

TEST 

“Test” byte or word 

SHIFTS I 

SHL/SAL 

Shift logical/arithmetic left byte or word 

SHR 

Shift logical right byte or word 

SAR 

Shift arithmetic right byte or word 

ROTATES I 

ROL 

Rotate left byte or word 

ROR 

Rotate right byte or word 

RCL 

Rotate through carry left byte or word 

RCR 

Rotate through carry right byte or word 


Figure 4d. Shift/Rotate Logical Instructions 
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CONDITIONAL TRANSFERS 

UNCONDITIONAL TRANSFERS | 

JA/JNBE 

Jump if above/not below nor equal 

CALL 

Call procedure 

JAE/JNB 

Jump if above or equal/not below 

RET 

Return from procedure 

JB/JNAE 

Jump if below/not above nor equal 

JMP 

Jump 

JBE/JNA 

Jump if below or equal/not above 

JC 

Jump if carry 

ITERATION CONTROLS | 

JE/JZ 

Jump if equal/zero 

LOOP 

Loop 

JG/JNLE 

Jump if greater/not less nor equal 

JGE/JNL 

Jump if greater or equal/not less 

LOOPE/LOOPZ 

Loop If equal /zero 

JL/JNGE 

Jump if less/not greater nor equal 

LOOPNE/LOOPNZ 

Loop If not equal/not zero 

JLE/JNG 

Jump if less or equal/not greater 

JCXZ 

Jump if register CX = 0 

JNC 

Jump if not carry 

JNE/JNZ 

Jump if not equal/not zero 

INTERRUPTS | 

JNO 

Jump if not overflow ' 

INT 

Interrupt 

JNP/JPO 

Jump if not parity/parity odd 

JNS 

Jump if not sign 

INTO 

Interrupt if overflow 

JO 

Jump if overflow 

IRET 

Interrupt return 

JP/JPE 

. Jump if parity/parity even 

JS 

Jump if sign 


Figure 4e. Program Transfer Instructions 


Memory Organization 

Memory is organized as sets of variable length seg- 
ments. Each segment is a linear contiguous se- 
quence of up to 64K (216) 8-bit bytes. Memory is 
addressed using a two component address (a point- 
er) that consists of a 16-bit segment selector, and a 
16-bit offset. The segment selector Indicates the de- 
sired segment in memory. The offset component in- 
dicates the desired byte address within the segment. 


Figure 4f. Processor Control Instructions 


Figure 4g. High Level Instructions Figure 5. Two Component Address 


ENTER 

Format stack for procedure entry 

LEAVE 

Restore stack for procedure exit 

BOUND 

Detects values outside prescribed range 




32-BIT POINTER 




I SEGMENT I 

OFFSET I 


OPERAND 

SELECTED 


SELECTED 

SEGMENT 


MEMORY 


231923-5 


FLAG OPERATIONS | 

STC 

Set carry flag 

CLC 

Clear carry flag 

CMC 

Complement carry flag 

STD 

Set direction flag 

CLD 

Clear direction flag 

STI 

Set interrupt enable flag 

CLI 

Clear interrupt enable flag 

EXTERNAL SYNCHRONIZATION I 

HLT 

Halt until interrupt or reset 

WAIT 

Wait for BUSY not active 

ESC 

Escape to extension processor 

LOCK 

Lock bus during next instruction 

NO OPERATION 

NOP I No operation 

EXECUTION ENVIRONMENT CONTROL 

LMSW 

Load machine status word 

SMSW 

Store machine status word 
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Table 3. Segment Register Selection Rules 


Memory 

Reference Needed 

Segment Register 
Used 

Implicit Segment 

Selection Rule 

Instructions 

Code (CS) 

Automatic with instruction prefetch 

Stack 

Stack (SS) 

All stack pushes and pops. Any memory reference which uses BP 
as a base register. 

Local Data 

Data (DS) 

All data references except when relative to stack or 
string destination 

External (Global) Data 

Extra (ES) 

Alternate data segment and destination of string operation 


All instructions that address operands in memory 
must specify the segment and the offset. For speed 
and compact instruction encoding, segment selec- 
tors are usually stored in the high speed segment 
registers. An instruction need specify only the de- 
sired segment register and an offset in order to ad- 
dress a memory operand. 

Most instructions need not explicitly specify which 
segment register is used. The correct segment reg- 
ister is automatically chosen according to the rules 
of Table 3. These rules follow the way programs are 
written (see Figure 6) as independent modules that 
require areas for code and data, a stack, and access 
to external data areas. 

Special segment override instruction prefixes allow 
the implicit segment register selection rules to be 
overridden for special cases. The stack, data, and 
extra segments may coincide for simple programs. 
To access operands not residing in one of the four 
immediately available segments, a full 32-bit pointer 
or a new segment selector must be loaded. 


Addressing Modes 

The 80C286 provides a total of eight addressing 
modes for instructions to specify operands. Two ad- 
dressing modes are provided for instructions that 
operate on register or Immediate operands: 

Register Operand Mode: The operand is locat- 
ed in one of the 8 or 16-bit general registers. 

immediate Operand Mode: The operand is in- 
cluded In the Instruction. 

Six modes are provided to specify the location of an 
operand in a memory segment. A memory operand 
address consists of two 16-bit components; seg- 
ment selector and offset. The segment selector is 
supplied by a segment register either implicitly cho- 
sen by the addressing mode or explicitly chosen by 
a segment override prefix. The offset is calculated 
by summing any combination of the following three 
address elements: 


PROCESS 
DATA 
BLOCK 1 


PROCESS 
DATA 
BLOCK 2 



I ) 

L J 

MEMORY 


Figure 6. Segmented Memory Helps 
Structure Software 


the index (contents of either the SI or Dl index 
registers) 

Any carry out from the 16-bit addition is ignored. 
Eight-bit displacements are sign extended to 1 6-bit 
values. 


Combinations of these three address elements de- 
fine the six memory addressing modes, described 
below. 


Direct Mode: The operand’s offset is contained In 
the instruction as an 8 or 16-bit displacement ele- 
ment. 


Register Indirect Mode: The operand’s offset is in 
one of the registers SI, Dl, BX, or BP. 


the displacement (an 8 or 1 6-bit immediate val- 
ue contained in the instruction) 

the base (contents of either the BX or BP base 
registers) 


Based Mode: The operand’s offset is the sum of an 
8 or 16-blt displacement and the contents of a base 
register (BX or BP). 
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Indexed Mode: The operand’s offset is the sum of 
an 8 or 16-bit displacement and the contents of an 
index register (SI or Dl). 

Based Indexed Mode: The operand’s offset is the 
sum of the contents of a base register and an index 
register. 

Based Indexed Mode with Displacement: The op- 
erand’s offset is the sum of a base register’s con- 
tents, an index register’s contents, and an 8 or 16-bit 
displacement. 


Data Types 

The 80C286 directly supports the following data 

types: 

Integer: A signed binary numeric value con- 

tained in an 8-bit byte or a 16-bit 
word. All operations assume a 2’s 
complement representation. Signed 
32 and 64-bit integers are supported 
using the Numeric Data Processor, 
the 80287. 

Ordinal: An unsigned binary numeric value 

contained in an 8-bit byte or 16-bit 
word. 

Pointer: A 32-bit quantity, composed of a 

segment selector component and an 
offset component. Each component 
is a 1 6-bit word. 

String: A contiguous sequence of bytes or 

words. A string may contain from 1 
byte to 64K bytes. 

ASCII: A byte representation of alphanu- 

meric and control characters using 
the ASCII standard of character rep- 
resentation. 

BCD: A byte (unpacked) representation of 

the decimal digits 0-9. 

Packed BCD: A byte (packed) representation of 
two decimal digits 0-9 storing one 
digit in each nibble of the byte. 

Floating Point: A signed 32, 64, or 80-bit real num- 
ber representation. (Floating point 
operands are supported using the 
80287 Numeric Processor). 

Figure 7 graphically represents the data types sup- 
ported by the 80C286. 


either an 8-bit port address, specified in the instruc- 
tion, or a 1 6-bit port address in the DX register. 8-bit 
port addresses are zero extended such that A-i^-Ae 
are LOW. I/O port addresses 00F8(H) through 
OOFF(H) are reserved. 
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BYTE 

7 0 

im 

SIGN BIT -1| 1 
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UNSIGNED 

BYTE 

7 0 
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1 >- MSB , 


1514 ’ B 7 


SIGN BIT I*- MSB 


SIGNED 31 IBIS 0 0 

double ||"|in|ni|iii|ni|iii|iii|iM| 

SIGN BIT-) I ^ MSB I 

MAGNITUDE 


QUAD 
WORD* 

SIGN BIT-) |^ MSB 
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UNSIGNED I '! M’ | I M j I I T [1 I fj 
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CODED I 
DECIMAL L 
(BCD) 


BCD 
DIGIT N 
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p~i T [- r n | T rT| 1 1 i j 

BCD BCD 

DIGIT 1 DIGIT 0 

7 07 0 0 


ASCII 


p r r [ 11 I j p'l 1 1 1 n | i r T| n i- | 


ASCII ASCII ASCII . 

CHARACTERn CHARACTERt CHARACTERo 

7+Nq 7'*'^07 ® 0 

“'g§sr"r"i ... 


BYTE/WORD N 




r m rr i 1 1 n 


BYTE/WORD 1 BYTE/WORD 0 


FLOATING ip 
POINT* 
SIGN BIT-), 


p 1 1 1 1 1 1 1 1 1 1 1 1 M 1 11 1 1 1 1 1 1 1 1 1 1 n 1 1 

I I I 

SELECTOR OFFSET 

79+9 +8 +7 +6 +5 +4 +3 +2+1 0 9 

:i: .i:im..:i : i i .1. 1 


‘Supported by lAPX 2B6/20 Numeric Data Procesaor Configuration 

231923-7 


Figure 7. 80C286 Supported Data Types 


I/O Space 

The I/O space consists of 64K 8-bit or 32K 16-bit 
ports. I/O instructions address the I/O space with 
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Table 4. Interrupt Vector Assignments 


Function 

interrupt 

Number 

Related 

Instructions 

Does Return Address 
Point to Instruction 
Causing Exception? 

Divide error exception 

0 

DIV, IDIV 

Yes 

Single step interrupt 

1 

All 


NMI interrupt 

2 

INT 2 or NMI pin 


Breakpoint interrupt 

3 

INT 3 


INTO detected overflow exception 

4 

INTO 

No 

BOUND range exceeded exception 

5 

BOUND 

Yes 

Invalid opcode exception 

6 

Any undefined opcode 

Yes 

Processor extension not available exception 

7 

ESC or WAIT 

Yes 

Intel reserved-do not use 

8-15 



Processor extension error interrupt 

16 

ESC or WAIT 


Intel reserved-do not use 

17-31 



User defined 

32-255 




Interrupts 

An interrupt transfers execution to a new program 
location. The old program address (CSilP) and ma- 
chine state (Flags) are saved on the stack to allow 
resumption of the interrupted program. Interrupts fall 
into three classes: hardware Initiated, I NT Instruc- 
tions, and instruction exceptions. Hardware initiated 
interrupts occur In response to an external input and 
are classified as non-maskable or maskable. Pro- 
grams may cause an Interrupt with an I NT instruc- 
tion. Instruction exceptions occur when an unusual 
condition, which prevents further instruction pro- 
cessing, is detected while attempting to execute an 
instruction. The return address from an exception 
will always point at the Instruction causing the ex- 
ception and include any leading instruction prefixes. 


setting the interrupt flag bit (IF) in the flag word. All 
224 user-defined interrupt sources can share this in- 
put, yet they can retain separate interrupt handlers. 
An 8-bit vector read by the CPU during the Interrupt 
acknowledge sequence (discussed in System Inter- 
face section) identifies the source of the interrupt. 

Further maskable interrupts are disabled while serv- 
icing an interrupt by resetting the IF but as part of 
the response to an interrupt or exception. The saved 
flag word will reflect the enable status of the proces- 
sor prior to the interrupt. Until the flag word is re- 
stored to the flag register, the interrupt flag will be 
zero unless specifically set. The interrupt return in- 
struction includes restoring the flag word, thereby 
restoring the original status of IF. 


A table containing up to 256 pointers defines the 
proper interrupt service routine for each interrupt. In- 
terrupts 0-31, some of which are used for instruc- 
tion exceptions, are reserved. For each interrupt, an 
8-blt vector must be supplied to the 80C286 which 
Identifies the appropriate table entry. Exceptions 
supply the Interrupt vector internally. INT instructions 
contain or imply the vector and allow access to all 
256 interrupts. Maskable hardware initiated inter- 
rupts supply the 8-bit vector to the CPU during an 
interrupt acknowledge bus sequence. Non-maska- 
ble hardware interrupts use a predefined Internally 
supplied vector. 

MASKABLE INTERRUPT (INTR) 

The 80C286 provides a maskable hardware interrupt 
request pin, INTR. Software enables this input by 


NON-MASKABLE INTERRUPT REQUEST (NMI) 

A non-maskable interrupt input (NMI) is also provid- 
ed. NMI has higher priority than INTR. A typical use 
of NMI would be to activate a power failure routine. 
The activation of this input causes an interrupt with 
an internally supplied vector value of 2. No external 
interrupt acknowledge sequence is performed. 

While executing the NMI servicing procedure, the 
80C286 will service neither further NMI requests, 
INTR requests, nor the processor extension seg- 
ment overrun interrupt until an Interrupt return (I RET) 
instruction is executed or the CPU is reset. If NMI 
occurs while currently servicing an NMI, its presence 
will be saved for servicing after executing the first 
IRET instruction. IF is cleared at the beginning of an 
NMI interrupt to inhibit INTR interrupts. 
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SINGLE STEP INTERRUPT 

The 80C286 has an internal interrupt that allows pro- 
grams to execute one instruction at a time. It is 
called the single step interrupt and is controlled by 
the single step flag bit (TF) in the flag word. Once 
this bit is set, an internal single step interrupt will 
occur after the next instruction has been executed. 
The interrupt clears the TF bit and uses an Internally 
supplied vector of 1. The IRET instruction is used to 
set the TF bit and transfer control to the next instruc- 
tion to be single stepped. 

Interrupt Priorities 

When simultaneous interrupt requests occur, they 
are processed in a fixed order as shown in Table 5. 
interrupt processing Involves saving the flags, return 
address, and setting CS:IP to point at the first in- 
struction of the interrupt handler. If other interrupts 
remain enabled they are processed before the first 
instruction of the current interrupt handler is execut- 
ed. The last interrupt processed Is therefore the first 
one serviced. 


Table 5. Interrupt Processing Order 


Order 

Interrupt 

1 

Instruction exception 

2 

Single step 

3 

NMI 

4 

Processor extension segment overrun 

5 

INTR 

6 

INT instruction 


Initialization and Processor Reset 

Processor initialization or start up is accomplished 
by driving the RESET input pin HIGH. RESET forces 
the 80C286 to terminate all execution and local bus 
activity. No instruction or bus activity will occur as 
long as RESET is active. After RESET becomes in- 
active and an internal processing Interval elapses, 
the 80C286 begins execution In real address mode 
with the Instruction at physical location FFFFFO(H). 
RESET also sets some registers to predefined val- 
ues as shown in Table 6. 


Table 6, 80C286 Initial Register State after RESET 


Flag word 

0002(H) 

Machine Status Word 

FFFO(H) 

Instruction pointer 

FFFO(H) 

Code segment 

FOOO(H) 

Data segment 

0000(H) 

Extra segment 

0000(H) 

Stack segment 

0000(H) 


HOLD must not be active during the time from the 
leading edge of RESET to 34 CLKs after the trailing 
edge of RESET. 


Machine Status Word Description 

The machine status word (MSW) records when a 
task switch takes place and controls the operating 
mode of the 80C286. It Is a 1 6-blt register of which 
the lower four bits are used. One bit places the CPU 
Into protected mode, while, the other three bits, as 
shown in Table 7, control the processor extension 
Interface. After RESET, this register contains 
FFFO(H) which places the 80C286 in 8086 real ad- 
dress mode. 


Table 7. MSW Bit Functions 


Bit 

Position 

Name 

Function 

0 

PE 

Protected mode enable places the 
80C286 into protected mode and cannot 
be cleared except by RESET. 

1 

MP 

Monitor processor extension allows 

WAIT instructions to cause a processor 
extension not present exception 
(number 7). 

2 

EM 

Emulate processor extension causes a 
processor extension not present 
exception (number 7) on ESC 
instructions to allow emulating a 
processor extension. 

3 

TS 

Task switched indicates the next 
Instruction using a processor extension 
will cause exception 7, allowing software 
to test whether the current processor 
extension context belongs to the current 
task. 


The LMSW and SMSW Instructions can load and 
store the MSW in real address mode. The recom- 
mended use of TS, EM, and MP Is shown In Table 8. 


Table 8. Recommended MSW Encodings For Processor Extension Control 


TS 

MP 

EM 

Recommended Use 

Instructions 
Causing 
Exception 7 

0 

0 

0 

Initial encoding after RESET. 80C286 operation is identical to 8086, 88. 

None 

0 

0 

1 

No processor extension is available. Software will emulate its function. 

ESC 

1 

0 

1 

No processor extension is available. Software will emulate its function. The current 
processor extension context may belong to another task. 

ESC 

0 

1 

0 

A processor extension exists. 

None 

1 

1 

0 

A processor extension exists. The current processor extension context may belong to 
another task. The Exception 7 on WAIT allows software to test for an error pending 
from a previous processor extension operation. 

ESC or 

WAIT 
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Halt 

The HLT instruction stops program execution and 
prevents the CPU from using the local bus until re- 
started. Either NMI, INTR with IF = 1, or RESET will 
force the 80C286 out of halt. If interrupted, the 
saved CS:IP will point to the next instruction after 
the HLT. 


8086 REAL ADDRESS MODE 

The 80C286 executes a fully upward-compatible su- 
perset of the 8086 instruction set in real address 
mode. In real address mode the 80C286 is object 
code compatible with 8086 and 8088 software. The 
real address mode architecture (registers and ad- 
dressing modes) is exactly as described in the 
80C286 Base Architecture section of this Functional 
Description. 


Memory Size 

Physical memory is a contiguous array of up to 
1 ,048,576 bytes (o ne me gabyte) addressed by pins 
Aq through A-ig and BHE. A20 through A23 should be 
ignored. 


Memory Addressing 

In real address mode physical memory is a contigu- 
ous array of up to 1,048,576 bytes (one mega byte) 
addressed by pins Aq through A-ig and BHE. Ad- 
dress bits A20--A23 may not always be zero in real 
mode. A20-A23 should not be used by the system 
while the 80C286 is operating in Real Mode. 

The selector portion of a pointer is interpreted as the 
upper 16 bits of a 20-bit segment address. The lower 
four bits of the 20-bit segment address are always 
zero. Segment addresses, therefore, begin on multi- 
ples of 16 bytes. See Figure 8 for a graphic repre- 
sentation of address information. 

All segments in real address mode are 64K bytes in 
size and may be read, written, or executed. An ex- 
ception or interrupt can occur , if data operands or 
instructions attempt to wrap around the end of a 
segment (e.g. a word with its low order byte at offset 
FFFF(H) and its high order byte at offset 0000(H). If, 
in real address mode, the information contained in a 
segment does not use the full 64K bytes, the unused 
end of the segment may be overlayed by another 
segment to reduce physical memory requirements. 

Reserved Memory Locations 


tion area and interrupt table area. Locations from 
addresses FFFFO(H) through FFFFF(H) are re- 
served for system initialization. Initial execution be- 
gins at location FFFFO(H). Locations 00000(H) 
through 003FF(H) are reserved for interrupt vectors. 



Figure 8. 8086 Real Address Mode 
Address Calculation 



Figure 9. 8086 Real Address Mode Initially 
Reserved Memory Locations 


The 80C286 reserves two fixed areas of memory in 
real address mode (see Figure 9); system initializa- 
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Table 9. Real Address Mode Addressing Interrupts 


Function 

Interrupt 

Number 

Related 

Instructions 

Return Address 
Before instruction? 

Interrupt table limit too small exception 

8 

INT vector is not within table limit 

Yes 

Processor extension segment overrun 
interrupt 

9 

ESC with memory operand extend- 
ing beyond offset FFFF(H) 

No 

Segment overrun exception 

13 

Word memory reference with offset 
= FFFF(H) or an attempt to exe- 
cute past the end of a segment 

Yes 


Interrupts 

Table 9 shows the interrupt vectors reserved for ex- 
ceptions and interrupts which indicate an addressing 
error. The exceptions leave the CPU in the state ex- 
isting before attempting to execute the failing in- 
struction (except for PUSH, POP, PUSHA, or POPA). 
Refer to the next section on protected mode initiali- 
zation for a discussion on exception 8. 


Protected Mode Initialization 

To prepare the 80C286 for protected mode, the 
LIDT instruction is used to load the 24-bit interrupt 
table base and 16-bit limit for the protected mode 
interrupt table. This Instruction can also set a base 
and limit for the interrupt vector table in real address 
mode. After reset, the interrupt table base Is initial- 
ized to 000000(H) and Its size set to 03FF(H). These 
values are compatible with 8086, 88 software. LIDT 
should only be executed in preparation for protected 
mode. 


Shutdown 

Shutdown occurs when a severe error Is detected 
that prevents further Instruction processing by the 
CPU. Shutdown and halt are externally signalled via 
a halt bus operation. They can be distinguished by 
Ai HIGH for halt and A-| LOW for shutdown. In real 
address mode, shutdown can occur under two con- 
ditions: 

• Exceptions 8 or 13 happen and the IDT limit does 
not include the Interrupt vector. 

• A CALL I NT or PUSH instruction attempts to wrap 
around the stack segment when SP is not even. 

An NMI input can bring the CPU out of shutdown if 
the IDT limit is at least OOOF(H) and SP is greater 
than 0005(H), otherwise shutdown can only be exit- 
ed via the RESET input. 


PROTECTED VIRTUAL ADDRESS 
MODE 

The 80C286 executes a fully upward-compatible su- 
perset of the 8086 instruction set In protected virtual 
address mode (protected mode). Protected mode 
also provides memory management and protection 
mechanisms and associated Instructions. 

The 80C286 enters protected virtual address mode 
from real address mode by setting the PE (Protec- 
tion Enable) bit of the machine status word with the 
Load Machine Status Word (LMSW) instruction. Pro- 
tected mode offers extended physical and virtual 
memory address space, memory protection mecha- 
nisms, and new operations to support operating sys- 
tems and virtual memory. 

All registers. Instructions, and addressing modes de- 
scribed In the 80C286 Base Architecture section of 
this Functional Description remain the same. Pro- 
grams for the 8086, 88, 1 86, and real address mode 
80C286 can be run in protected mode; however, em- 
bedded constants for segment selectors are differ- 
ent. 


Memory Size 

The protected mode 80C286 provides a 1 gigabyte 
virtual address space per task mapped into a 16 
megabyte physical addre ss sp ace defined by the ad- 
dress pin A 23 _Ao and BHE. The virtual address 
space may be larger than the physical address 
space since any use of an address that does not 
map to a physical memory location will cause a re- 
startable exception. 


Memory Addressing 

As in real address mode, protected mode uses 32- 
bit pointers, consisting of 16-bit selector and offset 
components. The selector, however, specifies an in- 
dex into a memory resident table rather than the up- 
per 16-bits of a real memory address. The 24-bit 
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base address of the desired segment is obtained 
from the tables in memory. The 1 6-bit offset is add- 
ed to the segment base address to form the physical 
address as shown in Figure 10. The tables are auto- 
matically referenced by the CPU whenever a seg- 
ment register is loaded with a selector. All 80C286 
instructions which load a segment register will refer- 
ence the memory based tables without additional 
software. The memory based tables contain 8 byte 
values called descriptors. 


CPU 



231923-10 

Figure 10. Protected Mode Memory Addressing 


DESCRIPTORS 

Descriptors define the use of memory. Special types 
of descriptors also define new functions for transfer 
of control and task switching. The 80C286 has seg- 
ment descriptors for code, stack and data segments, 
and system control descriptors for special system 
data segments and control transfer operations. De- 
scriptor accesses are performed as locked bus op- 
erations to assure descriptor integrity in multi-proc- 
essor systems. 

CODE AND DATA SEGMENT DESCRIPTORS 
(S = 1) 

Besides segment base addresses, code and data 
descriptors contain other segment attributes includ- 
ing segment size (1 to 64K bytes), access rights 
(read only, read/write, execute only, and execute/ 
read), and presence in memory (for virtual memory 
systems) (See Figure 11). Any segment usage vio- 
lating a segment attribute indicated by the segment 
descriptor will prevent the memory cycle and cause 
an exception or interrupt. 

Code or Data Segment Descriptor 


7 07 0 


+ 7 

INTEL R 

— 

•SERVED* 

ACCESS 

RIGHTS BYTE 

: 

DPL 

_L_ 

1 

TYPE 
_l L_ 

A 

BASE23_i6 

+ 3 

BASEis-o 

+ 1 

LIMITi5_o 

1 


15 8 7 


231923-11 

*Must be set to 0 for compatibility with 80386. 


Access Rights Byte Definition 


Bit 

Position 

Name 


Function 


7 

6-5 

Present (P) 

Descriptor Privilege 
Level (DPL) 

P = 1 

P = 0 

Segment is mapped into physical memory. 

No mapping to physical memory exits, base and limit are 
not used. 

Segment privilege attribute used in privilege tests. 

4 

Segment Descrip- 
tor (S) 

S = 1 

S = 0 

Code or Data (includes stacks) segment descriptor 
System Segment Descriptor or Gate Descriptor 


3 

Executable (E) 

E = 0 

Data segment descriptor type is: 

If 

2 

Expansion Direc- 

ED = 0 

Expand up segment, offsets must be ^ limit. 

Data 


tion (ED) 

ED = 1 

Expand down segment, offsets must be > limit. 

Segment 

1 

Writeable (W) 

W = 0 

W = 1 

Data segment may not be written into. 

Data segment may be written into. 

(S= 1, 

E = 0) 

3 

Executable (E) 

E = 1 

Code Segment Descriptor type is: 

If 

2 

Conforming (C) 

C = 1 

Code segment may only be executed 
when CPL ^ DPL and CPL 
remains unchanged. 

Code 

Segment 

1 

Readable (R) 

R =0 

R = 1 

Code segment may not be read 

Code segment may be read. 

(S= 1, 

E = 1) 

0 

Accessed (A) 

A = 0 

A = 1 

Segment has not been accessed. 

Segment selector has been loaded into segment register 
or used by selector test instructions. 


Figure 11. Code and Data Segment Descriptor Formats 
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Code and data (including stack data) are stored in 
two types of segments: code segments and data 
segments. Both types are identified and defined by 
segment descriptors (S = 1). Code segments are 
identified by the executable (E) bit set to 1 in the 
descriptor access rights byte. The access rights byte 
of both code and data segment descriptor types 
have three fields in common; present (P) bit, De- 
scriptor Privilege Level (DPL), and accessed (A) bit. 
If P = 0, any attempted use of this segment will 
cause a not-present exception. DPL specifies the 
privilege level of the segment descriptor. DPL con- 
trols when the descriptor may be used by a task 
(refer to privilege discussion below). The A bit shows 
whether the segment has been previously accessed 
for usage profiling, a necessity for virtual memory 
systems. The CPU will always set this bit when ac- 
cessing the descriptor. 

Data segments (S = 1 , E = 0) may be either read- 
only or read-write as controlled by the W bit of the 
access rights byte. Read-only (W = 0) data seg- 
ments may not be written into. Data segments may 
grow in two directions, as determined by the Expan- 
sion Direction (ED) bit: upwards (ED = 0) for data 
segments, and downwards (ED = 1) for a segment 
containing a stadk. The limit field for a data segment 
descriptor is interpreted differently depending on the 
ED bit (see Figure 11). 

A code segment (S = 1, E = 1) may be execute- 
only or execute/read as determined by the Read- 
able (R) bit. Code segments may never be written 
into and execute-only code segments (R = 0) may 
not be read. A code segment may also have an attri- 
bute called conforming (C). A conforming code seg- 
ment may be shared by programs that execute at 
different privilege levels. The DPL of a conforming 
code segment defines the range of privilege levels 
at which the segment may be executed (refer to priv- 
ilege discussion below). The limit field identifies the 
last byte of a code segment. 

SYSTEM SEGMENT DESCRIPTORS (S = 0, 

TYPE = 1-3) 

In addition to code and data segment descriptors, 
the protected mode 80C286 defines System Seg- 
ment Descriptors. These descriptors define special 
system data segments which contain a table of de- 
scriptors (Local Descriptor Table Descriptor) or seg- 
ments which contain the execution state of a task 
(Task State Segment Descriptor). 

Figure 1 2 gives the formats for the special system 
data segment descriptors. The descriptors contain a 
24-bit base address of the segment and a 1 6-bit lim- 
it. The access byte defines the type of descriptor, its 
state and privilege level. The descriptor contents are 
valid and the segment is in physical memory if P = 1 . 
If P = 0, the segment Is not valid. The DPL field is 
only used in Task State Segment descriptors and 
indicates the privilege level at which the descrip- 


tor may be used (see Privilege). Since the Local De- 
scriptor Table descriptor may only be used by a spe- 
cial privileged instruction, the DPL field is not used. 
Bit 4 of the access byte is 0 to indicate that It is a 
system control descriptor. The type field specifies 
the descriptor type as indicated in Figure 1 2. 

System Segment Descriptor 


7 0 7 0 


+7 

INTEL RE 



SERVED* 

+ 5 

: 

DPL 

1 

1 

TYPE 

1 \ i 

BASE23-16 

+3 

BASE,s-0 

1 

+ 1 

LIMITis-o 

1 


231923-12 

*Must be set to 0 for compatibility with 80386. 


System Segment Descriptor Fieids 


Name 

Value 

Description 

TYPE 

1 

Available Task State Segment (TSS) 


2 

Local Descriptor Table 


3 

Busy Task State Segment (TSS) 

P 

0 

Descriptor contents are not valid 


1 

Descriptor contents are valid 

DPL 

0-3 

Descriptor Privilege Level 

BASE 

24-bit 

Base Address of special system data 


number 

segment in real memory 

LIMIT 

16-bit 

number 

Offset of last byte in segment 


Figure 12. System Segment Descriptor Format 


GATE DESCRIPTORS (S = 0, TYPE = 4-7) 

Gates are used to control access to entry points 
within the target code segment. The gate descrip- 
tors are call gates, task gates, interrupt gates and 
trap gates. Gates provide a level of indirection be- 
tween the source and destination of the control 
transfer. This indirection allows the CPU to automati- 
cally perform protection checks and control entry 
point of the destination. Call gates are used to 
change privilege levels (see Privilege), task gates 
are used to perform a task switch, and interrupt and 
trap gates are used to specify Interrupt service rou- 
tines. The interrupt gate disables interrupts (resets 
IF) while the trap gate does not. 

Gate Descriptor 


— 

INTEL RE 



— 

SERVED* 


DPL 

1 


TYPE 

1 1 1 

XXX 

1 1 

WORD 

COUNT4_o 

DESTINATION SELECTORis -2 

X X 

1 

DESTINATION OFFSETis-o 

1 


15 8 7 0 


231923-13 

*Must be set to 0 for compatibility with 80386 (X is don’t care) 
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Gate Descriptor Fields 


Name 

Value 

Description 


4 

-Call Gate 

TYPE 

5 

6 

-Task Gate 
-Interrupt Gate 


7 

-Trap Gate 

P 

0 

-Descriptor Contents are not 
valid 


1 

-Descriptor Contents are 
valid 

DPL 

0-3 

Descriptor Privilege Level 

WORD 


Number of words to copy 

COUNT 

0-31 

from callers stack to called 


procedures stack. Only used 
with call gate. 




Selector to the target code 

DESTINATION 

SELECTOR 

16-bit 

selector 

segment (Call, Interrupt or 

T rap Gate) 

Selector to the target task 
state segment (Task Gate) 

DESTINATION 

16-bit 

Entry point within the target 

OFFSET 

offset 

code segment 


scriptor privilege level and specifies when this de- 
scriptor may be used by a task (refer to privilege 
discussion below). Bit 4 must equal 0 to indicate a 
system control descriptor. The type field specifies 
the descriptor type as indicated in Figure 13. 

SEGMENT DESCRIPTOR CACHE REGISTERS 

A segment descriptor cache register is assigned to 
each of the four segment registers (CS, SS, DS, ES). 
Segment descriptors are automatically loaded 
(cached) Into a segment descriptor cache register 
(Figure 14) whenever the associated segment regis- 
ter is loaded with a selector. Only segment descrip- 
tors may be loaded into segment descriptor cache 
registers. Once loaded, all references to that seg- 
ment of memory use the cached descriptor informa- 
tion Instead of reaccessIng the descriptor. The de- 
scriptor cache registers are not visible to programs. 
No instructions exist to store their contents. They 
only change when a segment register Is loaded. 

SELECTOR FIELDS 


Figure 13. Gate Descriptor Format 

Figure 1 3 shows the format of the gate descriptors. 
The descriptor contains a destination pointer that 
points to the descriptor of the target segment and 
the entry point offset. The destination selector in an 
Interrupt gate, trap gate, and call gate must refer to a 
code segment descriptor. These gate descriptors 
contain the entry point to prevent a program from 
constructing and using an illegal entry point. Task 
gates may only refer to a task state segment. Since 
task gates invoke a task switch, the destination off- 
set Is not used in the task gate. 

Exception 1 3 is generated when the gate Is used If a 
destination selector does not refer to the correct de- 
scriptor type. The word count field Is used in the call 
gate descriptor to indicate the number of parameters 
(0-31 words) to be automatically copied from the 
caller’s stack to the stack of the called routine when 
a control transfer changes privilege levels. The word 
count field Is not used by any other gate descriptor. 


A protected mode selector has three fields: descrip- 
tor entry index, local or global descriptor table indi- 
cator (Tl), and selector privilege (RPL) as shown in 
Figure 15. These fields select one of two memory 
based tables of descriptors, select the appropriate 
table entry and allow highspeed testing of the selec- 
tor’s privilege attribute (refer to privilege discussion 
below). 
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3 2 10 

BITS 

NAME 

FUNCTION 

1-0 

REQUESTED 

PRIVILEGE 

LEVEL 

(RPL) 

INDICATES SELECTOR PRIVILEGE 

LEVEL DESIRED 

2 

TABLE 

INDICATOR 

(Tl) 

Tl = 0 USE GLOBAL DESCRIPTOR TABLE 
(GDT) 

Tl = 1 USE LOCAL DESCRIPTOR TABLE 
(LDT) 

15-3 

INDEX 

SELECT DESCRIPTOR ENTRY IN TABLE 


The access byte format is the same for all gate de- 
scriptors. P = 1 indicates that the gate contents are 
valid. P = 0 indicates the contents are not valid and 
causes exception 11 if referenced. PPL is the de- 
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PROGRAM INVISIBLE 
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SEGMENT SELECTORS 

i 

1 

ACCESS 

RIGHTS 

SEGMENT PHYSICAL BASE ADDRESS SEGMENT SIZE 

1 

1 
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1 

DS 
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1 
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SS 
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1 
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ES 


1 

1 
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SEGMENT REGISTERS 
(LOADED BY PROGRAM) 

1 

1 


SEGMENT DESCRIPTOR CACHE REGISTERS 
(AUTOMATICALLY LOADED BY CPU) 

1 
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Figure 15. Selector Fields 


Figure 14. Descriptor Cache Registers 
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LOCAL AND GLOBAL DESCRIPTOR TABLES 

Two tables of descriptors, called descriptor tables, 
contain ail descriptors accessible by a task at any 
given time. A descriptor table is a linear array of up 
to 8192 descriptors. The upper 13 bits of the selec- 
tor value are an index into a descriptor table. Each 
table has a 24-bit base register to locate the descrip- 
tor table in physical memory and a 16-bit limit regis- 
ter that confine descriptor access to the defined lim- 
its of the table as shown in Figure 1 6. A restartable 
exception (13) will occur if an attempt is made to 
reference a descriptor outside the table limits. 

One table, called the Global Descriptor table (GDT), 
contains descriptors available to all tasks. The other 
table, called the Local Descriptor Table (LDT), con- 
tains descriptors that can be private to a task. Each 
task may have its own private LDT. The GDT may 
contain all descriptor types except interrupt and trap 
descriptors. The LDT may contain only segment, 
task gate, and call gate descriptors. A segment can- 
not be accessed by a task if its segment descriptor 
does not exist in either descriptor table at the time of 
access. 



Descriptor Table Definition 

The LGDT and LLDT instructions load the base and 
limit of the global and local descriptor tables. LGDT 
and LLDT are privileged, i.e. they may only be exe- 
cuted by trusted programs operating at level 0. The 
LGDT instruction loads a six byte field containing the 
16-bit table limit and 24-bit physical base address of 
the Global Descriptor Table as shown In Figure 17. 
The LDT instruction loads a selector which refers to 
a Local Descriptor Table descriptor containing the 


base address and limit for an LDT, as shown in Fig- 
ure 12. 
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INTEL RESERVED* 

BASE23-t6 

+ 4 

+ 3 

BASEis-o 

1 

+ 2 

+ 1 

LIM1Ti5_o 

1 

0 

IS B 

7 

0 


*Must be set to 0 for compatibility with 80386. 
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Figure 17. Global Descriptor Table and 
Interrupt Descriptor Table Data Type 


INTERRUPT DESCRIPTOR TABLE 

The protected mode 80C286 has a third descriptor 
table, called the Interrupt Descriptor Table (IDT) 
(see Figure 18), used to define up to 256 interrupts. 
It may contain only task gates, interrupt gates and 
trap gates. The IDT (Interrupt Descriptor Table) has 
a 24-blt physical base and 16-blt limit register in the 
CPU. The privileged LIDT instruction loads these 
registers with a six byte value of identical form to 
that of the LGDT instruction (see Figure 17 and Pro- 
tected Mode Initialization). 



Figure 18. Interrupt Descriptor Table Definition 


References to IDT entries are made via I NT instruc- 
tions, external interrupt vectors, or exceptions. The 
IDT must be at least 256 bytes in size to allocate 
space for all reserved interrupts. 

Privilege 

The 80C286 has a four-level hierarchical privilege 
system which controls the use of privileged instruc- 
tions and access to descriptors (and their associat- 
ed segments) within a task. Four-level privilege, as 
shown in Figure 1 9, is an extension of the user/su- 
pervisor mode commonly found In minicomputers. 
The privilege levels are numbered 0 through 3. 
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Level 0 is the most privileged level. Privilege levels 
provide protection within a task. (Tasks are isolated 
by providing private LDT’s for each task.) Operating 
system routines, interrupt handlers, and other sys- 
tem software can be included and protected within 
the virtual address space of each task using the four 
levels of privilege. Each task in the system has a 
separate stack for each of its privilege levels. 

Tasks, descriptors, and selectors have a privilege 
level attribute that determines whether the descrip- 
tor may be used. Task privilege effects the use of 
instructions and descriptors. Descriptor and selector 
privilege only effect access to the descriptor. 

TASK PRIVILEGE 

A task always executes at one of the four privilege 
levels. The task privilege level at any specific instant 
is called the Current Privilege Level (CPL) and is de- 
fined by the lower two bits of the CS register. CPL 
cannot change during execution in a single code 
segment. A task’s CPL may only be changed by con- 
trol transfers through gate descriptors to a new code 
segment (See Control Transfer). Tasks begin exe- 
cuting at the CPL value specified by the code seg- 
ment selector within TSS when the task is initiated 
via a task switch operation (See Figure 20). A task 
executing at Level 0 can access all data segments 
defined in the GDT and the task’s LDT and is con- 
sidered the most trusted level. A task executing a 
Level 3 has the most restricted access to data and is 
considered the least trusted level. 

DESCRIPTOR PRIVILEGE 

Descriptor privilege is specified by the Descriptor 
Privilege Level (DPL) field of the descriptor access 
byte. DPL specifies the least trusted task privilege 


level (CPL) at which a task may access the descrip- 
tor. Descriptors with DPL = 0 are the most protect- 
ed. Only tasks executing at privilege level 0 
(CPL = 0) may access them. Descriptors with DPL 
= 3 are the least protected (i.e. have the least re- 
stricted access) since tasks can access them when 
CPL = 0, 1, 2, or 3. This rule applies to all descrip- 
tors, except LDT descriptors. 

SELECTOR PRIVILEGE 

Selector privilege is specified by the Requested Priv- 
ilege Level (RPL) field in the least significant two bits 
of a selector. Selector RPL may establish a less 
trusted privilege level than the current privilege level 
for the use of a selector. This level - is called the 
task’s effective privilege level (EPL). RPL can only 
reduce the scope of a task’s access to data with this 
selector. A task’s effective privilege is the numeric 
maximum of RPL and CPL. A selector with RPL = 0 
imposes no additional restriction on its use while a 
selector with RPL = 3 can only refer to segments at 
privilege Level 3 regardless of the task’s CPL. RPL 
is generally used to verify that pointer parameters 
passed to a more trusted procedure are not allowed 
to use data at a more privileged level than the caller 
(refer to pointer testing instructions). 

Descriptor Access and Privilege 
Validation 

Determining the ability of a task to access a seg- 
ment involves the type of segment to be accessed, 
the instruction used, the type of descriptor used and 
CPL, RPL, and DPL. The two basic types of segment 
accesses are control transfer (selectors loaded into 
CS) and data (selectors loaded into DS, ES or SS). 

DATA SEGMENT ACCESS 

Instructions that load selectors into DS and ES must 
refer to a data segment descriptor or readable code 
segment descriptor. The CPL of the task and the 
RPL of the selector must be the same as or more 
privileged (numerically equal to or lower than) than 
the descriptor DPL. In general, a task can only ac- 
cess data segments at the same or less privileged 
levels than the CPL or RPL (whichever is numerically 
higher) to prevent a program from accessing data it 
cannot be trusted to use. 

An exception to the rule is a readable conforming 
code segment. This type of code segment can be 
read from any privilege level. 

If the privilege checks fail (e.g. DPL is numerically 
less than the maximum of CPL and RPL) or an incor- 
rect type of descriptor is referenced (e.g. gate de- 
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scriptor or execute only code segment) exception 1 3 
occurs. If the segment is not present, exception 1 1 
is generated. 

Instructions that load selectors into SS must refer to 
data segment descriptors for writable data seg- 
ments. The descriptor privilege (DPL) and RPL must 
equal CPL. All other descriptor types or a privilege 
level violation will cause exception 13. A not present 
fault causes exception 1 2. 

CONTROL TRANSFER 

Four types of control transfer can occur when a se- 
lector is loaded into CS by a control transfer opera- 
tion (see Table 10). Each transfer type can only oc- 
cur if the operation which loaded the selector refer- 
ences the correct descriptor type. Any violation of 
these descriptor usage rules (e.g. JMP through a call 
gate or RET to a Task State Segment) will cause 
exception 13. 

The ability to reference a descriptor for control trans- 
fer is also subject to rules of privilege. A CALL or 
JUMP Instruction may only reference a code seg- 
ment descriptor with DPL equal to the task CPL or a 
conforming segment with DPL of equal or greater 
privilege than CPL. The RPL of the selector used to 
reference the code descriptor must have as much 
privilege as CPL. 

RET and IRET instructions may only reference code 
segment descriptors with descriptor privilege equal 
to or less privileged than the task CPL. The selector 
loaded Into CS Is the return address from the stack. 
After the return, the selector RPL is the task’s new 
CPL. If CPL changes, the old stack pointer is popped 
after the return address. 

When a JMP or CALL references a Task State Seg- 
ment descriptor, the descriptor DPL must be the 
same or less privileged than the task’s CPL. Refer- 


ence to a valid Task State Segment descriptor caus- 
es a task switch (see Task Switch Operation). Refer- 
ence to a Task State Segment descriptor at a more 
privileged level than the task’s CPL generates ex- 
ception 13. 

When an instruction or interrupt references a gate 
descriptor, the gate DPL must have the same or less 
privilege than the task CPL. If DPL is at a more privi- 
leged level than CPL, exeception 13 occurs. If the 
destination selector contained in the gate refer- 
ences a code segment descriptor, the code seg- 
ment descriptor DPL must be the same or more priv- 
ileged than the task CPL. If not. Exception 1 3 Is is- 
sued. After the control transfer, the code segment 
descriptors DPL is the task’s new CPL. If the desti- 
nation selector In the gate references a task state 
segment, a task switch Is automatically performed 
(see Task Switch Operation). 

The privilege rules on control transfer require; 

— JMP or CALL direct to a code segment (code 
segment descriptor) can only be to a conforming 
segment with DPL of equal or greater privilege 
than CPL or a non-conforming segment at the 
same privilege level. 

— interrupts within the task or calls that may 
change privilege levels, can only transfer control 
through a gate at the same or a less privileged 
level than CPL to a code segment at the same or 
more privileged level than CPL. 

— return instructions that don’t switch tasks can 
only return control to a code segment at the 
same or less privileged level. 

— task switch can be performed by a call, jump or 
interrupt which references either a task gate or 
task state segment at the same or less privileged 
level. 


Table 10. Descriptor Types Used for Control Transfer 


Control Transfer Types 

Operation Types 

Descriptor 

Referenced 

Descriptor 

Table 

Intersegment within the same privilege level 

JMP, CALL, RET, IRET* 

Code Segment 

GDT/LDT 

Intersegment to the same or higher privilege level Interrupt 
within task may change CPL. 

CALL 

Call Gate 

GDT/LDT 

Interrupt Instruction, 
Exception, External 
Interrupt 

Trap or 

Interrupt 

Gate 

IDT 

Intersegment to a lower privilege level (changes task CPL) 

RET, IRET* 

Code Segment 

GDT/LDT 


CALL, JMP 

Task State 
Segment 

GDT 

Task Switch 

CALL, JMP 

Task Gate 

GDT/LDT 

IRET** 

Interrupt Instruction, 
Exception, External 
Interrupt 

Task Gate 

IDT 


*NT (Nested Task bit of flag word) = 0 
**NT (Nested Task bit of flag v^/ord) = 1 
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PRIVILEGE LEVEL CHANGES 

Any control transfer that changes CPL within the 
task, causes a change of stacks as part of the oper- 
ation. Initial values of SS:SP for privilege levels 0, 1, 
and 2 are kept in the task state segment (refer to 
Task Switch Operation). During a JMP or CALL con- 
trol transfer, the new stack pointer is loaded Into the 
SS and SP registers and the previous stack pointer 
is pushed onto the new stack. 

When returning to the original privilege level, its 
stack is restored as part of the RET or I RET instruc- 
tion operation. For subroutine calls that pass param- 
eters on the stack and cross privilege levels, a fixed 
number of words, as specified in the gate, are cop- 
ied from the previous stack to the current stack. The 
inter-segment RET instruction with a stack adjust- 
ment value will correctly restore the previous stack 
pointer upon return. 

Protection 

The 80C286 includes mechanisms to protect critical 
Instructions that affect the CPU execution state (e.g. 
HLT) and code or data segments from improper us- 
age. These protection mechanisms are grouped into 
three forms: 

Restricted usage of segments (e.g. no write al- 
lowed to read-only data segments). The only seg- 
ments available for use are defined by descrip- 
tors in the Local Descriptor Table (LDT) and 
Global Descriptor Table (GDT). 

Restricted access to segments via the rules of 
privilege and descriptor usage. 

Privileged instructions or operations that may 
only be executed at certain privilege levels as de- 
termined by the CPL and I/O Privilege Level 
(lOPL). The lOPL is defined by bits 14 and 13 of 
the flag word. 

These checks are performed for all instructions and 
can be split into three categories: segment load 
checks (Table 11), operand reference checks (Table 
12), and privileged instruction checks (Table 13). 
Any violation of the rules shown will result in an ex- 
ception. A not-present exception related to the stack 
segment causes exception 1 2. 

The IRET and POPF instructions do not perform 
some of their defined functions if CPL is not of suffi- 
cient privilege (numerically small enough). Precisely 
these are: 

• The IF bit is not changed if CPL > lOPL. 

• The lOPL field of the flag word is not changed if 
CPL > 0. 

No exceptions or other Indication are given when 
these conditions occur. 


Table 11. Segment Register Load Checks 


Error Description 

Exception 

Number 

Descriptor table limit exceeded 

13 

Segment descriptor not-present 

11 or 12 

Privilege rules violated 

13 

Invalid descriptor/segment type seg- 
ment register load: 

— Read only data segment load to 

SS 

— Special Control descriptor load to 
DS, ES, SS 

— Execute only segment load to 

DS. ES, SS 

— Data segment load to CS 
— Read/Execute code segment 
load to SS 

13 


Table 12. Operand Reference Checks 


Error Description 

Exception 

Number 

Write into code segment 

13 

Read from execute-only code 


segment 

13 

Write to read-only data segment 

13 

Segment limit exceeded"! 

12or 13 


NOTE: 

Carry out in offset calculations is ignored. 


Table 13. Privileged Instruction Checks 


Error Description 

Exception 

Number 

CPL ^ 0 when executing the following 
instructions: 

LIDT, LLDT, LGDT, LTR, LMSW, 

CTS, HLT 

13 

CPL > lOPL when executing the fol- 
lowing instructions: 

INS, IN, OUTS, OUT, STI, CLI, 

LOCK 

13 


EXCEPTIONS 

The 80C286 detects several types of exceptions 
and interrupts, in protected mode (see Table 14). 
Most are restartable after the exceptional condition 
is removed. Interrupt handlers for most exceptions 
can read an error code, pushed on the stack after 
the return address, that identifies the selector in- 
volved (0 if none). The return address normally 
points to the failing instruction, including all leading 
prefixes. For a processor extension segment over- 
run exception, the return address will not point at the 
ESC instruction that caused the exception; however, 
the processor extension registers may contain the 
address of the failing instruction. 


3-21 







80C286 




Table 14. Protected Mode Exceptions 


Interrupt 

Vector 

Function 

Return 

Address 

At Falling 
Instruction? 

Always 

Restart- 

able? 

Error 

Code 
on Stack? 

8 

Double exception detected 

Yes 

No2 

Yes 

9 

Processor extension segment overrun 

No 

No2 

No 

10 

Invalid task state segment 

Yes 

Yes 

Yes 

11 

Segment not present 

Yes 

Yes 

Yes 

12 

Stack segment overrun or stack segment not present 

Yes 

Yesl 

Yes 

13 

General protection 

Yes 

No2 

Yes 


NOTE: 

1 . When a PUSHA or POPA instruction attempts to wrap around the stack segment, the machine state after the exception 
will not be restartable because stack segment wrap around is not permitted. This condition is identified by the value of the 
saved SP being either 0000(H), 0001(H), FFFE(H), or FFFF(H). 

2. These exceptions indicate a violation to privilege rules or usage rules has occurred. Restart is generally not attempted 
under those conditions. 


These exceptions indicate a violation to privilege 
rules or usage rules has occurred. Restart is gener- 
ally not attempted under those conditions. 

All these checks are performed for all instructions 
and can be split into three categories: segment load 
checks (Table 11), operand reference checks (Table 
12), and privileged instruction checks (Table 13). 
Any violation of the rules shown will result in an ex- 
ception. A not-present exception causes exception 
11 or 1 2 and is restartable. 


Special Operations 

TASK SWITCH OPERATION 

The 80C286 provides a built-in task switch operation 
which saves the entire 80C286 execution state (reg- 
isters, address space, and a link to the previous 
task), loads a new execution state, and commences 
execution in the new task. Like gates, the task 
switch operation is invoked by executing an inter- 
segment JMP or CALL Instruction which refers to a 
Task State Segment (TSS) or task gate descriptor In 
the GOT or LOT. An INT n instruction, exception, or 
external interrupt may also invoke the task switch 
operation by selecting a task gate descriptor in the 
associated IDT descriptor entry. 

The TSS descriptor points at a segment (see Figure 
20) containing the entire 80C286 execution state 
while a task gate descriptor contains a TSS selector. 
The limit field of the descriptor must be >002B(H). 

Each task must have a TSS associated with it. The 
current TSS is identified by a special register in the 
80C286 called the Task Register (TR). This register 
contains a selector referring to the task state seg- 
ment descriptor that defines the current TSS. A hid- 
den base and limit register associated with TR are 
loaded whenever TR is loaded with a new selector. 


The IRET instruction Is used to return control to the 
task that called the current task or was iriterrupted. 
Bit 14 in the flag register is called the Nested Task 
(NT) bit. It controls the function of the IRET Instruc- 
tion. If NT = 0, the IRET Instruction performs the 
regular current task by popping values off the stack; 
when NT = 1, IRET performs a task switch opera- 
tion back to the previous task. 

When a CALL, JMP, or INT instruction initiates a 
task switch, the old (except for case of JMP) and 
new TSS will be marked busy and the back link field 
of the new TSS set to the old TSS selector. The NT 
bit of the new task is set by CALL or INT Initiated 
task switches. An interrupt that does not cause a 
task switch will clear NT. NT may also be set or 
cleared by POPF or IRET instructions. 

The task state segment is marked busy by changing 
the descriptor type field from Type 1 to Type 3. Use 
of a selector that references a busy task state seg- 
ment causes Exception 13. 

PROCESSOR EXTENSION CONTEXT 
SWITCHING 

The context of a processor extension (such as the 
80287 numerics processor) is not changed by the 
task switch operation. A processor extension con- 
text need only be changed when a different task at- 
tempts to use the processor extension (which still 
contains the context of a previous task). The 
80C286 detects the first use of a processor exten- 
sion after a task switch by causing the processor 
extension not present exception (7). The interrupt 
handler may then decide whether a context change 
is necessary. 

Whenever the 80C286 switches tasks, it sets the 
Task Switched (TS) bit of the MSW. TS Indicates 
that a processor extension context may belong to a 
different task than the current one. The processor 
extension not present exception (7) will occur when 
attempting to execute an ESC or WAIT Instruction If 
TS= 1 and a processor extension Is present (MP= 1 
in MSW). 
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POINTER TESTING INSTRUCTIONS 

The 80C286 provides several instructions to speed 
pointer testing and consistency checks for maintain- 
ing system integrity (see Table 15). These Instruc- 


tions use the memory management hardware to ver- 
ify that a selector value refers to an appropriate seg- 
ment without risking an exception. A condition flag 
(ZF) indicates whether use of the selector or seg- 
ment will cause an exception. 


TASK REGISTER 

~r 




PROGRAM INVISIBLE 
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-| 


BASE 

' 



I. L 


SYSTEM 

SEGMENT 
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TASK 

STATE 

SEGMENT 
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|TYPE| 
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BASEis-o 
I 
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TASK LOT SELECTOR 


OS SELECTOR 


SS SELECTOR 


CS SELECTOR 


ES SELECTOR 


IP (ENTRY POINT) 


SSFOR CPL2 


SP FOR CPL 2 


SS FOR CPL 1 


SSFOR CPLO 


SP FOR CPLO 


BACK LINK SELECTOR TO TSS 


TYPE 

DESCRIPTION 

1 

AN AVAILABLE TASK STATE 
SEGMENT. MAY BE USED AS 

THE DESTINATION OF A TASK 
SWITCH OPERATION. 

3 

A BUSY TASK STATE SEGMENT. 
CANNOT BE USED AS THE 
DESTINATION OF A TASK 

SWITCH. 


BYTE 

OFFSET 


P 

DESCRIPTION 

1 

BASE AND LIMIT FIELDS ARE VALID 

0 

SEGMENT IS NOT PRESENT IN 

MEMORY, BASE AND LIMIT ARE NOT 
DEFINED 


CURRENT 

TASK 

STATE 


INITIAL 
STACKS 
FOR CPL 0.1.2 
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Figure 20. Task State Segment and TSS Registers 
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Table 15. 80C286 Pointer Test Instructions 


Instruction 

Operands 

Function 

ARPL 

Selector, 

Register 

Adjust Requested Privilege 
Level: adjusts the RPL of 
the selector to the numeric 
maximum of current selec- 
tor RPL value and the RPL 
value in the register. Set 
zero flag if selector RPL 
was changed by ARPL. 

VERR 

Selector 

VERify for Read: sets the 
zero flag if the segment re- 
ferred to by the selector 
can be read. 

VERW 

Selector 

VERify for Write: sets the 
zero flag if the segment re- 
ferred to by the selector 
can be written. 

LSL 

Register, 

Selector 

Load Segment Limit: reads 
the segment limit into the 
register if privilege rules 
and descriptor type allow. 
Set zero flag if successful. 

LAR 

Register, 

Selector 

Load Access Rights: reads 
the descriptor access 
rights byte into the register 
if privilege rules allow. Set 
zero flag if successful. 


DOUBLE FAULT AND SHUTDOWN 

If two separate exceptions are detected during a sin- 
gle instruction execution, the 80C286 performs the 
double fault exception (8). If an execution occurs 
during processing of the double fault exception, the 
80C286 will enter shutdown. During shutdown no 
further instructions or exceptions are processed. Ei- 
ther NMI (CPU remains in protected mode) or RE- 
SET (CPU exits protected mode) can force the 
80C286 out of shutdown. Shutdown is externally sig- 
nalled via a HALT bus operation with Ai LOW. 

PROTECTED MODE INITIALIZATION 

The 80C286 Initially executes in real address mode 
after RESET. To allow initialization code to be 
placed at the top of physical memory, A23-A20 will 
be HIGH when the 80C286 performs memory refer- 
ences relative to the CS register until CS Is changed. 
A23-A20 will be zero for references to the DS, ES, or 
SS segments. Changing CS in real address mode 
will force A23-A20 LOW whenever CS Is used again. 
The initial CS;IP value of FOOOiFFFO provides 64K 
bytes of code space for initialization code without 
changing CS. 

Protected mode operation requires several registers 
to be initialized. The GDT and IDT base registers 
must refer to a valid GDT and IDT. After executing 
the LMSW instruction to set PE, the 80C286 must 


immediately execute an intra-segment JMP instruc- 
tion to clear the instruction queue of instructions de- 
coded in real address mode. 

To force the 80C286 CPU registers to match the 
initial protected mode state assumed by software, 
execute a JMP instruction with a selector referring to 
the initial TSS used in the system. This will load the 
task register, local descriptor table register, segment 
registers and initial genera! register state. The TR 
should point at a valid TSS since any task switch 
operation involves saving the current task state. 

SYSTEM INTERFACE 

The 80C286 system interface appears in two forms: 
a local bus and a system bus. The local bus consists 
of address, data, status, and control signals at the 
pins of the CPU. A system bus is any buffered ver- 
sion of the local bus. A system bus may also differ 
from the local bus in terms of coding of status and 
control lines and/or timing and loading of signals. 
The 80C286 family includes several devices to gen- 
erate standard system buses such as the IEEE 796 
standard MULTIBUS. 

Bus Interface Signals and Timing 

The 80C286 microsystem local bus interfaces the 
80C286 to local memory and I/O components. The 
interface has 24 address lines, 16 data lines, and 8 
status and control signals. 

The 80C286 CPU, 82C284 clock generator, 82C288 
bus controller, transceivers, and latches provide a 
buffered and decoded system bus Interface. The 
82 C284 ge nerates the system clock and synchroniz- 
es READY and RESET. The 82C288 converts bus 
operation status encoded by the 80C286 into com- 
mand and bus control signals. These components 
can provide the timing and electrical power drive lev- 
els required for most system bus interfaces including 
the Multibus. 

Physical Memory and I/O Interface 

A maximum of 16 megabytes of physical memory 
can be addressed in protected mode. One mega- 
byte can be addressed in real address mode. Memo- 
ry is accessible as bytes or words. Words consist of 
any two consecutive bytes addressed with the least 
significant byte stored in the lowest address. 

Byte transfers occur on either half of the 1 6-blt local 
data bus. Even bytes are accessed over D7-D0 
while odd bytes are transferred over D15-D8. Even- 
addressed words are transferred over D-is-Dq in 
one bus cycle, while odd-addressed word require 
two bus operations. The first transfers data on 
Dis-Ds, and the second transfers data on D7-D0. 
Both byte data transfers occur automatically, trans- 
parent to software. 
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Two bus signals, Aq and BHE, control transfers over 
the lower and upper halves of the data bus. Even 
addre ss byte transfers are indicated by Aq LOW and 
BHE HIGH. Odd address byte transfers ar e indi cat- 
ed by Aq HIGH and BHE LOW. Both Aq and BHE are 
LOW for even address word transfers. 

The I/O address space contains 64K addresses in 
both modes. The I/O space is accessible as either 
bytes or words, as is memory. Byte wide peripheral 
devices may be attached to either the upper or lower 
byte of the data bus. Byte-wide I/O devices attached 
to the upper data byte (Dis-Ds) are accessed with 
odd I/O addresses. Devices on the lower data byte 
are accessed with even I/O addresses. An interrupt 
controller such as Intel’s 82C59A-2 must be con- 
nected to the lower data byte (D7-D0) for proper 
return of the interrupt vector. 

Bus Operation 

The 80C286 uses a double frequency system clock 
(CLK input) to control bus timing. All signals on the 
local bus are measured relative to the system CLK 
Input. The CPU divides the system clock by 2 to pro- 
duce the Internal processor clock, which determines 
bus state. Each processor clock is composed of two 
system clock cycles named phase 1 and phase 2. 
The 82C284 clock generator output (PCLK) identi- 
fies the next phase of the processor clock. (See Fig- 
ure 21.) 



Clock Relationships 

Six types of bus operations are supported; memory 
read, memory write, I/O read, I/O write, interrupt ac- 
knowledge, and halt/shutdown. Data can be trans- 
ferred at a maximum rate of one word per two proc- 
essor clock cycles. 

The 80C286 bus has three basic states: idle (Tj), 
send status (Tg), and perform command (Tc). The 
80C286 CPU also has a fourth local bus state called 
hold (Th). Th indicates that the 80C286 has surren- 
dered control of the local bus to another bus master 
in response to a HOLD request. 

Each bus state is one processor clock long. Figure 
22 shows the four 80C286 local bus states and al- 
lowed transitions. 



Bus States 

The idle (Tj) state indicates that no data transfers 
are in progress or requested. JHie first active state 
Ts is signaled by status line SI or SO going LOW 
and Identifying phase 1 of the processor clock. Dur- 
ing Ts, the command encoding, the address, and 
data (for a write operation) are available on the 
80C286 output pins. The 82C288 bus controller de- 
codes the status signals and generates Multibus 
compatible read/write command and local trans- 
ceiver control signals. 

After Ts, the perform command (Tc) state Is en- 
tered. Memory or I/O devices respond to the bus 
operation during Tq, either transferring read data to 
the CPU or accepting write data. Tc states may be 
repeated as often as necessary to assure sufficient 
time for the memory or I/O device to respond. The 
READY signal determines whether Tc is repeated. A 
repeated Tc state Is called a wait state. 

During hold (Th), the 80C286 will float* all address, 
data, and status output pins enabling another bus 
master to use the local bus. The 80C286 HOLD In- 
put signal is used to place the 80C286 into the Th 
state. The 80C286 HLDA output signal indicates that 
the CPU has entered Th. 

Pipelined Addressing 

The 80C286 uses a local bus Interface with pipe- 
lined timing to allow as much time as possible for 
data access. Pipelined timing allows a new bus oper- 
ation to be initiated every two processor cycles, 
while allowing each individual bus operation to last 
for three processor cycles. 

The timing of the address outputs is pipelined such 
that the address of the next bus operation becomes 
available during the current bus operation. Or in oth- 
er words, the first clock of the next bus operation is 
overlapped with the last clock of the current bus op- 
eration. Therefore, address decode and routing logic 
can operate in advance of the next bus operation. 


*NOTE: See section on bus hold circuitry. 
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Figure 23. Basic Bus Cycle 


External address latches may hold the address sta- 
ble for the entire bus operation, and provide addi- 
tional AC and DC buffering. 

The 80C286 does not maintain the address of the 
current bus operation during all Tc states. Instead, 
the address for the next bus operation may be emit- 
ted during phase 2 of any Tq. The address remains 
valid during phase 1 of the first Tc to guarantee hold 
time, relative to ALE, for the address latch inputs. 

Bus Control Signals 

The 82C288 bus controller provides control signals; 
address latch enable (ALE), F^ad/Write commands, 
data transmit/receive (DT/R), and data enable 
(DEN) that control the address latches, data trans- 
ceivers, write enable, and output enable for memory 
and I/O systems. 

The Address Latch Enable (ALE) output determines 
when the address may be latched. ALE provides at 
least one system CLK period of address hold time 
from the end of the previous bus operation until the 
address for the next bus operation appears at the 
latch outputs. This address hold time is required to 
support MULTIBUS and common memory systems. 

The data bus transceivers are controlled by 82C288 
outputs Data Enable (DEN) and Data Transmit/ Re- 
ceive (DT^). DEN enables the data transceivers; 
whil^DT/R controls tranceiver direction. DEN and 
DT/R are timed to prevent bus contention between 
the bus master, data bus transceivers, and system 
data bus transceivers. 


Command Timing Controis 

Two system timing customization options, command 
extension and command delay, are provided on the 
80C286 local bus. 

Command extension allows additional time for exter- 
nal devices to respond to a command and is analo- 
gous to inserting wait states on the 8086. External 
logic can control the duration of any bus operation 
such that the operation is only as long as necessary. 
The READY input signal can extend any bus opera- 
tion for as long as necessary. 

Command delay allows an increase of address or 
write data setup time to system bus command active 
for any bus operation by delaying when the system 
bus command becomes active. Command delay Is 
controlled by the 82C288 CMDLY input. After Ts, 
the bus controller samples CMDLY at each failing 
edge of CLK. If CMDLY is HIGH, the 82C288 will not 
activate the command signal. When CMDLY is LOW, 
the 82C288 will activate the command signal. After 
the command becomes active, the CMDLY Input is 
not sampled. 

When a command is delayed, the available re- 
sponse time from command active to return read 
data or accept write data is less. To customize sys- 
tem bus timing, an address decoder can determine 
which bus operations require delaying the com- 
mand. The CMDLY input does not affect the timing 
of ALE, DEN, or DT/R. 
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Figure 24. CMDLY Controls the Leading Edge of Command Signal 


of the READY signal, thereby requiring READY be 
synchronous to the system clock. 

Synchronous Ready 

The 82C284 clock generator provides READY syn- 
chronization from both synchronous and asynchro- 
nous source s (see Figure 25). The synchronous 
ready input (SRDY) of the clock generator is sam- 
pled with the falling edge of CLK at the end of phase 
1 of each Tq. The state of SRDY is then broa dcast to 
the bus master and bus controller via the READY 
output line. 

Asynchronous Ready 

Many systems have devices or subsystems that are 
asynchronous to the system clock. As a result, their 
ready o utputs cannot be guaranteed to meet the 
82C284 SRDY setup and hold time requ iremen ts. 
But the 82C284 asynchronous ready i nput (A RDY) is 
designed to accept such signals. The ARDY input is 
sampled at the beginning of each Tc cycle by 
82C284 synchronization logic. This provides one 
system CLK cycle time to resolve Its value before 
broadcasting it to the bus master and bus controller. 


Figure 24 Illustrates four uses of CMDLY. Example 1 
shows delaying the read command two system 
CLKs for cycle N-1 and no delay for cycle N, and 
example 2 shows delaying the read command one 
system CLK for cycle N-1 and one system CLK de- 
lay for cycle N. 

Bus Cycle Termination 

At maximum transfer rates, the 80C286 bus alter- 
nates between the status and command states. The 
bus status signals become inactive after Tg so that 
they may correctly signal the start of the next bus 
operation after the completion of the current cycle. 
No external indication of Tc exists on the 80C286 
local bus. The bus master and bus controller enter 
Tc directly after Tg and con tinue executing Tc cycles 
until terminated by READY. 


READY Operation 

The current bus master and 82C288 bus controller 
terminate each bus operation simultaneously to 
achieve maximum bus oper ation ba ndwidth. Both 
are informed in advance by READY active (open- 
collector output from 82C284) which identifies the 
last Tc cycle of the current bus operation. The bus 
master and bus controller must see the same sense 
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N OTES: 231923-25 

1. SRDYEN is active low. 

2. If SRDYE N Js high, the state of SRDY will no affect READY. 

3. ARDYEN is active low. 


Figure 25. Synchronous and Asynchronous Ready 


ARDY or ARDYEN must be HIGH at the end of Ts- 
ARDY cannot be used to terminate bus cycle with no 
wait states. 

Each ready input of the 82C284 has an enable pin 
(SRDYEN and ARDYEN) to select whether the cur- 
rent bus operation will be terminated by the synchro- 
nous or asynchronous ready. Either of the ready in- 
puts may terminate a bus operation. These enable 
inputs are active low and have the same timing as 
their respective ready inputs. Address decode logic 
usually selects whether the cu rr ent bus operation 
should be terminated by ARDY or SRDY. 


The data bus is driven with write data during the 
second phase of Tg. The delay in write data timing 
allows the read data drivers, from a previous read 
cycle, sufficient time to enter 3-state OFF* before 
the 80C286 CPU begins driving the local data bus 
for write operations. Write data will always remain 
valid for one system clock past the last Tc to provide 
sufficient hold time for Multibus or other similar 
memory or I/O systems. During write-read or write- 
idle sequences the data bus enters 3-state OFF* 
during the second phase of the processor cycle after 
the last Tc- In a write-write sequence the data bus 
does not enter 3-state OFF* between Jq and Tg. 


Data Bus Control 

Figures 26, 27, and 28 show how the DT/R, DEN, 
data bus, and address signals operate for different 
combinations of read, write, and idle bus operations. 
DT/R goes active (LOW) for a read operation. DT/R 
remains HIGH before, during, and between write op- 
erations. 


Bus Usage 

The 80C286 local bus may be used for several func- 
tions: instruction data transfers, data transfers by 
other bus masters, instruction fetching, processor 
extension data transfers, interrupt acknowledge, and 
halt/shutdown. This section describes local bus ac- 
tivities which have special signals or requirements. 


*NOTE: See section on bus hold circuitry. 
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Figure 28. Back to Back Write-Write Cycles 


HOLD and HLDA 

HOLD AND HLDA allow another bus master to gain 
control of the local bus by placing the 80C286 bus 
into the state. The sequence of events required 
to pass control between the 80C286 and another 
local bus master are shown in Figure 29. 

In this example, the 80C286 is initially in the state 
as signaled by HLDA being active. Upon leaving Th, 
as signaled by HLDA going inactive, a write opera- 
tion is started. During the write operation another 
local bus master requests the local bus from the 
80C286 as shown by the HOLD signal. After com- 
pleting the write operation, the 80C286 performs 
one Tj bus cycle, to guarantee write data hold time, 
then enters as signaled by HLDA going active. 


The CMDLY signal and ARDY ready are used to 
start and s top the write bus command, respectively. 
Note tha t SRDY must be ina ctive or disabled by 
SRDYEN to guarantee ARDY will terminate the cy- 
cle. 

HOLD must not be active during the time from the 
leading edge of RESET until 34 CLKs following the 
trailing edge of RESET. 

Lock 

The CPU asserts an active lock signal during Inter- 
rupt-Acknowledge cycles, the XCHG instruction, and 
during some descriptor accesses. Lock Is also as- 
serted when the LOCK prefix is used. The LOCK 
prefix may be used with the following ASM-286 as- 
sembly instructions; MOVS, INS, and OUTS. For bus 
cycles other than Interrupt- Acknowledge cycles. 


Lock will be active for the first and subsequent cy- 
cles of a series of cycles to be locked. Lock will not 
be shown active during the last cycle to be locked. 
For the next-to-last cycle. Lock will become inactive 
at the end of the first Tc regardless of the number of 
wait-states inserted. For Interrupt-Acknowledge cy- 
cles, Lock will be active for each cycle, and will be- 
come inactive at the end of the first Tc for each cy- 
cle regardless of the number of wait-states inserted. 

instruction Fetching 

The 80C286 Bus Unit (BU) will fetch instructions 
ahead of the current instruction being executed. This 
activity Is called prefetching. It occurs when the local 
bus would otherwise be Idle and obeys the following 
rules: 

A prefetch bus operation starts when at least two 
bytes of the 6-byte prefetch queue are empty. 

The prefetcher normally performs word prefetches 
independent of the byte alignment of the code seg- 
ment base In physical memory. 

The prefetcher will perform only a byte code fetch 
operation for control transfers to an Instruction be- 
ginning on a numerically odd physical address. 

Prefetching stops whenever a control transfer or 
HLT instruction is decoded by the lU and placed into 
the Instruction queue. 

In real address mode, the prefetcher may fetch up to 
6 bytes beyond the last control transfer or HLT In- 
struction in a code segment. 
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In protected mode, the pref etcher will never cause a 
segment overrun exception. The prefetcher stops at 
the last physical memory word of the code segment. 
Exception 13 will occur if the program attempts to 
execute beyond the last full instruction in the code 
segment. 


If the last byte of a code segment appears on an 
even physical memory address, the prefetcher will 
read the next physical byte of memory (perform a 
word code fetch). The value of this byte is ignored 
and any attempt to execute it causes exception 1 3. 
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NOTES: 

1 . Status lines are not driven by 80C286, yet remain high due to internal pullup resistors during HOLD state. See section 

on bus hold circuUry. 

2. Address, M/IO and COD/INTA may start floating during any Tc depending on when internal 80C286 bus arbiter 
de cides to r elease bus to external HOLD. The float starts in (f>2 of Tc- See section on bus hold circuitry. 

3. BHE and LOCK may start floating after the end of any Tc depending on when internal 80C286 bus arbiter decides to 
release bus to external HOLD. The float starts in 4>1 of Tc- See section on bus hold circuitry. 

4. The minimum HOLD to HLDA time is shown. Maximum is one Th longer. 

5. The earliest HOLD time is shown. It will always allow a subsequent memory cycle if pending is shown. 

6. The minimum HOLD to HLDA time is shown. Maximum is a function of the instruction, type of bus cycle and other 
machine state (i.e., Interrupts, Waits, Lock, etc.). 

7. Asynchronous ready allows termination of the cycle. Synchronous ready does not signal ready in this example. Syn- 
chronous ready state is ignored after ready is signaled via the asynchronous input. 


Figure 29. MULTIBUS® Write Terminated by Asynchronous Ready with Bus Hold 
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Processor Extension Transfers 

The processor extension interface uses I/O port ad- 
dresses 00F8(H), OOFA(H), and OOFC(H) which are 
part of the I/O port address range reserved by Intel. 
An ESC instruction with Machine Status Word bits 
EM = 0 and TS = 0 will perform I/O bus operations 
to one or more of these I/O port addresses Indepen- 
dent of the value of lOPL and CPL. 

ESC instructions with memory references enable the 
CPU to accept PEREQ Inputs for processor exten- 
sion operand transfers. The CPU will determine the 
operand starting address and read/write status of 
the instruction. For each operand transfer, two or 
three bus operations are performed, one word trans- 
fer with I/O port address OOFA(H) and one or two 
bus operations with memory. Three bus operations 
are required for each word operand aligned on an 
odd byte address. 

NOTE: 

Odd-aligned numerics instructions should be avoid- 
ed when using an 80C286 system running six or 
more memory-write wait-states. The 80C286 can 
generate an incorrect numerics address if all the 
following conditions are met: 

— Two floating point (FP) instructions are fetched 
and in the 80C286 queue. 

— The first FP Instruction is any floating point store 
except FSTSW AX. 

The second FP instruction is any floating point 
store except FSTSW AX. 

— The second FP instruction accesses memory. 

— The operand of the first instruction Is aligned on 
an odd memory address. 

— More than five wait-states are inserted during ei- 
ther of the last two memory write transfers 
(transferred as two bytes for odd aligned oper- 
ands) of the first instruction. 

The second FP Instruction operand address will be 
Incremented by one if these conditions are met. 
These conditions are most likely to occur in a multi- 
master system. For a hardware solution, contact 
your local Intel representative. 

Ten or more command delays should not be used 
when accessing the numerics coprocessor. Exces- 
sive command delays can cause the 80C286 and 
80287 to lose synchronization. 


interrupt Acknowledge Sequence 

Figure 30 illustrates an Interrupt acknowledge se- 
quence performed by the 80C286 in response to an 


INTR input. An interrupt acknowledge sequence 
consists of two INTA bus operations. The first allows 
a master 82C59A-2 Programmable Interrupt Control- 
ler (PIC) to determine which If any of Its slaves 
should return the Interrupt vector. An eight bit vector 
is read on D0-D7 of the 80C286 during the second 
INTA bus operation to select an interrupt handler 
routine from the interrupt table. 

The Master Cascade Enable (MCE) signal of the 
82C288 is used to enable the cascade address driv- 
ers, during INTA bus operations (See Figure 30), 
onto the local address bus for distribution to slave 
interrupt controller s via th e system address bus. The 
80C286 emits the LOCK signal (active LOW) during 
Ts of the first INTA bus operation. A local bus “hold” 
request will not be honored until the end of the sec- 
ond INTA bus operation. 

Three idle processor clocks are provided by the 
80C286 between INTA bus operations to allow for 
the minimum INTA to INTA time and CAS (cascade 
address) out delay of the 82C59A-2. The second 
INTA bus operation must always have at l east one 
extra Jq state added via logic controlling READY. 
This is needed to meet the 82C59A-2 minimum 
INTA pulse width. 


Local Bus Usage Priorities 

The 80C286 local bus is shared among several in- 
ternal units and external HOLD requests. In case of 
simultaneous requests, their relative priorities are; 

(Highest) Any transfers which assert LOCK either 
explicitly (via the LOCK instruction prefix) 
or Implicitly (i.e. some segment descriptor 
accesses, interrupt acknowledge se- 
quence, or an XCHG with memory). 

The second of the two byte bus opera- 
tions required for an odd aligned word op- 
erand. 

The second or third cycle of a processor 
extension data transfer. 

Local bus request via HOLD Input. 

Processor extension data operand trans- 
fer via PEREQ Input. 

Data transfer performed by EU as part of 
, , an instruction. 

(Lowest) An instruction prefetch request from BU. 

The EU will Inhibit prefetching two proc- 
essor clocks in advance of any data 
transfers to minimize waiting by EU for a 
prefetch to finish. 
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231923-32 

NOTES: 

1 . Data is ignored, upper data bus, Da-Di 5 , should not change state during this time. 

2. First INTA cycle should have at least one wait state inserted to meet 8259A minimum INTA pulse width. 

3. Secon d INTA cycle should have at least one wait state inserted to meet 8259A minimum INTA pulse width. 

4. LOCK is acti ve for t he first INTA cycle to prevent a bus arbiter from releasing the bus between INTA cycles In a multi- 
master system. LOCK is also active for the second INTA cycle. 

5. A 23 -A 0 exits 3-state OFF during <j)2 of the second Tc in the INTA cycle. See section on bus hold circuitry. 

6 . Upper data bus should not change state during this time. 


Figure 30. Interrupt Acknowledge Sequence 


Halt or Shutdown Cycles 

The 80C286 externally indicates halt or shutdown 
conditions as a bus operation. These conditions oc- 
cur due to a HLT instruction or multiple protection 
exceptions while attempting to execute one instruc- 
tion. A halt or shutdow n bus operation is sign^ed 
when S1, SO and COD/INTA are LOW and M/IO is 
HIGH. Ai HIGH Indicates halt, and Ai LOW indi- 
cates shutdown. Th e 82C28 8 bus controller does 
not issue ALE, nor is READY required to terminate a 
halt or shutdown bus operation. 


During halt or shutdown, the 80C286 may service 
PEREQ or HOLD requests. A processor extension 
segment overrun exception during shutdown will in- 
hibit further service of PEREQ. Either NMI or RESET 
will force the 80C286 out of either halt or shutdown. 
An INTR, if interrupts are enabled, or a processor 
extension segment overrun exception will also force 
the 80C286 out of halt. 
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THE POWER-DOWN FEATURE OF 
THE 80C286 

The 80C286, unlike the HMOS part, can enter into a 
power-down mode. By stopping the processor CLK, 
the processor will enter a power-down mode. Once 
in the power-down mode, all 80C286 outputs remain 
static (the same state as before the mode was en- 
tered). The 80C286 D.C. specification Ices rates the 
amount of current drawn by the processor when In 
the power-down mode. When the CLK Is reapplied 
to the processor, it will resume execution where it 
was Interrupted. 

In order to obtain maximum benefits from the power- 
down mode, certain precautions should be taken. 
When in the power-down mode, all 80C286 outputs 
remain static and any output that Is turned on and 
remains in a HIGH condition will source current 
when loaded. Best low-power performance can be 
obtained by first putting the processor in the HOLD 


condition (turning off all of the output buffers), and 
then stopping the processor CLK in the phase 2 
state, in this condition, any output that is loaded will 
source only the “Bus Hold Sustaining Current”. 

When stopping the processor clock, minimum clock 
high and low times cannot be violated (no glitches 
on the clock line). 

Violating this condition can cause the 80C286 to 
erase its internal register states. Note that all Inputs 
to the 80C286 (CLK, HOLD, PEREQ, RESET, 
READY, INTR, NMI, BUSY, and ERROR) should be 
at Vec or Vss; any other value will cause the 
80C286 to draw additional current. 

When coming out of power-down mode, the system 
CLK must be started with the same polarity in which 
it was stopped. An example power down sequence 
is shown in Figure 31. 
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BUS HOLD CIRCUITRY 

To avoid high current conditions caused by floating 
inputs to peripheral CMOS devices and eliminate the 
need for pull-up/down resistors, “bus-hold” circuitry 
has been used on all tri-state 80C286 outputs. See 
Table A for a list of these pins and Figures Ba and 
Bb for a complete description of which pins have 
bus hold circuitry. These circuits will maintain the 
last valid logic state if no driving source is present 
(i.e., an unconnected pin or a driving source which 
goes to a high impedance state). To overdrive the 
“bus hold” circuits, an external driver must be capa- 
ble of supplying the maximum “Bus Hold Overdrive” 
sink or source current at valid input voltage levels. 
Since this “bus hold” circuitry is active and not a 



“resistive” type element, the associated power sup- 
ply current is negligible and power dissipation is sig- 
nificantly reduced when compared to the use of pas- 
sive pull-up resistors. 


Bus Hold Circuitry on the 80C286 


Signal 

Pin 

Location 

Polarity Pulled to 
when tri-stated 

S1,S0, PEACK, LOCK 

4-6, 68 

Hi, See Figure Bb 

Data Bus (D 0 --D 15 ) 

36-51 

Hi/Lo, 

See Figure Ba 

COD/INTA, M/IO ■ 

66-67 

Hi/Lo, 

See Figure Ba 
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SYSTEM CONFIGURATIONS 

The versatile bus structure of the 80C286 microsys- 
tem, with a full complement of support chips, allows 
flexible configuration of a wide range of systems. 
The basic configuration, shown in Figure 32, is simi- 
lar to an 8086 maximum mode system. It includes 
the CPU plus an 82C59A-2 interrupt controller, 
82C284 clock generator, and the 82C288 Bus Con- 
troller. 

As indicated by the dashed lines in Figure 32, the 
ability to add processor extensions is an integral fea- 
ture of 80C286 microsystems. The processor exten- 
sion interface allows external hardware to perform 
special functions and transfer data concurrent with 
CPU execution of other instructions. Full system in- 
tegrity is maintained because the 80C286 supervis- 
es all data transfers and Instruction execution for the 
processor extension. 

The 80287 has all the instructions and data types of 
an 8087. The 80287 NPX can perform numeric cal- 
culations and data transfers concurrently with CPU 
program execution. Numerics code and data have 
the same Integrity as all other Information protected 
by the 80C286 protection mechanism. 

The 80C286 can overlap chip select decoding and 
address propagation during the data transfer for the 
previous bus operation. This information Is latched 
by ALE during the middle of a Tg cycle. The latched 
chip select and address Information remains stable 
during the bus operation while the next cycle’s ad- 


dress is being decoded and propagated into the sys- 
tem. Decode logic can be implemented with a high 
speed PROM or PAL. 

The optional decode logic shown In Figure 32 takes 
advantage of the overlap between address and data 
of the 80C286 bus cycle to generate advanced 
memory and 10-select signals. This minimizes sys- 
tem performance degradation caused by address 
propagation and decode delays. In addition to se- 
lecting memory and I/O, the advanced selects may 
be used with configurations supporting local and 
system buses to enable the appro priate bus int^ 
face for each bus cycle. The COD/INTA and M/IO 
signals are applied to the decode logic to distinguish 
between interrupt, I/O, code and data bus cycles. 

By adding a bus arbiter, the 80C286 provides a 
MULTIBUS system bus interface as shown in Figure 
33. The ALE output of the 82C288 for the 
MULTIBUS bus is connected to Its CMDLY input to 
delay the start of commands one system CLK as 
required to meet MULTIBUS address and write data 
setup times. This arrangement will add at least one 
extra Tc state to each bus operation which uses the 
MULTIBUS. 

A second 82C288 bus controller and additional 
latches and transceivers could be added to the local 
bus of Figure 33. This configuration allows the 
80C286 to support an on-board bus for local memo- 
ry and peripherals, and the MULTIBUS for system 
bus interfacing. 
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PEREQ 

CAP 

80C286 1 

CPU 

1 ^ 



» MEMORY READ 

► MEMORY WRITE 
» I 0 READ 

^ I 0 WRITE 

► INTERRUPT ACKNOWLEDGE 


8259A 

INTERRUPT 

CONTROLLER 


Figure 33. MULTIBUS® System Bus interface 
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Figure 34. 80C286 System Configuration with Dual-Ported Memory 


Figure 34 shows the addition of dual ported dynamic 
memory between the MULTIBUS system bus and 
the 80C286 local bus. The dual port interface is pro- 
vided by the 8207 Dual Port DRAM Controller. The 
8207 runs synchronously with the CPU to maximize 
throughput for local memory references. It also arbi- 
trates between requests from the local and system 
buses and performs functions such as refresh, 


initialization of RAM, and read/modify/write cycles. 
The 8207 combined with the 8206 Error Checking 
and Correction memory controller provide for single 
bit error correction. The dual-ported memory can be 
combined with a standard MULTIBUS system bus 
interface to maximize performance and protection in 
multiprocessor system configurations. 
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Table 16. 80C286 Systems Recommended Pull Up Resistor Values 


80C286 Pin and Name 

Pullup Value 

Purpose 

4— ^ 

5— ^ 

6— PEACK 

20 Kft ±10% 

Pull SO, SI , and PEACK inactive during 80C286 hold periods 

(Note 1) 

63— READY 

91 on ±5% 

Pull READY inactive within required minimum time (Cl =150 pF, 
Ir ^ 7 mA) 


NOTE: _ _ __ _ 

1. Pullup resistors are not required for SO and S1 when the corresponding pins on the 82C284 are connected to SO and SI. 


80C286 IN-CIRCUIT EMULATION 
CONSIDERATIONS 

One of the advantages of using the 80C286 is that 
full in-circuit emulation development support is avail- 
able through either the |2|CE 80286 probe for 
8 MHz/10 MHz or ICE286 for 12.5 MHz designs. To 
utilize these powerful tools it is necessary that the 
designer be aware of a few minor parametric and 
functional differences between the 80C286 and the 
in-circuit emulators. The |2lCE datasheet (|2|CE Inte- 
grated Instrumentation and In-Circuit Emulation Sys- 
tem, order #210469) contains a detailed description 
of these design considerations. The ICE286 Fact 
Sheet (#280718) and User’s Guide (#452317) con- 
tain design considerations for the 80C286 12.5 MHz 
microprocessor. It is recommended that the appro- 
priate document be reviewed by the 80C286 system 
designer to determine whether or not these differ- 
ences affect the design. 


PACKAGE THERMAL 
SPECIFICATIONS 

The 80C286 Microprocessor is specified for opera- 
tion when case temperature (Tq) is within the range 
of 0°C-d5°C. Case temperature, unlike ambient 
temperature, is easily measured In any environment 


to determine whether the 80C286 Microprocessor is 
within the specified operating range. The case tem- 
perature should be measured at the center of the 
top surface of the component. 

The maximum ambient temperature (Ta) allowable 
without violating Tc specifications can be calculated 
from the equations shown below. Tj Is the 80C286 
junction temperature. P is the power dissipated by 
the 80C286. 

Tj = Tc + P* ^jc 
Ta = Tj + P* 0JA 

Tc = Ta + P* [0JA - Ojd 

Values for ^ja and 0jc are given in Table 17. 0 ja is 
given at various airflows. Table 18 shows the maxi- 
mum Ta allowable (without exceeding Tc) at various 
airflows. Note that the 80C286 PLCC package has 
an internal heat spreader. Ta can be further im- 
proved by attaching “fins” or an external “heat sink” 
to the package. 

Junction temperature calculations should use an Ice 
value that is measured without external resistive 
loads. The external resistive loads dissipate addi- 
tional power external to the 80C286 and not on the 
die. This increases the resistor temperature, not the 
die temperature. The full capacitive load (Cl = 
100 pF) should be applied during the Ice measure- 
ment. 


Table 17. Thermal Resistances 

Table 18. Maximum Ta at Various Airflows 


The numbers in Table 18 were calculated using an Ice of 150 mA, which is representative of the worst case Ice at Tc = 
85°C with the outputs unloaded. 


Package 

TaC’C) versus Airflow 
ft/min (m/sec) 

0 

(0) 

200 

(1.01) 

400 

(2.03) 

600 

(3.04) 

800 

(4.06) 

1000 

(5.07) 

68-Lead PGA 

67 

73 

76 

78 

79 

79 

68 Lead-PLCC 
w/ Internal 

Heat Speader 

69 



74 

75 

77 

79 

80 


(°C/Watt) ^jc and 6 >ja 


Package 

^JC 

djA versus Airflow 
ft/min (m/sec) 

0 

(0) 

200 

(1.01) 

400 

(2.03) 

600 

(3.04) 

800 

(4.06) 

1000 

(5.07) 

68-Lead PGA 

5.5 

29 

22 

16 

' 15 

14 

13 

68-Lead PLCC 
w/ Internal 

Heat Speader 

8 

29 

23 

21 

18 

16 

15 


NOTE: 


3-40 






80C286 




int^ 


ABSOLUTE MAXIMUM RATINGS^ 


Ambient Temperature under Bias 0®C to + TO^C 

Storage Temperature -65°C to+ 150°C 

Voltage on Any Pin with 

Respect to Ground - 1 .OV to + 7V 

Power Dissipation 1 .1 W 


* Notice: Stresses above those listed under ‘'Abso- 
lute Maximum Ratings" may cause permanent dam- 
age to the device. This is a stress rating only and 
functional operation of the device at these or any 
other conditions above those indicated in the opera- 
tional sections of this specification is not implied. Ex- 
posure to absolute maximum rating conditions for 
extended periods may affect device reliability. 

NOTICE: Specifications contained within the 
following tables are subject to change. 


D,C. CHARACTERISTICS (Vcc = 5V ±10%.Tcase = o°Cto +85'’C) 


Symbol 

Parameter 

Min 

Max 

Typ 

Unit 

Test Conditions 

•cc 

Supply Current 


200 

125 

mA 

Cl = 100 pF (Note 1) 

•ccs 

Supply Current (Static) 


5 

0.5 

mA 

(Note 2) 

CcLK 

CLK Input Capacitance 


20 


PF 

FREQ = 1 MHz (Note 3) 

Qn 

Other Input Capacitance 


10 


PF 

FREQ = 1 MHz (Note 3) 

Co 

Input/Output Capacitance 


20 


pF 

FREQ = 1 MHz (Note 3) 


NOTES: 

1. Tested at maximum frequency with no resistive loads on the outputs. 

2. Tested while clock stopped in phase 2 and inputs at Vcc or Vss with the outputs unloaded. 

3. These are not tested but are guaranteed by design characterization. 


D.C. CHARACTERISTICS (Vcc = 5V ±io%,Tcase = 0“Cto h-ss’C) 


Symbol 

Parameter 

Min 

Max 

Unit 

Test Conditions 

V|L 

Input LOW Voltage 

-0.5 

0.8 

V 

FREQ = 2 MHz 

V|H 

Input HIGH Voltage 

2.0 

Vcc + 0.5 

V 

FREQ = 2 MHz 

V|LC 

CLK Input LOW Voltage 

-0.5 

0.8 

V 

FREQ = 2 MHz 

V|HC 

CLK Input HIGH Voltage 

3.8 

Vcc + 0.5 

V 

FREQ = 2 MHz 

VoL 

Output LOW Voltage 


0.45 

V 

lOL = 2.0 mA, FREQ = 2 MHz 

VOH 

Output HIGH Voltage 

3.0 


V 

lOH = -2.0 mA, FREQ = 2 MHz 



in 

d 

1 

o 

o 

> 


V 

lOH = -100 /xA, FREQ = 2 MHz 

Ili 

Input Leakage Current 


±10 

jLtA 

ViN = GND or Vcc (Note 1) 

Ilo 

Output Leakage Current 


±10 

jliA 

Vq = GND or Vcc (Note 1 ) 

l|L 

Input Sustaining Current on 
BUSY# and ERROR# Pins 

-30 

-500 

jliA 

ViN = OV (Notel) 

•bhl 

Input Sustaining Current 
(Bus Hold LOW) 

38 

150 

jliA 

ViN = 1.0V (Notes 1,2) 

•bhh 

Input Sustaining Current 
(Bus Hold HIGH) 

-50 

-350 

juA 

V|N = 3.0V (Notes 1,3) 

Ibhlo 

Bus Hold LOW Overdrive 

200 


fiA 

(Notes 1 , 4) 

Ibhho 

Bus Hold HIGH Overdrive 

-400 


aA 

(Notes 1,5) 


NOTES: 

1. Tested with the clock stopped. 

2. Ibhl should be measured after lowering V|n to GND and then raising to 1.0V on the following pins: 36-51, 66, 67. 

3- Ibhh should be measured after raising V|n to Vcc and then lowering to 3.0V on the following pins: 4-6, 36-51, 66-68. 

4. An external driver must source at least Ibhlo to switch this node from LOW to HIGH. 

5. An external driver must sink at least Ibhho to switch this node from HIGH to LOW. 
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A.C. CHARACTERISTICS (Vcc = 5V +10%,Tcase = O-Clo +85°C) 

A.C. timings are referenced to 1 .5V points of signals as illustrated in datasheet waveforms, unless otherwise 
noted. 


Symbol 

Parameter 

12.5 MHz 

Unit 

Test 

Conditions 

Min 

Max 

1 

System Clock (CLK) Period 

40 

DC 

ns 

(Note 1) 

2 

System Clock (CLK) LOW Time 

11 


ns 

at 1.0V 

3 

System Clock (CLK) HIGH Time 

13 


ns 

at 3.6V 

17 

System Clock (CLK) Rise Time 


8 

ns 

1.0V to 3.6V (Note 2) 

18 

System Clock (CLK) Fall Time 


8 

ns 

3.6V to 1.0V (Note 2) 

4 

Asynchronous Inputs Setup Time 

16 


ns 

(Note 3) 

5 

Asynchronous Inputs Hold Time 

16 


ns 

(Note 3) 

6 

RESET Setup Time 

19 


ns 


7 

RESET Hold Time 

6 


ns 


8 

Read Data Setup Time 

6 


ns 


9 

Read Data Hold Time 

7 


ns 


10 

READY Setup Time 

23 


ns 


11 

READY Hold Time 

21 


ns 


12a1 

Status Active Delay 

5 

16 

ns 

(Notes 4, 5) 

12a2 

PEACK Active Delay 

5 

18 

ns 

(Notes 4, 5) 

12b 

Status/ PEACK Inactive Delay 

5 

20 

ns 

(Notes 4, 5) 

13 

1 

Address Valid Delay 

4 

29 

ns 

(Notes 4, 5) 

14 

Write Data Valid Delay 

3 

27 

ns 

(Notes 4, 5) 

15 ' 

Address/Status/Data Float Delay 

2 

32 

ns 

(Notes 2, 4, 6) 

16 

HLDA Valid Delay 

3 

24 

ns 

(Notes 4, 5) 

19 

Address Valid To Status 

Valid Setup Time 

23 


ns 

(Notes 2, 4, 5) 


NOTES: 

1 . Functionality at frequencies less than 2 MHz is not tested, but is guaranteed by design characterization. 

2. These are not tested but are guaranteed by design char acterizat ion. 

3. Asynchronous inputs are INTR, NMI, HOLD, PEREQ, ERROR, and BUSY. This specification is given only for testing 
purposes, to assure recognition at a specific CLK edge. 

4. Delay from 1 .OV on the CLK, to 1 .5V or float on the output as appropriate for valid or floating condition. 

5. Output load: Cl = 100 pF. 

6. Float condition occurs when output current is less than Ilo in magnitude. 
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A.C. CHARACTERISTICS (Continued) 



DEVICE 




OUTPUT 






Cl 




: 

NOTE 7: 

AC Test Loading on Outputs 


231923-36 
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Typical Capacitive Derating Curves 



231923-46 


Typical CMOS Level Slew Rates for Address/Data Buffers 



231923-47 
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Typical TTL Level Slew Rates for Address/Data Buffers 


SLEW RATE 
(ns/V) 4 



RISE TIME (0.8V-2.0V) 
-0- FALL TIME (2.0V-0.8V) 


lcc(mA) 100 


LOAD CAPACITANCE (pF) 


Typical Icc vs Frequency for Different Output Loads 




8 10 12.5 


FREQUENCY (MHz) 


NOTES: 

1. Vcc = 5.0V 

2. Loaded: Iql = 2.0 mA, Iqh as shown, Cl = 100 pF 
Unloaded: Cl = 100 pF 


5 
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A-C. CHARACTERISTICS (Continued) 


82C284 Timing Requirements 


Symbol 

Parameter 

82C284-12 

Unit 

Test 

Conditions 

Min 

Max 

11 

SRDY/SRDYEN Setup Time 

18 


ns 


12 

SRDY/SRDYEN Hold Time 

2 


ns 


13 

ARDY/ARDYEN Setup Time 

0 


ns 

(Note 1) 

14 

ARDY/ARDYEN Hold Time 

25 


ns 

(Note 1) 

19 

PCLK Delay 

0 

23 

ns 

Cl = 75 pF 

Iql = 5 mA 
lOH = “1 •TTlA 


NOTE: 

1 . These times are given for testing purposes to assure a predetermined action. 


82C288 Timing Requirements 


Symbol 

Parameter 

82C288-12 

Unit 

Test 

Conditions 

Min 

Max 

12 

CMDLY Setup Time 

15 


ns 


13 

CMDLY Hold Time 

1 


ns 


30 

29 

Command 
Delay 
from CLK 

Command Inactive 

5 

20 

ns 

Cl = 300 pF max 

Iql = 32 mA max 

Iqh == ~ 5 mA max 

Command Active 

3 

21 

16 

ALE Active Delay 

3 

16 

ns 

Cl = 150 pF 

Iql = 16 mA max 
•oh “1 max 

17 

ALE Inactive Delay 


19 

ns 

19 

DT/R Read Active Delay 


23 

ns 

22 

DT/R Read Inactive Delay 

5 

18 

ns 

20 

DEN Read Active Delay 

5 

21 

ns 

21 

DEN Read Inactive Delay 

3 

19 

ns 

23 

DEN Write Active Delay 


23 

ns 

24 

DEN Write Inactive Delay 

3 

19 

ns 
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WAVEFORMS (Continued) 


80C286 ASYNCHRONOUS 
INPUT SIGNAL TIMING 


BUS CYCLE TYPE 



1 . PCLK indicates which processor cycle phase will oc- 
cur on the next CLK. PCLK may not indicate the cor- 
rect phase until the first bus cycle is performed. 

2. These inputs are asynchronous. The setup and hold 
times, shown assure recognition for testing purposes. 


80C286 RESET INPUT TIMING AND 
SUBSEQUENT PROCESSOR CYCLE PHASE 



EXITING AND ENTERING HOLD 



I / \ / \ j \ / V r 


1 . These signals may not be driven by the 80C286 during the time shown. The worst case in terms of latest float time is 
shown. 

2. The data bus will be driven as shown if the last cycle before T| in the diagram was a write Tc- 

3. The 80C286 floats its status pins during Th. External 20 KH resistors keep these signals high (see Table 16). 

4. For H OL D reque st set up to HLDA, refer to Figure 29. 

5. BHE and LOCK are driven at this time but will not become valid until Ts- 

6. The data bus will remain in 3-state OFF if a read cycle is performed. 
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WAVEFORMS (Continued) 


80C286 PEREQ/PEACK TIMING FOR ONE TRANSFER ONLY 


BUS CYCLE TYPE 



N OTES: 231923-43 

1 . PEACK always goes active during the first bus operation of a processor extension data operand transfer sequence. 
The first bus operation will be either a memory read at operand address or I/O read at port address OOFA(H). 

2. To prevent a second processor extension data operand transfer, the worst case maximum time (Shown above) is: 
3x © -12a2max.~ ®min.- , The actual, configuration dependent, maximum time is: 3 x © - 1 2a2max. “ ® min. + 
AX2X©. 

A is the number of extra Tc states added to either the first or second bus operation of the processor extension data 
operand transfer sequence. 


INITIAL 80C286 PIN STATE DURING RESET 


BUS CYCLE TYPE 



NOTES: 

1. Setup time for RESET T may be violated with the consideration that <f>1 of the processor clock may begin one 
system CLK period later. 

2. Setup and hold times for RESET X must be met for proper operation, but RESET J, may occur during (j>^ or 4)2. 

3. The data bus is only guaranteed to be In 3-state OFF at the time shown. 
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LOWDISP/OATA | HIGH DISP/DATA | LOW DATA j HIGH DATA | 


REGISTER OPERAND/REGISTERS TO USE IN OFFSET CALCULATION 
REGISTER OPERAND/EXTENSION OF OPCODE 
REGISTER MODE/MEMORY MODE WITH DISPLACEMENT LENGTH 
WORD/BYTE OPERATION 

DIRECTION IS TO REGISTER/DIRECTION IS FROM REGISTER 
OPERATION (INSTRUCTION) CODE 


A. SHORT OPCODE FORMAT EXAMPLE 


byte 1 BYTE 2 BYTE 3 

76543210765432107 6 5 4 3 2 1 0 


TTTTTTTTTTTTTTT 

T 

TV 

TV 

LONG OPCODE 

»— 1 ^ 

mod 

reg 

r/m 


B. LONG OPCODE FORMAT EXAMPLE 


231923-45 


Figure 35. 80C286 Instruction Format Examples 


80C286 INSTRUCTION SET 
SUMMARY 

Instruction Timing Notes 

The instruction clock counts listed below establish 
the maximum execution rate of the 80C286. With no 
delays In bus cycles, the actual clock count of an 
80C286 program will average 5% more than the cal- 
culated clock count, due to instruction sequences 
which execute faster than they can be fetched from 
memory. 

To calculate elapsed times for Instruction se- 
quences, multiply the sum of all Instruction clock 
counts, as listed in the table below, by the processor 
clock period. A 12 MHz processor clock has a clock 
period of 83 nanoseconds and requires an 80C286 
system clock (CLK Input) of 24 MHz. 


Instruction Ciock Count Assumptions 

1 . The instruction has been prefetched, decoded, 
and is ready for execution. Control transfer in- 
struction clock counts Include all time required to 
fetch, decode, and prepare the next instruction for 
execution. 

2. Bus cycles do not require wait states. 

3. There are no processor extension data transfer or 
local bus HOLD requests. 

4. No exceptions occur during instruction execution. 


Instruction Set Summary Notes 

Addressing displacements selected by the MOD 
field are not shown. If necessary they appear after 
the Instruction fields shown. 

Above/below refers to unsigned value 

Greater refers to positive signed value 

Less refers to less positive (more negative) signed 

values 

if d = 1 then to register; if d = 0 then from register 

if w = 1 then word instruction; If w = 0 then byte 
instruction 

if s = 0 then 1 6-bit immediate data form the oper- 
and 

if s = 1 then an immediate data byte is sign-ex- 
tended to form the 1 6-bit operand 

X don’t care 

z used for string primitives for comparison with 
ZF FLAG 

If two clock counts are given, the smaller refers to a 
register operand and the larger refers to a memory 
operand 

* = add one clock if offset calculation requires 
summing 3 elements 

n = number of times repeated 
m = number of bytes of code in next instruction 
Level (L) — Lexical nesting level of the procedure 
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The following comments describe possible excep- 
tions, side effects, and allowed usage for instruc- 
tions in both operating modes of the 80C286. 

REAL ADDRESS MODE ONLY 

1 . This is a protected mode instruction. Attempted 
execution in real address mode will result in an 
undefined opcode exception (6). 

2. A segment overrun exception (13) will occur if a 
word operand reference at offset FFFF(H) is at- 
tempted. 

3. This instruction may be executed in real address 
mode to initialize the CPU for protected mode. 

4. The lOPL and NT fields will remain 0. 

5. Processor extension segment overrun interrupt 
(9) will occur if the operand exceeds the seg- 
ment limit. 

EITHER MODE 

6. An exception may occur, depending on the value 
of the operand. 

7. LOCK is automatically asserted regardless of the 
presence or absence of the LOCK instruction 
prefix. 

8. LOCK does not remain active between all oper- 
and transfers. 


PROTECTED VIRTUAL ADDRESS MODE ONLY 

9. A general protection exception (13) will occur if 
the memory operand cannot be used due to ei- 
ther a segment limit or access rights violation. If 
a stack segment limit Is violated, a stack seg- 
ment overrun exception (12) occurs. 

10. For segment load operations, the CPL, RPL, and 
DPL must agree with privilege rules to avoid an 
exception. The segment must be present to 


avoid a not-present exception (11). If the SS reg- 
ister is the destination, and a segment not-pres- 
ent violation occurs, a stack exception (12) oc- 
curs. 

11. All segment descriptor accesses in the GDT or 
LOT m ade by this instruction will automatically 
assert LOCK to maintain descriptor Integrity in 
multiprocessor systems. 

12. JMP, CALL, INT, RET, IRET instructions refer- 
ring to another code segment will cause a gener- 
al protection exception (13) if any privilege rule is 
violated. 

13. A general protection exception (13) occurs if 
CPL =7^ 0. 

14. A general protection exception (13) occurs if 
CPL > lOPL. 

1 5. The IF field of the flag word is not updated if CPL 
> lOPL. The lOPL field is updated only If 
CPL = 0. 

16. Any violation of privilege rules as applied to the 
selector operand do not cause a protection ex- 
ception; rather, the instruction does not return a 
result and the zero flag is cleared. 

17. If the starting address of the memory operand 
violates a segment limit, or an invalid access is 
attempted, a general protection exception (13) 
will occur before the ESC instruction is execut- 
ed. A stack segment overrun exception (12) will 
occur if the stack limit is violated by the oper- 
and’s starting address. If a segment limit is vio- 
lated during an attempted data transfer then a 
processor extension segment overrun exception 
(9) occurs. 

18. The destination of an INT, JMP, CALL, RET or 
IRET Instruction must be in the defined limit of a 
code segment or a general protection exception 
(13) will occur. 
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80C286 INSTRUCTION SET SUMMARY 


FUNCTION 

FORMAT 


CLOCK COUNT 

COMMENTS 1 

Real 

Address 

Mode 

Protected 

Virtual 

Address 

Mode 

Real 

Address 

Mode 

Protected 

Virtual 

Address 

Mode 

DATA TRANSFER 







WOV =Move: 







Register to Register/ Memory 

1 1 0 0 0 1 0 0 w 1 mod reg r/m | 

' 

2,3* 

2.3* 

2 

9 

Register/memory to register 

1 1 0 0 0 1 0 1 w I mod reg r/m | 


2,5* 

2,5* 

2 

9 

immediate to register/memory 

I 1 1 0 0 0 1 1 w 1 mod 0 0 0 r/m 1 

data 1 data if w = 1 j 

2,3’ 

2,3* 

2 

9 

Immediate to register 

1 1 0 1 1 w reg I data | 

dataifw=1 j 

2 

2 



Memory to accumulator 

ll 01 0000w| addr-low | 

addr-high ] 

5 

5 

2 

9 

Accumulator to memory 

1 1 0 1 0 0 0 1 w 1 addr-low | 

addr-high j 

3 

3 

2 

9 

Register/memory to segment register j 10 0 01 1 10 | mod 0 reg r/m j 


2,5* 

17,19* 

2 

9,10,11 

Segment register to register/memory | 1 0 0 01 1 0 0 | mod 0 reg r/m | 


2,3* 

2,3* 

2 

9 

PUSH = Push: 







Memory 

1 11111111 1 mod 1 1 0 r/m 1 


5* 

5* 

2 

9 

Register 

1 0 1 0 1 0 reg 1 


3 

3 

2 

9 

Segment register 

1 0 0 0 reg 1 1 0 1 


3 

3 

2 

9 

fmmocBaie 

( onoioso 1 data ! 

datarts**0 I 

3 . 


2' 

■ 9 

PlISHA* Rush All- 

( 01100000 i 



17 

2 

■ 9 . 

POP = Pop: 







Memory 

1 1 0001 1 1 1 ImodOOO r/mj 


5* 

5* 

2 

9 

Register 

1 0 1 0 1 1 reg 1 


5 

5 

2 

9 

Segment register 

1 0 00 reg 1 1 1 | (reg^^OI) 


5 

20 

2 

9,10,11 

POPA**fopAlt 

1 01100001 1 ' 


■ 19 

19 

2 


XCHG = Exhcange: 







Register/memory with register 

1 1 0 0 0 0 1 1 w I mod reg r/m| 


3,5* 

3,5* 

2,7 

7.9 

Register with accumulator 

I 10 0 10 reg | 


3 

3 1 



IN = Input from: 







Fixed port 

I 1 1 1 0 0 1 0 w I port I 


5 

5 


14 

Variable port 

I 1 1 1 01 1 Ow I 


5 

5 


14 

OUT = Output to: 







Fixed port 

I 1 1 1 0 0 1 1 w 1 port 1 


3 

3 


14 

y/ariable port 

1 1 1 1 01 1 1 w 1 


3 

3 


14 

XLAT = Translate byte to AL 

1 11010111 1 


5 

5 


9 

LEA = Load EA to register 

1 1 0 0 01 101 1 mod reg r/m| 


3* 

3* 



LDS = Load pointer to DS 

1 1 1 000101 Imodreg r/mj 

(moduli) 

7* 

21* 

2 

9,10,11 

LES = Load pointer to ES 

1 1 1 000100 jmodreg r/m| 

- (mod=5^1) 

7* 

21* 

2 

9,10,11 


Shaded areas indicate instructions not available in 8086, 88 microsystems. 
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80C286 INSTRUCTION SET SUMMARY (Continued) 


FUNCTION 

FORMAT 



CLOCK COUNT 

COMMENTS 

Real 

Address 

Mode 

Protected 

Virtual 

Address 

Mode 

Real 

Address 

Mode 

Protected 

Virtual 

Address 

Mode 

DATA TRANSFER (Continued) 








LAHF Load AH with flags 

1 10011111 I 



2 

2 



SAHF = Store AH into flags 

I 10011110 1 



2 

2 



PUSHF = Push flags 

1 10011100 1 



3 

3 

2 

9 

POPF = Pop flags 

1 10011101 1 



5 

5 

2,4 

9,15 

ARITHMETIC 








ADD = Add: 








Reg/memory with register to either 

1 OOOOOOdw 1 modreg r/m | 



2,7* 

2.7* 

2 

9 

Immediate to register/memory 

1 1 0 0 0 0 0 s w 1 mod 0 0 0 r/m | 

data 

] dataif sw = 01 [ 

3.7* 

3,7* 

2 

9 

Immediate to accumulator 

1 0 0 0 0 0 1 0 w 1 data | 

data if w = 1 

] 

3 

3 



ADC = Add with carry: 








Reg/memory with register to either 

1 0 0 0 1 0 0 d w 1 mod reg r/m | 



2,7* 

2,7* 

2 

9 

Immediate to register/memory 

1 1 0 0 0 0 0 s w 1 mod 010 r/m | 

data 

1 data if s w = 01 1 

3,7* 

3,7* 

2 

N 9 

Immediate to accumulator 

1 0 0 0 1 0 1 0 w 1 data 

dataif w=1 

] 

3 

3 



INC = Increment: 








Register/memory 

1 1 1 1 1 1 1 1 w 1 mod 0 0 0 r/m | 



2,7* 

' 2,7* 

2 

9 

Register 

1 0 1 0 0 0 reg | 



2 

2 



SUB = Subtract: 








Reg/memory and register to either 

1 0 0 1 0 1 0 d w 1 mod reg r/m | 



2,7* 

2,7* 

2 

9 

Immediate from register/ memory 

1 1 0 0 0 0 0 s w 1 mod 1 0 1 r/m | 

data 

1 dataif sw = 01 | 

3,7* 

3,7* 

2 

9 

Immediate from accumulator 

1 0 0 1 0 1 1 0 w 1 data | 

dataif w=1 

] 

3 

3 



5BB = Subtract with borrow: 








Reg/memory and register to either 

1 0 0 0 1 1 0 d w 1 mod reg r/m | 



2,7* 

2,7* 

2 

9 

Immediate from register/memory 

1 1 0 0 0 0 0 s w 1 mod 0 1 1 r/m | 

data 

1 dataifsw = 01 | 

3,7* 

3.7* 

2 

9 

Immediate from accumulator 

1 0 0 0 1 1 1 0 w 1 data | 

data if w = 1 

] 

3 




DEC = Decrement 








Register/memory 

1 1 1 1 1 1 1 1 w ImodOO 1 r/m| 



2,7* 

2,7* 

2 

9 

Register 

1 0 1 0 0 1 reg 1 



2 

2 



CMP = Compare 








Register/ memory with register 

1 0 0 1 1 1 0 1 w |mod reg r/m| 



2,6* 

2.6* 

2 

9 

Register with register/ memory 

1 0 0 1 1 1 0 0 w 1 mod reg r/m | 



2.7* 

2,7* 

2 

9 

mmediate with register/memory 

1 lOOOOOsw 1 modi 11 r/m| 

data 

1 dataifsw = 01 | 

3,6* 

3,6* 

2 

9 

mmediate with accumulator 

I 0 0 1 1 1 1 0 w 1 data 1 

data if w = 1 

] 

3 

3 



MEG = Change sign 

1 1 1 1 1 0 1 1 w |modO 1 1 r/m| 



2 

7* 

2 

9 

AAA = ASCII adjust for add 

1 00110111 1 



3 

3 



DAA = Decimal adjust for add 

1 00100111 I 



3 

3 
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80C286 INSTRUCTION SET SUMMARY (Continued) 


CLOCK COUNT | 

COMMENTS 1 

Real 

Address 

Protected 

Virtual 

Address 

Real 

Address 

Protected 

Virtual 

Address 

Mode 

Mode 

Mode 

Mode 

3 

3 



3 

3 



13 

13 



21 

21 



16* 

16* 

2 

9 

24* 

24* 


9 

13 

13 



21 

21 



16* 

16* 

2 

9 

24* 

24* 

2 

9 

21 ^ 4 * 

21, 

2 

9 

14 

14 

6 

6 

22 

22 

6 

6 

, 17* 

17* 

2,6 

6,9 

25* 

25* 

2,6 

6,9 

17 

17 

6 

6 

25 

25 

6 

6 

20* 

20* 

2,6 

6,9 

28* 

28* 

2.6 

6,9 

16 

16 



14 

14 



2 

2 



2 

2 



2,7* 

2,7* 

2 

9 

5 + n,8 + n* 

5 + n,8 + n* 

2 

9 

5'f-n,8+n’‘ 

54-n,8*fn^ 

2' 

9 


FUNCTION 


FORMAT 


ARITHMETIC (Continued) 

AAS = ASCII adjust for subtract 

DAS = Decimal adjust for subtract 

MUL = Multiply (unsigned): 

Register-Byte 

Register-Word 

Memory-Byte 

Memory-Word 

IMUL= Integer multiply (signed): 

Register-Byte 

Register-Word 

Memory-Byte 

Memory-Word 

iMUL ~ muttipily 

[slgnect} 

DIV= Divide (unsigned) 

Register-Byte 

Register-Word 

Memory-Byte 

Memory-Word 

IDIV= Integer divide (signed) 

Register-Byte 

Register-Word 

Memory-Byte 

Memory-Word 

AAM = ASCII adjust for multiply 
AAD == ASCII adjust for divide 
CBW = Convert byte to word 

CWD= Convert word to double word 
LOGIC 

Shift/Rotate Instructions: 

Register/Memory by 1 
Register/ Memory by CL 
Register/ Memory by Count 


1 1 1 1 0 1 1 w mod 1 0 0 r/m 


1 1 1 1 01 1 w modi 01 r/m 


01101061 


r/m 


I 1 1 1 1 0 1 1 w [mod 1 1 0 r/m| 


1 1 1 1 0 1 1 w mod 1 1 1 r/m 


I 11010100 I 00001010 I 
I 11010101 I 00001010 I 


1 1 0 1 OOQw modTTT r/m 


1 1 0 1 00 1 w modTTT r/m 


data if s ^ 0 


1 1 C)0000^ ImodTTT r/m| 


TT instruction 

0 00 ROL 

0 0 1 ROR 

010 RCL 

0 1 1 RCR 

100 SHL/SAL 

1 0 1 SHR 

111 SAR 


Shaded areas indicate instructions not available in 8086, 88 microsystems. 
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80C286 INSTRUCTION SET SUMMARY (Continued) 


FUNCTION 

FORMAT 



CLOCK COUNT 

COMMENTS 

Real 

Address 

Mode 

Protected 

Virtual 

Address 

Mode 

Real 

Address 

Mode 

Protected 

Virtual 

Address 

Mode 

ARITHMETIC (Continued) 








AND = And: 








Reg/memory and register to either 

1 0 0 1 0 0 0 d w I mod reg r/m | 



2,7* 

2,7* 

2 

9 

mmediate to register/memory 

I 1 0 0 0 0 0 0 w I mod 10 0 r/m | data 

I 

dataifw=1 | 

3,7* 

3,7* 

2 

9 

Immediate to accumulator 

|001 001 0w| data | dataifw=1 

] 


3 

3 



TEST = And function to flags, no result: 







Register/memory and register 

1 1 0 0 0 0 1 0 w 1 mod reg r/m | 



2,6* 

2,6* 

2 

9 

Immediate data and register/ memory 

1 1 1 1 1 0 1 1 w 1 mod 0 0 0 r/m | data 

I 

dataifw=1 | 

3,6* 

3.6* 

2 

9 

mmediate data and accumulator 

|l010100w| data | dataifw=1 

] 


3 

3 



OR = Or: 








Reg/memory and register to either 

1 0 0 0 0 1 0 d w 1 mod reg r/m j 



2,7* 

2,7* 

2 

9 

mmediate to register/memory 

1 1 0 0 0 0 0 0 w 1 mod 0 01 r/m | data 

I 

dataifw=1 [ 

3,7* 

3,7* 

2 

9 

mmediate to accumulator 

|oo00110w| data | dataifw-1 

] 


3 

3 



)(OR = Exclusive or: 








Reg/memory and register to either 

1 0 0 1 1 0 0 d w 1 mod reg r/m | 



2,7* 

2,7* 

2 

9 

mmediate to register/memory 

1 lOOOOOOw 1 mod 110 r/m | data 

I 

data if w = 1 | 

3,7* 

3.7* 

2 

9 

mmediate to accumulator 

1 0 0 1 1 0 1 0 w 1 data j data if w = 



3 

3 



MOT = Invert register/memory 

1 1 1 1 1 0 1 1 w 1 mod 01 0 r/m | 



2,7* 

2.7* 

2 

9 

STRING MANIPULATION: 








MOVS = Move byte/word 

1 1 01 001 Ow 1 



5 

5 

2 

9 

CMPS = Compare byte/word 

1 1 01 001 1 w 1 



8 

8 

2 

9 

SCAS = Scan byte/word 

1 1 01 01 1 1 w 1 



7 

7 

2 

9 

LODS = Load byte/wd to AL/AX 

1 1 01 01 1 Ow 1 



5 

5 

2 

9 

STOS = Stor byte/wd from AL/A 

1 1 01 01 01 w 1 



3 

3 

2 

9 

INS « Input byte/wd from OX port 

1 0110110W 1 



5 

S 

2 

9,14 

0UTS«» OubJUt byte/wd to DX port 

J 01 101 1 1W 1 



6 

6 

2 

9,14 

Repeated by count in CX 








MOV 5 = Move string 

1 1 1 1 1001 1 1 lOIOOlOw 1 



5 + 4n 

5 + 4n 

2 

9 

CMPS = Compare string 

1 1 1 1 lOOlz 1 101001 1w 1 



5 + 9n 

5 + 9n 

2,8 

8,9 

SCAS = Scan string 

1 1 1 1 1 001 z 1 1 01 01 1 1 w 1 



5 + 8n 

5 + 8n 

2,8 

8,9 

LODS = Load string 

1 11110011 1 1 01 01 1 Ow 1 



5 + 4n 

5 + 4n 

2.8 

8,9 

STOS= Store string 

1 1 1 1 1001 1 1 1010101W 1 



4 + 3n 

4 + 3n 

2,8 

8,9 

INS- Input string 

1 11110011 1 01 101 10w I 



5 + 4n 

5+40 

2 

9,14 

OUTS- Output sbing 

I 1 1 1 1001 1 1 01 101 1 1w 1 



5+4n 

5+4n 

2 

9,14 


Shaded areas indicate instructions not available in 8086, 88 microsystems. 
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80C286 INSTRUCTION SET SUMMARY (Continued) 


FUNCTION 

FORMAT 


CLOCK COUNT 

COMMENTS 

Real 

Address 

Mode 

Protected 

Virtual 

Address 

Mode 

Real 

Address 

Mode 

Protected 

Virtual 

Address 

Mode 

CONTROL TRANSFER 







CALL =Call: 







Direct within segment 

1 1 1 101000 

1 disp-low 1 disp-high j 

7-fm 

7-l-m 

2 

18 

Register/memory 

I 11111111 

1 mod 0 1 0 r/m | 

7 +m, 11 -fm* 

7-l-m, 11 + m* 

2,8 

8,9,18 

indirect within segment 







Direct intersegment 

1 10011010 

1 segment offset | 

1 3 + m 

26 -km 

2 

11,12,18 

Protected Mode Only (Direct intersegment): 

1 segment selector | 





Via call gate to same privilege level 




41 +m 


8,11,12,18 

Via call gate to different privilege level, no parameters 



82-l-m 


8,11,12,18 

Via call gate to different privilege level, x parameters 



86 +4x+m 


8,11,12,18 

ViaTSS 




177 -fm 


8,11,12,18 

Via task gate 




182 + m 


8,11,12,18 

Indirect intersegment 

1 11111111 

jmodOII r/m| (mod=5^11) 

16-fm 

29 + m* 

2 

8,9,11,12,18 

Protected Mode Only (Indirect intersegment): 






Via call gate to same privilege level 




44 + m* 


8,9,11,12,18 

Via call gate to different privilege level, no parameters 



83 +m* 


8,9,11,12,18 

Via call gate to different privilege level, x 

parameters 



90 + 4X +m* 


8,9,11,12,18 

Via TSS 




180 + m* 


8,9,11,12,18 

Via task gate 




1 85+ m* 


8,9,11,12,18 

JMP = Unconditional jump: 







Short/long 

1 11101011 

1 disp-low 1 

7-l-m 

7 + m 


18 

Direct within segment 

1 11101001 

1 disp-low 1 disp-high | 

7-l-m 

7+ m 


18 

Register/memory indirect within segment 

1 11111111 

1 mod 10 0 r/m j 

7 + m, 11+m* 

7 + m, 11 + m* 

2 

9,18 

Direct intersegment 

1 11101010 

1 segment offset | 

11-l-m 

23 + m 


11,12,18 

Protected Mode Only (Direct intersegment): 

1 segment selector | 





Via call gate to same privilege level 




38 + m 


8,11,12,18 

Via TSS 




175 + m 


8,11,12,18 

Via task gate 




180 + m 


8,11,12,18 

Indirect intersegment 

1 11111111 

1 modi 01 r/m| (mod?^=11) 

15-l-m* 

26 + m* 

2 

8,9,11,12,18 

Protected Mode Oniy (indirect intersegment): 






Via call gate to same privilege level 




41 +m* 


8,9,11,12,18 

ViaTSS 




178 + m* 


8,9,11,12,18 

Via task gate 




183 + m* 


8,9,11,12,18 

RET = Return from CALL: 







Within segment 

1 1 1 00001 1 

] ^ 

ll-l-'m 

1 1 +m 

2 

8,9,18 

Within seg adding immed to SP 

1 1 1 000010 

1 data-low ] data-high | 

11-l-m 

11 +m 

2 

8,9,18 

Intersegment 

1 11001011 

] . 

15 + m 

25 + m 

2 

8,9,11,12,18 

Intersegment adding immediate to SP 

1 11001010 

1 data-low ] data-high | 

15-fm 


2 

8,9,11,12,18 

Protected Mode Only (RET): 







To different privilege level 




55 +m 


9,11,12,18 
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80C286 INSTRUCTION SET SUMMARY (Continued) 


FUNCTION 

FORMAT 


CLOCK COUNT 

COMMENTS 1 

Real 

Address 

Mode 

Protected 

Virtual 

Address 

Mode 

Real 

Address 

Mode 

Protected 

Virtual 

Address 

Mode 

CONTROL TRANSFER (Continued) 







JE/JZ = Jump on equal zero 

01110100 1 

1 

disp 1 

7 + m or3 

7+m or 3 


18 

JL/JNGE = Jump on less/not greater or equal 

01111100 1 

disp 1 

7 + m or3 

7 + m or 3 . 


18 

JLE/JNG= Jump on less or equal/not greater 

01111110 1 

disp 1 

7 + m or 3 

.7 + m or 3 


18 

JB/JNAE = Jump on below/not above or equal 

01110010 1 

1 

disp 1 

7 + m or 3 

7 + m or 3 


18 

JBE/JNA = Jump on below or equal/not above 

01110110 1 

disp 1 

7 + m or 3 

7 + m or 3 


18 

JP/JPE = Jump on parity/parity even 

01111010 1 

disp 1 

7 + m or 3 

7 + m or 3 


18 

JO = Jump on overflow 

0111 0000 1 

disp 1 

7 + m or 3 

7 + m or 3 


18 

JS = Jump on sign 

1 01 1 1 1000 1 

disp 1 

7 + m or 3 

7 + m or 3 


18 

JNE/ JNZ = Jump on not equal/not zero 

1 01110101 I 

disp 1 

7 + m or 3 

7 + m or 3 


18 

JNL/JGE = Jump on not less/greater or equal 

I 01111101 I 

disp 1 

7 + m or 3 

7+m or 3 


18 

JNLE/JG = Jump on not less or equal/greater 

I 01111111 1 

1 

disp 1 

7 + m or 3 

7 + m or 3 


18 

JNB/JAE=Jump on not below/ above or equal 

1 01110011 1 

disp 1 

7 + m or 3 

7 + m or 3 


18 

JNBE/JA = Jump on not below or equal/above 

1 01110111 1 

1 

disp I 

7 + m or 3 

7 + m or 3 


18 

JNP/ JPO = Jump on not par/par odd 

1 01111011 I 

disp 1 

7 + m or 3 

7 + m or 3 


18 

JNO = Jump on not overflow 

I 01 1 10001 1 

1 

disp 1 

7 + m or 3 

7 + m or 3 


18 

JNS = Jump on not sign 

1 01111001 1 

1 

disp 1 

7 + m or 3 

7 + m or 3 


18 

LOOP = Loop CX times 

1 1 1 1 0001 0 1 

disp 1 

8 + m or4 

8+mor4 


, 18 

LOOPZ/LOOPE = Loop while zero/equal 

1 1 1 100001 1 

disp 1 

8 + m or 4 

8 + m or4 


18 

LOOPNZ/LOOPNE = Loop while not zero/equal 

1 1 1 1 00000 1 

disp 1 

8 + m or 4 

8 + m or 4 


18 

JCXZ = Junrip on CX zero 

1 11100011 1 

disp 1 

8 +m or4 

8 + m or 4 


18 

ENTER - Eriter Procedure 

1 11001000 1 

data-tow 1 data*high [ L ( 



2,8 

8,9 

L«*0 



11 

11 



L==^1 



15 

15 

2,8 

8,9 

L> 1 



16 + 4(L“ 1) 

16+4(1“ 1) 

2,8 

2.8 

8,9 

8,9 

LEAVE - Leave Procedi^ 

1 11001001 1 


5 

5 



INT = Interrupt: 







Type specified 

1 11001101 1 

type 1 

23 + m 


2,7,0 


Types 

1 11001100 1 


23 + m 


2,7,8 


INTO = Interrupt on overflow 

1 11001110 1 


24 + m or 3 


2,6,8 





(3 if no 

(3 if no 






interrupt) 

interrupt) 




Shaded areas indicate instructions not available in 8086, 88 microsystems. 
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80C286 INSTRUCTION SET SUMMARY (Continued) 


CLOCK COUNT 

COMMENTS 

Real 

Address 

Mode 

Protected 

Virtual 

Address 

Mode 

Real 

Address 

Mode 

Protected 

Virtual 

Address 

Mode 


17,19* 

1 

9,11,13 


2.3* 

1 

9 

O.O*' 

3,6* 

2.3 

0.13 

2,3* 

2.3* 

2,3 

9 


14,16* 

1 

9,11,16 


14,16* 

1 

9,11,16 


10*,11* 

2 

8,0 


14.16* 

- 1 

9,11,16 


14,16* 

1 

0,11.10 


PROTECTION CONTROL (Continued) 

|LTR- Local task register 
from register/memory 

j STR “ Store task register 
to register memory 

LMSW” Load machine status word 
from register/memory 

SMSW Stc^e machine status word 

LAR « Load access rights 
from register/memory 

LSL - Load segment limit 
from register/ memory 

I ARPL= Adjust requested privilege level: 
from register/memory 

VERR Vei% read access: register/memory 
VERR=* Verify write access: 


00001 1 1 1 00000000 modOII r/m 


000011 1 1 00000000 modOOl r/m 


00001 1 1 1 


000011 1 t 


000011 1 1 


00000001 modi 10 r/m 


00000001 mod 100 r/m 


00000010 I mod reg r/m | 


00000011 I modreg r/m | 


0 1 1 Q 0 0 1 1 I mod reg r/m 


00000000 modlOOr/m 


00000000 modioir/m 


Shaded areas indicate instructions not available in 8086, 88 microsystems. 
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Footnotes 

The Effective Address (EA) of the memory operand 
is computed according to the mod and r/m fields: 

if mod = 1 1 then r/m is treated as a REG field 
if mod = 00 then DISP = 0*, disp-low and disp-high 
are absent 

if mod = 01 then DISP = disp-low sign-extended to 

1 6 bits, disp-high is absent 

if mod = 10 then DISP = disp-high: disp-low 

if r/m = 000 then EA == (BX) + (SI) + DISP 

if r/m = 001 then EA = (BX) + (Dl) + DISP 

If r/m = 010 then EA = (BP) + (SI) + DISP 

if r/m = Oil then EA = (BP) + (Dl) .+ DISP 

if r/m = 100 then EA = (SI) + DISP 
If r/m = 101 then EA = (Dl) + DISP 
if r/m = 110 then EA = (BP) + DISP* 

if r/m = 111 then EA = (BX) + DISP 

DISP follows 2nd byte of instruction (before data if 
required) 

^except if mod = 00 and r/m =110 then EQ = disp-high: disp-low. 

SEGMENT OVERRIDE PREFIX 


0 0 1 reg 1 1 0 


reg is assigned according to the following: 



Segment 

reg 

Register 

00 

ES 

01 

CS 

10 

SS 

11 

DC 


REG Is assigned according to the following table: 

16-Bit (w = 1) 8-Blt(w = 0) 


000 

AX 

000 

AL 

001 

CX 

001 

CL 

010 

DX 

010 

DL 

oil 

BX 

Oil 

BL 

100 

SP 

100 

AH 

101 

BP 

101 

CH 

110 

SI 

110 

DH 

111 

Dl 

111 

BH 


The physical addresses of all operands addressed 
by the BP register are computed using the SS seg- 
ment register. The physical addresses of the desti- 
nation operands of the string primitive operations 
(those addressed by the Dl register) are computed 
using the ES segment, which may not be overridden. 


DATA SHEET REVISION REVIEW 

The following list represents key differences be- 
tween this and the -001 data sheet. Please review 

this summary carefully. 

1. The typical supply current (Ice) specification has 
been improved from 1 80 mA to 1 25 mA. 

2. The “Typical Ice vs Frequency for Different Out- 
put Loads” graph has been updated. 

3. The package thermal data section has been ex- 
panded. 

4. The “80C286 Reset Input Timing and Subsequent 
Processor Cycle Phase” diagram has been updat- 
ed. 

5. The data sheet has been upgraded from AD- 
VANCE INFORMATION to PRELIMINARY. 
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80286 

High Performance Microprocessor 
with Memory Management and Protection 

(80286-12, 80286-10, 80286-8) 


■ High Performance HMOS III Technology 

■ Large Address Space: 

— 16 Megabytes Physical 

— 1 Gigabyte Virtual per Task 

■ Integrated Memory Management, Four- 
Level Memory Protection and Support 
for Virtual Memory and Operating 
Systems 

■ High Bandwidth Bus Interface 
(12.5 Megabyte/Sec) 

■ Industry Standard O.S. Support: 
-MS-DOS*, UNIX*, XENIX*, iRMX® 

■ Two 8086 Upward Compatible 
Operating Modes: 

— 8086 Real Address Mode 

— Protected Virtual Address Mode 


■ Optional Processor Extension: 

— 80287 High Performance 80-bit 
Numeric Data Processor 

■ Range of Clock Rates 

— 12.5 MHz for 80286-12 

— 10 MHz for 80286-10 

— 8 MHz for 80826-8 

■ Complete System Development 
Support: 

— Assembler, PL/M, Pascal, FORTRAN, 
and In-Circuit-Emulator (ICEtm-286) 

■ Available in 68 Pin Ceramic LCC 
(Leadless Chip Carrier), PGA (Pin Grid 
Array), and PLCC (Plastic Leaded Chip 
Carrier) Packages 

(See Packaging Spec., Order #231369) 


The 80286 is an advanced, high-performance microprocessor with specially optimized capabilities for multiple 
user and multi-tasking systems. The 80286 has built-in memory protection that supports operating system and 
task isolation as well as program and data privacy within tasks. A 12 MHz 80286 provides six times or more 
throughput than the standard 5 MHz 8086. The 80286 includes memory management capabilities that map 2^0 
(one gigabyte) of virtual address space per task into 224 bytes (16 megabytes) of physical memory. 

The 80286 is upward compatible with 8086 and 88 software. Using 8086 real address mode, the 80286 is 
object code compatible with existing 8086, 88 software. In protected virtual address mode, the 80286 is source 
code compatible with 8086, 88 software and may require upgrading to use virtual addresses supported by the 
80286’s integrated memory management and protection mechanism. Both modes operate at full 80286 per- 
formance and execute a superset of the 8086 and 88 instructions. 

The 80286 provides special operations to support the efficient implementation and execution of operating 
systems. For example, one instruction can end execution of one task, save its state, switch to a new task, load 
its state, and start execution of the new task. The 80286 also supports virtual memory systems by providing a 
segment-not-present exception and restartable instructions. 

*XENIX and MS-DOS are trademarks of Microsoft Corp. 

*UNIX is a trademark of Bell Labs or AT&T 
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80286 


Component Pad Views — As viewed from underside of 
component when mounted on the board. 


P.C. Board Views — As viewed from the component 
side of the P.C. board. 


5 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 



61 PEREQ 

62 Vcc 

63 READY 

64 HOLD 

65 HLDA 

66 COD/INTA 

67 M/iO 

68 LOCK 


capIH 

ERROR m 
[54 
N.C. [55 

N.c. m 

INTR [57 
N.C. [11 
NMI [59 

VssU 

PEREQ [H 
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Figure 2. 80286 Pin Configuration 
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Table 1 . Pin Description 


The following pin function descriptions are for the 80286 microprocessor : 


Symbol 

Type 

Name and Function 

CLK 

1 

SYSTEM CLOCK provides the fundamental timing for 80286 systems. It is divided by two 
inside the 80286 to generate the processor clock. The internal divide-by-two circuitry can 
be synchronized to an external clock generator by a LOW to HIGH transition on the RESET 



input. 





D-is-Do 

I/O 

DATA BUS inputs data during memory, I/O, and interrupt acknowledge read cycles; 
outputs data during memory and I/O write cycles. The data bus is active HIGH and floats to 



3-state OFF during bus hold acknowledge. 



A23-A0 

0 

ADDRESS BUS outputs physical memory and I/O port addresses. AO is LOW when data is 
to be transferred on pins Dy.Q. A23-A16 are LOW during I/O transfers. The address bus is 
active HIGH and floats to 3-state OFF during bus hold acknowledge. 

SHE 

0 

BUS HIGH ENABLE indicates transfer or data on the upper byte of the data bus. Di 5 _b. 
Eight-bit oriented devices assigned to the upper byte of the data bus would normally use 

BHE to condition chip select functions. BHE is active LOW and floats to 3-state OFF during 



bus hold acknowledge. 






BHE and AO Encodings | 



BHE Value 

AO Value 

Function 



0 

0 

Word transfer 




0 

1 

Byte transfer on upper half of data bus (Dis-Db) 



1 

0 

Byte transfer on lower half of data bus (Dy.o) 



1 

1 

Will never occur 


^,S0 

0 

BUS CYCLE STATUS Indicates initiation of a bus cycle and, along with M/IO and COD/ 

INTA, defines the type of bus cycle. The bus is in a Tg state whenever one or both are LOW, 
S1 and SO are active LOW and float to 3-state OFF during bus hold acknowledge. 



80286 Bus Cycle Status Definition 



COD/INTA 

M/IO 

SI 

so 

Bus Cycle Initiated 



0 (LOW) 

0 

0 

0 

Interrupt acknowledge 



0 

0 

0 

1 

Will not occur 



0 

0 

1 

0 

Will not occur 



0 

0 

1 

1 

None; not a status cycle 



0 

1 

0 

0 

IF A1 = 1 then halt; else shutdown 



0 

1 

0 

1 

Memory data read 



0 

1 

1 

0 

Memory data write 



0 

1 

1 

1 

None; not a status cycle 



1 (HIGH) 

0 

0 

0 

Will not occur 



1 

0 

0 

1 

I/O read 



1 

0 

1 

0 

I/O write 



1 

0 

1 

1 

None; not a status cycle 



1 

1 

0 

0 

Will not occur 



1 

1 

0 

1 

Memory instruction read 



1 

1 

1 

0 

Will not occur 



1 

1 

1 

1 

None; not a status cycle 

M/IO 

0 

MEMORY I/O SELECT distinguishes memory access from I/O access. If HIGH during Tg, a 
memory cycle or a halt/shutdown cycle is in progress. If LOW, an I/O cycle or an interrupt 
acknowledge cycle is in progress. M/IO floats to 3-state OFF during bus hold acknowledge. 

COD/lfTTA 

0 

CODE/INTERRUPT ACKNOWLEDGE distinguishes instruction fetch cycles from memory 
data read cycles. Also distinguishes interrupt acknowledge cycles from I/O cycles. COD/ 
INTA floats to 3-state OFF during bus hold acknowledge. Its timing is the same as M/IO. 

LOCK 

0 

BUS LOCK indicates that other system bus masters are not to gain control of the system 
bus for the current and the following bus cycle. The LOCK signal may be activated explicitly 
by the “LOCK” instruction prefix or automatically by 80286 hardware during memory XCHG 
instructions, interrupt acknowledge, or descriptor table access. LOCK is active LOW and 



floats to 3-state OFF during bus hold acknowledge. 


READY 

1 

BUS READY terminates a bus cycle. Bus cycles are extended without limit until terminated 



by READY LOW. READY is an active LOW synchronous input requiring setup and hold 
times relative to the system clock be met for correct operation. READY is ignored during 



bus hold acknowledge. 
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Table 1. Pin Description (Continued) 


Symbol 

Type 

Name and Function 

HOLD 

HLDA 

I 

0 

BUS HOLD REQUEST AND HOLD ACKNOWLEDGE control ownership of 
the 80286 local bus. The HOLD input allows another local bus master to 
request control of the local bus. When control is granted, the 80286 will float 
its bus drivers to 3-state OFF and then activate HLDA, thus entering the bus 
hold acknowledge condition. The local bus will remain granted to the 
requesting master until HOLD becomes inactive which results in the 80286 
deactivating HLDA and regaining control of the local bus. This terminates the 
bus hold acknowledge condition. HOLD may be asynchronous to the system 
clock. These signals are active HIGH. 

INTR 

I 

INTERRUPT REQUEST requests the 80286 to suspend its current program 
execution and service a pending external request. Interrupt requests are 
masked whenever the interrupt enable bit in the flag word is cleared. When 
the 80286 responds to an interrupt request, it performs two interrupt 
acknowledge bus cycles to read an 8-bit interrupt vector that identifies the 
source of the interrupt. To assure program interruption, INTR must remain 
active until the first interrupt acknowledge cycle is completed. INTR is 
sampled at the beginning of each processor cycle and must be active HIGH 
at least two processor cycles before the current instruction ends in order to 
interrupt before the next instruction. INTR Is level sensitive, active HIGH, and 
may be asynchronous to the system clock. 

NMI 

I 

NON-MASKABLE INTERRUPT REQUEST interrupts the 80286 with an 
internally supplied vector value of 2. No interrupt acknowledge cycles are 
performed. The interrupt enable bit in the 80286 flag word does not affect this 
input. The NMI input is active HIGH, may be asynchronous to the system 
clock, and Is edge triggered after internal synchronization. For proper 
recognition, the input must have been previously LOW for at least four system 
clock cycles and remain HIGH for at least four system clock cycles. 

PEREQ 

PEACK 

I 

o 

PROCESSOR EXTENSION OPERAND REQUEST AND ACKNOWLEDGE 

extend the memory management and protection capabilities of the 80286 to 
processor extensions. The PEREQ input requests the 80286 to perform a 
data operand transfer for a processor extension. The PEACK output signals 
the processor extension when the requested operand is being transferred. 
PEREQ is active HIGH and floats to 3-state QFF during bus hold 
acknowledge. PEACK may be asynchronous to the system clock. PEACK is 
active LQW. 

BUSY 

ERROR 

I 

I 

PROCESSOR EXTENSION BUSY AND ERROR indicate the operating 
condition of a processor extension to the 80286. An active BUSY input stops 
80286 program execution on WAIT and some ESC instructions until BUSY 
becomes inactive (HIGH). The 80286 may be interrupted while waiting for 

BUSY to become inactive. An active ERROR input causes the 80286 to 
perform a processor extension interrupt when executing WAIT or some ESC 
instructions. These Inputs are active LOW and may be asynchronous to the 
system clock. These inputs have internal pull-up resistors. 
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Table 1. Pin Description (Continued) 


Symbol 

Type 

Name and Function 

RESET 

I 

SYSTEM RESET clears the internal logic of the 80286 and is active HIGH. 

The 80286 may be reinitialized at any time with a LOW to HIGH transition on 
RESET which remains active for more than 16 system clock cycles. During 
RESET active, the output pins of the 80286 enter the state shown below: 



80286 Pin State During Reset 



Pin Value 

Pin Names 



1 (HIGH) 

O(LOW) 

3-state OFF 

SO, SI, PEACK, A23-A0, BHE, LOCK 

M/IO, COD/INTA, HLDA (Note 1) 

Di5-Do 



Operation of the 80286 begins after a HIGH to LOW transition on RESET. 

The HIGH to LOW transition of RESET must be synchronous to the system 
clock. Approximately 38 CLK cycles from the trailing edge of RESET are 
required by the 80286 for Internal initialization before the first bus cycle, to 
fetch code from the power-on execution address, occurs. 

A LOW to HIGH transition of RESET synchronous to the system clock will 
end a processor cycle at the second HIGH to LOW transition of the system 
clock. The LOW to HIGH transition of RESET may be asynchronous to the 
system clock; however, in this case it cannot be predetermined which phase 
of the processor clock will occur during the next system clock period. 
Synchronous LOW to HIGH transitions of RESET are required only for 
systems where the processor clock must be phase synchronous to another 
clock. 

Vss 

I 

SYSTEM GROUND: 0 Volts. 

Vcc 

I 

SYSTEM POWER: + 5 Volt Power Supply. 

CAP 

I 

I 

SUBSTRATE FILTER CAPACITOR: a 0.047 jaF ± 20% 12V capacitor must 
be connected between this pin and ground. This capacitor filters the output of 
the internal substrate bias generator. A maximum DC leakage current of 1 /xA 
is allowed through the capacitor. 

For correct operation of the 80286, the substrate bias generator must charge 
this capacitor to Its operating voltage. The capacitor chargeup time is 5 
milliseconds (max.) after Vcc and CLK reach their specified AC and DC 
parameters. RESET may be applied to prevent spurious activity by the CPU 
during this time. After this time, the 80286 processor clock can be 
synchronized to another clock by pulsing RESET LOW synchronous to the 
system clock. 


NOTE: 

1. HLDA is only Low if HOLD is inactive (Low). 
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FUNCTIONAL DESCRIPTION 
Introduction 

The 80286 is an advanced, high-performance micro- 
processor with specially optimized capabilities for 
multiple user and multi-tasking systems. Depending 
on the application, a 12 MHz 80286’s performance 
is up to six times faster than the standard 5 MHz 
8086’s, while providing complete upward software 
compatibility with Intel’s 8086, 88, and 186 family of 
CPU’s. 

The 80286 operates in two modes: 8086 real ad- 
dress mode and protected virtual address mode. 
Both modes execute a superset of the 8086 and 88 
instruction set. 

In 8086 real address mode programs, use real ad- 
dresses with up to one megabyte of address space. 
Programs use virtual addresses in protected virtual 
address mode, also called protected mode. In pro- 
tected mode, the 80286 CPU automatically maps 1 
gigabyte of virtual addresses per task into a 16 
megabyte real address space. This mode also pro- 
vides memory protection to Isolate the operating 
system and ensure privacy of each tasks’ programs 
and data. Both modes provide the same base in- 
struction set, registers, and addressing modes. 

The following Functional Description describes first, 
the base 80286 architecture common to both 
modes, second, 8086 real address mode, and third, 
protected mode. 

80286 BASE ARCHITECTURE 


addressing modes. The 80286 processor is upward 
compatible with the 8086, 8088, and 80186 CPU’s. 


Register Set 

The 80286 base architecture has fifteen registers as 
shown In Figure 3. These registers are grouped Into 
the following four categories: 

General Registers: Eight 16-bit general purpose 
registers used to contain arithmetic and logical oper- 
ands. Four of these (AX, BX, CX, and DX) can be 
used either in their entirety as 1 6-blt words or split 
into pairs of separate 8-bit registers. 

Segment Registers: Four 16-bit special purpose 
registers select, at any given time, the segments of 
memory that are immediately addressable for code, 
stack, and data. (For usage, refer to Memory Organi- 
zation.) 

Base and Index Registers: Four of the general pur- 
pose registers may also be used to determine offset 
addresses of operands in memory. These registers 
may contain base addresses or Indexes to particular 
locations within a segment. The addressing mode 
determines the specific registers used for operand 
address calculations. 

Status and Control Registers: The 3 1 6-bit special 
purpose registers in figure 3 A record or control cer- 
tain aspects of the 80286 processor state including 
the Instruction Pointer, which contains the offset ad- 
dress of the next sequential instruction to be execut- 
ed. 


The 8086, 88, 186, and 286 CPU family all contain 
the same basic set of registers, instructions, and 


16-BIT SPECIAL 

REGISTER REGISTER 

NAME FUNCTIONS 


BYTE 

ADDRESSABLE 

(8-BIT 

REGISTER 

NAMES 

SHOWN) 


7 0 7 0 


AX 

AH 

AL 

DX 

DH 

DL 

CX 

CH 

CL 

BX 

BH 

BL 

BP 


SI 


Dl 


SP 



15 0 


MULTIPLY/DIVIDE 
I/O INSTRUCTIONS 

LOOP/SHIFT/REPEAT/COUNT 

BASE REGISTERS 

INDEX REGISTERS 

STACK POINTER 


15 0 



REGISTERS 


CODE SEGMENT SELECTOR 
DATA SEGMENT SELECTOR 
STACK SEGMENT SELECTOR 
EXTRA SEGMENT SELECTOR 


STATUS WORD 

INSTRUCTION POINTER 


GENERAL 

REGISTERS 


Figure 3. Register Set 
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Flags Word Description 

The Flags word (Flags) records specific characteris- 
tics of the result of logical and arithmetic instructions 
(bits 0, 2, 4, 6, 7, and 11) and controls the operation 
of the 80286 within a given operating mode (bits 8 
and 9). Flags is a 1 6-bit register. The function of the 
flag bits is given in Table 2. 


Instruction Set 

The instruction set is divided into seven categories: 
data transfer, arithmetic, shift/rotate/logical, string 
manipulation, control transfer, high level instruc- 
tions, and processor control. These categories are 
summarized in Figure 4. 

An 80286 Instruction can reference zero, one, or two 
operands; where an operand resides in a register, in 
the instruction itself, or in memory. Zero-operand in- 
structions (e.g. NOP and HIT) are usually one byte 
long. One-operand instructions (e.g. INC and DEC) 
are usually two bytes long but some are encoded In 
only one byte. One-operand Instructions may refer- 
ence a register or memory location. Two-operand 
instructions permit the following six types of instruc- 
tion operations: 

— Register to Register 
— Memory to Register 
— Immediate to Register 
— Memory to Memory 
— Register to Memory 
— Immediate to Memory 


Table 2. Flags Word Bit Functions 


Bit 

Position 

Name 

Function 

0 

CF 

Carry Flag — Set on high-order bit 
carry or borrow; cleared otherwise 

2 

PF 

Parity Flag— Set if low-order 8 bits 
of result contain an even number of 
1-bits; cleared otherwise 

4 

AF 

Set on carry from or borrow to the 
low order four bits of AL; cleared 
otherwise 

6 

ZF 

Zero Flag — Set if result is zero; 
cleared otherwise 

7 

SF 

Sign Flag — Set equal to high-order 
bit of result (0 if positive, 1 if negative) 

11 

OF 

Overflow Flag — Set if result is a too- 
large positive number or a too-small 
negative number (excluding sign-bit) 
to fit in destination operand; cleared 
otherwise 

8 

TF 

Single Step Flag — Once set, a sin- 
gle step interrupt occurs after the 
next instruction executes. TF is 
cleared by the single step interrupt. 

9 

IF 

Interrupt-enable Flag — When set, 
maskable interrupts will cause the 

CPU to transfer control to an inter- 
rupt vector specified location. 

10 

DF 

Direction Flag — Causes string 
instructions to auto decrement 
the appropriate index registers 
when set. Clearing DF causes 
auto increment. 
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Two-operand instructions (e.g. MOV and ADD) are 
usually three to six bytes long. Memory to memory 
operations are provided by a special class of string 
instructions requiring one to three bytes. For de- 
tailed instruction formats and encodings refer to the 
instruction set summary at the end of this document. 


For detailed operation and usage of each instruc- 
tion, see Appendix of 80286 Programmer’s Refer- 
ence Manual (Order No. 210498) 


GENERAL PURPOSE | 

MOV 

Move byte or word 

PUSH 

Push word onto stack 

POP 

Pop word off stack 

PUSHA 

Push all registers on stack 

POPA 

Pop all registers from stack 

XCHG 

Exchange byte or word 

XLAT 

Translate byte 

INPUT/OUTPUT I 

IN 

Input byte or word 

OUT 

Output byte or word 

ADDRESS OBJECT i 

LEA 

Load effective address 

LDS 

Load pointer using DS 

LES 

Load pointer using ES 

FLAG TRANSFER | 

LAHF 

Load AH register from flags 

SAHF 

Store AH register in flags 

PUSHF 

Push flags onto stack 

POPF 

Pop flags off stack 


Figure 4a. Data Transfer Instructions 


MOVS 

Move byte or word string 

INS 

Input bytes or word string 

OUTS 

Output bytes or word string 

CMPS 

Compare byte or word string 

SCAS 

Scan byte or word string 

LODS 

Load byte or word string 

STOS 

Store byte or word string 

REP 

Repeat 

REPE/REP2 

Repeat while equal/zero 

REPNE/REPNZ 

Repeat while not equal/not zero 


Figure 4c. String Instructions 


ADDITION I 

ADD 

Add byte or word 

ADC 

Add byte or word with carry 

INC 

Increment byte or word by 1 

AAA 

ASCII adjust for addition 

DAA 

Decimal adjust for addition 

SUBTRACTION | 

SUB 

Subtract byte or word 

SBB 

Subtract byte or word with borrow 

DEC 

Decrement byte or word by 1 

NEC 

Negate byte or word 

CMP 

Compare byte or word 

AAS 

ASCII adjust for subtraction 

DAS 

Decimal adjust for subtraction 

MULTIPLICATION | 

MUL 

Multiple byte or word unsigned 

IMUL 

Integer multiply byte or word 

AAM 

ASCII adjust for multiply 

DIVISION I 

DIV 

Divide byte or word unsigned 

IDIV 

Integer divide byte or word 

AAD 

ASCII adjust for division 

CBW 

Convert byte to word 

CWD 

Convert word to doubleword 


Figure 4b. Arithmetic Instructions 


LOGICALS I 

' NOT 

“Not” byte or word 

AND 

“And” byte or word 

OR 

“Inclusive or” byte or word 

XOR 

“Exclusive or” byte or word 

TEST 

“Test” byte or word 

I SHIFTS I 

SHL/SAL 

Shift logical/arithmetic left byte or word 

SHR 

Shift logical right byte or word 

SAR 

Shift arithmetic right byte or word 

ROTATES I 

ROL 

Rotate left byte or word 

ROR 

Rotate right byte or word 

RCL 

Rotate through carry left byte or word 

RCR 

Rotate through carry right byte or word , 


Figure 4cl. Shift/Rotate Logical Instructions 
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CONDITIONAL TRANSFERS 

UNCONDITIONAL TRANSFERS | 

JA/JNBE 

Jump if above/not below nor equal 

CALL 

Call procedure 

JAE/JNB 

Jump if above or equal/not below 

RET 

Return from procedure 

JB/JNAE 

Jump if below/not above nor equal 

JMP 

Jump 

JBE/JNA , 

Jump if below or equal/not above 

JC 

Jump if carry 

ITERATION CONTROLS | 

JE/JZ 

Jump if equal/zero 

LOOP 

Loop 

JG/JNLE 

Jump if greater/not less nor equal 

JGE/JNL 

Jump if greater or equal/not less 

LOOPE/LOOPZ 

Loop if equal/zero 

JL/JNGE 

Jump if less/not greater nor equal 

LOOPNE/LOOPNZ 

Loop if not equal/not zero 

JLE/JNG 

Jump if less or equal/not greater 

JCXZ 

Jump if register CX = 0 

JNC 

Jump if not carry 

JNE/JNZ 

Jump if not equal/not zero 

INTERRUPTS | 

JNO 

Jump if not overflow 

INT 

Interrupt 

JNP/JPO 

Jump if not parity/parity odd 

JNS 

Jump if not sign 

INTO 

Interrupt if overflow 

JO 

Jump if overflow 

IRET 

Interrupt return 

JP/JPE 

Jump if parity/parity even 

JS 

Jump if sign 


Figure 4e. Program Transfer Instructions 


FLAG OPERATIONS | 

STC 

Set carry flag 

CLC 

Clear carry flag 

CMC 

Complement carry flag 

STD 

Set direction flag 

CLD 

Clear direction flag 

STI 

Set interrupt enable flag 

CLI 

Clear interrupt enable flag 

EXTERNAL SYNCHRONIZATION | 

HLT 

Halt until interrupt or reset 

WAIT 

Wait for BUSY not active 

ESC 

Escape to extension processor 

LOCK 

Lock bus during next instruction 

NO OPERATION 

NOP I No operation 

EXECUTION ENVIRONMENT CONTROL 

LMSW 

Load machine status word 

SMSW 

Store machine status word 


Figure 4f. Processor Control Instructions 


ENTER 

Format stack for procedure entry 

LEAVE 

Restore stack for procedure exit 

BOUND 

Detects values outside prescribed range 


Memory Organization 

Memory is organized as sets of variable length seg- 
ments. Each segment is a linear contiguous se- 
quence of up to 64K ( 216 ) 8-bit bytes. Memory is 
addressed using a two component address (a point- 
er) that consists of a 16-bit segment selector, and a 
16-bit offset. The segment selector indicates the de- 
sired segment in memory. The offset component in- 
dicates the desired byte address within the segment. 


32-BIT POINTER 



I SEGMENT I OFFSET | 



. SELECTED 
^ SEGMENT 

31 16 15 0 



OPERAND 

SELECTED 




'' 

MEMORY 

o 

210253-5 


Figure 4g. High Level Instructions 


Figure 5. Two Component Address 
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Table 3. Segment Register Selection Rules 


Memory 

Reference Needed 

Segment Register 
Used 

Implicit Segment 

Selection Rule 

Instructions 

Code (CS) 

Automatic with instruction prefetch 

Stack 

Stack (SS) 

All stack pushes and pops. Any memory reference which uses BP 
as a base register. 

Local Data 

Data (DS) 

All data references except when relative to stack or 
string destination 

External (Global) Data 

Extra (ES) 

Alternate data segment and destination of string operation 


All instructions that address operands in memory 
must specify the segment and the offset. For speed 
and compact instruction encoding, segment selec- 
tors are usually stored in the high speed segment 
registers. An instruction need specify only the de- 
sired segment register and an offset in order to ad- 
dress a memory operand. 

Most instructions need not explicitly specify which 
segment register is used. The correct segment reg- 
ister Is automatically chosen according to the rules 
of Table 3. These rules follow the way programs are 
written (see Figure 6) as independent modules that 
require areas for code and data, a stack, and access 
to external data areas. 

Special segment override Instruction prefixes allow 
the implicit segment register selection rules to be 
overridden for special cases. The stack, data, and 
extra segments may coincide for simple programs. 
To access operands not residing In one of the four 
immediately available segments, a full 32-bit pointer 
or a new segment selector must be loaded. 


Addressing Modes 

The 80286 provides a total of eight addressing 
modes for instructions to specify operands. Two ad- 
dressing modes are provided for instructions that 
operate on register or immediate operands: 

Register Operand Mode: The operand Is locat- 
ed in one of the 8 or 16-bit general registers. 

Immediate Operand Mode: The operand is in- 
cluded in the instruction. 

Six modes are provided to specify the location of an 
operand in a memory segment. A memory operand 
address consists of two 16-blt components: seg- 
ment selector and offset. The segment selector is 
supplied by a segment register either implicitly cho- 
sen by the addressing mode or explicitly chosen by 
a segment override prefix. The offset is calculated 
by summing any combination of the following three 
address elements: 



MODULE A 


MODULE B 


PROCESS 

STACK 


PROCESS 
DATA 
BLOCK 1 


PROCESS 

DATA 

BLOCKS 



I I 

L I 

MEMORY 210253-6 


Figure 6. Segmented Memory Helps 
Structure Software 


the index (contents of either the SI or Dl index 
registers) 

Any carry out from the 16-blt addition Is ignored. 
Eight-bit displacements are sign extended to 16-blt 
values. 


Combinations of these three address elements de- 
fine the six memory addressing modes, described 
below. 

Direct Mode: The operand’s offset Is contained in 
the instruction as an 8 or 16-bit displacement ele- 
ment. 


Register Indirect Mode: The operand’s offset is in 
one of the registers SI, Dl, BX, or BP. 


the displacement (an 8 or 1 6-bit immediate val- 
ue contained in the instruction) 

the base (contents of either the BX or BP base 
registers) 


Based Mode: The operand’s offset is the sum of an 
8 or 1 6-bit displacement and the contents of a base 
register (BX or BP). 
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Indexed Mode: The operand’s offset is the sum of 
an 8 or 16-bit displacement and the contents of an 
index register (SI or Dl). 

Based Indexed Mode: The operand’s offset is the 
sum of the contents of a base register and an index 
register. 

Based Indexed Mode with Displacement: The op- 
erand’s offset is the sum of a base register’s con- 
tents, an index register’s contents, and an 8 or 16-bit 
displacement. 


Data Types 

The 80286 directly supports the following data 

types: 

Integer: A signed binary numeric value con- 

tained in an 8-bit byte or a 16-bit 
word. All operations assume a 2’s 
complement representation. Signed 
32 and 64-bit integers are supported 
using the Numeric Data Processor, 
the 80287. 

Ordinal: An unsigned binary numeric value 

contained in an 8-blt byte or 16-bit 
word. 

Pointer: A 32-bit quantity, composed of a 

segment selector component and an 
offset component. Each component 
is a 1 6-bit word. 

String: A contiguous sequence of bytes or 

words. A string may contain from 1 
byte to 64K bytes. 

ASCII: A byte representation of alphanu- 

meric and control characters using 
the ASCII standard of character rep- 
resentation. 

BCD: A byte (unpacked) representation of 

the decimal digits 0-9. 

Packed BCD: A byte (packed) representation of 
two decimal digits 0-9 storing one 
digit in each nibble of the byte. 

Floating Point: A signed 32, 64, or 80-bit real num- 
ber representation. (Floating point 
operands are supported using the 
80287 Numeric Processor). 

Figure 7 graphically represents the data types sup- 
ported by the 80286. 


I/O Space 

The I/O space consists of 64K 8-bit or 32K 16-bit 
ports. I/O instructions address the I/O space with 


either an 8-bit port address, specified in the instruc- 
tion, or a 16-bit port address in the DX register. 8-bit 
port addresses are zero extended such that A15-A8 
are LOW. I/O port addresses 00F8(H) through 
OOFF(H) are reserved. 


r-^L 

7 

T 


MAGNITUDE 


UNSIGNED I rn r n T | 


SIGNED 

WORD 


MAGNITUDE 

1514 +1 8 7 0 0 


SIGN BIT-‘ |*-MSB 


MAGNITUDE 

SIGNED 31 ° 0 
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Figure 7. 80286 Supported Data Types 
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Table 4. Interrupt Vector Assignments 


Function 

Interrupt 

Number 

Related 

Instructions 

Does Return Address 
Point to Instruction 
Causing Exception? 

Divide error exception 

0 

DIV, IDIV 

Yes 

Single step interrupt 

1 

All 


NMI interrupt 

2 

INT 2 or NMI pin 


Breakpoint interrupt 

3 

INT3 


INTO detected overflow exception 

4 

INTO 

No 

BOUND range exceeded exception 

5 

BOUND 

Yes 

Invalid opcode exception 

6 

Any undefined opcode 

Yes 

Processor extension not available exception 

7 

ESC or WAIT 

Yes 

Intel reserved-do not use 

8-15 



Processor extension error interrupt 

16 

ESC or WAIT 


Intel reserved-do not use 

17-31 



User defined 

32-255 




Interrupts 

An interrupt transfers execution to a new program 
location. The old program address (CS:IP) and ma- 
chine state (Flags) are saved on the stack to allow 
resumption of the interrupted program. Interrupts fall 
into three classes: hardware initiated, I NT instruc- 
tions, and instruction exceptions. Hardware initiated 
interrupts occur in response to an external input and 
are classified as non-maskable or maskable. Pro- 
grams may cause an interrupt with an I NT instruc- 
tion. Instruction exceptions occur when an unusual 
condition, which prevents further instruction pro- 
cessing, is detected while attempting to execute an 
instruction. The return address from an exception 
will always point at the instruction causing the ex- 
ception and Include any leading instruction prefixes. 


setting the Interrupt flag bit (IF) in the flag word. All 
224 user-defined interrupt sources can share this in- 
put, yet they can retain separate interrupt handlers. 
An 8-bit vector read by the CPU during the interrupt 
acknowledge sequence (discussed in System Inter- 
face section) Identifies the source of the Interrupt. 

Further maskable interrupts are disabled while serv- 
icing an interrupt by resetting the IF bit as part of the 
response to an interrupt or exception. The saved 
flag word will reflect the enable status of the proces- 
sor prior to the interrupt. Until the flag word is re- 
stored to the flag register, the interrupt flag will be 
zero unless specifically set. The interrupt return in- 
struction Includes restoring the flag word, thereby 
restoring the original status of IF. 


A table containing up to 256 pointers defines the 
proper interrupt service routine for each interrupt. In- 
terrupts 0-31, some of which are used for instruc- 
tion exceptions, are reserved. For each interrupt, an 
8-bit vector must be supplied to the 80286 which 
Identifies the appropriate table entry. Exceptions 
supply the interrupt vector Internally. I NT instructions 
contain or Imply the vector and allow access to all 
256 Interrupts. Maskable hardware Initiated inter- 
rupts supply the 8-bit vector to the CPU during an 
interrupt acknowledge bus sequence. Non-maska- 
ble hardware interrupts use a predefined internally 
supplied vector. 

MASKABLE INTERRUPT (INTR) 

The 80286 provides a maskable, hardware interrupt 
request pin, INTR. Software enables this input by 


NON-MASKABLE INTERRUPT REQUEST (NMI) 

A non-maskable interrupt input (NMI) Is also provid- 
ed. NMI has higher priority than INTR. A typical use 
of NMI would be to activate a power failure routine. 
The activation of this Input causes an interrupt with 
an Internally supplied vector value of 2. No external 
interrupt acknowledge sequence is performed. 

While executing the NMI servicing procedure, the 
80286 will service neither further NMI requests, 
INTR requests, nor the processor extension seg- 
ment overrun interrupt until an interrupt return (IRET) 
instruction is executed or the CPU is reset. If NMI 
occurs while currently servicing an NMI, its presence 
will be saved for servicing after executing the first 
IRET instruction. IF is cleared at the beginning of an 
NMI interrupt to inhibit INTR interrupts. 
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SINGLE STEP INTERRUPT 

The 80286 has an internal interrupt that allows pro- 
grams to execute one instruction at a time. It is 
called the single step interrupt and is controlled by 
the single step flag bit (TF) in the flag word. Once 
this bit is set, an internal single step interrupt will 
occur after the next instruction has been executed. 
The interrupt clears the TF bit and uses an internally 
supplied vector of 1 . The IRET instruction Is used to 
set the TF bit and transfer control to the next instruc- 
tion to be single stepped. 

Interrupt Priorities 

When simultaneous interrupt requests occur, they 
are processed in a fixed order as shown In Table 5. 
Interrupt processing involves saving the flags, return 
address, and setting CS:IP to point at the first in- 
struction of the interrupt handler. If other interrupts 
remain enabled they are processed before the first 
instruction of the current interrupt handler is execut- 
ed. The last interrupt processed is therefore the first 
one serviced. 


Table 5. Interrupt Processing Order 


Order 

interrupt 

1 

Instruction exception 

2 

Single step 

3 

NMI 

4 

Processor extension segment overrun 

5 

INTR 

6 

INT instruction 


Initialization and Processor Reset 

Processor initialization or start up is accomplished 
by driving the RESET Input pin HIGH. RESET forces 
the 80286 to terminate all execution and local bus 
activity. No instruction or bus activity will occur as 
long as RESET is active. After RESET becomes in- 
active and an internal processing Interval elapses, 
the 80286 begins execution in real address mode 
with the instruction at physical location FFFFFO(H). 
RESET also sets some registers to predefined val- 
ues as shown in Table 6. 


Table 6. 80286 Initial Register State after RESET 


Flag word 

0002(H) 

Machine Status Word 

FFFO(H) 

Instruction pointer 

FFFO(H) 

Code segment 

FOOO(H) 

Data segment 

0000(H) 

Extra segment 

0000(H) 

Stack segment 

0000(H) 


HOLD must not be active during the time from the 
leading edge of RESET to 34 CLKs after the trailing 
edge of RESET. 


Machine Status Word Description 

The machine status word (MSW) records when a 
task switch takes place and controls the operating 
mode of the 80286. It is a 1 6-blt register of which the 
lower four bits are used. One bit places the CPU Into 
protected mode, while the other three bits, as shown 
in Table 7, control the processor extension interface. 
After RESET, this register contains FFFO(H) which 
places the 80286 in 8086 real address mode. 


Table 7. MSW Bit Functions 


Bit 

Position 

Name 

Function 

0 

PE 

Protected mode enable places the 

80286 into protected mode and cannot 
be cleared except by RESET. 

1 

MP 

Monitor processor extension allows 

WAIT instructions to cause a processor 
extension not present exception 
(number 7). / 

2 

EM 

Emulate processor extension causes a 
processor extension not present 
exception (number 7) on ESC 
instructions to allow emulating a 
processor extension. 

3 

TS 

Task switched indicates the next 
instruction using a processor extension 
will cause exception 7, allowing software 
to test whether the current processor 
extension context belongs to the current 
task. 


The LMSW and SMSW instructions can load and 
store the MSW in real address mode. The recom- 
mended use of TS, EM, and MP is shown In Table 8. 


Table 8. Recommended MSW Encodings For Processor Extension Control 


TS 

MP 

EM 

Recommended Use 

instructions 
Causing 
Exception 7 

0 

0 

0 

Initial encoding after RESET. 80286 operation is identical to 8086, 88. 

None 

0 

0 

,1 

No processor extension is available. Software will emulate its function. 

ESC 

1 

0 

1 

No processor extension is available. Software will emulate its function. The current 
processor extension context may belong to another task. 

ESC 

0 

1 

0 

A processor extension exists. 

None 

1 

1 

0 

A processor extension exists. The current processor extension context may belong to 
another task. The Exception 7 on WAIT allows software to test for an error pending 
from a previous processor extension operation. 

ESC or 

WAIT 
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Halt 

The HLT instruction stops program execution and 
prevents the CPU from using the local bus until re- 
started. Either NMI, INTR with IF = 1 , or RESET will 
force the 80286 out of halt. If interrupted, the saved 
CS:IP will point to the next instruction after the HLT. 


8086 REAL ADDRESS MODE 

The 80286 executes a fully upward-compatible su- 
perset of the 8086 instruction set in real address 
mode. In real address mode the 80286 is object 
code compatible with 8086 and 8088 software. The 
real address mode architecture (registers and ad- 
dressing modes) is exactly as described In the 
80286 Base Architecture section of this Functional 
Description. 


Memory Size 

Physical memory is a contiguous array of up to 
1 ,048,576 bytes (o ne me gabyte) addressed by pins 
Aq through A-ig and BHE. A20 through A23 should be 
ignored. 


Memory Addressing 

In real address mode physical memory is a contigu- 
ous array of up to 1 ,048,576 bytes (one mega byte) 
addressed by pins Aq through A19 and BHE. Ad- 
dress bits A20-A23 may not always be zero in real 
mode. A20-A23 should not be used by the system 
while the 80286 is operating in Real Mode. 

The selector portion of a pointer Is interpreted as the 
upper 1 6 bits of a 20-bit segment address. The lower 
four bits of the 20-bit segment address are always 
zero. Segment addresses, therefore, begin on multi- 
ples of 16 bytes. See Figure 8 for a graphic repre- 
sentation of address information. 

All segments In real address mode are 64K bytes in 
size and may be read, written, or executed. An ex- 
ception or interrupt can occur If data operands or 
instructions attempt to wrap around the end of a 
segment (e.g. a word with .its low order byte at offset 
FFFF(H) and its high order byte at offset 0000(H). If, 
In real address mode, the information contained In a 
segment does not use the full 64K bytes, the unused 
end of the segment may be overlayed by another 
segment to reduce physical memory requirements. 


tion area and interrupt table area. Locations from 
addresses FFFF,0(H) through FFFFF(H) are re- 
served for system initialization. Initial execution be- 
gins at location FFFFO(H). Locations 00000(H) 
through 003FF(H) are reserved for interrupt vectors. 



Figure 8. 8086 Real Address Mode 
Address Calculation 



Figure 9. 8086 Real Address Mode Initially 
Reserved Memory Locations 


Reserved Memory Locations 

The 80286 reserves two fixed areas of memory in 
real address mode (see Figure 9); system initializa- 
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Table 9. Real Address Mode Addressing Interrupts 


Function 

Interrupt 

Number 

Related 

Instructions 

Return Address 
Before Instruction? 

Interrupt table limit too small exception 

8 

INT vector is not within table limit 

Yes 

Processor extension segment overrun 
interrupt 

9 

ESC with memory operand extend- 
ing beyond offset FFFF(H) 

No 

Segment overrun exception 

13 

Word memory reference with offset 
= FFFF(H) or an attempt to exe- 
cute past the end of a segment 

Yes 


Interrupts 

Table 9 shows the interrupt vectors reserved for ex- 
ceptions and interrupts which indicate an addressing 
error. The exceptions leave the CPU In the state ex- 
isting before attempting to execute the failing in- 
struction (except for PUSH, POP, PUSHA, or POPA). 
Refer to the next section on protected mode initiali- 
zation for a discussion on exception 8. , 


Protected Mode Initialization 

To prepare the 80286 for protected mode, the LIDT 
instruction is used to load the 24-blt interrupt table 
base and 16-bit limit for the protected mode interrupt 
table. This Instruction can also set a base and limit 
for the interrupt vector table in real address mode. 
After reset, the Interrupt table base Is initialized to 
000000(H) and its size set to 03FF(H). These values 
are compatible with 8086, 88 software. LIDT should 
only be executed In preparation for protected mode. 


Shutdown 

Shutdown occurs when a severe error is detected 
that prevents further instruction processing by the 
CPU. Shutdown and halt are externally signalled via 
a halt bus operation. They can be distinguished by 
A-i HIGH for halt and A-| LOW for shutdown. In real 
address mode, shutdown can occur under two con- 
ditions: 

• Exceptions 8 or 13 happen and the IDT limit does 
not Include the interrupt vector. 

• A CALL I NT or PUSH Instruction attempts to wrap 
around the stack segment when SP Is not even. 

An NMI Input can bring the CPU out of shutdown if 
the IDT limit Is at least OOOF(H) and SP Is greater 
than 0005(H), otherwise shutdown can only be exit- 
ed via the RESET input. 


PROTECTED VIRTUAL ADDRESS 
MODE 

The 80286 executes a fully upward-compatible su- 
perset of the 8086 instruction set In protected virtual 
address mode (protected mode). Protected mode 
also provides memory management and protection 
mechanisms and associated Instructions. 

The 80286 enters protected virtual address mode 
from real address mode by setting the PE (Protec- 
tion Enable) bit of the machine status word with the 
Load Machine Status Word (LMSW) instruction. Pro- 
tected mode offers extended physical and virtual 
memory address space, memory protection mecha- 
nisms, and new operations to support operating sys- 
tems and virtual memory. 

All registers, Instructions, and addressing modes de- 
scribed in the 80286 Base Architecture section of 
this Functional Description remain the same. Pro- 
grams for the 8086, 88, 1 86, and real address mode 
80286 can be run In protected mode; however, em- 
bedded constants for segment selectors are differ- 
ent. 


Memory Size 

The protected mode 80286 provides a 1 gigabyte 
virtual address space per task mapped Into a 16 
megabyte physical addre ss sp ace defined by the ad- 
dress pin A23-A0 and BHE. The virtual address 
space may be larger than the physical address 
space since any use of an address that does not 
map to a physical memory location will cause a re- 
startable exception. 


Memory Addressing 

As in real address mode, protected mode uses 32- 
bit pointers, consisting of 16-blt selector and offset 
components. The selector, however, specifies an in- 
dex into a memory resident table rather than the up- 
per 16-blts of a real memory address. The 24-blt 
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base address of the desired segment is obtained 
from the tables in memory. The 16-bit offset is add- 
ed to the segment base address to form the physical 
address as shown in Figure 10. The tables are auto- 
matically referenced by the CPU whenever a seg- 
ment register is loaded with a selector. All 80286 
instructions which load a segment register will refer- 
ence the memory based tables without additional 
software. The memory based tables contain 8 byte 
values called descriptors. 



SEGMENT 


SEGMENT 

DESCRIPTOR 

TABLE 
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Figure 10. Protected Mode Memory Addressing 


DESCRIPTORS 

Descriptors define the use of memory. Special types 
of descriptors also define new functions for transfer 
of control and task switching. The 80286 has seg- 
ment descriptors for code, stack and data segments, 
and system control descriptors for special system 
data segments and control transfer operations. De- 
scriptor accesses are performed as locked bus op- 
erations to assure descriptor Integrity in multi-proc- 
essor systems. 


CODE AND DATA SEGMENT DESCRIPTORS 
(S = 1) 

Besides segment base addresses, code and data 
descriptors contain other segment attributes Includ- 
ing segment size (1 to 64K bytes), access rights 
(read only, read/write, execute only, and execute/ 
read), and presence In memory (for virtual memory 
systems) (See Figure 11). Any segment usage vio- 
lating a segment attribute Indicated by the segment 
descriptor wjll prevent the memory cycle and cause 
an exception or interrupt. 

Code or Data Segment Descriptor 


ACCESS 
RIGHTS BYTE 


7 0 7 0 


+ 7 

INTEL R 

— 

•SERVED* 

+ S 

: 

OPL 

- 1- 

1 

TYPE 
i 1 


BASE23_i6 

+ 3 

BASE, 5-0 

1 

+ 1 

LIMIT, 5-0 


tS B 7 0 


+ 6 
•f 4 

+ 2 
0 


210253-11 

*Must be set to 0 for compatibility with 80386. 


Access Rights Byte Definition 


Bit 

Position 

Name 


Function 


7 

6-5 

Present (P) 

Descriptor Privilege 
Level (DPL) 

P = 1 

P = 0 

Segment is mapped into physical memory. 

No mapping to physical memory exits, base and limit are 
not used. 

Segment privilege attribute used in privilege tests. 

4 

Segment Descrip- 

S = 1 

Code or Data (includes stacks) segment descriptor 



tor (S) 

S = 0 

System Segment Descriptor or Gate Descriptor 


3 

Executable (E) 

E = 0 

Data segment descriptor type is: 

If 

2 

Expansion Direc- 

ED = 0 

Expand up segment, offsets must be ^ limit. 

Data 


tion (ED) 

ED = 1 

Expand down segment, offsets must be > limit. 

Segment 

1 

Writeable (W) 

W = 0 

W = 1 

Data segment may not be written into. 

Data segment may be written into. 

{S = 1. 

E = 0) 

3 

Executable (E) 

E = 1 

Code Segment Descriptor type is: 

If 

2 

Conforming (C) 

C = 1 

Code segment may only be executed 
when CPL^DPL and CPL 
remains unchanged. 

Code 

Segment 

1 

Readable (R) 

R =0 

Code segment may not be read 

(S= 1, 



R = 1 

Code segment may be read. 

E = 1) 

0 

Accessed (A) 

A = 0 

A = 1 

Segment has not been accessed. 

Segment selector has been loaded into segment register 
or used by selector test instructions. 


Figure 1 1. Code and Data Segment Descriptor Formats 
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Code and data (including stack data) are stored in 
two types of segments: code segments and data 
segments. Both types are identified and defined by 
segment descriptors (S = 1). Code segments are 
identified by the executable (E) bit set to 1 in the 
descriptor access rights byte. The access rights byte 
of both code and data segment descriptor types 
have three fields in common; present (P) bit, De- 
scriptor Privilege Level (DPL), and accessed (A) bit. 
If P = 0, any attempted use of this segment will 
cause a not-present exception. DPL specifies the 
privilege level of the segment descriptor. DPL con- 
trols when the descriptor may be used by a task 
(refer to privilege discussion below). The A bit shows 
whether the segment has been previously accessed 
for usage profiling, a necessity for virtual memory 
systems. The CPU will always set this bit when ac- 
cessing the descriptor. 

Data segments (S = 1 , E = 0) may be either read- 
only or read-write as controlled by the W bit of the 
access rights byte. Read-only (W = 0) data seg- 
ments may not be written into. Data segments may 
grow In two directions, as determined by the Expan- 
sion Direction (ED) bit: upwards (ED = 0) for data 
segments, and downwards (ED = 1) for a segment 
containing a stack. The limit field for a data segment 
descriptor is interpreted differently depending on the 
ED bit (see Figure 11). 

A code segment (S = 1 , E = 1 ) may be execute- 
only or execute/read as determined by the Read- 
able (R) bit. Code segments may never be written 
into and execute-only code segments (R = 0) may 
not be read. A code segment may also have an attri- 
bute called conforming (C). A conforming code seg- 
ment may be shared by programs that execute at 
different privilege levels. The DPL of a conforming 
code segment defines the range of privilege levels 
at which the segment may be executed (refer to priv- 
ilege discussion below). The limit field identifies the 
last byte of a code segment. 

SYSTEM SEGMENT DESCRIPTORS (S = 0, 
TYPE = 1-3) 

In addition to code and data segment descriptors, 
the protected mode 80286 defines System Segment 
Descriptors. These descriptors define special sys- 
tem data segments which contain a table of descrip- 
tors (Local Descriptor Table Descriptor) or segments 
which contain the execution state of a task (Task 
State Segment Descriptor). 

Figure 12 gives the formats for the special system 
data segment descriptors. The descriptors contain a 
24-bit base address of the segment and a 16-bit lim- 
it. The access byte defines the type of descriptor, its 
state and privilege level. The descriptor contents are 
valid and the segment is in physical memory if P = 1 . 
If P = 0, the segment is not valid. The DPL field is 
only used In Task State Segment descriptors and 
indicates the privilege level at which the descrip- 


tor may be used (see Privilege). Since the Local De- 
scriptor Table descriptor may only be used by a spe- 
cial privileged instruction, the DPL field is not used. 
Bit 4 of the access byte is 0 to indicate that it is a 
system control descriptor. The type field specifies 
the descriptor type as indicated in Figure 12. 


System Segment Descriptor 






0 

7 

0 


+ 7 

INTEL RE 

1 

SERVED* 

+ 6 

+ 5 

P 

DPL 

1 

0 

TYPE 

1 1 1 

BASE23-,6 

+ 4 

+ 3 

BASE, 5-0 

1 

+ 2 

+ 1 

LIMIT, 5_o 

1 

0 


15 



8 

7 

0 
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System Segment Descriptor Fields 


Name 

Value 

Description 

TYPE 

1 

Available Task State Segment (TSS) 


2 

Local Descriptor Table 


3 

Busy Task State Segment (TSS) 

P 

0 

Descriptor contents are not valid 


1 

Descriptor contents are valid 

DPL 

0-3 

Descriptor Privilege Level 

BASE 

24-bit 

Base Address of special system data 


number 

segment in real memory 

LIMIT 

16-bit 
number . 

Offset of last byte in segment 


Figure 12. System Segment Descriptor Format 


GATE DESCRIPTORS (S = 0, TYPE = 4-7) 

Gates are used to control access to entry points 
within the target code segment. The gate descrip- 
tors are call gates, task gates, interrupt gates and 
trap gates. Gates provide a level of indirection be- 
tween the source and destination of the control 
transfer. This Indirection allows the CPU to automati- 
cally perform protection checks and control entry 
point of the destination. Call gates are used to 
change privilege levels (see Privilege), task gates 
are used to perform a task switch, and interrupt and 
trap gates are used to specify interrupt service rou- 
tines. The Interrupt gate disables interrupts (resets 
IF) while the trap gate does not. 

Gate Descriptor 


7 07 0 


— 

INTEL RE 

— 

SERVED* 

F 

DPL 

1 

0 

TYPE 

1 1 1 

XXX 

1 1 

WORD 

COUNT4-0 

DESTINATION SELECTOR,s-2 

1 

X X 

1 

DESTINATION OFFSET,5-o 
1 


15 8 7 0 
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Gate Descriptor Fields 


Name 

Value 

Description 


4 

-Call Gate 

TYPE 

5 

6 

-Task Gate 
-Interrupt Gate 


7 

-Trap Gate 

P 

0 

-Descriptor Contents are not 
valid 


1 

-Descriptor Contents are 
valid 

DPL 

0-3 

Descriptor Privilege Level 

WORD 


Number of words to copy 

COUNT 

0-31 

from callers stack to called 
procedures stack. Only used 
with call gate. 



Selector to the target code 

DESTINATION 

SELECTOR 

16-bit 

selector 

segment (Call, Interrupt or 
Trap Gate) 

Selector to the target task 
state segment (Task Gate) 

DESTINATION 

16-bit 

Entry point within the target 

OFFSET 

offset 

code segment 


Figure 13. Gate Descriptor Format 


Figure 13 shows the format of the gate descriptors. 
The descriptor contains a destination pointer that 
points to the descriptor of the target segment and 
the entry point offset. The destination selector in an 
interrupt gate, trap gate, and call gate must refer to a 
code segment descriptor. These gate descriptors 
contain the entry point to prevent a program from 
constructing and using an illegal entry point. Task 
gates may only refer to a task state segment. Since 
task gates invoke a task switch, the destination off- 
set is not used in the task gate. 

Exception 1 3 is generated when the gate is used if a 
destination selector does not refer to the correct de- 
scriptor type. The word count field is used in the call 
gate descriptor to indicate the number of parameters 
(0-31 words) to be automatically copied from the 
caller’s stack to the stack of the called routine when 
a control transfer changes privilege levels. The word 
count field is not used by any other gate descriptor. 


scriptor privilege level and specifies when this de- 
scriptor may be used by a task (refer to privilege 
discussion below). Bit 4 must equal 0 to indicate a 
system control descriptor. The type field specifies 
the descriptor type as indicated in Figure 13. 

SEGMENT DESCRIPTOR CACHE REGISTERS 

A segment descriptor cache register is assigned to 
each of the four segment registers (CS, SS, DS, ES). 
Segment descriptors are automatically loaded 
(cached) into a segment descriptor cache register 
(Figure 14) whenever the associated segment regis- 
ter is loaded with a selector. Only segment descrip- 
tors may be loaded into segment descriptor cache 
registers. Once loaded, all references to that seg- 
ment of memory use the cached descriptor Informa- 
tion instead of reaccessing the descriptor. The de- 
scriptor cache registers are not visible to programs. 
No instructions exist to store their contents. They 
only change when a segment register Is loaded. 


SELECTOR FIELDS 

A protected mode selector has three fields: descrip- 
tor entry Index, local or global descriptor table indi- 
cator (Tl), and selector privilege (RPL) as shown in 
Figure 15. These fields select one of two memory 
based tables of descriptors, select the appropriate 
table entry and allow highspeed testing of the selec- 
tor’s privilege attribute (refer to privilege discussion 
below). 



15 

3 2 10 

BITS 

NAME 

FUNCTION 

1-0 

REQUESTED 

PRIVILEGE 

LEVEL 

(RPL) 

INDICATES SELECTOR PRIVILEGE 

LEVEL DESIRED 

2 

TABLE 

INDICATOR 

(Tl) 

Tl = 0 USE GLOBAL DESCRIPTOR TABLE 
(GOT) 

Tl = 1 USE LOCAL DESCRIPTOR TABLE 
(LDT) 

15-3 

INDEX 

SELECT DESCRIPTOR ENTRY IN TABLE 


The access byte format is the same for all gate de- 
scriptors. P = 1 Indicates that the gate contents are 
valid. P = 0 indicates the contents are not valid and 
causes exception 11 if referenced. PPL is the de- 



PROGRAM VISIBLE 

r" 

— 

PROGRAM INVISIBLE 


“1 


SEGMENT SELECTORS 

1 

1 

ACCESS 
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Figure 15. Selector Fields 


Figure 14. Descriptor Cache Registers 
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LOCAL AND GLOBAL DESCRIPTOR TABLES 

Two tables of descriptors, called descriptor tables, 
contain all descriptors accessible by a task at any 
given time. A descriptor table is a linear array of up 
to 8192 descriptors. The upper 13 bits of the selec- 
tor value are an index into a descriptor table. Each 
table has a 24-bit base register to locate the descrip- 
tor table in physical memory and a 16-bit limit regis- 
ter that confine descriptor access to the defined lim- 
its of the table as shown in Figure 1 6. A restartable 
exception (13) will occur if an attempt is made to 
reference a descriptor outside the table limits. 

One table, called the Global Descriptor table (GDT), 
contains descriptors available to all tasks. The other 
table, called the Local Descriptor Table (LDT), con- 
tains descriptors that can be private to a task. Each 
task may have its own private LDT. The GDT may 
contain all descriptor types except interrupt and trap 
descriptors. The LDT may contain only segment, 
task gate, and call gate descriptors. A segment can- 
not be accessed by a task if its segment descriptor 
does not exist in either descriptor table at the time of 
access. 



Descriptor Table Definition 

The LGDT and LLDT instructions load the base and 
limit of the global and local descriptor tables. LGDT 
and LLDT are privileged, i.e. they may only be exe- 
cuted by trusted programs operating at level 0. The 
LGDT instruction loads a six byte field containing the 
16-bit table limit and 24-bit physical base address of 
the Global Descriptor Table as shown in Figure 17. 
The LLDT instruction loads a selector which refers 
to a Local Descriptor Table descriptor containing the 


base address and limit for an LDT, as shown in Fig- 
ure 12. 



7 0 

7 0 


+ 5 

INTEL RESERVED* 

BASE23-16 

+ 4 

+ 3 

BASEis-o 

1 

+ 2 

+ 1 

LIMITi5_o 

1 

0 


15 B 

7 0 


210253-17 

*Must be set to 0 for compatibility with 80386. 


Figure 17. Global Descriptor Table and Interrupt 
Descriptor Table Data Type 


INTERRUPT DESCRIPTOR TABLE 

The protected mode 80286 has a third descriptor 
table, called the Interrupt Descriptor Table (IDT) 
(see Figure 18), used to define up to 256 interrupts. 
It may contain only task gates, interrupt gates and 
trap gates. The IDT (Interrupt Descriptor Table) has 
a 24-bit physical base and 16-bit limit register in the 
CPU. The privileged LIDT instruction loads these 
registers with a six byte value of identical form to 
that of the LGDT instruction (see Figure 17 and Pro- 
tected Mode Initialization). 



Figure 18. interrupt Descriptor Table Definition 


References to IDT entries are made via I NT instruc- 
tions, external interrupt vectors, or exceptions. The 
IDT must be at least 256 bytes in size to allocate 
space for all reserved interrupts. 

Privilege 

The 80286 has a four-level hierarchical privilege sys- 
tem which controls the use of privileged instructions 
and access to descriptors (and their associated seg- 
ments) within a task. Four-level privilege, as shown 
in Figure 19, Is an extension of the user/supervisor 
mode commonly found in minicomputers. The privi- 
lege levels are numbered 0 through 3. Level 0 is the 
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most privileged level. Privilege levels provide protec- 
tion within a task. (Tasks are isolated by providing 
private LDT’s for each task.) Operating system rou- 
tines, Interrupt handlers, and other system software 
can be included and protected within the virtual ad- 
dress space of each task using the four levels of 
privilege. Each task in the system has a separate 
stack for each of its privilege levels. 

Tasks, descriptors, and selectors have a privilege 
level attribute that determines whether the descrip- 
tor may be used. Task privilege effects the use of 
Instructions and descriptors. Descriptor and selector 
privilege only effect access to the descriptor. 

TASK PRIVILEGE 

A task always executes at one of the four privilege 
levels. The task privilege level at any specific instant 
is called the Current Privilege Level (CPL) and is de- 
fined by the lower two bits of the CS register. CPL 
cannot change during execution in a single code 
segment. A task’s CPL may only be changed by con- 
trol transfers through gate descriptors to a new code 
segment (See Control Transfer). Tasks begin exe- 
cuting at the CPL value specified by the code seg- 
ment selector within TSS when the task is initiated 
via a task switch operation (See Figure 20). A task 
executing at Level 0 can access all data segments 
defined in the GDT and the task’s LDT and is con- 
sidered the most trusted level. A task executing a 
Level 3 has the most restricted access to data and is 
considered the least trusted level. 

DESCRIPTOR PRIVILEGE 

Descriptor privilege Is specified by the Descriptor 
Privilege Level (DPL) field of the descriptor access 
byte. DPL specifies the least trusted task privilege 
level (CPL) at which a task may access the descrip- 


tor. Descriptors with DPL = 0 are the most protect- 
ed., Only tasks executing at privilege level 0 
(CPL = 0) may access them. Descriptors with DPL 
= 3 are the least protected (i.e. have the least re- 
stricted access) since tasks can access them when 
CPL = 0, 1 , 2, or 3. This rule applies to all descrip- 
tors, except LDT descriptors. 

SELECTOR PRIVILEGE 

Selector privilege is specified by the Requested Priv- 
ilege Level (RPL) field In the least significant two bits 
of a selector. Selector RPL may establish a less 
trusted privilege level than the current privilege level 
for the use of a selector. This level is called the 
task’s effective privilege level (EPL). RPL can only 
reduce the scope of a task’s access to data with this 
selector. A task’s effective privilege is the numeric 
maximum of RPL and CPL. A selector with RPL = 0 
Imposes no additional restriction on its use while a 
selector with RPL = 3 can only refer to segments at 
privilege Level 3 regardless of the task’s CPL. RPL 
is generally used to verify that pointer parameters 
passed to a more trusted procedure are not allowed 
to use data at a more privileged level than the caller 
(refer to pointer testing Instructions). 

Descriptor Access and Privilege 
Validation 

Determining the ability of a task to access a seg- 
ment involves the type of segment to be accessed, 
the instruction used, the type of descriptor used and 
CPL, RPL, and DPL. The two basic types of segment 
accesses are control transfer (selectors loaded into 
CS) and data (selectors loaded into DS, ES or SS). 

DATA SEGMENT ACCESS 

Instructions that load selectors into DS and ES must 
refer to a data segment descriptor or readable code 
segment descriptor. The CPL of the task and the 
RPL of the selector must be the same as or more 
privileged (numerically equal to or lower than) than 
the descriptor DPL. In general, a task can only ac- 
cess data segments at the same or less privileged 
levels than the CPL or RPL (whichever is numerically 
higher) to prevent a program from accessing data it 
cannot be trusted to use. 

An exception to the rule is a readable conforming 
code segment. This type of code segment can be 
read from any privilege level. 

If the privilege checks fail (e.g. DPL is numerically 
less than the maximum of CPL and RPL) or an Incor- 
rect type of descriptor is referenced (e.g. gate de- 
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scriptor or execute only code segment) exception 13 
occurs. If the segment is not present, exception 1 1 
is generated. 

Instructions that load selectors into SS must refer to 
data segment descriptors for writable data seg- 
ments. The descriptor privilege (DPI) and RPL must 
equal CPL. All other descriptor types or a privilege 
level violation will cause exception 13. A not present 
fault causes exception 12. 

CONTROL TRANSFER 

Four types of control transfer can occur when a se- 
lector is loaded into CS by a control transfer opera- 
tion (see Table 10). Each transfer type can only oc- 
cur if the operation which loaded the selector refer- 
ences the correct descriptor type. Any violation of 
these descriptor usage rules (e.g. JMP through a call 
gate or RET to a Task State Segment) will cause 
exception 13. 

The ability to reference a descriptor for control trans- 
fer is also subject to rules of privilege. A CALL or 
JUMP instruction may only reference a code seg- 
ment descriptor with DPL equal to the task CPL or a 
conforming segment with DPL of equal or greater 
privilege than CPL. The RPL of the selector used to 
reference the code descriptor must have as much 
privilege as CPL. 

RET and IRET instructions may only reference code 
segment descriptors with descriptor privilege equal 
to or less privileged than the task CPL. The selector 
loaded into CS Is the return address from the stack. 
After the return, the selector RPL is the task’s new 
CPL. If CPL changes, the old stack pointer Is popped 
after the return address. 

When a JMP or CALL references a Task State Seg- 
ment descriptor, the descriptor DPL must be the 
same or less privileged than the task’s CPL. Refer- 


ence to a valid Task State Segment descriptor caus- 
es a task switch (see Task Switch Operation). Refer- 
ence to a Task State Segment descriptor at a more 
privileged level than the task’s CPL generates ex- 
ception 13. 

When an instruction or interrupt references a gate 
descriptor, the gate DPL must have the same or less 
privilege than the task CPL. If DPL Is at a more privi- 
leged level than CPL, exeception 13 occurs. If the 
destination selector contained in the gate refer- 
ences a code segment descriptor, the code seg- 
ment descriptor DPL must be the same or more priv- 
ileged than the task CPL. If not. Exception 1 3 is is- 
sued. After the control transfer, the code segment 
descriptors DPL is the task’s new CPL. If the desti- 
nation selector In the gate references a task state 
segment, a task switch Is automatically performed 
(see Task Switch Operation). 

The privilege rules on control transfer require: 

— JMP or CALL direct to a code segment (code 
segment descriptor) can only be to a conforming 
segment with DPL of equal or greater privilege 
than CPL or a non-conforming segment at the 
same privilege level. 

— interrupts within the task or calls that may 
change privilege levels, can only transfer control 
through a gate at the same or a less privileged 
level than CPL to a code segment at the same or 
more privileged level than CPL. 

— return instructions that don’t switch tasks can 
only return control to a code segment at the 
same or less privileged level. 

— task switch can be performed by a call, jump or 
Interrupt which references either a task gate or 
task state segment at the same or less privileged 
level. 


Table 10. Descriptor Types Used for Control Transfer 


Control Transfer Types 

Operation Types 

Descriptor 

Referenced 

Descriptor 

Table 

Intersegment within the same privilege level 

JMP, CALL, RET, IRET* 

Code Segment 

GDT/LDT 

Intersegment to the same or higher privilege level Interrupt 
within task may change CPL. 

CALL 

Call Gate 

GDT/LDT 

Interrupt Instruction, 
Exception, External 
Interrupt 

Trap or 

Interrupt 

Gate 

IDT 

Intersegment to a lower privilege level (changes task CPL) 

RET, IRET* 

Code Segment 

GDT/LDT 


CALL, JMP 

Task State 
Segment 

GDT 

Task Switch 

CALL, JMP 

Task Gate 

GDT/LDT 

IRET** 

Interrupt Instruction, 
Exception, External 
Interrupt 

Task Gate 

IDT 


*NT (Nested Task bit of flag word) = 0 
**NT (Nested Task bit of flag word) = 1 
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PRIVILEGE LEVEL CHANGES 

Any control transfer that changes CPL within the 
task, causes a change of stacks as part of the oper- 
ation. Initial values of SS:SP for privilege levels 0, 1, 
and 2 are kept In the task state segment (refer to 
Task Switch Operation). During a JMP or CALL con- 
trol transfer, the new stack pointer is loaded into the 
SS and SP registers and the previous stack pointer 
is pushed onto the new stack. 

When returning to the original privilege level, its 
stack Is restored as part of the RET or IRET instruc- 
tion operation. For subroutine calls that pass param- 
eters on the stack and cross privilege levels, a fixed 
number of words, as specified in the gate, are cop- 
ied from the previous stack to the current stack. The 
inter-segment RET instruction with a stack adjust- 
ment value will correctly restore the previous stack 
pointer upon return. 

Protection 

The 80286 includes mechanisms to protect critical 
instructions that affect the CPL) execution state (e.g. 
HLT) and code or data segments from improper us- 
age. These protection mechanisms are grouped into 
three forms; 

Restricted usage of segments (e.g. no write al- 
lowed to read-only data segments). The only seg- 
ments available for use are defined by descrip- 
tors in the Local Descriptor Table (LDT) and 
Global Descriptor Table (GDT). 

Restricted access to segments via the rules of 
privilege and descriptor usage. 

Privileged instructions or operations that may 
only be executed at certain privilege levels as de- 
termined by the CPL and I/O Privilege Level 
(lOPL). The lOPL is defined by bits 14 and 13 of 
the flag word. 

These checks are performed for all instructions and 
can be split into three categories: segment load 
checks (Table 11), operand reference checks (Table 
12), and privileged instruction checks (Table 13). 
Any violation of the rules shown will result in an ex- 
ception. A not-present exception related to the stack 
segment causes exception 12. 

The IRET and POPF instructions do not perform 
some of their defined functions if CPL is not of suffi- 
cient privilege (numerically snfiall enough). Precisely 
these are: 

• The IF bit is not changed if CPL > lOPL. 

• The lOPL field of the flag word is not changed if 
CPL > 0. 

No exceptions or other indication are given when 
these conditions occur. 


Table 11 

Segment Register Load Checks 


Error Description 

Exception 

Number 

Descriptor table limit exceeded 

13 

Segment descriptor not-present 

11 or 12 

Privilege rules violated 

13 

Invalid descriptor/segment type seg- 
ment register load: 

— Read only data segment load to 

SS 

— Special Control descriptor load to 
DS, ES, SS 

— Execute only segment load to 

DS, ES, SS 

— Data segment load to CS 
— Read/Execute code segment 
load to SS 

13 


Table 12. Operand Reference Checks 


Error Description 

Exception 

Number 

Write Into code segment 

13 

Read from execute-only code 


segment 

13 

Write to read-only data segment 

13 

Segment limit exceeded"* 

12or 13 


NOTE: 

Carry out in offset calculations is ignored. 


Table 13. Privileged Instruction Checks 


Error Description 

Exception 

Number 

CPL ^ 0 when executing the following 
instructions; 

LIDT, LLDT, LGDT, LTR, LMSW, 

CTS, HLT 

13 

CPL > lOPL when executing the fol- 
lowing Instructions: 

INS, IN, OUTS, OUT, STI, CLI, 

LOCK 

13 


EXCEPTIONS 

The 80286 detects several types of exceptions and 
interrupts. In protected mode (see Table 14). Most 
are restartable after the exceptional condition is re- 
moved. Interrupt handlers for most exceptions can 
read an error code, pushed on the stack after the 
return address, that Identifies the selector involved 
(0 If none). The return address normally points to the 
falling instruction. Including ail leading prefixes. For a 
processor extension segment overrun exception, 
the return address will not point at the ESC instruc- 
tion that caused the exception; however, the proces- 
sor extension registers may contain the address of 
the failing instruction. 
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Table 14. Protected Mode Exceptions 


Interrupt 

Vector 

Function 

Return 

Address 

At Falling 
Instruction? 

Always 

Restart- 

able? 

Error 

Code 
on Stack? 

8 

Double exception detected 

Yes 

No2 

Yes 

9 

Processor extension segment overrun 

No 

No2 

No 

10 

Invalid task state segment , 

Yes 

Yes 

Yes 

11 

Segment not present 

Yes 

Yes 

Yes 

12 

Stack segment overrun or stack segment not present 

Yes 

Yes'! 

Yes 

13 

General protection 

Yes 

No2 

Yes 


NOTE: 

1 . When a PUSHA or POPA instruction attempts to wrap around the stack segment, the machine state after the exception 
will not be restartable because stack segment wrap around is not permitted. This condition is identified by the value of the 
saved SP being either 0000(H), 0001(H), FFFE(H), or FFFF(H). 

2. These exceptions indicate a violation to privilege rules or usage rules has occurred. Restart is generally not attempted 
under those conditions. 


These exceptions indicate a violation to privilege 
rules or usage rules has occurred. Restart is gener- 
ally not attempted under those conditions. 

All these checks are performed for all Instructions 
and can be split into three categories: segment load 
checks (Table 11), operand reference checks (Table 
12), and privileged instruction checks (Table 13). 
Any violation of the rules shown will result in an ex- 
ception. A not-present exception causes exception 
11 or 12 and is restartable. 


Special Operations 

TASK SWITCH OPERATION 

The 80286 provides a built-in task switch operation 
which saves the entire 80286 execution state (regis- 
ters, address space, and a link to the previous task), 
loads a new execution state, and commences exe- 
cution in the new task. Like gates, the task switch 
operation is invoked by executing an inter-segment 
JMP or CALL instruction which refers to a Task 
State Segment (TSS) or task gate descriptor in the 
GOT or LOT. An INT n instruction, exception, or ex- 
ternal interrupt may also invoke the task switch op- 
eration by selecting a task gate descriptor in the as- 
sociated IDT descriptor entry. 

The TSS descriptor points at a segment (see Figure 
20) containing the entire 80286 execution state 
while a task gate descriptor contains a TSS selector. 
The limit field of the descriptor must be >002B(H). 

Each task must have a TSS associated with it. The 
current TSS Is identified by a special register in the 
80286 called the Task Register (TR). This register 
contains a selector referring to the task state seg- 
ment descriptor that defines the current TSS. A hid- 
den base and limit register associated with TR are 
loaded whenever TR is loaded with a new selector. 


The I RET Instruction is used to return control to the 
task that called the current task or was interrupted. 
Bit 14 in the flag register is called the Nested Task 
(NT) bit. It controls the function of the IRET instruc- 
tion. If NT = 0, the IRET instruction performs the 
regular current task by popping values off the stack; 
when NT = 1, IRET performs a task switch opera-' 
tion back to the previous task. 

When a CALL, JMP, or INT instruction initiates a 
task switch, the old (except for case of JMP) and 
new TSS will be marked busy and the back link field 
of the new TSS set to the old TSS selector. The NT 
bit of the new task is set by CALL or INT initiated 
task switches. An interrupt that does not cause a 
task switch will clear NT. NT may also be set or 
cleared by POPF or IRET instructions. 

The task state segment is marked busy by changing 
the descriptor type field from Type 1 to Type 3. Use 
of a selector that references a busy task state seg- 
ment causes Exception 13. 

PROCESSOR EXTENSION CONTEXT 
SWITCHING 

The context of a processor extension (such as the 
80287 numerics processor) is not changed by the 
task switch operation. A processor extension con- 
text need only be changed when a different task at- 
tempts to use the processor extension (which still 
contains the context of a previous task). The 80286 
detects the first use of a processor extension after a 
task switch by causing the processor extension not 
present exception (7). The interrupt handler may 
then decide whether a context change is necessary. 

Whenever the 80286 switches tasks, it sets the Task 
Switched (TS) bit of the MSW. TS indicates that a 
processor extension context may belong to a differ- 
ent task than the current one. The processor exten- 
sion not present exception (7) will occur when at- 
tempting to execute an ESC or WAIT Instruction if 
TS = 1 and a processor extension is present (MP= 1 
in MSW). 
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POINTER TESTING INSTRUCTIONS 

The 80286 provides several instructions to speed 
pointer testing and consistency checks for maintain- 
ing system integrity (see Table 15). These instruc- 


tions use the memory management hardware to ver- 
ify that a selector value refers to an appropriate seg- 
ment without risking an exception. A condition flag 
(ZF) Indicates whether use of the selector or seg- 
ment will cause an exception. 



SYSTEM 

SEGMENT 

DESCRIPTOR 



AN AVAILABLE TASK STATE 
SEGMENT. MAY BE USED AS 
THE DESTINATION OF A TASK 
SWITCH OPERATION. 


A BUSY TASK STATE SEGMENT. 
CANNOT BE USED AS THE 
DESTINATION OF A TASK 
SWITCH. 



P DESCRIPTION 

1 BASE AND LIMIT FIELDS ARE VALID 
0 SEGMENT IS NOT PRESENT IN 
MEMORY. BASE AND LIMIT ARE NOT 
DEFINED 


28 I CURRENT 
> TASK 
26 f STATE 


INITIAL 
STACKS 
FOR CPL 0,1,2 


Figure 20. Task State Segment and TSS Registers 
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Table 15. 80286 Pointer Test Instructions 


Instruction 

Operands 

Function 

ARPL 

Selector, 

Register 

Adjust Requested Privilege 
Level: adjusts the RPL of 
the selector to the numeric 
maximum of current selec- 
tor RPL value and the RPL 
value in the register. Set 
zero flag if selector RPL 
was changed by ARPL. 

VERB 

Selector 

VERify for Read: sets the 
zero flag if the segment re- 
ferred to by the selector 
can be read. 

VERW 

Selector 

VERify for Write: sets the 
zero flag if the segment re- 
ferred to by the selector 
can be written. 

LSL 

Register, 

Selector 

Load Segment Limit: reads 
the segment limit into the 
register if privilege rules 
and descriptor type allow. 
Set zero flag if successful. 

LAR 

Register, 

Selector 

Load Access Rights: reads 
the descriptor access 
rights byte into the register 
if privilege rules allow. Set 
zero flag if successful. 


DOUBLE FAULT AND SHUTDOWN 

If two separate exceptions are detected during a sin- 
gle instruction execution, the 80286 performs the 
double fault exception (8). If an execution occurs 
during processing of the double fault exception, the 
80286 will enter shutdown. During shutdown no fur- 
ther instructions or exceptions are processed. Either 
NMI (CPU remains in protected mode) or RESET 
(CPU exits protected mode) can force the 80286 out 
of shutdown. Shutdown is externally signalled via a 
HALT bus operation with A-j LOW. 

PROTECTED MODE INITIALIZATION 

The 80286 initially executes in real address mode 
after RESET. To allow initialization code to be 
placed at the top of physical memory, A 23 -A 20 will 
be HIGH when the 80286 performs memory refer- 
ences relative to the CS register until CS is changed. 
A 23 -A 20 will be zero for references to the DS, ES, or 
SS segments. Changing CS in real address mode 
will force A 23 -A 20 LOW whenever CS is used again. 
The initial CS:IP value of FOOOiFFFO provides 64K 
bytes of code space for initialization code without 
changing CS. 

Protected mode operation requires several registers 
to be initialized. The GDT and IDT base registers 
must refer to a valid GDT and IDT. After executing 
the LMSW instruction to set PE, the 80286 must im- 


mediately execute an intra-segment JMP instruction 
to clear the instruction queue of instructions decod- 
ed in real address mode. 

To force the 80286 CPU registers to match the initial 
protected mode state assumed by software, execute 
a JMP instruction with a selector referring to the ini- 
tial TSS used in the system. This will load the task 
register, local descriptor table register, segment reg- 
isters and initial general register state. The TR 
should point at a valid TSS since any task switch 
operation involves saving the current task state. 

SYSTEM INTERFACE 

The 80286 system interface appears in two forms: a 
local bus and a system bus. The local bus consists 
of address, data, status, and control signals at the 
pins of the CPU. A system bus is any buffered ver- 
sion of the local bus. A system bus may also differ 
from the local bus in terms of coding of status and 
control lines and/or timing and loading of signals. 
The 80286 family includes several devices to gener- 
ate standard system buses such as the IEEE 796 
standard MULTIBUS. 

Bus Interface Signals and Timing 

The 80286 microsystem local bus interfaces the 
80286 to local memory and I/O components. The 
interface has 24 address lines, 16 data lines, and 8 
status and control signals. 

The 80286 CPU, 82C284 clock generator, 82C288 
bus controller, tranceivers, and latches provide a 
buffered and decoded system bus interface. The 
82 C284 ge nerates the system clock and synchroniz- 
es READY and RESET. The 82C288 converts bus 
operation status encoded by the 80286 into com- 
mand and bus control signals. These ^components 
can provide the timing and electrical power drive lev- 
els required for most system bus interfaces including 
the Multibus. 

Physicai Memory and I/O Interface 

A maximum of 16 megabytes of physical memory 
can be addressed In protected mode. One mega- 
byte can be addressed in real address mode. Memo- 
ry is accessible as bytes or words. Words consist of 
any two consecutive bytes addressed with the least 
significant byte stored in the lowest address. 

Byte transfers occur on either half of the 16-bit local 
data bus. Even bytes are accessed over D 7 _o while 
odd bytes are transferred over Di 5 _ 8 . Even-ad- 
dressed words are transferred over Di 5 _o in one 
bus cycle, while odd-addressed word require two 
bus operations. The first transfers data on D-is.e, 
and the second transfers data on Dj.q. Both byte 
data transfers occur automatically, transparent to 
software. 
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Two bus signals, Aq and BHE, control transfers over 
the lower and upper halves of the data bus. Even 
addre ss byte transfers are indicated by Aq LOW and 
BHE HIGH. Odd a ddres s byte transfers ar e indi cat- 
ed by Aq HIGH and BHE LOW. Both Aq and BHE are 
LOW for even address word transfers. 

The I/O address space contains 64K addresses in 
both modes. The I/O space is accessible as either 
bytes or words, as Is memory. Byte wide peripheral 
devices may be attached to either the upper or lower 
byte of the data bus. Byte-wide I/O devices attached 
to the upper data byte (Di 5 _ 8 ) are accessed with 
odd I/O addresses. Devices on the lower data byte 
are accessed with even I/O addresses. An interrupt 
controller such as Intel’s 8259A must be connected 
to the lower data byte (Dy.o) for proper return of the 
Interrupt vector. 

Bus Operation 

The 80286 uses a double frequency system clock 
(CLK input) to control bus timing. All signals on the 
local bus are measured relative to the system CLK 
input. The CPU divides the system clock by 2 to pro- 
duce the internal processor clock, which determines 
bus state. Each processor clock is composed of two 
system clock cycles named phase 1 and phase 2. 
The 82C284 clock generator output (PCLK) identi- 
fies the next phase of the processor clock. (See Fig- 
ure 21.) 



Clock Relationships 

Six types of bus operations are supported; memory 
read, memory write, I/O read, I/O write, interrupt ac- 
knowledge, and halt/shutdown. Data can be trans- 
ferred at a maximum rate of one word per two proc- 
essor clock cycles. 

The 80286 bus has three basic states: Idle (Tj), send 
status (Ts), and perform command (Tc). The 80286 
CPU also has a fourth local bus state called hold 
(Th)- Th indicates that the 80286 has surrendered 
control of the local bus to another bus master in 
response to a HOLD request. 

Each bus state is one processor clock long. Figure 
22 shows the four 80286 local bus states and al- 
lowed transitions. 



Bus States 

The idle (T-,) state Indicates that no data transfers 
are In progress or requested. JTie fir^ active state 
Ts is signaled by status line S1 or SO going LOW 
and identifying phase 1 of the processor clock. Dur- 
ing Ts, the command encoding, the address, and 
data (for a write operation) are available on the 
80286 output pins. The 82C288 bus controller de- 
codes the status signals and generates Multibus 
compatible read/write command and local trans- 
ceiver control signals. 

After Ts, the perform command (Tc) state Is en- 
tered. Memory or I/O devices respond to the bus 
operation during Tc, either transferring read data to 
the CPU or accepting write data. Tc states may be 
repeated as often as necessary to assure sufficient 
time for the memory or I/O device to respond. The 
READY signal determines whether Tc Is repeated. A 
repeated Tc state is called a wait state. 

During hold (T^), the 80286 will float all address, 
data, and status output pins enabling another bus 
master to use the local bus. The 80286 HOLD Input 
signal Is used to place the 80286 into the T^ state. 
The 80286 HLDA output signal indicates that the 
CPU has entered Th- 


Pipelined Addressing 

The 80286 uses a local bus interface with pipelined 
timing to allow as much time as possible for data 
access. Pipelined timing allows a new bus operation 
to be initiated every two processor cycles, while al- 
lowing each individual bus operation to last for three 
processor cycles. 

The timing of the address outputs is pipelined such 
that the address of the next bus operation becomes 
available during the current bus operation. Or in oth- 
er words, the first clock of the next bus operation is 
overlapped with the last clock of the current bus op- 
eration. Therefore, address decode and routing logic 
can operate in advance of the next bus operation. 
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Figure 23. Basic Bus Cycle 


External address latches may hold the address sta- 
ble for the entire bus operation, and provide addi- 
tional AC and DC buffering. 

The 80286 does not maintain the address of the cur- 
rent bus operation during all Jq states. Instead, the 
address for the next bus operation may be emitted 
during phase 2 of any Tq. The address remains valid 
during phase 1 of the first Tc to guarantee hold time, 
relative to ALE, for the address latch inputs. 

Bus Control Signals 

The 82C288 bus controller provides control signals; 
address latch enable (ALE), F^ad/Write commands, 
data transmit/receive (DT/R), and data enable 
(DEN) that control the address latches, data trans- 
ceivers, write enable, and output enable for memory 
and I/O systems. 

The Address Latch Enable (ALE) output determines 
when the address may be latched. ALE provides at 
least one system CLK period of address hold time 
from the end of the previous bus operation until the 
address for the next bus operation appears at the 
latch outputs. This address hold time is required to 
support MULTIBUS and common memory systems. 

The data bus transceivers are controlled by 82C288 
outputs Data Enable (DEN) and Data Transmit/ Re- 
ceive (DT^). DEN enables the data transceivers; 
whil^DT/R controls tranceiver direction. DEN and 
DT/R are timed to prevent bus contention between 
the bus master, data bus transceivers, and system 
data bus transceivers. 


Command Timing Controis 

Two system timing customization options, command 
extension and command delay, are provided on the 
80286 local bus. 

Command extension allows additional time for exter- 
nal devices to respond to a command and is analo- 
gous to inserting wait states on the 8086. External 
logic can control the duration of any bus operation 
suc h that the operation is only as long as necessary. 
The READY Input signal can extend any bus opera- 
tion for as long as necessary. 

Command delay allows an increase of address or 
write data setup time to system bus command active 
for any bus operation by delaying when the system 
bus command becomes active. Command delay is 
controlled by the 82C288 CMDLY input. After Ts, 
the bus controller samples CMDLY at each failing 
edge of CLK. If CMDLY is HIGH, the 82C288 will not 
activate the command signal. When CMDLY is LOW, 
the 82C288 will activate the command signal. After 
the command becomes active, the CMDLY input is 
not sampled. 

When a command is delayed, the available re- 
sponse time from command active to return read 
data or accept write data is less. To customize sys- 
tem bus timing, an address decoder can determine 
which bus operations require delaying the com- 
mand. The CMDLY input does not affect the timing 
of ALE, DEN, or DT/R. 
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Figure 24. CMDLY Controls the Leading Edge of Command Signal 


Figure 24 illustrates four uses of CMDLY. Example 1 
shows delaying the read command two system 
CLKs for cycle N-1 and no delay for cycle N, and 
example 2 shows delaying the read command one 
system CLK for cycle N-1 and one system CLK de- 
lay for cycle N. 

Bus Cycle Termination 

At maximum transfer rates, the 80286 bus alternates 
between the status and command states. The bus 
status signals become inactive after Tg so that they 
may correctly signal the start of the next bus opera- 
tion after the completion of the current cycle. No 
external indication of Tc exists on the 80286 local 
bus. The bus master and bus controller enter Tc di- 
rectly after Ts and con tinue executing Tc cycles until 
terminated by READY. 


READY Operation 

The current bus master and 82C288 bus controller 
terminate each bus operation simultaneously to 
achieve maximum bus oper ation ba ndwidth. Both 
are informed in advance by READY active (open- 
collector output from 82C284) which identifies the 
last Tc cycle of the current bus operation. The bus 
master and bus controller must see the same sense 


of the READY signal, thereby requiring READY be 
synchronous to the system clock. 

Synchronous Ready 

The 82C284 clock generator provides READY syn- 
chronization from both synchronous and asynchro- 
nous source s (see Figure 25). The synchronous 
ready input (SRDY) of the clock generator is sam- 
pled with the falling edge of CLK at the end of phase 
1 of each Tq. The state of SRDY is then broa dcast to 
the bus master and bus controller via the READY 
output line. 

Asynchronous Ready 

Many systems have devices or subsystems that are 
asynchronous to the system clock. As a result, their 
ready o utputs cannot be guaranteed to meet the 
82C284 SRDY setup and hold time requ iremen ts. 
But the 82C284 asynchronous ready i nput (A RDY) is 
designed to accept such signals. The ARDY input is 
sampled at the beginning of each Tc cycle by 
82C284 synchronization logic. This provides one 
system CLK cycle time to resolve its value before 
broadcasting it to the bus master and bus controller. 
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Figure 25. Synchronous and Asynchronous Ready 


ARDY or ARDYEN must be HIGH at the end of Ts- 
ARDY cannot be used to terminate bus cycle with no 
wait states. 

Each read y in put of the 82C284 has an enable pin 
(SRDYEN and ARDYEN) to select whether the cur- 
rent bus operation will be terminated by the synchro- 
nous or asynchronous ready. Either of the ready in- 
puts may terminate a bus operation. These enable 
inputs are active low and have the same timing as 
their respective ready inputs. Address decode logic 
usually selects whether the cu rr ent bus operation 
should be terminated by ARDY or SRDY. 


The data bus is driven with write data during the 
second phase of Tg. The delay In write data timing 
allows the read data drivers, from a previous read 
cycle, sufficient time to enter 3-state OFF before the 
80286 CPU begins driving the local data bus for 
write operations. Write data will always remain valid 
for one system clock past the last Tc to provide suffi- 
cient hold time for Multibus or other similar memory 
or I/O systems. During write-read or write-idle se- 
quences the data bus enters 3-state OFF during the 
second phase of the processor cycle after the last 
Tq. In a write-write sequence the data bus does not 
enter 3-state OFF between Tc and Tg. 


Data Bus Control 

Figures 26, 27, and 28 show how the DT/R, DEN, 
data bus, and address signals operate for different 
combinations of read, write, and Idle bus operations. 
DT/R goes active (LOW) for a read operation. DT/R 
remains HIGH before, during, and between write op- 
erations. 


Bus Usage 

The 80286 local bus may be used for several func- 
tions: instruction data transfers, data transfers by 
other bus masters. Instruction fetching, processor 
extension data transfers, interrupt acknowledge, and 
halt/shutdown. This section describes local bus ac- 
tivities which have special signals or requirements. 
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Figure 28. Back to Back Write-Write Cycles 


HOLD and HLDA 

HOLD AND HLDA allow another bus master to gain 
control of the local bus by placing the 80286 bus into 
the Th state. The sequence of events required to 
pass control between the 80286 and another local 
bus master are shown in Figure 29. 

In this example, the 80286 is initially in the Th state 
as signaled by HLDA being active. Upon leaving Th, 
as signaled by HLDA going inactive, a write opera- 
tion is started. During the write operation another 
local bus master requests the local bus from the 
80286 as shown by the HOLD signal. After complet- 
ing the write operation, the 80286 performs one Tj 
bus cycle, to guarantee write data hold time, then 
enters Th as signaled by HLDA going active. 

The CMDLY signal and ARDY ready are used to 
start and s top the write bus command, respectively. 
Note tha t SRDY must be ina ctive or disabled by 
SRDYEN to guarantee ARDY will terminate the cy- 
cle. 

HOLD must not be active during the time from the 
leading edge of RESET until 34 CLKs following the 
trailing edge of RESET. 

Lock 

The CPU asserts an active lock signal during Inter- 
rupt-Acknowledge cycles, the XCHG instruction, and 
during some descriptor accesses. Lock is also as- 
serted when the LOCK prefix is used. The LOCK 
prefix may be used with the following ASM-286 as- 
sembly instructions; MOVS, INS, and OUTS. For bus 


cycles other than Interrupt-Acknowledge cycles. 
Lock will be active for the first and subsequent cy- 
cles of a series of cycles to be locked. Lock will not 
be shown active during the last cycle to be locked. 
For the next-to-last cycle. Lock vyill become inactive 
at the end of the first Jq regardless of the number of 
wait-states inserted. For Interrupt-Acknowledge cy- 
cles, Lock will be active for each cycle, and will be- 
come inactive at the end of the first Tq for each cy- 
cle regardless of the number of wait-states inserted. 

Instruction Fetching 

The 80286 Bus Unit (BU) will fetch instructions 
ahead of the current instruction being executed. This 
activity is called prefetching. It occurs when the local 
bus would otherwise be idle and obeys the following 
rules: 

A prefetch bus operation starts when at least two 
bytes of the 6-byte prefetch queue are empty. 

The prefetcher normally performs word prefetches 
Independent of the byte alignment of the code seg- 
ment base in physical memory. 

The prefetcher will perform only a byte code fetch 
operation for control transfers to an instruction be- 
ginning on a numerically odd physical address. 

Prefetching stops whenever a control transfer or 
HLT instruction is decoded by the lU and placed into 
the instruction queue. 

In real address mode, the prefetcher may fetch up to 
6 bytes beyond the last control transfer or HLT in- 
struction in a code segment. 
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In protected mode, the prefetcher will never cause a 
segment overrun exception. The prefetcher stops at 
the last physical memory word of the code segment. 
Exception 13 will occur if the program attempts to 
execute beyond the last full Instruction in the code 
segment. 


If the last byte of a code segment appears on an 
even physical memory address, the prefetcher will 
read the next physical byte of memory (perform a 
word code fetch). The value of this byte Is ignored 
and any attempt to execute It causes exception 1 3. 


BUS HOLD 



SRDY + 
SROYE^I 


NOT READY NOT READY 



DT/R 

DEN 


■V 




TS = STATUS CYCLE 
TC = COMMAND CYCLE 

210253-29 


NOTES: 

1. Status lines ^ not driven by 80 286, yet remain high due to pullup resistors in 82C284 during HOLD state. 

2. Address, M/IO and COD/INTA may start floating during any Tc depending on when internal 80286 bus arbiter de- 
ci des to rele ase bu s to external HOLD. The float starts in <f>2 of Tq. 

3. BHE and LOCK may start floating after the end of any Tc depending on when internal 80286 bus arbiter decides to 
release bus to external HOLD. The float starts in 4>1 of Tc- 

4. The minimum HOLD to HLDA time is shown. Maximum is one Th longer. 

5. The earliest HOLD time is shown. It will always allow a subsequent memory cycle if pending is shown. 

6. The minimum HOLD to HLDA time is shown. Maximum is a function of the instruction, type of bus cycle and other 
machine state (i.e.. Interrupts, Waits, Lock, etc.). 

7. Asynchronous ready allows termination of the cycle. Synchronous ready does not signal ready in this example. Syn- 
chronous ready state is ignored after ready is signaled via the asynchronous input. 


Figure 29. MULTIBUS® Write Terminated by Asynchronous Ready with Bus Hold 
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Processor Extension Transfers 

The processor extension interface uses I/O port ad- 
dresses 00F8(H), OOFA(H), and OOFC(H) which are 
part of the I/O port address range reserved by Intel. 
An ESC instruction with Machine Status Word bits 
EM = 0 and TS = 0 will perform I/O bus operations 
to one or more of these I/O port addresses indepen- 
dent of the value of lOPL and CPL. 

ESC instructions with memory references enable the 
CPU to accept PEREQ inputs for processor exten- 
sion operand transfers. The CPU will determine the 
operand starting address and read/write status of 
the Instruction. For each operand transfer, two or 
three bus operations are performed, one word trans- 
fer with I/O port address OOFA(H) and one or two 
bus operations with memory. Three bus operations 
are required for each word operand aligned on an 
odd byte address. 

NOTE: 

Odd-aligned numerics operands should be avoided 
when using an 80286 system running six or more 
memory-write wait states. The 80286 can generate 
an incorrect numerics address if all the following 
conditions are met: 

— Two floating point (FP) instructions are fetched 
and in the 80286 queue. 

— The first FP Instruction is any floating point store 
except FSTSW AX. 

— The second FP instruction accesses memory. 

— The operand of the first instruction is aligned on 
an odd memory address. 

— Six or more wait states are inserted during either 
of the last two memory write (odd aligned oper- 
ands are transferred as two bytes) transfers of 
the first instruction. 

The second FP operand’s address will be incre- 
mented by one if these conditions are met. These 
conditions are most likely to occur in a multi-master 
system. For a hardware solution, contact your local 
Intel representative. 

Commands to the numerics coprocessor should not 
be delayed by nine or more T-states. Excessive 
(nine or more) command-delays can cause the 
80286 and 80287 to lose synchronization. 


Interrupt Acknowledge Sequence 

Figure 30 illustrates an interrupt acknowledge se- 
quence performed by the 80286 in response to an 


INTR Input. An interrupt acknowledge sequence 
consists of two INTA bus operations. The first allows 
a master 8259A Programmable Interrupt Controller 
(PIC) to determine which if any of its slaves should 
return the interrupt vector. An eight bit vector is read 
on D0-D7 of the 80286 during the second INTA bus 
operation to select an interrupt handler routine from 
the interrupt table. 

The Master Cascade Enable (MCE) signal of the 
82C288 is used to enable the cascade address driv- 
ers, during INTA bus operations (See Figure 30), 
onto the local address bus for distribution to slave 
interrupt controll ers via the system address bus. The 
80286 emits the LOCK signal (active LOW) during Tg 
of the first INTA bus operation. A local bus “hold” 
request will not be honored until the end of the sec- 
ond INTA bus operation. 

Three idle processor clocks are provided by the 
80286 between INTA bus operations to allow for the 
minimum INTA to INTA time and CAS (cascade ad- 
dress) out delay of the 8259A. The second INTA bus 
operation must always have at le ast one extra Tc 
state added via logic controlling READY. This is 
needed to meet the 8259A minimum INTA pulse 
width. 


Local Bus Usage Priorities 

The 80286 local bus is shared among several inter- 
nal units and external HOLD requests. In case of 
simultaneous requests, their relative priorities are; 

(Highest) Any transfers which assert LOCK either 
explicitly (via the LOCK instruction prefix) 
or implicitly (i.e. some segment descriptor 
accesses, interrupt acknowledge se- 
quence, or an XCHG with memory). 

The second of the two byte bus opera- 
tions required for an odd aligned word op- 
erand. 

The second or third cycle of a processor 
extension data transfer. 

Local bus request via HOLD input. 

Processor extension data operand trans- 
fer via PEREQ input. 

Data transfer performed by EU as part of 
an instruction. 

(Lowest) An instruction prefetch request from BU. 

The EU will inhibit prefetching two proc- 
essor clocks in advance of any data 
transfers to minimize waiting by EU for a 
prefetch to finish. 
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NOTES: 

1. Data is ignored, upper data bus, Ds-D-is, should not change state during this time. 

2. First INTA cycle should have at least one wait state inserted to meet 8259A minimum INTA pulse width. 

3. Secon d INTA cycle should have at least one wait state inserted to meet 8259A minimum INTA pulse width. 

4. LOCK is active fo r the fi rst INTA cycle to prevent the bus arbiter from releasing the bus between INTA cycles in a 
multi-master system. LOCK is also active for the second INTA cycle. 

5. Aga-Ao exits 3-state OFF during (f)2 of the second Tc in the INTA cycle. 

6. Upper data bus should not change state during this time. 


Figure 30. Interrupt Acknowledge Sequence 


Halt or Shutdown Cycles 

The 80286 externally indicates halt or shutdown 
conditions as a bus operation. These conditions oc- 
cur due to a HLT instruction or multiple protection 
exceptions while attempting to execute one instruc- 
tion. A halt or shutdow n bus operation is signalled 
when S1, SO and COD/INTA are LOW and M/IO is 
HIGH. Ai HIGH indicates halt, and A-j LOW indi- 
cates shutdown. The 82C288 bus controller does 


not issue ALE, nor Is READY required to terminate a 
halt or shutdown bus operation. 

During halt or shutdown, the 80286 may service 
PEREQ or HOLD requests. A processor extension 
segment overrun exception during shutdown will in- 
hibit further service of PEREQ. Either NMI or RESET 
will force the 80286 out of either halt or shutdown. 
An INTR, if Interrupts are enabled, or a processor 
extension segment overrun exception will also force 
the 80286 out of halt. 
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Figure 31. Basic 80286 System Configuration 


SYSTEM CONFIGURATIONS 80287 has all the instructions and data types of 

an 8087. The 80287 NPX can perform numeric cal- 
The versatile bus structure of the 80286 microsys- culations and data transfers concurrently with CPU 

tern, with a full complement of support chips, allows program execution. Numerics code and data have 

flexible configuration of a wide range of systems. the same integrity as all other information protected 

The basic configuration, shown in Figure 31, is simi- by the 80286 protection mechanism, 

lar to an 8086 maximum mode system. It Includes 

the CPU plus an 8259A interrupt controller, 82C284 The 80286 can overlap chip select decoding and ad- 

clock generator, and the 82C288 Bus Controller. dress propagation during the data transfer for the 

previous bus operation. This information is latched 
As indicated by the dashed lines in Figure 31, the by ALE during the middle of a Ts cycle. The latched 

ability to add processor extensions is an integral fea- chip select and address Information remains stable 

ture of 80286 microsystems. The processor exten- during the bus operation while the next cycle’s ad- 

slon interface allows external hardware to perform dress is being decoded and propagated into the sys- 

special functions and transfer data concurrent with tern. Decode logic can be implemented with a high 

CPU execution of other instructions. Full system in- speed bipolar PROM, 
tegrity Is maintained because the 80286 supervises 

all data transfers and instruction execution for the The optional decode logic shown in Figure 31 takes 
processor extension. advantage of the overlap between address and data 

of the 80286 bus cycle to generate advanced mem- 
ory and 10-select signals. This minimizes system 


3-95 




80286 


inter 


MULTIBUS* 
BUS ARBITRATION 




1 ±' 


MEMORY READ 
MEMORY WRITE 
I O READ 
10 WRITE 

INTERRUPT ACKNOWLEDGE 




SYNC READY - 
ENABLE - 
ASYNC READY - 
ENABLE - 


vcc 

Y 

1 



SROY 
SRDYEN 
ARDY 
ARDYEN 

S2C284 

CLOCK 

GENERATOR 


ADDRESS BUS 


80287 

PROCESSOR 

EXTENSION 

(OPTIONAL) 


210253-33 


Figure 32. MULTIBUS® System Bus Interface 


performance degradation caused by address propa- 
gation and decode delays. In addition to selecting 
memory and I/O, the advanced selects may be used 
with configurations supporting local and system bus- 
es to enable the app ropria te bus interface for each 
bus cycle. The COD/INTA and M/IO signals are ap- 
plied to the decode logic to distinguish between in- 
terrupt, I/O, code and data bus cycles. 

By adding the 82289 bus arbiter chip, the 80286 pro- 
vides a MULTIBUS system bus interface as shown 
in Figure 32. The ALE output of the 82C288 for the 


MULTIBUS bus is connected to its CMDLY input to 
delay the start of commands one system CLK as 
required to meet MULTIBUS address and write data 
setup times. This arrangement will add at least one 
extra Tq state to each bus operation which uses the 
MULTIBUS. 

A second 82C288 bus controller and additional 
latches and transceivers could be added to the local 
bus of Figure 32. This configuration allows the 
80286 to support an on-board bus for local memory 
and peripherals, and the MULTIBUS for system bus 
Interfacing. 
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Figure 33. 80286 System Configuration with Dual-Ported Memory 


Figure 33 shows the addition of dual ported dynamic 
memory between the MULTIBUS system bus and 
the 80286 local bus. The dual port Interface is pro- 
vided by the 8207 Dual Port DRAM Controller. The 
8207 runs synchronously with the CPU to maximize 
throughput for local memory references. It also arbi- 
trates between requests from the local and system 
buses and performs functions such as refresh, 


initialization of RAM, and read/modify/write cycles. 
The 8207 combined with the 8206 Error Checking 
and Correction memory controller provide for single 
bit error correction. The dual-ported memory can be 
combined with a standard MULTIBUS system bus 
interface to maximize performance and protection In 
multiprocessor system configurations. 


Table 16. 80286 Systems Recommended Pull Up Resistor Values 


80286 Pin and Name 

Puliup Value 

Purpose 

4—^ 



5—^ 

20 m ±10% 

Pull SO, SI, and PEACK inactive during 80286 hold periodsCi) 

6~PEACK 



63— READY 

910fl ±5% 

Pull READY inactive within required minimum time (Cl = 1 50 pF, 

Ir 7 mA) 


NOTE: _ _ __ _ 

1 . Pull-up resistors are not required on SO and S1 when the corresponding pins of the 82C284 are connected to SO and SI . 


|2|cetm. 286 System Design 
Considerations 

One of the advantages of using the 80286 Is that full 
in-circuit emulation debugging support is provided 
through the |2|CE system 80286 probe. To utilize 
this powerful tool it is necessary that the system de- 
signer be aware of a few minor parametric and 


functional differences between the 80286 and |2|CE 
system 80286 probe. The |2lCE data sheet (|2|CE 
Integrated Instrumentation and In-Circuit Emulation 
System, order #210469) contains a detailed de- 
scription of these design considerations. It is recom- 
mended that this document be reviewed by the 
80286 system designer to determine whether or not 
these differences affect his design. 
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PACKAGE THERMAL 
SPECIFICATIONS 

The 80286 Microprocessor is specified for operation 
when case temperature (Tc) is within the range 
0‘’C-85°C. Case temperature, unlike ambient tem- 
perature, is easily measured in any environment to 
determine whether the 80286 Microprocessor Is 
within the specified operating range. The case tem- 
perature should be measured at the center of the 
top surface of the component. 

The maximum ambient temperature (Ta) allowable 
without violating Tc specifications can be calculated 
from the equations shown below. Tj is the 80286 
junction temperature. P is the power dissipated by 
the 80286. 


Values for 0 ja and 8jc are given In Table 17. ^ja Is 
given at various airflows. Table 18 shows the maxi- 
mum Ta allowable (without exceeding Tc) at various 
airflows. Note that the 80286 PLCC package has an 
Internal heat spreader. Ta can be further Improved 
by attaching “fins” or an external “heat sink” to the 
package. 

Junction temperature calculations should use an Ice 
value that is measured without external resistive 
loads. The external resistive loads dissipate addi- 
tional power external to the 80286 and not on the 
die. This Increases the resistor temperature, not the 
die temperature. The full capacitive load (Cl == 
100 pF) should be applied during the Ice measure- 
ment. 


Tj = Tc + P * 0JC 
Ta = Tj + P * 0JA 
Tc = Ta + PM0JA - 0x1 


Table 17. Thermal Resistances (X/Watt) Ojq and 8 ja 


Package 

0JC 

8ja versus Airflow ^ ft/min (m/sec) 

0 

(0) 

200 

(1.01) 

400 

(2.03) 

600 

(3.04) 

800 

(4.06) 

1000 

(5.07) 

68-Lead LCC 

8 

28 

22 

16 

13 

12 

11 

68-Lead PGA 

5.5 

28 

22 

16 

15 

14 

13 

68-Lead PLCC 
w/ Internal 

Heat Spreader 

8 

28 

23 

21 

18 

16 

15 


Table 18. Maximum Ta at Various Airflows 


Package 

TaCC] 

1 versus Airflow — ft/mln (m/sec) 

0 

(0) 

200 

(1.01) 

400 

(2.03) 

600 

(3.04) 

800 

(4.06) 

1000 

(5.07) 

68-Lead LCC 

35 

50 

65 

72 

75 

77 

68-Lead PGA 

29 

44 

59 

62 

64 

66 

68-Lead PLCC 
w/ Internal 

Heat Spreader 

35 

48 

1 

53 

60 

65 

68 


NOTE: 

The numbers in Table 18 were calculated using an Ice of 450 mA, which is representative of the worst case Ice at 
Tc = 85“C with the outputs unloaded. 
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ABSOLUTE MAXIMUM RATINGS* 


Ambient Temperature Under Bias 0®C to + 70°C 

Storage Temperature -65°C to+ 150®C 

Voltage on Any Pin with 

Respect to Ground - 1 .OV to + 7V 

Power Dissipation 3.3W 


* Notice: Stresses above those listed under *‘Abso- 
lute Maximum Ratings” may cause permanent dam- 
age to the device. This is a stress rating only and 
functional operation of the device at these or any 
other conditions above those indicated in the opera- 
tional sections of this specification is not implied. Ex- 
posure to absolute maximum rating conditions for 
extended periods may affect device reliability. 


D.C. CHARACTERISTICS (Vcc = 5V ±5%,Tcase = 0°Cto +85''C)* 



Parameter 


Max 



Icc 



600 

mA 

(Note 1) 

CcLK 

CLK Input Capacitance 


20 

PF 

(Note 2) 

C|N 

Other Input Capacitance 


10 

PF 

(Note 2) 

Co 

Input/Output Capacitance 


20 

pF 

(Note 2) 


NOTES: 

1. Tested at worst case load and maximum frequency. 

2. These are not tested. They are guaranteed by design characterization. 


D.C. CHARACTERISTICS 

(Vcc = 5V ±5%, Tcase = to +85°C)* Tested at the minimum operating frequency of the part. 


Symbol 

Parameter 

Min 

Max 

Unit 

Test Condition 

V,L 

Input LOW Voltage 

-0.5 

0.8 

V 


V|H 

Input HIGH Voltage 

2.0 

Vcc +0.5 

V 


V|LC 

CLK Input LOW Voltage 

-0.5 

0.6 

V 


V|HC 


3.8 


V 


VoL 



0.45 


Iql = 2.0 mA 

VOH 

Output HIGH Voltage 

2.4 


V 

Iqh = -400 /xA 

111 

Input Leakage Current 


±10 

jtiA 

Oy ^ V|N < Vcc 

i^SHI 

Input CLK, RESET Leakage Current 


±10 

juiA 

0.45 ^ V||si ^ Vcc 

IBSSlHi 

Input CLK, RESET Leakage Current 


±1 

mA 

0 ^ ViN < 0.45 

l|L 

Input Sustaining Current on 

BUSY and ERROR Pins 

-30 

-500 

juA 

> 

o 

II 

z 

> 

Ilo 

Output Leakage Current 


±10 

jliA 

0.45 ^ VquT ^ Vcc 

25‘’C Tcase ^ 85°C 

Ilo 

Output Leakage Current 


±20 

jliA 

0.45V ^ VouT ^ Vcc 

o°c ^ Tcase ^ 25 °c 

Ilo 

Output Leakage Current 


±1 

mA 

0 ^ Vqut ^ 0.45 


*Ta is guaranteed from O^C to +55°C as long as Tqase is not exceeded. 
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A-C. CHARACTERISTICS (Vcc = 5V ±5%,Tcase = o^Cto +85“C)* 

AC timings are referenced to 0.8V and 2.0V points of signals as illustrated in datasheet waveforms, unless 
otherwise noted. 


— 


8 MHz 

10 MHz 

12.5 MHz 



Symbol 

Parameter 

-8 

-8 

-10 

-10 

-12 

-12 

Unit 

Test Condition 



Min 

Max 

Min 

Max 

Min 

Max 



1 

System Clock (CLK) Period 

62 

250 

50 

250 

40 

250 

ns 


2 

System Clock (CLK) LOW Time 

15 

225 

12 

232 

11 

237 

ns 

at 1.0V 

3 

System Clock (CLK) HIGH Time 

25 

235 

16 

239 

13 

239 

ns 

at 3.6V 

17 

System Clock (CLK) Rise Time 


10 


8 

— 

8 

ns 

1.0V to 3.6V, 

(Note 7) 

18 

System Clock (CLK) Fall Time 


10 


8 

— 

8 

ns 

3.6V to 1.0V, 

(Note 7) 

4 

Asynch. Inputs Setup Time 

20 


20 


15 


ns 

(Note 1) 

5 

Asynch. Inputs Hold Time 

20 


20 


15 


ns 

(Note 1) 

6 

RESET Setup Time 

28 


23 


18 


ns 


7 

RESET Hold Time 

5 


5 


5 


ns 


8 

Read Data Setup Time 

10 


8 


5 


ns 


9 

Read Data Hold Time 

8 


8 


6 


ns 


10 

READY Setup Time 

38 


26 


22 


ns 


11 

READY Hold Time 

25 


25 


20 


ns 


12 

Status/PEACK Valid Delay 

1 

40 

— 

— 

— 

— 

ns 

(Notes 2, 3) 

12a1 

Status Active Delay 

— 

— 

1 

22 

3 

18 

ns 

(Notes 2, 3) 

12a2 

PEACK Active Delay 

— 

— 

1 

22 

3 

20 

ns 

(Notes 2, 3) 

12b 

Status/PEACK Inactive Delay 

— 

— 

1 

30 

3 

22 

ns 

(Notes 2, 3) 

13 

Address Valid Delay 

1 

60 

1 

35 

1 

32 

ns 

(Notes 2, 3) 

14 

Write Data Valid Delay 

0 

50 

0 

30 

0 

30 

ns 

(Notes 2, 3) 

15 

Address/Status/Data Float Delay 

0 

50 

0 

47 

0 

32 

ns 

(Notes 2, 4, 7) 

16 

HLDA Valid Delay 

0 

50 

0 

47 

0 

27 

ns 

(Notes 2, 3) 

19 

Address Valid To Status 

Valid Setup Time 

38 


27 


22 


ns 

(Notes 3, 5, 6, 7) 


*Ta is guaranteed from 0°C to +55'’C as long as Tcase is not exceeded. 


NOTES: 

1. Asynchronous inputs are INTR, NMI, HOLD, PEREQ, ERROR, and BUSY. This specification is given only for testing 
purposes, to assure recognition at a specific CLK edge. 

2. Delay from 1.0V on the CLK, to 0.8V or 2.0V or float on the output as appropriate for valid or floating condition. 

3. Output load: Cl = 100 pF. 

4. Float condition occurs when output current is less than Ilo in magnitude. 

5. Delay measured from ‘address either reaching 0.8V or 2.0V (valid) to status going active reaching 2.0V or status going 

inactive reaching 0.8V. 

6. For load capacitance of 10 pF or more on STATUS/PEACK lines, subtract typically 7 ns. 

7. These are not tested. They are guaranteed by design characterization. 
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A.C. CHARACTERISTICS (Continued) 


82C284 Timing Requirements 


Symbol 

Parameter 

82C284-8 

82C284-10 

82C284-12 

Units 

Test 

Conditions 

Min 

Max 

Min 

Max 

Min 

Max 

11 

SRDY/SRDYEN Setup Time 

20 


18 


18 


ns 


12 

SRDY/SRDYEN Hold Time 

0 


2 


2 


ns 


13 

ARDY/ARDYEN Setup Time 

0 


0 


0 


ns 

(Note 1) 

14 

ARDY/ARDYEN Hold Time 

30 


30 


25 


ns 

(Note 1) 

19 

PCLK Delay 

0 

1 

45 

0 

35 

0 

23 

ns 

Cl = 75 pF 

Iql = 5 mA 
lOH = - 1 mA 


NOTE 1: 

These times are given for testing purposes to assure a predetermined action. 


82C288 Timing Requirements 


Symbol 

Parameter 

82C288-8 

82C288-10 

82C288-12 

Units 

Test 

Conditions 

Min 

Max 

Min 

Max 

Min 

Max 

12 

CMDLY Setup Time 

20 


15 


15 


ns 


13 

CMDLY Hold Time 

1 


1 


1 


ns 


30 

Command Delay 

Command 

5 

20 

5 

20 

5 

20 


Cl = 300 pF max 


from CLK 

Inactive 







ns 

Iql == 32 mA max 

29 


Command 

3 

25 

3 

21 

3 

21 

Iqh = - 5 mA max 



Active 









16 

ALE Active Delay 

3 

20 

3 

16 

3 

16 

ns 


17 

ALE Inactive Delay 


25 


19 


19 

ns 


19 

DT/R Read Active Delay 


25 


23 


23 

ns 

Cl = 150 pF 











22 

DT/R Read Inactive Delay 

5 

35 

5 

20 

5 

18 

ns 

Iql =16 mA max 

20 

DEN Read Active Delay 

5 

35 

5 

21 

5 

21 

ns 

Iqh = - 1 mA max 











21 

DEN Read Inactive Delay 

3 

35 

3 

21 

3 

19 

ns 


23 

DEN Write Active Delay 


30 


23 


23 

ns 


24 

DEN Write Inactive Delay 

3 

30 

3 

19 

3 

19 

ns 
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WAVEFORMS 



NOTE: 

1 . The modified timing is due to the CMDLY signal being active. 
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WAVEFORMS (Continued) 



NOTES: 



1. PCLK indicates which processor cycle phase will occur NOTE: 

on the next CLK. PCLK may not indicate the correct phase vVhen RESET meets the setup time shown, the next CLK 
until the first bus cycle is performed. repeat (f)2 of a processor cycle. 

2. These inputs are asynchronous. The setup and hold 
times shown assure recognition for testing purposes. 

EXITING AND ENTERING HOLD 


BUS CYCLE TYPE Tg OR T, T, 



|[ / — \_/ — 

210253-43 


NOTES: 

1 . These signals may not be driyen by the 80286 during the time shown. The worst case in terms of latest float time is 
shown. 

2. The data bus will be driven as shown if the last cycle before T| in the diagram was a write Tq. 

3. The 80286 floats its status pins during Th. External 20 Kfl resistors keep these signals high (see Table 16). 

4. For H OL D reque st set up to HLDA, refer to Figure 29. 

5. BHE and LOCK are driven at this time but will not become valid until Ts. 

6. The data bus will remain in 3-state OFF if a read cycle is performed. 
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WAVEFORMS (Continued) 


80286 PEREQ/PEACK TIMING FOR ONE TRANSFER ONLY 


BUS CYCLE TYPE 

T| 

Vci 



COD INTA — ^ '■ 

(diD— H 


I/O READ IF PROC. EXT. TO MEMORY MEMORY WRITE IF PROC. EXT. TO MEMORY 

MEMORY READ IF MEMORY TO PROC. EXT. / I/O WRITE IF MEMORY TO PROC. EXT. 


MEMORY ADDRESS IF PROC. EXT. TO MEMORY TRANSFER 

I/O PORT ADDRESS OOFA(H) IF MEMORY TO PROC. EXT. TRANSFER 

zziiz_x: 




\ (SEE NOTE 1 .) j f 




-(SEE NOTE 2.) 




)cx: 


I/O PORT ADDRESS OOFA(H) IF PROC. EXT. TO MEMORY TRANSFER 
MEMORY ADDRESS IF MEMORY TO PROC. EXT. TRANSFER 


®l 


m///////////////////////////////M ' 


210253-44 


N OTES: 

1 . PEACK always goes active during the first bus operation of a processor extension data operand transfer sequence. The 
first bus operation will be either a memory read at operand address or I/O read at port address OOFA(H). 

2. To prevent a second processor extension data operand transfer, the worst case maximum time (Shown above) is: 3x 
©-12a2max.“®min.- The actual, configuration dependent, maximum time is: 3x ©-12a2max.-®min. + Ax2x ©. 

A is the number of extra Tq states added to either the first or second bus operation of the processor extension data operand 
transfer sequence. 



NOTES: 

1. Setup time for RESET t iriay be violated with the consideration that <|)1 of the processor clock may begin one system 
CLK period later. 

2. Setup and hold times for RESET 4 must be met for proper operation, but RESET X may occur during <f>1 or (f>2. 

3. The data bus is only guaranteed to be in 3-state OFF at the time shown. 
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TTl 1 1 1 1 1 1 1 1 1 1 1 1 

T 

TT 

1 1 

LONG OPCODE 

- - 1 

mod 


r/m 


B. LONG OPCODE FORMAT EXAMPLE 


Figure 35. 80286 Instruction Format Examples 


80286 INSTRUCTION SET SUMMARY 
Instruction Timing Notes 

The instruction clock counts listed below establish 
the maximum execution rate of the 80286. With no 
delays in bus cycles, the actual clock count of an 
80286 program will average 5% more than the cal- 
culated clock count, due to instruction sequences 
which execute faster than they can be fetched from 
memory. 

To calculate elapsed times for Instruction se- 
quences, multiply the sum of all Instruction clock 
counts, as listed In the table below, by the processor 
clock period. An 8 MHz processor clock has a clock 
period of 125 nanoseconds and requires an 80286 
system clock (CLK Input) of 16 MHz. 


Instruction Clock Count Assumptions 

1 . The instruction has been prefetched, decoded, 
and is ready for execution. Control transfer in- 
struction clock counts include all time required to 
fetch, decode, and prepare the next instruction for 
execution. 

2. Bus cycles do not require wait states. 

3. There are no processor extension data transfer or 
local bus HOLD requests. 

4. No exceptions occur during instruction execution. 


Instruction Set Summary Notes 

Addressing displacements selected by the MOD 
field are not shown. If necessary they appear after 
the instruction fields shown. 

Above/below refers to unsigned value 

Greater refers to positive signed value 

Less refers to less positive (more negative) signed 

values 

if d = 1 then to register; If d = 0 then from register 

If w = 1 then word instruction; if w = 0 then byte 
instruction 

if s = 0 then 1 6-bit immediate data form the oper- 
and 

if s = 1 then an Immediate data byte is sign-ex- 
tended to form the 1 6-bit operand 

X don’t care 

z used for string primitives for comparison with 
ZF FLAG 

If two clock counts are given, the smaller refers to a 
register operand and the larger refers to a memory 
operand 

* = add one clock if offset calculation requires 
summing 3 elements 

n = number of times repeated . 
m = number of bytes of code In next instruction 
Level (L)— Lexical nesting level of the procedure 
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The following comments describe possible excep- 
tions, side effects, and allowed usage for Instruc- 
tions in both operating modes of the 80286. 

REAL ADDRESS MODE ONLY 

1 . This Is a protected mode instruction. Attempted 
execution In real address mode will result in an 
undefined opcode exception (6). 

2. A segment overrun exception (13) will occur if a 
word operand reference at offset FFFF(H) is at- 
tempted. 

3. This instruction may be executed in real address 
mode to initialize the CPU for protected mode. 

4. The lOPL and NT fields will remain 0. 

5. Processor extension segment overrun interrupt 
(9) will occur if the operand exceeds the seg- 
ment limit. 

EITHER MODE 

6. An exception may occur, depending on the value 
of the operand. 

7. LOCK is automatically asserted regardless of the 
presence or absence of the LOCK instruction 
prefix. 

8. LOCK does not remain active between all oper- 
and transfers. 


PROTECTED VIRTUAL ADDRESS MODE ONLY 

9. A general protection exception (13) will occur If 
the memory operand cannot be used due to ei- 
ther a segment limit or access rights violation. If 
a stack segment limit is violated, a stack seg- 
ment overrun exception (1 2) occurs. 

10. For segment load operations, the CPL, RPL, and 
DPL must agree with privilege rules to avoid an 
exception. The segment must be present to 
avoid a not-present exception (1 1 ). If the SS reg- 
ister is the destination, and a segment riot-pres- 
ent violation occurs, a stack exception (1 2) oc- 
curs. 


11. All segment descriptor accesses in the GDT or 
LDT m ade by this instruction will automatically 
assert LOCK to maintain descriptor integrity in 
multiprocessor systems. 

12. JMP, CALL, INT, RET, IRET Instructions refer- 
ring to another code segment will cause a gener- 
al protection exception (13) if any privilege rule Is 
violated. 

13. A general protection, exception (13) occurs If 
CPL ^ 0. 

14. A general protection exception (13) occurs If 
CPL > lOPL. 

15. The IF field of the flag word is not updated If CPL 
> lOPL. The lOPL field Is updated only If 
CPL = 0. 

16. Any violation of privilege rules as applied to the 
selector operand do not cause a protection ex- 
ception; rather, the Instruction does not return a 
result and the zero flag is cleared. 

17. ff the starting address of the memory operand 
violates a segment limit, or an Invalid access is 
attempted, a general protection exception (13) 
will occur before the ESC instruction is execut- 
ed. A stack segment overrun exception (12) will 
occur if the stack limit is violated by the oper- 
and’s starting address. If a segment limit Is vio- 
lated during an attempted data transfer then a 
processor extension segment overrun exception 
(9) occurs. 

18. The destination of an INT, JMP, CALL, RET or 
IRET Instruction must be In the defined limit of a 
code segment or a general protection exception 
(13) will occur. 
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80286 INSTRUCTION SET SUMMARY 


FUNCTION 

FORMAT 




CLOCK COUNT 

COMMENTS 

Real 

Address 

Mode 

Protected 

Virtual 

Address 

Mode 

Real 

Address 

Mode 

Protected 

Virtual 

Address 

Mode 

DATA TRANSFER 










MOV = Move: 










Register to Register/Memory 

[ 

1 000 1 OOw 

1 mod reg r/m | 



2,3* 

2,3* 

2 

9 

Register/memory to register 

[ 

1 000 1 0 1 w 

1 mod reg r/m | 



2,5* 

2,5* 

2 

9 

Immediate to register/memory 

[ 

1 1 000 1 1 w 

1 mod 00 0 r/m | 

data 

data if w = 1 | 

2.3* 

2.3* 

2 

9 

mmediate to register 

[ 

1 0 1 1 w reg 

1 data 1 

dataifw=1 


2 

2 



Memory to accumulator 

[ 

1 01 OOOOw 

1 addr-low | 

addr-high 


5 

5 

2 

9 

Accumulator to memory 

[ 

1 0 1 000 1 w 

1 addr-low | 

addr-high 


3 

3 

2 

9 

Register/memory to segment register 

[ 

1 0001 1 1 0 

1 mod 0 reg r/m | 



2,5* 

17,19* 

2 

9,10,11 

Segment register to register/memory 

[ 

10001100 

1 mod 0 reg r/m | 



2,3* 

2,3* 

2 

9 

PUSH = Push; 










Memory 

[ 

11111111 

1 mod 1 1 0 r/m | 



5* 

5* 

2 

9 

Register 

[ 

0 1010 reg 




3 

3 

2 

9 

Segment register 

[ 

0 0 0 reg 1 10 




3 

3 

2 

9 

Immediate 

[ 

01 tOIOsO 

1 data ! 

dataifs^O 


3 

3 ' 

2 

9 

PUSHA«* Push All 

[ 

01 100000 




17 

17 

2 

9 

POP = Pop: 










Memory 

[ 

10001111 

ImodOOO r/m| 



5* 

5* 

2 

9 

Register 

[ 

0 10 11 reg 

] 



5 

5 

2 

9 

Segment register 

[ 

0 0 0 reg 1 1 1 

] (reg^*01) 



5 

20 

2 

9,10,11 

POPA^'PopAli 

[ 

01 100001 

] 



19 

19 

2 

9 

)(CHG = Exhcange: 










Register/memory with register 

[ 

1 0000 1 1 w 

1 mod reg r/m| 



3,5* 

3,5* 

2,7 

7,9 

Register with accumulator 

[ 

10 0 10 reg 

] 



3 

3 



IN = Input from: 










=ixed port 

[ 

1 1 1 00 1 Ow 

1 port 1 



5 

5 


14 

Variable port 

[ 

1 1 1 01 1 Ow 

] 



5 

5 


14 

OUT = Output to: 










=ixed port 

[ 

1 1 1 001 1 w 

1 port 1 



3 

3 


14 

Variable port 

[ 

1 1 1 0 1 1 1 w 

] 



3 

3 


14 

XLAT = Translate byte to AL 

[ 

11010111 

] 



5 

5 


9 

LEA = Load EA to register 

[ 

10001 1 0 1 

1 mod reg r/m | 



3* 

3* 



LDS = Load pointer to DS 

c 

1 1 000101 

1 mod reg r/mj 

(mod=5^11) 


7* 

21* 

2 

9,10,11 

LES= Load pointer to ES 

[ 

1 1 000100 

1 mod reg r/m| 

(mod^l) 


7* 

21*' 

2 

9,10,11 


Shaded areas indicate instructions not available in 8086, 88 microsystems. 
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80286 INSTRUCTION SET SUMMARY (Continued) 


CLOCK COUNT 

COMMENTS I 

Real 

Address 

Mode 

Protected 

Virtual 

Address 

Real 

Address 

Mode 

Protected 

Virtual 

Address 

Mode 

Mode 

2 

2 



2 

2 



3 

3 

2 

9 

5 

5 

2.4 

9,15 

2,7* 

2,7* 

2 

9 

3,7* 

3,7* 

2 

9 

3 

3 



2.7* 

2,7* 

2 

9 

3,7* 

3,7* 

2 

9 

3 

3 



2,7* 

2,7* 

2 

9 

2 

2 



2,7* 

2.7* 

2 


3,7* 

3,7* 

2 

9 

3 

3 



2,7* 

2.7* 

2 

9 

3,7* 

3,7* 

2 

9 

3 

3 



2,7* 

2,7* 

2 

9 

2 

2 ' 



2,6* 

2,6* 

2 

9 

2,7* 

2,7* 

2 

9 

3,6* 

3.6* 

2 

9 

3 

3 



2 

7* 

2 

9 

3 

3 



3 

. 3 




FORMAT 


DATA TRANSFER (Continued) 
LAHF Load AH with flags 
5AHF = Store AH into flags 
PUSHF=Push flags 

POPF = Pop flags 

ARITHMETIC 
ADD = Add: 

Reg/memory with register to either 
mmediate to register/memory 
mmediate to accumulator 
ADC = Add with carry: 
Reg/memory with register to either 
mmediate to register/memory 
mmediate to accumulator 
INC = Increment: 
Register/memory 
Register 

SUB = Subtract: 

Reg/memory and register to either 
mmediate from register/ memory 
Immediate from accumulator 
5BB Subtract with borrow: 

Reg/ memory and register to either 
Immediate from register/memory 
Immediate from accumulator 
DEC = Decrement 
Register/ memory 
Register 

CMP = Compare 

Register/memory with register 
Register with register/ memory 
Immediate with register/ memory 
Immediate with accumulator 
MEG = Change sign 
AAA = ASCII adjust for add 
DAA = Decimal adjust for add 


OOOOOOdw 


000001 Ow 


0001 OOdw 


0001 01 Ow 


1 1 1 1 1 1 1 w 


0 1 0 0 0 reg 


001 01 Odw 


001011 Ow 


1 00000s w 


0001 1 1 Ow 


010 01 reg 


001 1 1 01 w 


001 1 1 OOw 


mod reg r/m [ 


modOOO r/m 


data if s w = 01 


mod reg r/m | 


modO 1 


0 r/m I 


data if s w = 01 


modOOO r/m 


mod reg r/m | 


mod 101 r/m 


data if s w = 01 


mod reg r/m { 


mod 0 1 1 r/m 


dataifsw=01 


modOOl r/m 


mod reg r/m| 


mod reg r/m| 


mod 111 r/m 


sw = 01 { 


mod Oil r/m 
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80286 INSTRUCTION SET SUMMARY (Continued) 


CLOCK COUNT 

COMMENTS 

Real 

Address 

Mode 

Protected 

Virtual 

Address 

Mode 

Real 

Address 

Mode 

Protected 

Virtual 

Address 

Mode 

3 

3 



3 

3 



13 

13 



21 

21 



16* 

16* 

2 

g 

24* 

24* 

2 

9 

13 

13 



21 

21 



16* 

16* 

2 

9 

24* 

24* 

2 

9 

21,24* 

21,24* 

2 

9 

14 

14 

6 

6 

22 

22 

6 

6 

17* 

17* 

2,6 

6,9 

25* 

25* 

2,6 

6,9 

17 

17 

6 

6 

25 

25 

6 

6 

20* 

20* 

2,6 

6,9 

28* . 

28* 

2,6 

6,9 

16 

16 



14 

14 



2 

2 



2 

2 



2,7* 

2,7* 

2 

9 

5 + n,8 + n* 

5 + n,8 + n* 

2 

9 

5+n,8+n* 

5+n,8+n* 

2 

9 


ARITHMETIC (Continued) 

AAS = ASCII adjust for subtract 

DAS = Decimal adjust for subtract 

MUL = Multiply (unsigned); 

Register-Byte 
Register-Word 
Memory-Byte 
Memory- Word 

IMUL= Integer multiply (signed): 

Register-Byte 

Register-Word 

Memory-Byte 

Memory-Word 

IMUi^ Integer Immediate multiply 
[signed) 

DIV = Divide (unsigned) 

Register-Byte 
Register-Word 
Memory- Byte 
Memory-Word 

IDIV= Integer divide (signed) 

Register-Byte 

Register-Word 

Memory-Byte 

Memory-Word 

AAM = ASCII adjust for multiply 
AAD = ASCII adjust for divide 
CBW = Convert byte to word 
CWD = Convert word to double word 

LOGIC 

Shift/Rotate Instructions: 

Register/Memory by 1 
Register/Memory by CL 
Register/ Memory by Count 


1 1 1 101 1w mod 100 r/m 


1 1 1 1 0 1 1 w mod 1 0 1 r/m 


OIIQIOsI [modreg r/m| 


data 


1 1 1 1 0 1 1 w mod 1 1 0 r/m 


1 1 1 1 0 1 1 w mod 1 1 1 r/m 


11010100 I 0000101 0 I 


11010101 0000101 0 


10011 000 


1 1 0 1 0 0 0 w mod 1 


1 1 0 1 0 0 1 w mod 1 


data if s " 0 


1100000W modTTT r/m| 


count 


TT Instruction 
0 0 0 ROL 

0 0 1 ROR 

0 1 0 RCL 

0 1 1 RCR 

1 0 0 SHL/SAL 

1 0 1 SHR 

1 1 1 SAR 


Shaded areas indicate instructions not available in 8086, 88 microsystems. 
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80286 INSTRUCTION SET SUMMARY (Continued) 


CLOCK COUNT | 

COMMENTS 1 

Real 

Address 

Mode 

Protected 

Virtual 

Address 

Real 

Address 

Mode 

Protected 

Virtual 

Address 

Mode 

Mode 

2.7* 

2.7* 

2 

9 

3,7* 

3,7* 

2 

9 

3 

3 



2,6* 

2,6* 

2 

9 

3,6* 

3,6* 

2 

9 

3 

3 



2,7* 

2.7* 

2 

9 

3,7* 

3,7* 

2 

9 

3 

3 



2,7* 

2,7* 

2 

9 

3.7* 

3,7* 

2 

9 

3 

3 



2,7* 

2,7* 

2 

9 

5 

5 

2 

9 

8 

8 

2 

9 

7 

7 

2 

9 

5 

5 

2 

9 

3 

3 

2 

9 

6 

' 5- 

2 


S 

5 

2 

9,14 

5 + 4n 

5 + 4n 

2 

9 

5 + 9n 

5 + 9n 

2.8 

8,9 

5 + 8n 

5 + 8n 

2,8 

8,9 

5 + 4n 

5 + 4n 

2.8 

8,9 

4 + 3n 

4 + 3n 

2,8 

8,9 

§*f4n . 

5440 

2 . 

9,14 

5R*4n 

§44n 

■ ^ 

9,14 


rVRITHMETIC (Continued) 

AND = And: 

Reg/memory and register to either 
mmediate to register/memory 
mmediate to accumulator 
TEST = And function to flags, no result: 
Register/memory and register 
Immediate data and register/memory 
mmediate data and accumulator 
OR = Or: 

Reg/memory and register to either 
Immediate to register/ memory 
Immediate to accumulator 
XOR = Exclusive or: 

Reg/memory and register to either 
mmediate to register/ memory 
mmediate to accumulator 
NOT = Invert register/memory 
STRING MANIPULATION: 

MOVS= Move byte/word 
CMPS= Compare byte/word 
SCAS = Scan byte/word 
LODS = Load byte/wd to AL/AX 
STOS = Stor byte/wd from AL/A 
INS» Input t^e/wd frcwrt DX port 
0UT$« Oui^ut byt«i/wd to DX port 
Repeated by count in CX 
WOV 5 = Move string 
CMPS = Compare string 
SCAS = Scan string 
LODS= Load string 
STOS = Store string 
INS*« Input string 
OUTS’* Ooi^ut etfing 


001 OOOdw 


001 001 Ow 


1 00001 Ow 


00001 Odw 


00001 1 Ow 


001 1 OOdw 


1 OOOOOOw 


001 1 01 Ow 


1 1 1 1 0 1 1 w 


1 01 001 Ow 


1 01 001 1 w 


1 01 01 1 1 w 


1 01 01 01 w 


01101 lOw 


011011 1W 


11110011 


1 1 11001 1 


11110011 


mod reg r/m 


mod 10 0 r/m 


mod reg r/m 


mod 0 00 r/m 


mod reg r/m 


mod 0 01 r/m 


mod reg r/m 


mod 110 r/m 


mod 010 r/m 


data if w = 1 


1 01 001 Ow 


1 01 001 1 w 


1 0101 1 1w 


1 01 01 1 Ow 


1 01 01 01 w 


01 101 1 Ow 


01 101 1 1W 


Shaded areas indicate instructions not available in 8086, 88 microsystems. 
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80286 INSTRUCTION SET SUMMARY (Continued) 


CLOCK COUNT | 

COMMENTS 

Real 

Address 

Mode 

Protected 

Virtual 

Address 

Real 

Address 

Mode 

Protected 

Virtual 

Address 

Mode 

Mode 

7 + m 

7 + m 

2 , 

18 

7 -Hm. 11+m* 

7 + m, 11 + m* 

2.8 

8,9,18 

13 + m 

26 + m 

2 

11,12,18 


41 +m 


8,11,12,18 


02 + m 


8,11,12,18 


86 +4x + m 


8,11,12,18 


177 + m 


8,11,12,18 


182 + m 


8,11,12,18 

16 + m 

29 + m* 

2 

8,9,11,12,18 


44 + m* 


8,9,11,12,18 


83 + m* 


8,9,11,12,18 


90 + 4x +m* 


8,9,11,12,18 


lOO + m* 


8,9,11,12,18 


185 + m* 


8,9,11,12,18 

7 + m 

7 + m 


18 

7 + m 

7+ m 


18 

7 +m, 11 + m* 

7 + m, 11 +m* 

2 

9,18 

11+m 

23 + m 


11,12,18 


38 + m 


8,11,12,18 


175 + m 


8,11,12,18 


180 + m 


8,11,12,18 

15 + m* 

26 + m* 

2 

8,9.11,12,18 


41 +m* 


8,9,11,12,18 


178 + m* 


8,9,11,12,18 


183 + m* 


8,9,11,12,18 

11+m 

11+m 

2 

8,9,18 

11+m 

11+m 

2 

8,9,18 

15 + m 

25 + m 

2 

8,9,11,12,18 

15 + m 


2 

8,9,11,12,18 


55 + m 


9,11,12,18 


CONTROL TRANSFER 
CALL =Call: 


Direct within segment 


Register/memory 
indirect within segment 


Direct intersegment 


disp-low 


disp-high 


11111111 mod 010 r/m 


segment offset 


|Protected Mode Only (Direct intersegment): 

Via call gate to same privilege level 

Via call gate to different privilege level, no parameters 

Via call gate to different privilege level, x parameters 

ViaTSS 

Via task gate 


segment selector 


Indirect intersegment 


11111111 I mod 0 1 1 r/m I (mod^^^ll) 


|Protected Mode Only (Indirect intersegment): 

Via call gate to same privilege level 

Via call gate to different privilege level, no parameters 

Via call gate to different privilege level, x parameters 

ViaTSS 

Via task gate 

IJMP = Unconditional jump: 


11101011 


disp-low 


101001 I 


disp-low 


Short/long 
Direct within segment 
Register/memory indirect within segment | 11111111 } mod 10 0 r/m | 
Direct intersegment 


disp-high 


101010 I 


segment offset 


jProtected Mode Only (Direct intersegment): 

Via call gate to same privilege level 
Via TSS 
Via task gate 


segment selector 


Indirect intersegment 
[Protected Mode Only (Indirect intersegment): 
Via call gate to same privilege level 
ViaTSS 
Via task gate 

[RET = Return from CALL: 


11111111 I mod 1 0 1 r/m | (mod9^=11) 


Within segment 

1 1 1 00001 1 1 



Within seg adding immed to SP 

1 1 100001 0 1 

data-low 

data-high j 

Intersegment 

1 11001011 1 



Intersegment adding immediate to SP 

1 11001010 I 

data-low 

I data-high j 


[Protected Mode Only (RET): 

To different privilege level 
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80286 INSTRUCTION SET SUMMARY (Continued) 


FUNCTION 

FORMAT 


CLOCK COUNT 

COMMENTS 1 

Real 

Address 

Mode 

Protected 

Virtual 

Address 

Mode 

Real 

Address 

Mode 

Protected 

Virtual 

Address 

Mode 

CONTROL TRANSFER (Continued) 







JE/JZ= Jump on equal zero 

01110100 I 

disp 1 

7 + m or 3 

7 + m or 3 


18 

JL/JNGE= Jump on less/ not greater or equal 

01111100 1 

disp 1 

7 + m or 3 

7 + m or 3 


18 

JLE/JNG = Jump on less or equal/not greater 

01111110 1 

disp 1 

7 + m or 3 

7 + m or 3 


18 

JB/JNAE = Jump on below/not above or equal 

01110010 1 

disp 1 

7 + m or 3 

7 + m or 3 


18 

JBE/JNA= Jump on below or equal/not above 

01110110 1 

disp 1 

7 + mor3 

7+m or3 


18 

JP/JPE= Jump on parity/parity even 

01111010 1 

disp 1 

7 + m or 3 

7 + m or 3 


18 

JO = Jump on overflow 

oil 1 0000 1 

disp 1 

7 + m or 3 

7 + m or 3 


18 

JS = Jump on sign 

01 1 1 1000 1 

disp 1 

7 + m or 3 

7 + m or 3 


18 

JNE/JNZ= Jump on not equal/not zero 

01110101 1 

disp 1 

7 + m or 3 

7 + m or 3 


18 

JNL/JGE = Jump on not less/greater or equal 

01111101 1 

disp 1 

7 + m or 3 

7 + m or 3 


18. 

JNLE/JG = Jump on not less or equal/greater 

01111111 1 

disp 1 

7 + m or3 

7 + m or 3 


18 

JNB/JAE = Jump on not below/above or equal 

01110011 1 

disp 1 

7 + mor3 

7 + m or 3 


18 

JNBE/JA = Jump on not below or equal/above 

1 01110111 1 

disp j 

7 + m or 3 

7 + m or 3 


18 

JNP/JPO = Jump on not par/par odd 

1 01111011 1 

disp 1 

7 + m or 3 

7 + m or 3 


18 

JNO= Jump on not overflow 

1 01 1 1 0001 1 

disp { 

7 + m or 3 

7 + m or 3 


18 

JNS= Jump on not sign 

1 01111001 1 

disp 1 

7 + m or 3 

7 + m or 3 


18 

LOOP = Loop CX times 

1 1 1 100010 1 

disp 1 

8 +mor4 

8 + m or 4 


18 ‘ 

LOOPZ/LOpPE = Loop while zero/equal 

1 1 1 1 00001 1 

disp 1 

8 + mor4 . 

8 + mor4 


18 

LOOPNZ/LOOPNE = Loop while not zero/equal 

1 1 1 1 00000 1 

disp 1 

8 + m or4 

8 + mor4 


18 

JCXZ= Jump on CX zero 

1 1 1 10001 1 1 

disp 1 

8 + m or 4 

8 + m or 4 


18 

BNTe8*«EntwProc^to 

1 11001000 1 

data-tow i data^^igh | L | 



2,B 


L««0 ■ ' 



11> 

11 









8,9 

L«“1 



18 

,15 









8,9 

L> 1 ■ ' 



16+4(L - 1) 

16+4(L - t) 

2.6 

a,9 

U£A\nE - Leave Proc^ure 

1 11001001 1 


5 

5 



INT= Interrupt: 







Type specified 

1 11001101 1 

type 1 

23 + m 


2,7,8 


Types 

1 11001100 1 


23 + m 


2,7,8 


INTO = Interrupt on overflow 

1 11001110 1 


24 + m or 3 


2,6,8 





(3 if no 

(3 if no 






interrupt) 

interrupt) 




Shaded areas indicate instructions not available in 8086, 88 microsystems. 
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80286 INSTRUCTION SET SUMMARY (Continued) 


CLOCK COUNT 

COMMENTS 1 

Real 

Address 

Mode 

Protected 

Virtual 

Address 

Real 

Address 

Mode 

Protected 

Virtual 

Address 

Mode 

Mode 


40+ m 


7,8,11,12,18 


78+ m 


7,8,11,12,18 


167 + m 


7,8,11,12,18 

17 + m 

31 + m 

2,4 

8,9,11,12,15,18 


55 + m 


8,9,11,12,15,18 


169 + m 


8,9,11,12,18 

13* 

13* 

2,6 

6,8,9,11,12,18 


(Use INT clock 




count If 




excepbon 5) 



2 

2 



2 

2 



2 

2 



2 

2 



2 

2 



3 

3 


14 

2 

2 


14 

2 

2 


13 

3' 

3 



' 0 

0 


14 

2 

2 

3 

13 

9-20* 

9-20* 

5,8 

8,17 

0 

0 



11* 

11* 

2,3 

0,13 

11* 

Il- 

2,3 ; 

9 

12* 

ia* 

2.3 ; 

9,13 

12* 

12- 

2.3 

9 


17,19- 

1 

9,11,13 


2,3* 

1 

9 


CONTROL TRANSFER (Continued) 

protected Mode Only: 

Via interrupt or trap gate to same privilege level 
Via interrupt or trap gate to fit different privilege level 
Via Task Gate 


[ RET = Interrupt return 

Protected Mode Only: 

To different privilege level 
To different task (NT=1) 

IBOUND^ Detect value out of range 


11001111 


I 01 1 0 0 01 0 { mod reg r/rn~ 


PROCESSOR CONTROL 

CLC = Clear carry 
CMC = Complement carry 
STC = Set carry 
CLD = Clear direction 
STD = Set direction 
CLI = Clear interrupt 
STI = Set interrupt 
HLT=Halt 
WAIT = Wait 
LOCK = Bus lock prefix 
CTS ~ Clear task switched flag 
ESC = Processor Extension Escape 

SEG = Segment Override Prefix 

PROTECTION CONTROL 

LGDT- Load global descriptor table register 

SGDT- Store global descriptor table register 

LIDT- Load Interrupt descriptor table register 

5IDT = Store interrupt descriptor table register | 

LLOT ~ Load local descriptor table register 
from register memory 

|SU3T~ Store local descnptor table register 
to reglster/memory 


11111101 


10011011 


1 1 1 1 0000 


11011 TTT 


(TTT LLL are opc< 


001 reg 110 


mod LLL r/m 


;ode to processor extension) 


1 000011 1 1 I 00000001 1 

mod 010 r/m 

1 00001 1 1 1 ( 00000001 1 

mod 00 0 r/m 

1 00001 1 1 1 1 00000001 1 

[rrjodOl 1 r/m 

j 000011 1 1 1 00000001 1 

[ mod 001 r/m 


00001 1 1 1 00000000 ntiodOlO r/m 


00001 1 1 1 00000000 ntrodOOO r/m 


Shaded areas indicate instructions not available in 8086, 88 microsystems. 
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80286 INSTRUCTION SET SUMMARY (Continued) 


FUNCTION FORMAT 

M?OTECTION CONTROL (Continued) 

LTR “local task regist^ 

fromregtster/memory | 00001 1t1 | 

ooodooog 

modOii f/m I- 

STR“ Store task register 

to register memory | oooOIHt | 

oooocooo 

modOOl r/m 1 

tMSW== load ttjadhine status word 

from regtster/memofy | oooonti | 

00000001 

mod 1 1 0 r/m 1 

machine status word 1 00001 1 1 1 j 

ooooooot 

modi 00 r/m 1 

LAR*^Lo^ access rights , \ 

1 from register/memory j gogoml ) 

00000010 

modreg r/m | 

LSI “load segment timit ^ 

frcmi reglster/memory | ogooillt | 

00000011 

modreg r/m | 

Adjust requested prmlege level; | 

from register/memory 

0110001 1 

mod reg r/m | 



VERR “ Vs»% read access; reglster/memory | 00001 111 j 

00000000 

modi 0 Of/m 1 

VeRR» Verify write access; I 000 OIIII | 

00000000 

nfKrdi 01 r^m | 


CLOCK COUNT 

COMMENTS 

Real 

Address 

Mode 

Protected 

Virtual 

Address 

Real 

Address 

Mode 

Protected 

Virtual 

Address 

Mode 

Mode 



1 

6,11,13 


2,3* 

1 

g 

■ 8. e * . 

'• 3.6* 

2.3 

0.13 

2M* 

2.3* 

2.3 

6 


14.16* 

1 

6,11,16 


14.16* 

1 

6,11,16 


10 M 1* 

2 

6.6 


14.16* 

1 

6,11,16; 


14.16* 

1 

6,11,16 


Shaded areas indicate instructions not available in 8086, 88 microsystems. 
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Footnotes 

The Effective Address (EA) of the memory operand 
is computed according to the mod and r/m fields: 

if mod = 11 then r/m is treated as a REG field 
if mod = 00 then DISP = 0*. disp-low and disp-high 
are absent 

if mod = 01 then DISP = disp-low sign-extended to 

16 bits, disp-high is absent 

if mod = 10 then DISP = disp-high: disp-low 

if r/m = 000 then EA = (BX) + (SI) + DISP 

if r/m = 001 then EA = (BX) + (Dl) + DISP 

if r/m = 010 then EA = (BP) + (SI) 4- DISP 

if r/m = oil then EA = (BP) + (Dl) + DISP 

If r/m = 100 then EA = (SI) + DISP 
if r/m = 101 then EA = (Dl) + DISP 
if r/m = 110 then EA = (BP) + DISP* 

if r/m = 1 1 1 then EA = (BX) + DISP 

DISP follows 2nd byte of instruction (before data if 
required) 

’except if mod = 00 and r/m ^110 then EQ = disp-high: disp-low. 

SEGMENT OVERRIDE PREFIX 


0 0 1 reg 1 1 0 


REG is assigned according to the following table: 

16-Blt(w = 1) 8-Bit (w = 0) 


000 

AX 

000 

AL 

001 

cx 

001 

CL 

010 

DX 

010 

DL 

oil 

BX 

011 

BL 

100 

SP 

100 

AH 

101 

BP 

101 

CH 

110 

SI 

110 

DH 

111 

Dl 

111 

BH 


The physical addresses of all operands addressed 
by the BP register are computed using the SS seg- 
ment register. The physical addresses of the desti- 
nation operands of the string primitive operations 
(those addressed by the Dl register) are computed 
using the ES segment, which may not be overridden. 


DATA SHEET REVISION REVIEW 

The following list represents key differences be- 
tween this and the -013 data sheet. Please review 
this summary carefully. 

1 . Package thermal specifications were added. 

2. A graph of typical Ice vs. Frequency for different 
output loads and Case Temperatures was added. 

3. The Output Leakage Current Specification (Ilo) 
was changed. 


reg is assigned according to the following: 

Segment 
reg Register 

00 ES 

01 CS 

10 SS 

11 DC 
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CHMOS III MATH COPROCESSOR 


■ High Performance 80-Bit internal 
Architecture 

■ Implements ANSI/IEEE Standard 754- 
1985 for Binary Floating-Point 
Arithmetic 

■ Implements Extended 80387 Instruction 
Set 

■ Two to Three Times 8087/80287 
Performance at Equivalent Clock Speed 

■ Low Power Consumption 

■ Upward Object-Code Compatible from 
8087 and 80287 

■ Interfaces with 80286 and 80C286 CPUs 

■ Expands CPU’s Data Types to Include 
32-, 64-, 80-Bit Floating Point, 32-, 64- 
Bit integers and 18-Digit BCD Operands 


■ Directly Extends CPU’s Instruction Set 
to Trigonometric, Logarithmic, 
Exponential, and Arithmetic 
Instructions for All Data Types 

■ Full-Range 387 tm DC Compatible 
Transcendental Operations for SINE, 
COSINE, TANGENT, ARCTANGENT, and 
LOGARITHM. 

■ Built-In Exception Handling 

■ Operates in Both Real and Protected 
Mode Systems 

■ Eight 80-Bit Numeric Registers, Usable 
as Individually Addressable General 
Registers or as a Register Stack 

■ Available in 40-pin DIP and 44-pin PLCC 
Package 

(See Packaging Outlines and Dimensions, order #231369) 


The Intel 80C287A CMOS Math Coprocessor is an extension to the Intel 80286 microprocessor architecture. It 
Is functionally equivalent to the NMOS 80287, and provides higher speeds and low power consumption for 
battery powered or no-fan applications. When combined with an 80286 microprocessor the 80C287A dramati- 
cally Increases the processing speed of computer application software which utilize mathematical operations. 
This makes an ideal computer workstation platform for applications such as financial modeling and spread- 
sheets, CAD/CAM, or graphics. 

The 80C287A Math Coprocessor adds over seventy mnemonics to the 80286 microprocessor Instruction set. 
Specific 80p287A math operations include logarithmic, arithmetic, exponentional, and triginometric functions. 
The 80C287A supports integer, extended Integer, floating point and BCD data formats, and fully conforms to 
the ANSI/IEEE floating point standard. 


The 80C287A Is object code compatible with the 80287 and 8087. The 80C287A is fabricated with CHMOS III 
technology and available In a 40-pln DIP and 44-pln PLCC packages. 



For the complete data sheet on this device, contact Intel’s Literature Distribution Dept, (800) 548-4725. 
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80287 

MATH COPROCESSOR 


intel* 


■ High Performance 80-Bit Internal 
Architecture 

■ implements Proposed IEEE Floating 
Point Standard 754 

■ Expands 80286 Data types to Include 
32-, 64-, 80-Blt Floating Point, 32-, 64- 
Bit Integers and 18-Digit BCD Operands 

■ Object Code Compatible with 8087 

■ Built-in Exception Handling 

■ Operates in Both Real and Protected 
Mode 80286 Systems 

■ 8x80-Bit, Individually Addressable, 
Numeric Register Stack 


■ Protected Mode Operation Completely 
Conforms to the 80286 Memory 
Management and Protection 
Mechanisms 

■ Directly Extends 80286 Instruction Set 
to Trigonometric, Logarithmic, 
Exponential and Arithmetic Instructions 
for All Data types 

Operates with 80386 CPU without 
Software Modification 

Available in EXPRESS — Standard 
Temperature Range 

Available in 40 pin-CERDIP package 

(see Packaging Spec: Order #231369) 


The Intel 80287 Math Coprocessor is an extension to the Intel 80286 microprocessor architecture. When 
combined with the 80286 microprocessor the 80287 dramatically increases the processing speed of computer 
application software which utilize mathematical operations. This makes an ideal computer workstation plat- 
form for applications such as financial modeling and spreadsheets, CAD/CAM, or graphics. 

The 80287 Math Coprocessor adds over seventy mnemonics to the 80286 microprocessor Instruction set. 
Specific 80287 math operations include logarithmic arithmetic, exponential, and trigonometric functions. The 
80287 supports integer, extended Integer, floating point and BCD data formats, and fully conforms to the 
ANSI/IEEE floating point standard. 

The 80286/80287 Is object code compatible with the 8086/8087 and 8088/8087. The 80287 is fabricated with 
HMOS III technology and available in a 40-pin cerdip packages. A CMOS 80C287A math coprocessor is 
available for higher speed or low power applications. 


BUS INTERFACE UNIT NUMERIC EXECUTION UNIT 


DATA 


STATUS 


ADDRESS 



210920-1 

Figure 1. 80287 Block Diagram 


N/C 

c 

- V^_y— 

40 

3 

N/C 

N/C 

c 

2 

39 

J 

CKM 

N/C 

c 

3 

38 

D 

N/C 

N.C. 

c; 

4 

37 

3 

N/C 

D15 

C 

5 

36 

3 

PCACK 

D14 

c 

6 

35 

3 

RESET 

D13 

c 

7 

34 

3 


012 

c 

8 

33 

3 

NPS2 

''cc 

c 

9 

32 

3 

CLK 

Vss 

c 

10 80287 

31 

3 

CM01 

Dll 

c 

11 

30 

3 

Vss 

DIO 

c 

12 

29 

D 

CMDO 

N/C 

c 

13 

28 

3 

NPWR 

DO 

c 

14 

27 

3 

NPRD 

01 

c 

15 

28 

3 

ERROR 

07 

c 

18 

25 

3 

BUSY 

DO 

c 

17 

24 

3 

PEREQ 

DS 

c 

18 

23 

D 

00 

D4 

c 

19 

22 

3 

01 

D3 

c 

20 

21 

3 

D2 
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NOTE: 

N/C Pins should not be connected 

Figure 2. 

80287 Pin Configuration 
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Table 1. 80287 Pin Description 


Symbols 

Type 

Name and Functon 

CLK 

1 

CLOCK INPUT: this clock provides the basic timing for internal 80287 
operations. Special MOS level inputs are required. The 82284 or 8284A 

CLK outputs are compatible to this input. 

CKM 

1 

CLOCK MODE SIGNAL: indicates whether CLK input is to be divided by 

3 or used directly. A HIGH input will cause CLK to be used directly. This 
input must be connected to Vcc or Vss as appropriate. This input must 
be either HIGH or LOW 20 CLK cycles before RESET goes LOW. 

RESET 

1 

SYSTEM RESET: causes the 80287 to immediately terminate its 
present activity and enter a dormant state. RESET is required to be 

HIGH for more than 4 80287 CLK cycles. For proper initialization the 
HIGH-LOW transition must occur no sooner than 50 jixs after Vcc and 

CLK meet their D.C. and A.C. specifications. 

D15-D0 

I/O 

DATA: 1-bit bidirectional data bus. Inputs to these pins may be applied 
asynchronous to the 80287 clock. 

BUSY 

0 

BUSY STATUS: asserted by the 80287 to indicate that it is currently 
executing a command. 

ERROR 

0 

ERROR STATUS: reflects the ES bit of the status word. This signal 
indicates that an unmasked error condition exists. 

PEREQ 

0 

PROCESSOR EXTENSION DATA CHANNEL OPERAND TRANSFER 
REQUEST: a HIGH on this output Indicates that the 80287 is ready to 
transfer data. PEREQ will be disabled upon assertion of PEACK or upon 
actual data transfer, whichever occurs first, if no more transfers are 
required. 

PEACK 

1 

PROCESSOR EXTENSION DATA CHANNEL OPERAND tRANSFER 
ACKNOWLEDGE: acknowledges that the request signal (PEREQ) has 
been recognized. Will cause the request (PEREQ) to be withdrawn in 
case there are no more transfers required. PEACK may be 
asynchronous to the 80287 clock. 

NPRD 

1 

NUMERIC PROCESSOR READ: Enables transfer of data from the 

80287. This input may be asynchronous to the 80287 clock. 

NPWR 

1 

NUMERIC PROCESSOR READ: Enables transfer of data from the 

80287. This input may be asynchronous to the 80287 clock. 

NPS1,NPS2 

1 

NUMERIC PROCESSOR SELECTS: indicate the CPU is performing an 
ESCAPE instruction. Concurrent assertion of these signals (i.e., NPS1 is 
LOW and NPS2 is HIGH) enables the 80287 to perform floating point 
instrucctions. No data transfers involving the 80287 will occur unless the 
device is selected via these lines. These inputs may be asynchronous to 
the 80287 clock. 

CMDI.CMDO 

1 

COMMAND LINES: These, along with select inputs, allow the CPU to 
direct the operation of the 80287. 

These inputs may be asynchronous to the 80287 clock. 
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Table 1. 80187 Pin Description (Continued) 


Symbols 

Type 

Name and Function 

Vss 

1 

System ground, both pins must be connected to ground. 

Vcc 

1 

+ 5V supply 


FUNCTIONAL DESCRIPTION 

The 80287 Numeric Processor Extension (NPX) pro- 
vides arithmetic instructions for a variety of numeric 
data types in 80286/80287 systems. It also exe- 
cutes numerous built-in transcendental functions 
(e.g., tangent and log functions). The 80287 exe- 
cutes instructions in parallel with an 80286. It effec- 


tively extends the register and instruction set of an 
80286 system for existing 80286 data types and 
adds several new data types as well. Figure 3 pres- 
ents the program visible register model of the 
80286/80287. Essentially, the 80287 can be treated 
as an additional resource or an extension to the 
80286 that can be used as a single unified system, 
the 80286/80287. 




80286 



1 




80287 

STACK: 


TAG FIELD 


FILE: 


0 


79 

78 

64 

63 

0 1 0 

AX 



R1 

SIGN 

EXPONENT 

SIGNIFICAND 




BX 



R2 







CX 



R3 







OX 



R4 







Si 


R5 







Dl 


R6 







BP 


R7 







SP 


R8 








15 




I 

I 
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Figure 3. 80286/80287 Architecture 


The 80287 has two operating modes similar to the 
two modes of the 80286. When reset, 80287 Is in 
the real address mode. It can be placed in the pro- 
tected virtual address mode by executing the 
SETPM ESC instruction. The 80287 cannot be 
switched back to the real address mode except by 
reset. In the real address mode, the 80286/80287 is 
completely software compatible with 8086/8087 and 
8088/8087. 


Once in protected mode, all references to memory 
for numerics data or status information, obey the 
80286 memory management and protection rules 
giving a fully protected extension of the 80286 CPU. 
In the protected mode, 80286/80287 numerics soft- 
ware Is also completely compatible with 8086/8087 
and 8088/8087. 
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SYSTEM CONFIGURATION 
WITH 80286 

As a processor extension to an 80286, the 80287 
can be connected to the CPU as shown in Figure 
4A. The data channel control signals (PEREQ, 
PEACK), the BUSY signal and the NPRD, NPWR 
signals, allow the NPX to receive instructions and 
data from the CPU. When in the protected mode, all 
information received by the NPX is validated by the 

80286 memory management and protection unit. 
Once started, the 80287 can process in parallel with 
and independent of the host CPU. When the NPX 
detects an error or excep tion, it w ill indicate this to 
the CPU by asserting the ERROR signal. 

The NPX uses the processor extension request and 
acknowledge pins of the 80286 CPU to implement 
data transfers with memory under the protection 
model of the CPU. The full virtual and physical ad- 
dress space of the 80286 is available. Data for the 

80287 in memory Is addressed and represented in 
the same manner as for an 8087. 

The 80287 can operate either directly from the CPU 
clock or with a dedicated clock. For operation with 
the CPU clock (CKM = 0), the 80287 works at one- 
third the frequency of the system clock (i.e., for an 
8 MHz 80286, the 16 MHz system clock is divided 
down to 5.3 MHz). The 80287 provides a capability 
to internally divide the CPU clock by three to pro- 
duce the required internal clock (33% duty cycle). 
To use a higher performance 80287 (8 MHz), an 
8284A clock driver and appropriate crystal may be 
used to directly drive the 80287 with a Va duty cycle 
clock on the CLK input (CKM = 1). The following 
table describes the relationship between the clock 
speed and the 287 speed version needed as a func- 
tion of the CKM state. 


287 Speed 
Version 

CLK Speed 

CKM = 0 

CKM = 1 

5 MHz 

12 MHz 

5 MHz 

6 MHz 

16 MHz 

6 MHz 

8 MHz 

20 MHz 

8 MHz 

10 MHz 

25 MHz 

10 MHz 


SYSTEM CONFIGURATION 
WITH 80386 

The 80287 can also be connected as a processor 
extension to the 80386 CPU as shown in Figure 4b. 
All software written for 8086/8087 and 80286/ 
80287 is object code compatible with 80386/80287 
and can benefit from the increased speed of the 
80386 CPU. 


Note that the PEACK input pin is pulled high. This is 
because the 80287 is not required to keep track of 
the number of words transferred during an operand 
transfer when it is connected to the 80386 CPU. Un- 
like the 80286 CPU, the 80386 CPU knows the exact 
length of the operand being transferred to/from the 
80287. After an ESC instruction has been sent to the 
80287, the 80386 processor extension data channel 
will initiate the data transfer as soon as it receives 
the PEREQ signal from the 80287. The transfer is 
automatically terminated by the 80386 CPU as soon 
as all the words of the operand have been trans- 
ferred. 

Because of the very high speed local local bus of 
the 80386 CPU, the 80287 cannot reside directly on 
the CPU local bus. A local bus controller logic Is 
used to generate the necessary read and write cycle 
timings as well as the chip select timings for the 
80287. The 80386 CPU uses I/O addresses 
800000F8 through 800000FF to communicate with 
the 80287. This is beyond the normal I/O address 
space of the CPU and makes it easie r to g enerate 
the chip select signals using A31 and M/IO. It may 
also be noted that the 80386 CPU automatically 
generates 16-bit bus cycles whenever it communi- 
cates with the 80287. 


HARDWARE INTERFACE 

Communication of instructions and data operands 
between the 80286 and 80287 is handled by the 
CMDO, CMD1, NPS1, NPS2, NPRD, and NPWR sig- 
nals. I/O port addresses 00F8H, OOFAH, and OOFCH 
are used by the 80286 for this communi cation. 
When any of these addresses are used, the NPS1 
input must be L OW and NPS2 input HIGH. The 
lORC and lOWC outputs of the 82288 identify I/O 
space transfers (see Figure 4A). CMDO should be 
connected to latched 80286 A1 and CMD1 should 
be connected to latched 80286 A2. 

I/O ports 00F8H to OOFFH are reserved for the 
80286/80287 interface. To guarantee correct opera- 
tion of the 80287, programs must not perform any 
I/O operations to these ports. 

The PEREQ, PEACK, BO^, and ERROR signals of 
the 80287 are connected to the same-named 80286 
input. The data pins of the 80287 should be directly 
connected to the 80286 data bus. Note that all bus 
drivers connected to the 80286 local bus must be 
inhibited wjien the 80286 reads from the 80287. The 
use of M/IO in the decoder prevents INTA bus cy- 
cles from disabling the data transceivers. 


PROGRAMMING INTERFACE 

Table 2 lists the seven data types the 80287 sup- 
ports and presents the format for each type. These 
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values are stored in memory with the least signifi- 
cant digits at the lowest memory address. Programs 
retrieve these values by generating the lowest ad- 
dress. All values should start at even addresses for 
maximum system performance. 

Internally the 80287 holds all numbers in the tempo- 
rary real format. Load instructions automatically con- 
vert operands represented in memory as 16-, 32-, or 
64-bit integers, 32- or 64-bit floating point number or 


18-digit packed BCD numbers into temporary real 
format. Store Instructions perform the reverse type 
conversion. 

80287 computations use the processor’s register 
stack. These eight 80-bit registers provide the equiv- 
alent capacity of 40 16-bit registers. The 80287 
register set can be accessed as a stack, with In- 
structions operating on the top one or two stack ele- 
ments, or as a fixed register set, with instructions 
operating on explicitly designated registers. 
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Figure 4A. 80286/80287 System Configuration 
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Figure 4B. 80386/80287 System Configuration 
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Table 2. 80287 Data Type Representation in Memory 



NOTES: 210920-6 

1 . S = Sign bit (0 = positive, 1 = negative) 

2. dn = Decimal digit (two per byte) 

3. X = Bits have no significance; 8087 ignores when loading, zeros when storing. 

4 . ^ = Position of implicit binary point 

5. I = Integer bit of significant; stored in temporary real, implicit in short and long real. 

6. Exponent Bias (normalized values): 

Short Real: 127 (7FH) 

Long Real: 1023 (3FFH) 

Temporary Real: 16383 (3FFFH) 

7. Packed BCD: (-l)s (D17 . . . Dq) 

8. Real: (-l)s (2 E-BIAS)(FoFi. . .) 


Table 6 lists the 80287’s instructions by class. No 
special programming tools are necessary to use the 
80287 since all new instructions and data types are 
directly supported by the 80286 assembler and 


appropriate high level languages. All 8086/8088 de- 
velopment tools which support the 8087 can also be 
used to develop software for the 80286/80287 in 
real address mode. 
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SOFTWARE INTERFACE 

The 80286/80287 is programmed as a single proc- 
essor. All communication between the 80286 and 
the 80287 is transparent to software. The CPU auto- 
matically controls the 80287 whenever a numeric In- 
struction is executed. All memory addressing 
modes, physical memory, and virtual memory of the 
CPU are available for use by the NPX. 

Since the NPX operates in parallel with the CPU, any 
errors detected by the NPX may be reported after 
the CPU has executed the ESCAPE instruction 
which caused it. To allow identification of the failing 
numeric instruction, the NPX contains two pointer 
registers which identify the address of the falling nu- 
meric instruction and the numeric memory operand If 
appropriate for the instruction encountering this er- 
ror. 


INTERRUPT DESCRIPTION 

Several interrupts of the 80286 are used to report 
exceptional conditions while executing numeric pro- 
grams in either real or protected mode. The inter- 
rupts and their functions are shown in Table 3. 


PROCESSOR ARCHITECTURE 

As shown in Figure 1 , the NPX is internally divided 
into two processing elements, the bus interface unit 
(BIU) and the numeric execution unit (NEU). The 
NEU executes all numeric instructions, while the BIU 
receives and decodes instructions, requests oper- 
and transfers to and from memory and executes 
processor control instructions. The two units are 
able to operate Independently of one another allow- 
ing the BIU to maintain asynchronous communica- 
tion with the CPU while the NEU is busy processing 
a numeric Instruction. 


BUS INTERFACE UNIT 

The BIU decodes the ESC instruction executed by 
the CPU. If the ESC code defines a math Instruction, 
the BIU transmits the formatted instruction to the 
NEU. If the ESC code defines an administrative in- 
struction, the BIU executes it Independently of the 
NEU. The parallel operation of the NPX with the 
CPU is norm ally tra nspa rent to t he user. The BIU 
generates the BUSY and ERROR signals for 80826/ 
80287 processor synchronization and error notifica- 
tion, respectively. 

The 80287 executes a single numeric instruction at 
a time. When executing most ESC instructions, the 
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Table 3. 80286 Interrupt Vectors Reserved for NPX 


Interrupt Number 

Interrupt Function 

7 

An ESC instruction was encountered when EM or TS of the 80286 MSW was 
set. EM = 1 indicates that software emulation of the instruction is required. 

When TS is set, either an ESC or WAIT instruction will cause interrupt 7. This 
indicates that the current NPX context may not belong to the current task. 

9 

The second or subsequent words of a numeric operand in memory exceeded a 
segment’s limit. This interrupt occurs after executing an ESC instruction. The 
saved return address will not point at the numeric instruction causing this 
interrupt. After' processing the addressing error, the 80286 program can be 
restarted at the return address with IRET. The address of the failing numeric 
instruction and numeric operand and saved in the 80287. An interrupt handler 
for this interrupt /776/s/ execute FNINIT before a/?/ other ESC or WAIT 
instruction. 

13 

The starting address of a numeric operand is not in the segment’s limit. The 
return address will point at the ESC instruction, including prefixes, causing this 
error. The 80287 has not executed this Instruction. The instruction and data 
address is 80287 refer to a previous, correctly executed, instruction. 

16 

The previous numeric instruction caused an unmasked numeric error. The 
address of the faulty numeric instruction or numeric data operand is stored in 
the 80287. Only ESC or WAIT instructions can cause this interrupt. The 80286 
return address will point at a WAIT or ESC instruction, including prefixes, which 
may be restarted after clearing the error condition in the NPX. 


80286 tests the BUSY pin and waits until the 80287 
indicates that it is not busy before initiating the com- 
mand. Once initiated, the 80286 continues program 
execution while the 80287 executes the ESC In- 
struction. In 8086/8087 systems, this synchroniza- 
tion is achieved by placing a WAIT Instruction before 
an ESC Instruction. For most ESC instructions, the 

80287 does not require a WAIT Instruction before 
the ESC opcode. However, the 80287 will operate 
correctly with these WAIT instruction. In all cases, a 
WAIT or ESC instruction should be inserted after 
any 80287 store to memory (except FSTSW and 
FSTCW) or load from memory (except FLDENV or 
FRSTOR) before the 80286 reads or changes the 
value to be sure the numeric value has already been 
wrtten or read by the NPX. 

Data transfers between memory and the 80287 , 
when needed, are controlled by the PEREQ PEACK, 
NPRD, NPWR, NPS1, NPS2 signals. The 80286 
does the actual data transfer with memory through 
its processor extension data channel. Numeric data 
transfers with memory performed by the 80286 use 
the same timing as any other bus cycle. Control sig- 
nal for the 80287 are generated by the 80826 as 


shown In Figure 4a, and meet the timing require- 
ments shown in the AC requirements section. 


NUMERIC EXECUTION UNIT 

The NEU executes all instructions that involve the 
register stack; these Include arithmetic, logical, tran- 
scendental, constant and data transfer instructions. 
The data path in the NEU is 84 bits wide (68 signifi- 
cand bits, 15 exponent bits and a sign bit) which 
allows internal operand transfers to be performed at 
very high speeds. 

When the NEU begins executing an Instruction, it 
activated the BIU BUSY signal. This signal is used in 
conjunction with the CPU WAIT instruction or auto- 
matically with most of the ESC instructions to syn- 
chronize both processors. 


REGISTER SET 

The 80287 register set is shown in Figure 5. Each of 
the eight data registers in the 8087’s register stack 
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Figure 5. 80287 Register Set 


is 80 bits wide and is divided into “fields” corre- 
sponding to the NPX’s temporary real data type. 

At a given point in time the TOP field In the status 
word identifies the current top-of-stack register. A 
“push” operation decrements TOP by 1 and loads a 
value into the new top register. A “pop” operation 
stores the value from the current top register and 
then increments TOP by 1 . Like 80286 stacks in 
memory, the 80287 register stack grows “down” 
toward lower-addressed registers. 

Instructions may address the data registers either 
implicitly or explicitly. Many instructions operate on 
the register at the TOP of the stack. These Instruc- 
tions implicitly address the register pointed by the 
TOP. Other instructions allow the programmer to ex- 
plicitly specify the register which is to be used. This 
explicit register addressing is also “top-relative.” 


STATUS WORD 

The 1 6-bit status word (in the status register) shown 
In Figure 6 reflects the overall state of the 80287. It 
may be read and Inspected by CPU code. The busy 
bit (bit 15) indicates whether the NEU is executing 
an Instruction (B = 1) or is idle (B = 0). 


The instructions FSTSW, FSTSW AX, FSTENV, and 
FSAVE which store the status word are executed 
exclusively by the BIU and do not set the busy bit 
themselves or require the Busy bit be cleared in or- 
der to be executed. 

The four numeric condition code bits (C 0 -C 3 ) are 
similar to the flags in a CPU: instructions that per- 
form arithmetic operations update these bits to re- 
flect the outcome of NPX operations. The effect of 
these Instructions on the condition code is summa- 
rized in Tables 4a and 4b. 

Bits 14-12 of the status word point to the 80287 
register that Is the current top-of-stack (TOP) as de- 
scribed above. Figure 6 shows the six error flags in 
bits 5-0 of the status word. Bits 5-0 are set to Indi- 
cate that the NEU has detected an exception while 
executing an instruction. The section on exception 
handling explains how they are set and used. 

Bit 7 Is the error summary status bit. This bit is set If 
any unmasked exception bit is set and cleared oth- 
erwise. If this bit is set, the ERROR signal Is assert- 
ed. 
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EXCEPTION FLAGS (1 EXCEPTION HAS OCCURRED) 

INVALID OPERATION* 

DENORMALIZED OPERAND* 

ZERO DIVIDE* 

OVERFLOW* 

UNDERFLOW* 

PRECISION* 

(RESERVED) 

’ERROR SUMMARY STATUS'^’ 

CONDITION CODE‘S’ 

•TOP OF STACK POINTER‘S’ 

-NEU BUSY 

210920-7 


NOTES: 

1. ES is set if any unmasked exception bit is set, cleared otherwise. 

2. See Table 5 for condition code interpretation. 

3. Top Values 

000 = Register 0 is Top of Stack 

001 = Register 1 is Top of Stack 


111= Register 7 is Top of Stack. 

*For definitions, see the section on exception handling 


Figure 6. 80287 Status Word 


TAG WORD 

The tag word marks the content of each register as 
shown in Figure 7. The principal function of the tag 
word is to optimize the NPX’s performance. The 
eight two-bit tags in the tag word can be used, how- 
ever, to interpret the contents of 80287 registers. 


INSTRUCTION AND DATA POINTERS 

The instruction and data pointers (See Figures 8a 
and 8b) are provided for user-written error handlers. 
Whenever the 80287 executes a new Instruction, the 
BID saves the Instruction address, the operand ad- 
dress (if present) and the Instruction opcode. 80287 
instructions can store this data into memory. 

The instruction and data pointers appear in one of 
two formats depending on the operating mode of the 
80287. In real mode, these values are the 20-bit 
physical address and 11 -bit opcode formatted like 
the 8087. In protection mode, these values are the 


32-bit virtual address used by the program which ex- 
ecuted an ESC instruction. The same FLDENV/ 
FSTENV/FSAVE/FRSTOR instructions as those of 
the 8087 are used to transfer these values between 
the 80287 registers and memory. 

The saved instruction address in the 80287 will point 
at any prefixes which preceded the instruction. This 
is different than in the 8087 which only pointed at 
the ESCAPE instruction opcode. 


CONTROL WORD 

The NPX provides several processing options which 
are selected by loading a word from memory into the 
control word. Figure 9 shows the format and encod- 
ing of fields in the control word. 

The low order byte of this control word configures 
the 80287 error and exception masking. Bits 5-0 of 
the control word contain individual masks for each of 
the six exceptions that the 80287 recognizes. The 
high order byte of the control word configures the 
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Table 4a. Condition Code Interpretation 


Instruction 

Type 

Ca 

C2 

Cl 

Co 

Interpretation 

Compare, Test 

0 

0 

X 

0 

ST > Source or 0 (FTST) 


0 

0 

X 

1 

ST < Source or 0 (FTST) 


1 

0 

X 

0 

ST = Source or 0 (FTST) 


1 

1 

X 

1 

ST Is not comparable 

Remainder 

Qi 

0 

Qo 

Qa 

Complete reduction with 
three low bits of quotient 
(See Table 5b) 


, u 

1 

u 

u 

Incomplete Reduction 

Examine 

0 

0 

0 

0 

Valid, positive unnormalized 


0 

0 

0 

1 

Invalid, positive, exponent = 0 


0 

0 

1 

0 

Valid, negative, unnormalized 


0 

0 

1 

1 

Invalid, negative, exponent = 0 


0 

1 

0 

0 

Valid, positive, normalized 


0 

1 

0 

1 

Infinity, positive 


0 

1 

1 

0 

Valid, negative, normalized 


0 

1 

1 

1 

Infinity, negative 


1 

0 

0 

0 

Zero, positive 


1 

0 

0 

1 

Empty 


1 

0 

1 

0 

Zero, Negative 


1 

0 

1 

1 

Empty 


1 

1 

0 

0 

Invalid, positive, exponent = 0 


1 

1 

0 

1 

Empty 


1 

1 

1 

0 

Invalid, negative, exponent = 0 


1 

1 

1 

1 

Empty 


NOTES: 

1. ST = Top of Stack 

2. X = value is not affected by instruction 

3. U = value is undefined following instruction 

4. Qn = Quotient bit n 


Table 4b. Condition Code Interpretation after 
FPREM (See Note 1) instruction as a Function of 
Dividend Value 


Dividend Range 

Qa 

Qi 

Qo 

Dividend < 2 * Modulus 

Ca 

Ci 

Qo 

Dividend < 4 * Modulus 

Ca 

Qi 

Qo 

Dividend ^ 4 * Modulus 

Qa 

Qi 

Qo 


NOTE: 

1. Previous value of Indicated bit, not affected by FPREM 
instruction execution. 


80287 operating mode including precision, rounding, 
and infinity control. The precision control bits (bits 
9-8) can be used to set the 80287 internal operating 
precision at less than the default of temporary real 
(80-bit) precision. This can be useful in providing 
compatibility with the early generation arithmetic 
processors of smaller precision than the 80287. The 
rounding control bits (bits 11-10) provide for direct- 
ed rounding and true chop as well as the unbiased 
round to nearest even mode specified In the IEEE 
standard. Control over closure of the number space 
at infinity is also provided (either affine closure: ± 
oo, or projective closure: «>, is treated as unsigned, 
may be specified). 
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TAG (7) 

TAG (6) 

TAG (5) 

TAG (4) 

TAG (3) 

TAG (2) 

TAG (1) 

TAG (0) 


NOTE: 

The index i of tag(i) is not top-relative. A program 
typically uses the “top” field of Status Word to deter- 
mine which tag(i) field refers to logical top of stack. 


TAG VALUES: 

00 = VALID 

01 = ZERO 

10 = INVALID or INFINITY 

11 = EMPTY 


Figure 7. 80287 Tag Word 



MEMORY OFFSET 

15 0 



CONTROL WORD 

+ 0 


STATUS WORD 

+ 2 


TAG WORD 

+ 4 


IP OFFSET 

+ 6 


CS SELECTOR 

+ 8 


DATA OPERAND OFFSET 

+ 10 


DATA OPERAND SELECTOR 

+ 12 


Figure 8a. Protected Mode 80287 Instruction and Data Pointer Image in Memory 


NAN called INDEFINITE, or to propogate already ex- 
isting NANs as the calculation result. 

Overflow: The result is too large in magnitude to fit 
the specified format. The 80287 will generate an en- 
coding for infinity if this exception is masked. 

Zero Divisor: The divisor is zero while the dividend 
is a non-infinite, non-zero number. Again, the 80287 
will generate an encoding for infinity if this exception 
is masked. 

Underflow: The result in non-zero but too small In 
magnitude to fit in the specified format. If this excep- 
tion is masked the 80287 will denormalize (shift 
right) the fraction until the exponent is in range. The 
process is called gradual underflow. 


EXCEPTION HANDLING 

The 80287 detects six different exception conditions 
that can occur during instruction execution. Any or 
all exce ptions will cause the assertion of external 
ERROR signal and ES bit of the Status Word if the 
appropriate exception masks are not set. 

The exceptions that the 80287 detects and the ‘de- 
fault’ procedures that will be carried out if the excep- 
tion Is masked, are as follows: 

Invalid Operation: Stack overflow, stack underflow, 
indeterminate form (0/0, oo, - oo, etc) or the use of 
a Non-Number (NAN) as an operand. An exponent 
value of all ones and non-zero significand is re- 
served to identify NANs. If this exception is masked, 
the 80287 default response is to generate a specific 
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Figure 8b. Real Mode 80287 Instruction and Data Pointer Image in Memory 
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EXCEPTION MASKS (1 EXCEPTION IS MASKED) 

INVALID OPERATION 
DENORMALIZED OPERAND 
ZERO DIVIDE 
OVERFLOW 
UNDERFLOW 
PRECISION 
(RESERVED) 

(RESERVED) 

PRECISION control'’' 

ROUNDING control'^’ 

INFINITY CONTROL (0 - PROJECTIVE, 1 = AFFINE) 
(RESERVED) 


(1) PRECISION CONTROL 

00 = 24 BITS (SHORT REAL) 

01 = RESERVED 

10 = 53 BITS (LONG REAL) 

1 1 = 64 BITS (TEMP REAL) 


(2) ROUNDING CONTROL 

00 = ROUND TO NEAREST OR EVEN 

01 = ROUND DOWN (TOWARD -x) 

10 = ROUND UP (TOWARD +)^ 

11 = CHOP (TRUNCATE TOWARD ZERO) 


210920-8 


Figure 9. 80287 Control Word 
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Denormaiized Operand: At least one of the oper- 
ands is denormaiized; it has the smallest exponent 
but a non-zero significand. Normal processing con- 
tinues if this exception is masked off. 

Inexact Result: The true result is not exactly repre- 
sentable in the specified format, the result is round- 
ed according to the rounding mode, and this flag is 
set. If this exception is masked, processing will sim- 
ply continue. 

If the error Is not masked, the corresponding error 
bit and the error st atus bit (ES) in the control word 
will be set, and the ERROR output signal will be as- 
serted. If the CPU attempts to execute another ESC 
or WAIT instruction, exception 7 will occur. 

The error condition must be resolved via an interrupt 
service routine. The 80287 saves the address of the 
floating point instruction causing the error as well as 
the address of the lowest memory location of any 
memory operand required by that instruction. 


8086/8087 COMPATIBILITY: 

The 80286/80287 supports portability of 8086/8087 
programs when it is in the real address mode. How- 
ever, because of differences In the numeric error 
handling techniques, error handling routines may 
need to be changed. The differences between an 
80286/80287 and 8086/8087 are: 

1 . The NPX error signal does not pass through an 
interrupt controller (8087 I NT signal does). 


Therefore, any interrupt controller oriented In- 
structions for the 8086/8087 may have to be de- 
leted. 

2. Interrupt vector 16 must point at the numeric error 
handler routine. 

3. The saved floating point instruction address in the 
80287 includes any leading prefixes before the 
ESCAPE opcode. The corresponding saved ad- 
dress of the 8087 does not Include leading prefix- 
es. 

4. In protected mode, the format of the saved in- 
struction and operand pointers is different than for 
the 8087. The instruction opcode is not saved— It 
must be read from memory if needed. 

5. Interrupt 7 will occur when executing ESC instruc- 
tions with either TS or EM or MSW = 1 . If TS of 
MSW = 1 then WAIT will also cause interrupt 7. 
An Interrupt handler should be added to handle 
this situation. 

6. Interrupt 9 will occur if the second or subsequent 
words of a floating point operand fall outside a 
segment’s size. Interrupt 13 will occur if the start- 
ing address of a numeric operand falls outside a 
segment’s size. An interrupt handler should be 
added to report these programming errors. 

In the protected mode, 8086/8087 application code 

can be directly ported via recompilation if the 80286 

memory protection rules are not violated. 
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ABSOLUTE MAXIMUM RATINGS^ 


Ambient Temperature Under Bias 0®C to 70“C 

Storage Temperature -65“C to + 1 50°C 

Case Temperature O^C to 85®C 

Voltage on any Pin with 

Respect to Ground - 1 .0 to + 7V 

Power Dissipation 3.0 Watt 


* Notice: Stresses above those listed under “Abso- 
lute Maximum Ratings” may cause permanent dam- 
age to the device. This is a stress rating only and 
functional operation of the device at these or any 
other conditions above those indicated in the opera- 
tional sections of this specification is not implied. Ex- 
posure to absolute maximum rating conditions for 
extended periods may affect device reliability. 


D.C. CHARACTERISTICS Ta = 0‘’C to 70°C. Tc = o°c to 85*^0, Vcc = 5V ±5% 


ALL SPEEDS SELECTIONS 


Symbol 

Parameter 

Min 

Max 

Unit 

Test Conditions 

V|L 

Input LOW Voltage 

-0.5 

0.8 

V 


V|H 

Input HIGH Voltage 

2.0 

Vcc +0.5 

V 


V|HC 

Clock Input HIGH Voltage 






CKM = 1: 

2.0 

Vcc + 1 

V 



CKM = 0: 

3.8 

Vcc +1 

V 


V|LC 

Clock Input LOW Voltage 






CKM = 1 

-0.5 

0.8 

V 



CKM = 0 

-0.5 

0.6 

V 


VoL 

Output LOW Voltage 


0.45 

V 

Iql = 3.0 mA 

VoH 

Output HIGH Voltage 

2.4 


V 

Iqh = -400 jixA 

Ili 

Input Leakage Current 

• 

±10 

jmA 

OV ^ V|N ^ Vcc 

Ilo 

Output Leakage Current 

• 

±10 

juA 

0.45V ^ VouT ^ Vcc 

Icc 

Power Supply Current 




11 

o 

o 

o 






Ta = 25‘‘C 



• 


mA 

Ta = 70“C 

C|N 

Input Capacitance 

• 

10 

PF 

Fc = MHz 

Co 

Input/Output Capacitance 
(D0-D15) 

• 

20 

PF 

Vc = 1 MHz 

CcLK 

CLK Capacitance 

• 

12 . 

pF 

Fc = 1 MHz 
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A.C. CHARACTERISTICS Ta = 0”C to 70°c, Tcase = o°c to 85°C, Vcc = 5V ±5% 

TIMING REQUIREMENTS 


A.C. timings are referenced to 0.8V and 2.0V points on signals unless otherwise noted. 




80287-6 

80287-8 

80287-10 


Test 

Conditions 

Symbol 

Parameter 

6 MHz 

8 MHz 

10 MHz 

Units 



Min 

Max 

Min 

Max 

Min 

Max 


Tclcl 

CLK Period 










CKM = 1: 

166 

500 

125 

500 

100 

500 

ns 



CKM = 0: 

62.5 

166 

50 

166 

40 

166 

ns 


Tclch 

CLK LOW Time 










CKM = 1: 

100 

343 

68 

343 

62 

343 

ns 

At 0.8V 


CKM = 0: 

15 

146 

15 

146 

11 

146 

ns 

At 0.6V 

Tchcl 

CLK HIGH Time 










CKM = T. 

50 

230 

43 

230 

28 

230 

ns 

At 2.0V 


CKM = 0: 

20 

151 

20 

151 

18 

151 

ns 

At 3.6V 

TcH1CH2 

CLK Rise Time 


10 


10 


10 

ns 

1.0V to 3.6V 
if CKM = 0 

TcL2CL1 

CLK Fall Time 


10 


10 


10 

ns 

3.6V to 1.0V 

If CKM = 0 

Tdywh 

Data Setup to 

NPWR Inactive 

75 


75 


75 


ns 


Twhdx 

Data Hold from 

NPWR Inactive 

30 


18 


18 


ns 


TwLWH 

NPWR NPRD 

95 


90 


90 


ns 

At 0.8V 

Trlrh 

Active Time 









Tavwl 

Command Valid 









Tavrl 

to NPWR or 
NPRDActive 

0 


0 


0 


ns 


TmHRL 

Minimum Delay 
from PEREQ Active 
to NPRD Active 

130 


130 


100 


ns 


TkLKH 

PEAK Active Time 

85 


85 


60 


ns 

At 0.8V 

Tkhkl 

PEAK Inactive Time 

250 


250 


200 


ns 

At 2.0V 

TkHCH 

PEAK Inactive to 
NPWR, NPRD 
Inactive 

50 


40 


40 


ns 


Tchkl 

NPWR, NPRD 
Inactive to 

PEAK Active 

-30 


-30 


-30 


ns 


TwHAX 

Command Hold 









TrhAX 

from NPWR, 

NPRD Inactive 

30 


30 


22 


ns 


TkLCL 

PEAK Active 

Setup to NPWR 

NPRD Active 

50 


40 


40 


ns 
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A.e. CHARACTERISTICS Ta = O-C to 70°C, Tcase = O'C to 85°C, Vcc = 5V ±5% (Continued) 

TIMING REQUIREMENTS (Continued) 


A.C. timings are referenced to 0.8V and 2.0V points on signals unless otherwise noted. 


Symbol 

Parameter 

80287-6 

6 MHz 

80287-8 

8 MHz 

80287-10 

10 MHz 

Units 

Test 

Conditions 

Min 

Max 

Min 

Max 

Min 

Max 

TiVCL 

NPWR, NPRD 
to CLK Setup Time 

70 


70 


53 


ns 

(Note 1 ) 

TclIH 

NPWR, NPRD 
from CLK Hold Time 

45 


45 


37 


ns 

(Note 1 ) 

Trscl 

RESET to CLK 

Setup Time 

20 


20 


20 


ns 

(Note 1) 

Tclrs 

RESET from CLK 

Hold Time 

20 


20 


20 


ns 

(Note 1) 


TIMING RESPONSES 




80287-6 

80287-8 

80287-10 


Test 

Conditions 

Symboi 

Parameter 

6 MHz 

8 MHz 

10 MHz 

Units 



Min 

Max 

Min 

Max 

Min 

Max 


Trhqz 

NPRD Inactive to 
Data Float 


37.5 


35 


21 

ns 

(Note 2) 

TrlOV 

NPRD Active to 

Data Valid 


60 


60 


60 

ns 

(Note 3) 

TilbH 

ERROR Active to 
BUSY Inactive 

100 


100 


100 


ns 

(Note 4) 

Twlbv 

NPWR Active to 


100 


100 


100 

ns 

(Note 5) 


BUSY Active 









TkLML 

PEAK Active to 
PEREQ Inactive 


127 


127 


100 

ns 

(Note 6) 

TcMDI 

Command Inactive 
Time 










Write-to-Write 

95 


95 


75 


ns 

At 2.0V 


Read-to-Read 

95 


95 

' 

75 


ns 

At 2.0V 


WrIte-to-Read 

95 


95 


75 


ns 

At 2.0V 


Read-to-WrIte 

95 


95 


75 


ns 

At 2.0V 

TrhQH 

Data Hold from 
NPRD Inactive 

3 


3 


3 


ns 

(Note 7) 


NOTES: 

1 . This is an asynchronous input. This specification is given for testing purposes only, to assure recognition at a specific CLK 
edge. 

2. Float condition occurs when output current is less than Ilq on Db-D15. 

3. D0-D15 loSiNF<^: XL = 100 pF. 

4. BUSY loading: CL = 100 pF. 

5. BUSY loading: CL = 100 pF. 

6. On last data transfer on numeric instruction. 

7. D0-D15 loading: CL = 100 pF. 
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WAVEFORMS 


DATA TRANSFER TIMING (Initiated by 80286) 



L . 


CMDO CMD1 Vl 

N^,NPS2 A 

C— 3 

VALID 

K 






d -2 



TAVRL^ 


Z—m 


DATA 

TRANSFER 

FROM 

80287 


TRLQV 

TRHQH 

(u77Y 

DATA OUT ^ 

NPWR 

...lAXiiii 

VA 

LID 1^ 

) 


^ lAVWL 







t 

J 

1 TDVWH 

/ 

^TWHDX^ 

DATA 

TRANSFER 

TO 

Do-D,5 data may change 

) 

DATA IN 

VALID ^ 

, 80287 

Y DATA MAY CHANGE 

— 

TWLBN |- 



BUSY ^ 


r 

210920-12 


DATA CHANNEL TIMING (Initiated by 80287) 


CMDO.CMDI ^ ^ ^ -3 r-> 

RPSi.NPS2 VALID ^ 

_J TAVWL 
tavrl 

C 

TRHAX ^ 

TWHAX 

NPRD*NPWR 

Tr.Mni wn— — 

tmhrl ► 

L—4 

^ TCLML ► 


^ TCHKL ► 

1 

PEREQ /T 

y\ TKLCL ► 



c 



TKLML ►! 


TKHCH 


-^TKHKI 


PEACK \ 


? 7 

c 

TKLKH ► 




210920-13 
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NOTE: 

Reset, NPWR, NPRD are inputs asynchronous to CLK. Timing requirements on this page are given for testing purposes only, 
to assure recognition at a specific CLK edge. 
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Table 6. 80287 Extensions to the 80286 Instruction Set 


Data Transfer 

FLO = LOAD 

Integer/Real Memory to ST{0) 



Optional 

I Clock Count Range 



8.16 Bit 

32 Bit 

32 Bit 

64 Bit 

16 Bit 


Diaplacament 

Real 

Integer 

Real 

Integer 

MF 

00 

01 

10 

11 


I ESCAPE MF 1 I MOD 0 0 0 R/M | ~ ” DISP" ", 

DISP ~! 


Long Integer Memory to ST(0) ESCAPE 111 MOD 1 0 1 R/M 


Temporary Real Memory to 
ST(0) 

BCD Memory to ST(0) 

ST(i) to ST(0) 

FST = STORE 

ST{0) to Integer/Real Memory 
ST(0) to ST(i) 

FSTP = STORE AND POP 
ST(0) to Integer/Real Memory 


ST(0) to Temporary Real 
Memory 

ST(0) to BCD Memory 
ST(0) to ST(i) 

FXCH = Exchange ST(i) and 
ST(0) 

Comparison 
FCOM = Compare 
integer/Real Memory to ST(0) 

ST(i) to ST (0) 

FCOMP = Compare and Pop 

Integer/Real Memory to ST(0) 
ST(i) to ST(0) 

FCOMPP = Compare ST(1) to 
ST(0) and Pop Twice 

FTST = Test ST(0) 

FXAM = Examine ST(0) 


ESCAPE oil mod 1 0 1 R/M 


DISP 



38-56 52-60 40-60 46-54 

60-68 

53-65 

290-310 

17-22 

84-90 82-92 96-104 80-90 

15-22 

86-92 84-94 98-106 82-92 

94-105 

52-58 

520-540 

17-24 

10-15 


60-70 78-91 65-75 72-86 

40-50 


63-73 80-93 67-77 74-88 

45-52 

45-55 

38-48 

12-23 
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CKM = 0 

j;Jv cKiirn^ 


3.6V CKM = 0 
2.0V CKM = 1 


- 3.6V CKM = 0 
2.0V CKM - 1 


0.45V CKM = 0 
0.45V CKM = 1 


- 1.0V CKM - 0 
iO.aV CKM = 1 


- 1.0V CKM = 0 
0.8V CKM - 1 


AC Drive and Measurement Points — CLK Input 
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Table 6. 80287 Extensions to the 80286 Instruction Set (Continued) 


Constants 



Optional 

1 Clock Count Rang* 



B,16 Bit 

32 Bit 

32 Bit 

64 Bit 

16 Bit 


Diaplacamant 

1 

Real 

Intagar 

Raal 

Intagar 

MF 

00 

01 

10 

11 


FLDZ = LOAD + 0.0 into ST{0) ESCAPE 00111 101110 


FLD1 = LOAD + 1 .0 into ST{0) | ESCAPE 00 1 [11 101000 

FLDPI = LOAD ;r into ST(0) I ESCAPE 0 0 1 111 101011 


FLDL2T = LOAD log 2 10 into 
ST(0) 

FLDL2E = LOAD log 2 e into 
ST(0) 

FLOLG2 = LOAD logio 2 into 
ST(0) 


FLOLN2 = LOAD loge2 into 
ST(0) 


Arithmetic 

FADD = Addition 


ST(i) and ST(0) 

FSUB = Subtraction 
Integer/Real Memory with ST{0) 

ST(i) and ST(0) 

FMUL = Multiplication 
Integer/Real Memory with ST(0) 

ST(i) and ST(0) 

FDIV = Division 


ESCAPE 00111 101001 


ESCAPE 00111 101010 


ESCAPE 00111 101100 


ESCAPE 00111 101101 


1 ESCAPE 

MF 


MOD 

0 

0 

0 

R/M 

1 DISP ' 










1 ESCAPE 

d P 

iJ 

1 ^ ^ 

0 

0 

0 

ST(i) 











1 ESCAPE 

MF 

0 

1 MOD 

1 

0 

R 

R/M ' 

1 DISP 1 










1 ESCAPE 

d P 

0 

1 1 

1 

0 

R 

R/M 

1 


ST(i) and ST{0) 


ST(0) -ST(1) 


ESCAPE 

MF 

0 

MOD 

0 

0 

1 

R/M 

DISP 1 










ESCAPE 

d 

P 

0 

’ ’ 

0 

0 

1 

R/M 1 










ESCAPE 

MF 

0 

MOD 

1 

1 

R 

R/M 



DISP ■ 










ESCAPE 

d 

P 

iJ 

' ’ 

1 

1 

R 

R/M 











ESCAPE 

0 

0 

I] 

1 1 

1 

1 

1 

0 1 0 











1 ESCAPE 

0 

0 

I] 

1 ^ ^ 

1 

1 

1 

1 0 1 











1 ESCAPE 

0 

0 

T] 

1 1 

1 

1 

1 

0 0 0 



11-17 

15- 21 

16- 22 

16-22 

15-21 

18-24 


90-120 108-143 95-125 102-137 

70-100 (Note 1) 

90-120 108-143 95-125 102-137 

70-100 (Notel) 

110-125 130-144 112-168 124-138 
90-145 (Note 1) 

215-225 230-243 220-230 224-238 
193-203 (Note 1) 

180-186 

32-38 

15-190 


FRNDINT = Round ST(0) to I ESCAPE 0 0 1 I 1 1 11 1 1 0 0 I 

Integer 


NOTE: 

1 . If P = 1 then add 5 clocks. 
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Table 6. 80287 Extensions to the 80286 Instruction Set (Continued) 


Optional 
8,16 Bit 
Displacement 


FXTRACT - Extract 
Components of St(0) 


FABS - Absolute Value of 
ST(0) 


ESCAPE 00111 110100 


ESCAPE 0 0 1 


1 1 1 0 0 0 0 1 


FCHS - Change Sign of ST(0) | ESCAPE 0 0 1 

Transcendental 


FPTAN - Partial Tangent of 
ST(0) 


1 1 0 0 0 0 0 


ESCAPE 00111 110010 


FPATAN = Partial Arctangent 
of ST(0) -ST(1) 

F2XM1 = 


FYL2X = ST(1)* Log2 
IST(0)| 

FYL2XP1 = ST(1)* Log2 
IST(O) +1 I 

Processor Control 

FINIT = Initialize NPX 

FSETPM = Enter Protected 
Mode 

FSTSWAX - Store Control 
Word 

FLDCW = Load Control Word 
FSTCW = Store Control Word 
FSTSW = Store Status Word 
FCLEX = Clear Exceptions 
FSTENV = Store Environment 
FLDENV = Load Environment 
FSAVE = Save State 
FRSTOR = Restore State 


FINCSTP = Increment Stack 
Pointer 


FDECSTP = Decrement Stack 
Pointer 


ESCAPE 00111 110011 


ESCAPE 00111 110000 


ESCAPE 00111 110001 


ESCAPE 00111 111001 


ESCAPE 01111 100011 


ESCAPE 01111 100100 


ESCAPE 1 1 1 

1 1 1 0 0 0 0 0 1 


ESCAPE 0 0 1 

MOD 1 0 1 R/M 1 


ESCAPE 0 0 1 

MOD 1 1 1 R/M I 


ESCAPE 1 0 1 

MOD 1 1 1 R/M 


ESCAPE 0 1 1 

1 1 1 0 0 0 1 0 1 


ESCAPE 0 0 1 MOD 1 1 0 R/M 


ESCAPE 0 0 1 mod 1 0 0 R/M 


ESCAPE 1 0 


MOD 1 1 0 R/M 


ESCAPE. 1 0 1 I MOD 1 0 0 R/M 


1 ESCAPE 

0 

0 1 1 

1 1 1 110 111 


1 ESCAPE 

0 

0 1 1 

1 1 1 1 1 0 1 1 0 1 


Clock Count Range 


30-540 

250-000 

310-630 

900-1100 

700-1000 



2-8 

2-8 

10-16 

DISP 

7-14 

DISP I 

12-18 

DISP • 

12-18 


2-0 

DISP 

40-50 

DISP J 

35-45 

DISP j 

205-215 

DISP • 

205-215 

1 

6-12 

6-12 
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Table 6. 80287 Extensions to the 80286 Instruction Set (Continued) 



NOTES: 

1. if mod = 00 then DISP = 0*, disp-low and disp-high are absent 

if mod = 01 then DISP = disp-low sign-extended to 16-bits, disp-high is absent 
if mod = 10 then DISP = disp-high; disp-low 
if mod = 1 1 then r/m is treated as an St(i) field 

2. if r/m = 000 then EA = (BX) + (SI) +DISP 

if r/m = 001 then EA = (BX) + (Dl) +DISP 

if r/m = 010 then EA = (BP) + (SI) +DISP 

if r/m = 011 then EA = (BP) + (Dl) +DISP 

if r/m = 100 then EA = (SI) + DISP 

if r/m = 101 then EA = (Dl) + DISP 
if r/m = 110 then EA = (BP) + DISP 

if r/m = 111 then EA = (BX) + DISP 

*except if mod = 000 and r/m =110 then EA = disp-high; disp-low. 

3. MF = Memory Format 

00 — 32-bit Real 

01— 32-bit Integer 

10 — 64-bit Real 

11 — 16-bit Integer 

4. ST(0) = Current stack top 

ST(i) = ith register below stack top 

5. d = Destination 

0 — Destination is ST(0) 

1 — Destination is ST(i) 

6. P = Pop 

0- ^No pop 

1— Pop ST(0) 

7. R = Reverse: When d = 1 reverse the sense of R 

0 — Destination (op) Source 

1 — Source (op) Destination 

8. For FSQRT: -0 ^ ST(0) ^ 

For FSCALE: -215 ^ ST(1) < +215 and ST(1) integer 

For F2XM1: 0 ^ ST(0) ^ 2-1 

For FYL2X: 0 < ST(0) < «> 

-oo < ST(1) < +00 

For FYL2XP1: 0 ^ IST(0)l < (2 - \/2)/2 

- oo < ST(1) < oo 
For FPTAN: 0 ^ ST(0) ^71/4 

For FPATAN: 0 ^ ST(0) < ST(1) < + oo 

9. ESCAPE bit pattern is 11011. 
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82C288 

BUS CONTROLLER FOR 80286 PROCESSORS 
(82C288-12, 82C288-10, 82C288-8) 


■ Provides Commands and Controls for 
Local and System Bus 

■ Wide Flexibility in System 
Configurations 

■ High Speed CHMOS III Technology 

■ Fully Compatible with the HMOS 82288 


■ Fully Static Device 

■ Available in 20 Pin PLCC (Piastic 
Leaded Chip Carrier) and 20 Pin Cerdip 
Packages 

(See Packaging Spec, Order #231369) 


The Intel 82C288 Bus Controller is a 20-pin CHMOS ill component for use in 80286 microsystems. The 
82C288 is fully compatible with its predecessor the HMOS 82288. The bus controller is fully static and 
supports a low power mode. The bus controller provides command and control outputs with flexible timing 
options. Separate command outputs are used for memory and I/O devices. The data bus is controlled with 
separate data enable and direction control signals. 


Two modes of operation are possible via a strapping option: MULTIBUS® I compatible bus cycles, and high 
speed bus cycles. 


STATUS 


3-STATE 

COMMAND 

OUTPUTS 



Figure 1. 82C288 Block Diagram 


240042-1 


3-145 


September 1989 
Order Number: 240042-003 




20 Pin Cerdip Package 


READY L 1 
CLK [2 2 
SI Q] 3 
MCE [2 4 
ALE [2 5 
MB Q] 6 
CMDLY \2 7 
MRDC [2 8 
M^ Q 9 
GND n 10 


20 VCC 
19 ^ SO 
18 2 ] M/iO 
17 ^ DT/R 

16 2 ] den 

15 3 CEN/^ 
14 3] CENL 
13 2 ] 

12 2] 

11 n iowc 


P.C. Board Views — As viewed from the compo- 
nent side of the P.C. board. 


Component Pad Views — As viewed from under 
side of component when mounted on the board. 


20 Pin PLCC Package 


CENLC 14^^ 

12 11 10 

® 8 

□ 



CEN/^C 15 


7 

□ CMDLY 

MRDC 

8 

DENC 16 

82C288 

6 

□ MB 

CMDLY 

7 

DT/RC 17 


5 

□ ALE 

MB 

6 

M/idC 18 

O 

4 

□ MCE 

UJ 

< 

5 

19 

20 1 2 

3 J 


MUL 

4 


S i ^ ^ P 

i ^ Q o z 


9 10 11 12 13 



3 2 1 20 19 

^ 1^ 81^ 


14 CENL 

15 CEN/AEN 

16 DEN 

17 DT/R 

18 M/iO 
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Table 1. Pin Description 


The following pin function descriptions are for the 82C288 bus controller. 


Symbol 

Type 

Name and Function 

CLK 

I 

SYSTEM CLOCK provides the basic timing control for the 82C288 in an 80286 
microsystem. Its frequency is twice the internal processor clock frequency. The falling 
edge of this input signal establishes when inputs are sampled and command and control 



outputs change. 


S0,ST 

I 

BUS CYCLE STATUS starts a bus cycle and, along with M/IO, defines jhe type of bus 
cycle. These inputs are active LOW. A bus cycle is started when either SI or SO is 



sampled LOW at the falling edge of CLK. Setup and hold times must be met for proper 



operation. 





80286 Bus Cycle Status Definition 



M/IO 

SI 

so 

Type of Bus Cycle 



0 

0 

0 

Interrupt Acknowledge 



0 

0 

1 

I/O Read 



0 

1 

0 

I/O Write 



0 

1 

1 

None; Idle 



1 

0 

0 

Halt or Shutdown 



1 

0 

1 

Memory Read 



1 

1 

0 

Memory Write 



_Li 

1 

1 

None; Idle 

M/iO 

I 

MEMORY OR I/O SELECT determines whether the current bus cycle is in the memory 
space or I/O space. When LOW, the current bus cycle is in the I/O space. Setup and 
hold times must be met for proper operation. 

MB 

I 

MULTIBUS MODE SELECT determines timing of the command and control outputs. 

When HIGH, the bus controller operates with MULTIBUS 1 compatible timings. When 

LOW, the bus controller optimizes the command and control output timing for short bus 
cycles. The function of the CEN/AEN input pin is selected by this signal. This input is 
typically a strapping option and not dynamically changed. 

CENL 

I 

COMMAND ENABLE LATCHED is a bus controller select signal which enables the bus 
controller to respond to the current bus cycle being initiated. CENL is an active HIGH 
input latched internally at the end of each Ts cycle. CENL Is used to select the 
appropriate bus controller for each bus cycle in a system where the CPU has more than 
one bus it can use. This input may be connected to Vcc to select this 82C288 for all 
transfers. No control inputs affect CENL. Setup and hold times must be met for proper 



operation. 


^ 

CMDLY 

I 

COMMAND DELAY allows delaying the start of a command. CMDLY Is an active HIGH 
input. If sampled HIGH, the command output is not activated and CMDLY Is again 
sampled at the next CLK cycle. When sampled LOW the selected command is enabled. If 
READY is detected LOW before the command output is activated, the 82C288 will 
terminate the bus cycle, even if no command was issued. Setup and hold times must be 
satisfied for proper operation. This input may be connected to GND if no delays are 
required before starting a command. This input has no effect on 82C288 control outputs. 

READY 

I 

READY indicates the end of the current bus cycle. READY is an active LOW input. 



MULTIBUS 

mode requires at least one wait state to allow the command outputs to I 



become active. READY must be LOW during reset, to force the 82C288 into the idle' 
state. Setup and hold times must be met for proper operation. The 82C284 drives READY 
LOW during RESET. 
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Table 1. Pin Description (Continued) 


Symbol 

Type 

Name and Function 

CEWl\^ 

I 

COMMAND ENABLE/ADDRESS ENABLE controls the command and DEN 
outputs of the bus controller. CEN/AEN inputs may be asynchronous to CLK. 
Setup and hold times are given to assure a guaranteed response to 
synchronous inputs. This input may be connected to Vcc or GND. 

When MB is HIGH this pin has the ABN function. AEN is an active LOW input 
which indicates that the CPU has been granted use of a shared bus and the 
bus contoller command outputs may exit 3-state OFF and become inactive 
(HIGH). AEN HIGH indicates that the CPU does not have control of the shared 
bus and forces the command outputs into 3-state OFF and DEN inactive 
(LOW). 

When MB is LOW this pin has the CEN function. CEN is an unlatched active 

HIGH input which allows the bus controller to activate its command and DEN 
outputs. With MB LOW, CEN LOW forces the command and DEN outputs 
inactive but does not trIstate them. 

ALE 

0 

ADDRESS LATCH ENABLE controls the address latches used to hold an 
address stable during a bus cycle. This control output is active HIGH. ALE will 
not be issued for the halt bus cycle and Is not affected by any of the control 
inputs. 

MCE 

0 

MASTER CASCADE ENABLE signals that a cascade address from a master 
8259A interrupt controller may be placed onto the CPU address bus for 
latching by the address latches under ALE control. The CPU’s address bus 
may then be used to broadcast the cascade address to slave interrupt 
controllers so only one of them will respond to the interrupt acknowledge cycle. 
This control output is active HIGH. MCE Is only active during interrupt 
acknowledge cycles and is not affected by any control input. Using MCE to 
enable cascade address drivers requires latches which save the cascade 
address on the falling edge of ALE. 

DEN 

0 

DATA ENABLE controls when data transceivers connected to the local data 
bus should be enabled. DEN is an active HIGH control output. DEN is delayed 
for write cycles in the MULTIBUS I mode. 

DT/R 

0 

DATA TRANSMIT/RECEIVE establishes the direction of data flow to or from 
the local data bus. When HIGH, this control output indicates that a write bus 
cycle is being performed. A LOW indicates a read bus cycle. DEN Is always 
inactive when DT/R changes states. This output Is HIGH when no bus cycle is 
active. DT/R is not affected by any of the control inputs. 

lOWC 

0 

I/O WRITE COMMAND instructs an I/O device to read the data on the data 
bus. This command output Is active LOW. The MB and CMDLY inputs control 
when this output becomes active. READY controls when it becomes Inactive. 

lORC 

0 

I/O READ COMMAND instructs an I/O device to place data onto the data bus. 
This command output is active LOW. The MB and CMDLY Inputs control when 
this output becomes active. READY controls when It becomes inactive. 

MWTC 

0 

MEMORY WRITE COMMAND instructs a memory device to read the data on 
the data bus. This command output is active LOW. The MB and CMDLY inputs 
control when this output becomes active. READY controls when It becomes 
inactive. 

MRDC 

0 

MEMORY READ COMMAND instructs the memory device to place data onto 
the data bus. This command output is active LOW. The MB and CMDLY inputs 
control when this output becomes active. READY controls when it becomes 
inactive. 
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Table 1. Pin Description (Continued) 


Symbol 

Type 

Name and Function 

INTA 

0 

INTERRUPT ACKNOWLEDGE tells an interrupting device that Its interrupt 
request is being acknowledged. This command output is active LOW. The MB 
and CMDLY inputs control when this output becomes active. READY controls 
when it becomes inactive. 

Vcc 


System Power: + 5V Power Supply 

GND 


System Ground: OV 


Table 2. Commanc^ and Control Outputs for Each Type of Bus Cycle 


Type of 

Bus Cycle 

M/IO 

SI 

so 

Command 

Activated 

DT/R 

State 

ALE, DEN 
Issued? 

MCE 

Issued? 

Interrupt Acknowledge 

0 

0 

0 

INTA 

LOW 

YES 

YES 

I/O Read 

0 

0 

1 

lORC 

LOW 

YES 

NO 

I/O Write 

0 

1 

0 

lOWC 

HIGH 

YES 

NO 

None; Idle 

0 

1 

1 

None 

HIGH 

NO 

NO 

Halt/Shutdown 

1 

0 

0 

None 

HIGH 

NO 

NO 

Memory Read 

1 

0 

1 

MRDC 

LOW 

YES 

NO 

Memory Write 

1 

1 

0 

MWTC 

HIGH 

YES 

NO 

None; Idle 

1 

1 

1 

None 

HIGH 

NO 

NO 


Operating Modes 

Two types of buses are supported by the 82C288: 
MULTIBUS I and non-MULTIBUS I. When the MB 
input is strapped HIGH, MULTIBUS I tinning is used. 
In MULTIBUS I mode, the 82C288 delays command 
and data activation to meet IEEE-796 requirements 
on address to command active and write data to 
command active setup timing. MULTIBUS I mode 
requires at least one wait state in the bus cycle since 
the command outputs are delayed. The non- 
MULTIBUS I mode does not delay any outputs and 
does not require wait states. The MB input affects 
the timing of the command and DEN outputs. 


Command and Control Outputs 

The type of bus cycle performed by thejocal bus 
master is encoded in the M/IO, S1, and SO inputs. 
Different command and control outputs are activat- 
ed depending on the type of bus cycle. Table 2 indi- 
cates the cycle decode d^ne by the 82C288 and the 
effect on command, DT/R, ALE, DEN, and MCE out- 
puts. 

Bus cycles come in three forms: read, write, and 
halt. Read bus cycles include memory read, I/O 
read, and interrupt acknowledge. Th e timing of the 
associated read command outputs (MRDC, lORC, 


and INTA), control output s (ALE, DEN, DT/R) and 
control inputs (CEN/AEN, CENL, CMDLY, MB, and 
READY) are identical for all read bus cycles. Read 
cycles differ only in which command output is acti- 
vated. The MCE control output Is only asserted dur- 
ing interrupt acknowledge cycles. 

Write bus cycles activate different control and com- 
mand outputs with different timing than read bus cy- 
cles. Memory write and I/O write are w rite bus cy- 
cles w hose timing for command outputs (MWTC and 
lOWC), control ou tputs (ALE, DEN, DT/R) and con- 
trol inp uts (CEN/AEN, CENL, CMDLY, MB, and 
READY) are identical. They differ only in which com- 
mand output is activated. 

Halt bus cycles are different because no command 
or control output is activated. All control inputs are 
ignored until the next bus cycle Is started via S1 and 
SO. 


Static Operation 

All 82C288 circuitry is of static design. Internal regis- 
ters and logic are static and require no refresh as 
with dynamic circuit design. This eliminates the mini- 
mum operating frequency restriction placed on the 
HMOS 82288. The CHMOS III 82C288 can operate 
from DC to the appropriate upper frequency limit. 
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The clock may be stopped in either state (HIGH/ 
LOW) and held there Indefinitely. 

Power dissipation Is directly related to operating fre- 
quency. As the system frequency is reduced, so Is 
the operating power. When the clock is stopped to 
the 82C288, power dissipation is at a minimum. This 
Is useful for low-power and portable applications. 


FUNCTIONAL DESCRIPTION 


Introduction 

The 82C288 bus controller Is used in 80286 systems 
to provide address latch control, data transceiver 
control, and standard level-type command outputs. 
The command outputs are timed and have sufficient 
drive capabilities for large TTL buses and meet all 
IEEE-796 requirements for MULTIBUS I. A special 
MULTIBUS I mode is provided to satisfy all address/ 
data setup and hold time requirements. Command 
timing may be tailored to special needs via a CMDLY 
input to determine the start of a command and 
READY to determine the end of a command. 

Connection to multiple buses are supported with a 
latched enable input (CENL). An address decoder 
can determine which. If any, bus controller should be 
enabled for the bus cycle. This input Is latched to 
allow an address decoder to take full advantage of 
the pipelined timing on the 80286 local bus. 


Buses shar ed by several bus controllers are sup- 
ported. An AEN input prevents the bus Controller 
from driving the shared bus command and data 
signals except when enabled by an external 
MULTIBUS I type bus arbiter. 

Separate DEN and DT/R outputs control the data 
transceivers for all buses. Bus contention is eliminat- 
ed by disabling DEN before changing DT/R. The 
DEN timing allows sufficient time for trIstate bus driv- 
ers to enter 3-state OFF before enabling other driv- 
ers onto the same bus. 

The term CPU refers to any 80286 processor or 
80286 support component which may become an 
80286 local bus master and thereby drive the 
82C288 status inputs. 


Processor Cycle Definition 

Any CPU which drives the local bus uses an internal 
clock which is one half the frequency of the system 
clock (CLK) (see Figure 3). Knowledge of the phase 
of the local bus master Internal clock is required for 
proper operation of the 80286 local bus. The local 
bus master Informs the bus controller of its internal 
clock phase when It asserts the status signals. 
Status signals are always asserted beginning in 
Phase 1 of the local bus master’s internal clock. 


82C284 

(FOR REFERENCE) 
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Figure 3. CLK Relationship to the Processor Clock and Bus T-States 
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Bus State Definition 

The 82C288 bus controller has three bus states (see 
Figure 4): Idle (T|) Status (Ts) and Command (Tc). 
Each bus state is two CLK cycles long. Bus state 
phases correspond to the internal CPU processor 
clock phases. 

The T| bus state occurs when no bus cycle is cur- 
rently active on the 80286 local bus. This state may 
be repeated indefinitely. When control of the local 
bus is being passed between masters, the bus re- 
mains in the T| state. 


NEW CYCLE 



NEW CYCLE 

240042-6 


Bus Cycle Definition 

The ST and SO inputs signal the start of a bus cycle. 
When either input becomes LOW, a bus cycle Is 
started. The Ts bus state is defined to be the two 
CLK cycles during which either S1 or SO are active 
(see Figure 5). These inputs are sampled by the 
82C288 at every falling edge of CLK. When either 
S1 or SO are sampled LOW, the next CLK cycle is 
considered the second phase of the internal CPU 
clock cycle. 

The local bus enters the Tc bus state after the Ts 
state. The shortest bus cycle may have one Ts state 
and one Tc state. Longer bus cycles are formed by 
repeating Tc state. A repeated Tc bus state is called 
a wait state. 


The READY Input determines wheth er the c urrent 
Tc bus state is to be repeated. The READY Input 
has the same timing and effect for ail bus cycles. 
READY is sampled at the end of each Tc bus state 
to see If it Is active. If sampled HIGH, the Tc bus 
state Is repeated. This Is called Inserting a wait state. 
The control and command outputs do not change 
during wait states. 


When READY is sampled LOW, the current bus cy- 
cle is terminated. Note that the bus controller may 
enter the Ts bus state directly from Tc if the status 
lines are sampled active at the next falling edge of 
CLK. 


Figure 4. 82C288 Bus States 



240042-7 

Figure 5. Bus Cycle Definition 
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Figures 6 through 10 show the basic command and 
control output timing for read and write bus cycles. 
Halt bus cycles are not shown since they activate no 
outputs. The basic idle-read-idle and idle-write-idle 
bus cycles are shown. The signal label CMD repre- 
sents the appropriate command output for the bus 
cycle. For Figures 6 through 10, the CMDLY input is 
connected to GND and CENL to Vcc- The effects of 
CENL and CMDLY are described later in the section 
on control inputs. 

Figures 6, 7 and 8 show non-MULTIBUS I cycles. 
MB is connected to GND while CEN is connected to 
Vcc- Figure 6 shows a read cycle with no wait states 
while Figur e 7 sho ws a write cycle with one wait 
state. The READY input is shown to illustrate how 
wait states are added. 



Figure 6. Idle-Read-ldle Bus Cycles with MB = 0 



Figure 7. Idle-Write-ldle Bus Cycles with MB = 0 
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Bus cycles can occur back to back with no T| bus 
states between Tc and Ts- Back to back cycles do 
not affect the timing of the command and control 
outputs. Command and control outputs always 
reach the states shown for the same clock edge 
(within Ts, Tc or following bus state) of a bus cycle. 

A special case in control timing occurs for back to 
back write cycles with MB = 0. In this case, DT/R 
and DEN remain HIGH between the bus cycles (see 
Figure 8). The command and ALE output timing 
does not change. 

Figur es 9 a nd 10 show a MULTIBUS I cycle with MB 
= 1. AEN and CMDLY are c onnected to GND. The 
effects of CMDLY and AEN are described later in 
the section on control inputs. Figure 9 shows a read 
cycle with one wait state and Figure 10 shows a 
write cycle with two wait states. The second wait 
state of the write cycle is shown only for e xample 
purposes and Is not required. The READY input is 
shown to illustrate how wait states are added. 


Figure 8. Write-Write Bus Cycles with MB = 0 


1ST WRITE CYCLE - 


- 2ND WRITE CYCLE 
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Figure 9. Idle-Read-Idle Bus Cycles with 1 Wait State and with MB = 1 
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Figure 10. Idle-Write-ldle Bus Cycles with 2 Wait States and with MB = 1 


The MB control input affects the timing of the com- 
mand and DEN outputs. These outputs are automat- 
ically delayed in MULTIBUS I mode to satisfy three 
requirements: 

1) 50 ns minimum setup time for valid address be- 
fore any command output becomes active. 

2) 50 ns minimum setup time for valid write data 
before any write command output becomes ac- 
tive. 

3) 65 ns maximum time from when any read com- 
mand becomes inactive until the slave’s read 
data drivers reach 3-state OFF. 

Three signal transitions are delayed by MB = 1 as 
compared to MB = 0: 

1) The HIGH to LOW t r ansition of t he re ad com- 
mand outputs (lORC, MRDC, and INTA) are de- 
layed one CLK cycle. 

2) The HIGH to L OW tr ansiti on of th e write com- 
mand outputs (lOWC and MWTC) are delayed 
two CLK cycles. 

3) The LOW to HIGH transition of DEN for write cy- 
cles Is delayed one CLK cycle. 


Back to back bus cycles with MB = 1 do not change 
the timing of any of the command or control outputs. 
DEN always becomes inactive between bus cycles 
with MB = 1. 

Except for a halt or shutdown bus cycle, ALE will be 
issued during the second half of Ts for any bus cy- 
cle. ALE becomes Inactive at the end of the Ts to 
allow latching the address to keep it stable during 
the entire bus cycle. The address outputs may 
change during Phase 2 of any Tq bus state. ALE is 
not affected by any control input. 

Figure 1 1 shows how MCE Is timed during interrupt 
acknowledige (INTA) bus cycles. MCE is one CLK 
cycle longer than ALE to hold the cascade address 
from a master 8259A valid after the falling edge of 
ALE. With the exception of the MCE control output, 
an INTA bus cycle is Identical in timing to a read bus 
cycle. MCE is not affected by any control input. 
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Figure 11. MCE Operation for an iNTA Bus Cycie 


Control Inputs 

The control intputs can alter the basic timing of com- 
mand outputs, allow interfacing to multiple buses, 
and share a bus between different masters. For 
many 80286 systems, each CPU will have more than 
one bus which may be used to perform a bus cycle. 
Normally, a CPU will only have one bus controller 
active for each bus cycle. Some buses may be 
shared by more than one CPU (i.e. MULTIBUS) re- 
quiring only one of them use the bus at a time. 

Systems with multiple and shared buses use two 
control inp ut sig nals of the 82C288 bus controller, 
CENL and AEN (see Figure 12). CENL enables the 
bus c ontroller to control the current bus cycle. The 
AEN Input prevents a bu s controller from driving its 
command outputs. AEN HIGH means that another 
bus controller may be driving the shared bus. 

In Figure 12, two buses are shown: a local bus and a 
MULTIBUS I. Only one bus is used for each CPU 
bus cycle. The CENL inputs of the bus controller 
select which bus controller is to perform the bus cy- 
cle. An address decoder determines which bus to 
use for each bus cycle. The 82C288 connected to 
the shared MULTIBUS I must be selected by CENL 
and be given access to the MULTIBUS I by AEN 
before it will begin a MULTIBUS I operation. 


CENL must be sampled HIGH at the end of the Ts 
bus state (see waveforms) to enable the bus control- 
ler to activate its command and control outputs. If 
sampled LOW _Uie commands and DEN will not go 
active and DT/R will remain HIGH. T he bus c ontrol- 
ler will ignore the CMDLY, CEN, and READY inputs 
until another bus cycle is started via SI and SO. 
Since an address decoder is commonly used to 
Identify which bus is required for each bus cycle, 
CENL is latched to avoid the need for latching its 
input. 

The CENL Input can affect the DEN control output. 
When MB = 0, DEN normally becomes active dur- 
ing Phase 2 of Ts in write bus cycles. This transition 
occurs before CENL is sampled. If CENL Is sampled 
LOW, the DEN output will be forced LOW during Tc 
as shown in the timing waveforms. 

When MB = 1 , CEN/A0^ becomes con- 

trols when the bus contr oller command outputs en- 
ter and exit 3-state OFF. AEN is intended to be driv- 
en by a MULTIBUS I type bus arbiter, which assures 
only one bus co ntrolle r is driving the shared bus at 
any time. When AEN makes a LOW to HIGH tran- 
sition, the command outputs immediately enter 
3-state OFF and DEN is forced Inactive. An inactive 
DEN should force the local data transceivers con- 
nected to the shared data bus into 3-state OFF (see 
Figure 12). The LOW to HIGH transition of AEN 
should only occur during T| or Ts bus states. 

The HIGH to LOW transition of AEN signals that the 
bus controller may now drive the shared bus com- 
mand signals. Since a bus cycle may be active or be 
In the process of st arting , AEN can become active 
during any T-state. AEN LOW immediately allows 
DEN to go to the appropriate state. Three CLK edg- 
es later, the command outputs will go active (see 
timing waveforms). The MULTIBUS I requires this 
delay for the address and data to be valid on the bus 
before the command becomes active. 

When MB = 0, CEN/AEN becomes CEN. CEN is an 
asynchronous input which immediately affects the 
command and DEN outputs. When CEN makes a 
HIGH to LOW transition, the commands and DEN 
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are immediately forced inactive. When CEN makes a Some memory or I/O systems may require more ad- 

LOW to HIGH transition, the commands and DEN dress or write data setup time to command active 

outputs immediatel y go to th e appropriate state (see than provided by the basic command output timing, 

timing waveforms). READY must still become active To provide flexible command timing, the CMDLY in- 
to terminate a bus cycle if CEN remains LOW for a put can delay the activation of command outputs, 

selected bus controller (CENL was latched HIGH). The CMDLY input must be sampled LOW to activate 

the command outputs. CMDLY does not affect the 
control outputs ALE, MCE, DEN, and DT/R. 



Figure 12. System Use of AEN and CENL 
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CMDLY is first sampled on the falling edge of the 
CLK ending Ts- If sampled HIGH, the command out- 
put is not activated, and CMDLY is again sampled 
on the next falling edge of CLK. Once sampled 
LOW, the proper command output becomes active 
Immediately if MB = 0. If MB = 1, the proper com- 
mand goes active no earlier than shown In Figures 9 
and 10. 


READY can terminate a bus cycle before CMDLY 
allows a command to be issued. In this case no 
commands are issued an the bus controller will de- 
activate DEN and DT/R in the same manner as if a 
command had been issued. 


sitions of all signals in all modes. Instead, all signal 
timing relationships are shown via the general cas- 
es. Special cases are shown when needed. The 
waveforms provide some functional descriptions of 
the 82C288; however, most functional descriptions 
are provided in Figures 5 through 1 1 . 

To find the timing specification for a signal transition 
in a particular mode, first look for a special case in 
the waveforms. If no special case applies, then use 
a timing specification for the same or related func- 
tion in another mode. 


Waveforms Discussion 

The waveforms show the timing relationships of In- 
puts and outputs and do not show ail possible tran- 
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* Notice: Stresses above those listed under “Abso- 
lute Maximum Ratings” may cause permanent dam- 
age to the device. This is a stress rating only and 
functional operation of the device at these or any 
other conditions above those indicated in the opera- 
tional sections of this specification is not implied. Ex- 
posure to absolute maximum rating conditions for 
extended periods may affect device reliability. 


D.C. CHARACTERISTICS Vcc = 5V ±5%,Tcase = 0°Cto85“C» 


Symbol 

Parameter 

^\n 

Max 

Units 

Test Conditions 

V|L 

Input LOW Voltage 

-0.5 

0.8 

V 


V|H 

Input HIGH Voltage 

2.0 

Vcc + 0.5 

V 


V|LC 

CLK Input LOW Voltage 

-0.5 

0.6 

V 


V|HC 

CLK Input HIGH Voltage 

3.8 

Vcc + 0.5 

V 


VoL 

Output LOW Voltage 






Command Outputs 


0.45 

V 

Iql = 32 mA (Motel) 


Control Outputs 


0.45 

V 

Iql = 10 mA (Note 2) 

VoH 

Output HIGH Voltage 






Command Outputs 

2.4 


V 

•oh = mA (Note 1) 



Vcc - 0.5 


V 

Iqh = -1 mA (Note 1) 


Control Outputs 

2.4 


V 

•oh = “1 mA (Note 2) 



Vcc - 0.5 


V 

Iqh = ~0.2 mA (Note 2) 

l|L 

Input Leakage Current 


±10 

jliA 

OV S V|N s Vcc 

•lo 

Output Leakage Current 


±10 

jjlA 

0.45V < VouT ^ Vcc 

•cc 

Power Supply Current 


75 

mA 


Iccs 

Power Supply Current (Static) 


3 

mA 

(Note 3) 

CcLK 

CLK Input Capacitance 


12 

PF 

Fc = 1 MHz 

C| 

Input Capacitance 


10 

PF 

Fc = 1 MHz 

Co 

Input/Output Capacitance 


20 

pF 

Fc = 1 MHz 


*Ta is guaranteed from 0°C to +70°C as long as Tcase is not exceeded. 


NOTES: 

1. Command Outputs are II^TA, lORC, lOWC, MRDC and MWRC. 

2. Control Outputs are DT/R, DEN, ALE and MCE. 

3. Tested while outputs are unloaded, and inputs at Vcc or Vss- 


ABSOLUTE MAXIMUM RATINGS^ 

Ambient Temperature Under Bias 0°C to + 70°C 
Storage Temperature - esX to + 1 50“C 

Voltage on Any Pin with 

Respect to GND - 0.5V to + 7V 

Power Dissipation 1 Watt 
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A.C. CHARACTERISTICS 

Vcc == 5V, +5%, Tcase = to +85“C.* AC timings are referenced to 0.8V and 2.0V points of signals as 
illustrated in data sheet waveforms, unless otherwise noted. 


Symbol 

Parameter 

8 MHz 

10 MHz 

12.5 MHz 

Unit 

Test 

Condition 

-8 

Min 

-8 

Max 

-10 

Min 

-10 

Max 

-12 

Min 

-12 

Max 

1 

CLK Period 

62 

250 

50 

250 

40 

250 

ns 


2 

CLK HIGH Time 

20 


16 


13 


ns 

at 3.6V 

3 

CLK LOW Time 

15 


12 


11 


ns 

at 1.0V 

4 

CLK Rise Time 


10 


8 


8 

ns 

1.0V to 3.6V 

5 

CLK Fall Time 


10 


8 


8 

ns 

3.6V to 1.0V 

6 

M/iO and Status 

Setup Time 

22 


18 


15 


ns 


7 

M/IO and Status 

Hold Time 

1 


1 


1 


ns 


8 

CENL Setup Time 

20 


15 


15 


ns 


9 

CENLHold Time 

1 


1 


1 


ns 


10 

READY Setup Time 

38 


26 


18 


ns 


11 

READY Hold Time 

25 


25 


20 


ns 


12 

CMDLY Setup Time ' 

20 


15 


15 


ns 


13 

CMDLY Hold Time 

1 


1 


1 


ns 


14 

AEN Setup Time 

20 


15 


15 


ns 

(Note 3) 

15 

Hold Time 

0 


0 


0 


ns 

(Note 3) 

16 

ALE, MCE Active 

Delay from CLK 

3 

20 

3 

16 

3 

16 

ns 

(Note 4) 

17 

ALE, MCE Inactive 
Delay from CLK 


25 


19 


19 

ns 

(Note 4) 

18 

DEN (Write) 

Inactive from CENL 


35 


23 


23 

ns 

(Note 4) 

19 

DT/R LOW from CLK 


25 


23 


23 

ns 

(Note 4) 

20 

DEN (Read) ActiveR 
from DT/ 

5 

35 

5 

21 

5 

21 

ns 

(Note 4) 

21 

DEN (Read) Inactive 
Dly from CLK 

3 

35 

3 

21 

3 

19 

ns 

(Note 4) 

22 

DT/R HIGH from 

DEN Inactive 

5 

35 

5 

20 

5 

18 

ns 

(Note 4) 

23 

DEN (Write) Active 
Delay from CLK 


30 


23 


23 

ns 

(Note 4) 

24 

DEN (Write) Inactive 
Dly from CLK 

3 

30 

3 

19 

3 

19 

ns 

(Note 4) 


*Ta is guaranteed from 0°C to +70‘’C as long as Tcase 's not exceeded. 
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A.C. CHARACTERISTICS 

Vcc = 5V, ±5%, Tcase = to +85°C.* AC timings are referenced to 0.8V and 2.0V points of signals as 
illustrated in data sheet waveforms, unless otherwise noted. (Continued) 


Symbol 

Parameter 

8 MHz 

10 MHz 

12.5 MHz 

Unit 

Test 

Condition 

-8 

Min 

-8 

Max 

-10 

Min 

-10 

Max 

-12 

Min 

■12 

Max 

25 

DEN Inactive from 

CEN 


30 


25 


25 

ns 

(Note 4) 

26 

DEN Active from 

CEN 


30 


24 


24 

ns 

(Note 4) 

27 

DT/R HIGH from CLK 
(when CEN = LOW) 


35 


25 


25 

ns 

(Note 4) 

28 

DEN Active from AEN 


30 


26 


26 

ns 

(Note 4) 

29 

CMD Active Delay 
from CLK 

3 

25 

3 

21 

3 

21 

ns 

(Note 5) 

30 

CMD Inactive Delay 
from CLK 

5 

20 

5 

20 

5 

20 

ns 

(Note 5) 

31 

CMD Active from 

CEN 


25 


25 


25 

ns 

(Note 5) 

32 

CMD Inactive from CEN 


25 


25 


25 

ns 

(Note 5) 

33 

CMD Inactive Enable from AEN 


40 


40 


40 

ns 

(Note 5) 

34 

CMD Float Delay from AEN 


. 40 


40 


40 

ns 

(Note 6) 

35 

MB Setup Time 

20 


20 


20 


ns 


36 

MB Hold Time 

0 


0 


0 


ns 


37 

Command Inactive Enable 
from MB i 


40 


40 


40 

ns 

(Note 5) 

38 

Command Float Time from MB t 


40 


40 


40 

ns 

(Note 6) 

39 

DEN Inactive from MB T 


30 


26 


26 

ns 

(Note 4) 

40 

DEN Active from MB i 


30 


30 


30 

ns 

(Note 4) 


*Ta Is guaranteed from 0°C to +70°C as long as Tcase is not exceeded. 


NOTES: 

3. AEN is an asynchronous input. This specification is for testing purposes only, to assure recognition at a specific CLK 
edge. 

4. Control output load: Cl = 1 50 pF. 

5. Command output load: Cl = 300 pF. 

6. Float condition occurs when output current is less than Ilo in magnitude. 
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Note 7: AC Setup, Hold and Delay Time Measurement — General 


DEVICE 

OUTPUT 


Cl 
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Note 8: AC Test Loading on Outputs 


WAVEFORMS 
CLK CHARACTERISTICS 



6 
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WAVEFORMS (Continued) 

STATUS, ALE, MCE, CHARACTERISTICS 



CENL, CMDLY, DEN CHARACTERISTICS WITH MB = 0 AND CEN = 1 DURING WRITE CYCLE 
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READ CYCLE CHARACTERISTICS WITH MB = 0 AND CEN = 1 
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WAVEFORMS (Continued) 

AEN CHARACTERISTICS WITH MB = 1 



NOTE: 

1 . AEN is an asynchronous input. AEN setup and hold time is specified to guarantee the response shown in the waveforms. 

MB CHARACTERISTICS WITH AEN/CEN = HIGH 



3 - 
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WAVEFORMS (Continued) 



NOTES: 

1 . MB is an asynchronous input. MB setup and hold times specifi ed to guarantee the response shown in the waveforms. 

2. If the setup time, t35, is met two clock cycles will occur before CMD becomes active after the falling edge of MB. 


DATA SHEET REVISION REVIEW 

The following list represents key differences between this and the -002 data sheet. Please review this summa- 
ry carefully. 

1 . The Ices specification was changed from 1 mA to 3 mA maximum. 

2. The “PRELIMINARY” markings have been removed from the data sheet. 
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82C284 

CLOCK GENERATOR AND READY INTERFACE 
FOR 80286 PROCESSORS 
(82C284-12, 82C284-10, 82C284-8) 

■ High Speed CHMOS HI Technology 

■ Generates System Reset Output 

■ Available in 18-Lead Cerdip and 20-Pin 
PLCC (Plastic Leaded Chip Carrier) 
Packages 

(See Packaging Spec, Order #231369) 

The 82C284 is a clock generator/driver whi ch prov ides clock signals for 80286 processors and support 
components. It also contains logic to supply READY to the CPU from either asynchronous or synchronous 
sources and synchronous RESET from an asynchronous input. 


■ Generates System Clock for 80286 
Processors 

■ Uses Crystal or TTL Signal for 
Frequency Source 

m Provides Local READY and 

MULTIBUS®! READY Synchronization 



3-166 


October 1989 
Order Number: 210453-010 








82C284 



18-Lead Cerdip 


SRDYEN C 3 



P.C. Board Views — As viewed from the compo- 
nent side of the P.C. Board. 


18 DVcc 

17 □ ARDYEN 
16 Dsi 
15 

82C284 DN.C. 

13 □ PCLK 
12 □ RESET 
11 I]RlS 
lOp CLK 

210453-2 

Component Pad Views — As viewed from under- 
side of component when mounted on the board. 


20 Pin PLCC 


,D.,ILn,.IUl. 


RESET C 
PCLKC 
GNDC 


, 13 12 11 10 9 


82C284 


S0CJ17 

riai8 


19 20 1 2 3 

T TT TTl T n r 


X o z o lo: 

9 10 11 12 13 



XJ 8 DO 
F/C 7 □ =0 
EFI 6 □ =0 


READY 5 0=0 


SRDYEN 4 OO 


o=n 

0=0 

0=0 


o4o 


> Z pc a: 

l< !</) 


NOTE: 

1 . N.C. Signals must not be connected. 


210453-18 



114 RESET 

115 PCLK 

116 GND 
I 17 SO 

I 18 SI 
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Figure 2. 82C284 Pin Configuration 
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Table 1. Pin Description 


The following pin function descriptions are for the 82C284 clock generator. 


Symbol 

Type 

Name and Function 

CLK 

0 

SYSTEM CLOCK is the signal used by the processor and support 
devices which must be synchronous with the processor. The frequency 
of the CLK output has twice the desired internal processor clock 
frequency. CLK can drive both TTL and MOS level inputs. 

F/C 

1 

FREQUENCY/CRYSTAL SELECT is a strapping option to select the 
source for the CLK output. When F/C js strapped LOW, the Internal 
crystal oscillator drives CLK. When F/C is strapped HIGH, the EFI 
input drives the CLK output. 

XI, X2 

1 

CRYSTAL IN are the pins to which a parallel resonant fundamental 
mode crystal is attached for the internal oscillator. When F/C is LOW, 
the Internal oscillator will drive the CLK output at the crystal frequency. 

The crystal frequency must be twice the desired internal processor 
clock frequency. 

EFI 

1 

EXTERNAL FREQUENCY IN drives CLK when the F/C input Is 
strapped HIGH. The EFI input frequency must be twice the desired 
internal processor clock frequency. 

PCLK 

0 

PERIPHERAL CLOCK is an output which provides a 50% duty cycle 
clock with 1 /2 the frequency of CLK. PCLK will be In phase with the 

Internal processor clock following the first bus cycle after the 
processor has been reset. 

ARDYEN 

1 

ASYNCHRONOUS READY ENABLE is an active LOW input which 
qualifies the ARDY input. ARDYEN selects ARDY as the source of 
ready for the current bus cycle. Inputs to ARDYEN may be applied 
asynchronously to CLK. Setup and hold times are given to assure a 
guaranteed response to synchronous inputs. 

ARDY 

1 

ASYNCHRONOUS READY Is an active LOW input used to terminate 
the current bus cycle. The ARDY input Is qualified by ARDYEN. Inputs 
to ARDY may be applied asynchronously to CLK. Setup and hold times 
are given to assure a guaranteed response to synchronous outputs. 

SRDYEN 

1 

SYNCHRONOUS READY ENABLE is an active LOW input which 
qualifies SRDY. SRDYEN selects SRDY as the source for READY to 
the CPU for the current bus cycle. Setup and hold times must be 
satisfied for proper operation. 

SRDY 

1 

SYNCHRONOUS READY is an active LOW input used to terminate 
the current bus cycle. The SRDY input is qualified by the SRDYEN 
input. Setup and hold times must be satisfied for proper operation. 

READY 

0 

READY is an active LOW output which signals the current bus cycle Is 
to be completed. The SRDY, SRDYEN, ARDY, ARDYEN, SI , SO and 

RES inputs control READY as explained later in the READY generator 
section. READY Is an open drain output requiring an external pull-up 
resistor. 
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Table 1. Pin Description (Continued) 


The following pin function descriptions are for the 82C284 clock generator. 


Symbol 

Type 

Name and Function 

S0,ST 

1 

STATUS input prepare the 82C284 for a subsequent bus cycle. SO and 

S1 synchronize PCLK to the Internal processor clock and control 

READY. These inputs have internal pull-up resistors to keep them 

HIGH if nothing is driving them. Setup and hold times must be satisfied 
for proper operation. 

RESET 

0 

RESET is an active HIGH output which is derived from the RES Input. 
RESET is used to force the system into an initial state. When RESET is 
active, READY will be active (LOW). 

RES 

1 

RESET IN is an active LOW input which generates the system reset 
signal, RESET. Signals to RES may be applied asynchronously to CLK. 
Setup and hold times are given to assure a guaranteed response to 
synchronous inputs. 

Vcc 


SYSTEM POWER: +5V Power Supply 

GND 


SYSTEM GROUND: OV 


FUNCTIONAL DESCRIPTION 


Introduction 

The 82C284 generates the clock, ready, and reset 
signals required for 80286 processors and support 
components. The 82C284 contains a crystal con- 
trolled oscillator, clock generator, peripheral clock 
generator, Multibus ready synchronization logic and 
system reset generation logic. 


Clock Generator 

The CLK output provides the basic timing control for 
an 80286 system. CLK has output characteristics 
sufficient to drive MOS devices. CLK is generated by 
either an internal crystal oscillator or an external 
source a^ selected by the F/C strapping option. 
When F/C Is LOW, the crystal oscillator drives the 
CLK output. When F/C is HIGH, the EFI input drives 
the CLK output. 

The 82C284 provides a second clock output, PCLK, 
for peripheral devices. PCLK is CLK divided by two. 
PCLK has a duty cycle of 50% and MOS output 
drive characteristics. PCLK is normally synchronized 
to the internal processor clock. 

After reset, the PCLK signal may be out of phase 
with the internal processor clock. The S1 and SO 
signals of the first bus cycle are used to synchronize 


PCLK to the internal processor clock. The phase of 
the PCLK output changes by extending its HIGH 
time beyond one system clock (see waveforms). 
PCLK is forced HIGH whenever either SO or S1 were 
active (LOW) for the two previous CLK cycles. PCLK 
continues to oscillate when both SO and S1 are 
HIGH. 

Since the phase of the Internal processor clock will 
not change except during reset, the phase of PCLK 
will not change except during the first bus cycle after 
reset. 


Oscillator 

The oscillator circuit of the 82C284 is a linear Pierce 
oscillator which requires an external parallel reso- 
nant, fundamental mode, crystal. The output of the 
oscillator is Internally buffered. The crystal frequency 
chosen should be twice the required internal proces- 
sor clock frequency. The crystal should have a typi- 
cal load capacitance of 32 pF. 

X1 and X2 are the oscillator crystal connections. For 
stable operation of the oscillator, two loading capac- 
itors are recommended, as shown in Table 2. The 
sum of the board capacitance and loading capaci- 
tance should equal the values shown. It Is advisable 
to limit stray board capacitances (not including the 
effect of the loading capacitors or crystal capaci- 
tance) to less than 10 pF between the XI and X2 
pins. Decouple Vcc and GND as close to the 
82C284 as possible. 
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CLK line at frequencies above 10 MHz to avoid sig- 
nal reflections and ringing. Termination is accom- 
plished by inserting a small resistor (typically lOn- 
7411) in series with the output, as shown in Figure 4. 
This is known as series termination. The resistor val- 
ue plus the circuit output impedance should be 
made equal to the impedance of the transmission 
line. 


CLK 

OUT 





R ^ ^ 

CLOSELY 




i ^ 

LOADS 


Ro w 2511 

; TRANSMISSION 

1 LINE 



L-vvv — f-) z >— 

CLOSELY 

PLACED 

LOADS 




210453-15 


Figure 4. Series Termination 


Reset Operation 

The reset logic provides the RESET output to force 
the system into a known, initial state. When the RES 
input Is active (LOW ), the RESET output becomes 
active (HIGH). RES Is synchronized internally at the 
falling edge of CLK before generating the RESET 
output (see waveforms). Synchronization of the RES 
input introduces a one or two CLK delay before af- 
fecting the RESET output. 


Ready Operation 

The 82C284 accepts two ready sources for the sys- 
tem ready signal which termin ates th e current bus 
cycle. Eithe r a sy nchronous (SRDY) or asynchro- 
nous ready (ARDY) s ource ma y be used. Eac h ready 
input has an enable (SRDYEN and ARDYEN) for se- 
lecting the type of ready source required to termi- 
nate the current bus cycle. An address decoder 
would normally select one of the enable Inputs. 


READY is enabled (LOW), if either SRDY + 
SRDYEN = 0 or ARDY + ARD YEN = 0 when 
sampled by the 82C284 READY generation logic. 
READY will remain active for at least two CLK cy- 
cles. 


The READY output has an open-drain driver allow- 
ing other ready circuits to be w ire or’ed with it, as 
shown in Figure 3. The READY signal of an 80286 
syst em requ ires an external pull-up resistor. To force 
the READY si gnal inac tive (HIGH) at the start o f a 
bus cycle, the READY output floats when either SI 
or SO are sampled LOW at the falling edge of CLK. 
Two system clock periods a re allowed for the pull-up 
resistor to pul l the RE ADY signal to V|h. When RE- 
SET is active, READY is forced active one CLK later 
(see waveforms). 


Figure 6 illustrates the operation of SRDY and 
SRDYEN. These inputs are sampled on the falling 
edge of CLK when SI and SO are inactive and PCLK 


At power up, a system does not have a sta ble Vcc 
and CLK. To prevent spurious activity, RES should 
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is HI GH. REA DY is forced active when both SRDY 
and SRDYEN are sampled as LOW. 


Figure 7 shows the operation of ARDY and 
ARDYEN. These inputs are sampled by an internal 
synchronizer at each falling edge of CLK. The output 
of the synchronizer is then sampled when P CLK is 
HIGH. If the synchronizer resolved both the ARDY 


and ARDYEN as active, the SR D Y and SRD YEN in- 
puts are ignored. Either ARDY or ARDYEN must be 
HIGH at the end of Ts (see Figure 7). 


READY remains active until either S1 or SO are sam- 
pled LOW, or the ready inputs are sampled as inac- 
tive. 


Table 2. 82C284 Crystal Loading Capacitance Values 


Crystal Frequency 

Cl Capacitance 
(Pin 7) 

C2 Capacitance 
(Pin 8) 

1 to 8 MHz 

60 pF 

40 pF 

8 to 20 MHz 

25 pF 

15 pF 

Above 20 MHz 

15 pF 

15 pF 


NOTE: 

Capacitance values must include stray board capacitance. 


Ts I Tc I Tc I T, 



Figure 6. Synchronous Ready Operation 



Figure 7. Asynchronous Ready Operation 
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ABSOLUTE MAXIMUM RATINGS* 


Temperature Under Bias 0®C to +70®C 

Storage Temperature - e5°C to + 1 50°C 

All Output and Supply Voltages -0.5V to + 7V 

All Input Voltages - 1 .OV to + 5.5V 

Power Dissipation 1 Watt 


* Notice: Stresses above those listed under “Abso- 
lute Maximum Ratings” may cause permanent dam- 
age to the device. This is a stress rating only and 
functional operation of the device at these or any 
other conditions above those indicated in the opera- 
tional sections of this specification is not implied. Ex- 
posure to absolute maximum rating conditions for 
extended periods may affect device reliability. 


D.C. CHA 

RACTERISTiCS Tcase = O'Cto +85'C,* Vcc = 5V ±5% 

Symbol 

Parameter 

Min 

Max 

Unit 

Test Condition 

V|L 

Input LOW Voltage 


0.8 

V 


VlH 

Input HIGH Voltage 

2.0 


V 


V|HR 

and EFI Input HIGH Voltage 

2.6 


V 


VoL 

RESET, POLK Output LOW Voltage 


0.45 

V 

Iql = 5 mA 

VOH 

RESET, PCLK Output 

HIGH Voltage 

2.4 


V 

lOH = -1 mA 

Vcc “0.5 


V 

loH = “0-2 mA 

VOLR 

READY, Output LOW Voltage 


0.45 

V 

Iql = 9 mA 

VOLC 

CLK Output LOW Voltage 


0.45 

V 

Iql = 5 mA 

VOHC 

CLK Output HIGH Voltage 

4.0 


V 

Iqh “ “ 000 julA 

l|L 

Input Sustaining Current 
on SO and ST Pins 

-30 

-500 



'Ll 

Input Leakage Current 


±10 



icc 

Power Supply Current 


75 

mA 

at 25 MHz Output 
CLK Frequency 

C| 

Input Capacitance 


10 

PF 

Fc = 1 MHz 


*Ta is guaranteed from 0“C to +70°C as long as Tcase ‘s not exceeded. 

NOTE: 

1. Status lines SO and S1 excluded because they have internal pull-up resistors. 
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A.C. CHARACTERISTICS Vcc = 5V ±5%,Tcase = 0°Cto +85°C.* 

Timings are referenced to 0.8V and 2.0V points of signals as illustrated in the datasheet waveforms, unless 
Otherwise noted. 


82C284 A.C. Timing Parameters 


Symbol 

Parameter 

8.0 MHz 

10.0 MHz 

12.5 MHz 

Units 

Test 

Conditions 

Min 

Max 

Min 

Max 

Min 

Max 

1 

EFI to CLK Delay 


25 


25 


25 

ns 

At 1.5V (1) 

2 

EFI LOW Time 

28 


22.5 


13 


ns 

At 1.5V (1.7) 

3 

EFI HIGH Time 

28 


22.5 


22 


ns 

At 1.5V (1.7) 

4 

CLK Period 

62 

500 

50 

500 

40 

500 

ns 


5 

CLK LOW Time 

15 


12 


11 


ns 

At 1.0V (1.2. 7, 8, 9,10) 

6 

CLK HIGH Time 

25 


16 


13 


ns 

At 3.6V (1.2. 7, 8. 9,10) 

7 

CLK Rise Time 


10 


8 


8 

ns 

1.0V to 3.6V (1,2,10,11) 

8 

CLK Fall Time 


10 


8 


8 

ns 

3.6V to 1.0V (1,9,10,11) 

9 

Status Setup Time 

22 


— 


— 


ns 

(Note 1 ) 

9a 

Status Setup Time for 
Status Going Active 

— 


20 


22 


ns 

(Note 1) 

9b 

Status Setup Time for 
Status Going Inactive 

— 


20 


18 


ns 

(Note1) 

10 

Status Hold Time 

1 


1 


3 


ns 

(Note1) 

11 

SRDY or SRDYEN 
Setup Time 

20 


18 


18 


ns 

(Note1) 

12 

SRDY or SRDYEN 
Hold Time 

0 


2 


2 


ns 

(Notes 1, 11) 

13 

ARDY orARDYEN 
Setup Time 

0 


0 


0 


ns 

(Notes 1,3) 

14 

ARDY orARDYEN 
Hold Time 

30 


30 


25 


ns 

(Notes 1,3) 

15 

RES Setup Time 

20 


20 


18 


ns 

(Notes 1,3) 

16 

Hold Time 

10 


10 


8 


ns 

(Notes 1.3) 

17 

READY Inactive Delay 

5 


5 


5 


ns 

At 0.8V (4) 

18 

READY Active Delay 

0 

24 

0 

24 

0 

18 

ns 

At 0.8V (4) 

19 

PCLK Delay 

0 

45 

0 

35 

0 

23 

ns 

(Note 5) 

20 

RESET Delay 

5 

34 

5 

27 

3 

22 

ns 

(Note 5) 

21 

PCLK LOW Time 

t4-20 


1 

0 


T4-20 


ns 

(Notes 5, 6) 

22 

PCLK HIGH Time 

0 

CM 

1 


0 

CM 

1 


T4-20 


ns 

(Notes 5, 6) 


•Ta is guaranteed from CC to TO^C as long as Tcase 'S not exceeded. 


NOTES: 

1. CLK loading: Cl = 100 pF. The 82C284’s XI and X2 inputs are designed primarily for parallel-resonant crystals. Serial- 
resonant crystals may also be used, however, they may oscillate up to 0.01 % faster than their nominal frequencies when 
used with the 82C284. For either type of crystal, capacitive loading should be as specified by Table 2. 

2. With the internal crystal oscillator using recommended crystal and capacitive loading; or with the EFI input meeting speci- 
fications t2 and t3. The recommended crystal loading for CLK frequencies of 8 MHz-20 MHz are 25 pF from pin Xi to 
ground, and 15 pF from pin X 2 to ground; for CLK frequencies above 20 MHz 15 pF from pin Xi to ground, and 15 pF from 
pin X 2 to ground. These recommended values are ±5 pF and include all stray capacitance. Decouple Vcc ^nd GND as 
close to the 82C284 as possible. 

3. This is an asynchronous input. This specification is given for testing purposes only, to assure recognition at specific CLK 
edge. 
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NOTES: 

4. PuH-up Resistor values for READY Pin: 


CPU Frequency 

8 MHz 

10 MHz 

12.5 MHz 

Resistor 

CL 

•OL 

91 on 
150 pF 
7 mA 

70on 
150 pF 
7 mA 

60on 

150 pF 

9 mA 


5. PCLK and RESET loading: Cl = 75 pF. , 

6. t4 refers to any allowable CLK period. 

7. When driving the 82C284 with EFI, provide minimum EFI HIGH and LOW times as follows: 


CLK Output Frequency 

16 MHz 

20 MHz 

25 MHz 

Min. Required EFI HIGH Time 

28 ns 

22.5 ns 

22 ns 

Min. Required EFI LOW Time 

28 ns 

22.5 ns 

13 ns 


8. When using a crystal (with recommended capacitive loading per Table 2) appropriate for the speed of the 80286, CLK 
output HIGH and LOW times guaranteed to meet the 80286 requirements. 


Reset Drive EFI Drive and CLK Output Measurement _ 

Measurement Points Points F/C Drive Points 



Note 12. AC Setup, Hold and Delay Time Measurement— General 
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Vcc 
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< 

> 
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< 

SlOohm ^ 

► 

> 




PCLK 

< 


READY Q 



Other ^ 
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outputs®^ 




75pF ~ 



ISOpF — 
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Note 13. AC Test Loading on Outputs 


WAVEFORMS 

CLK as a Function of EFI 



RESET and READY Timing as a Function of RES with SI, SO, ARDY + ARDYEN, and SRDY + 
SRDYEN High 



210453-13 

NOTE: 

1 . This is an asynchronous input. The setup and hold times shown are required to guarantee the response shown. 
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DATA SHEET REVISION REVIEW 

The following list represents key differences between this and the -009 data sheet. Please review this summa- 
ry carefully. 

1. The AC timing parameter SRDY or SRDYEN setup time (T11) has been changed to 18 ns for the 10 and 
12.5 MHz parts and 20 ns for the 8 MHz part. 
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i 486 TM MICROPROCESSOR 



■ Binary Compatible with Large 
Software Base 

-MS-DOS*, OS/2**, Windows 
— UNIX*** System V/386 

— iRMX®, iRMKTM Kernels 

■ High Integration Enables On-Chip 

— 8 Kbyte Code and Data Cache 
— Floating Point Unit 

— Paged, Virtual Memory Management 

■ Easy To Use 

— Built-In Self Test 
— Hardware Debugging Support 
— Intel Software Support 
— Extensive Third Party Software 
Support 


■ High Performance Design 

— Frequent Instructions Execute in One 
Clock 

— 25 MHz and 33 MHz Clock 
Frequencies 

— 106 Mbyte/Sec Burst Bus 

— CHMOS IV Process Technology 

■ Complete 32-Bit Architecture 
— Address and Data Busses 
— Registers 

■ Multiprocessor Support 

— Multiprocessor Instructions 
— Cache Consistency Protocols 
— Support for Second Level Cache 


The i486TM CPU offers the highest performance for DOS, OS/2, Windows and UNIX System V/386 applica- 
tions. It is 100 % binary compatible with the 386tm CPU. One million transistors integrate cache memory, 
floating point hardware and memory management on-chip while retaining binary compatibility with previous 
members of the 86 architectural family. Frequently used instructions execute in one cycle resulting in RISC 
performance levels. An 8 Kbyte unified code and data cache combined with a 106 Mbyte/Sec burst bus at 
33.3 MHz ensure high system throughput even with inexpensive DRAMs. 

New features enhance multiprocessing systems. New instructions speed manipulation of memory based sem- 
aphores. On-chip hardware ensures cache consistency and provides hooks for multilevel caches. 

The built in self test extensively tests on-chip logic, cache memory and the on-chip paging translation cache. 
Debug features include breakpoint traps on code execution and data accesses. 


i486TM Microprocessor Pipelined 32 -Bit Microarchitecture 



240440-1 


iRMX, iRMK, 386, 387, 486, i486 are trademarks of Intel Corporation. 
* MS-DOS® is a registered trademark of Microsoft Corporation. 
**OS/2TM is a trademark of Microsoft Corporation. 

***UNIXTM is a trademark of AT&T. 
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i 486 TM MICROPROCESSOR 
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Figure 1.2 
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Pin Cross Reference by Pin Name 


Address 

Data 

Control 

N/C 

Vcc 

Vss 

A2 

Q14 

Do 

P1 

A20M# 

D15 

A3 

B7 

A7 

As 

R15 

Di 

N2 

ADS# 

S17 

A10 

B9 

A9 

A4 

S16 

□2 

N1 

AHOLD 

A17 

A12 

B11 

All 

A 5 

012 

D3 

H2 

BEO# 

K15 

A13 

C4 

B3 

As 

S15 

D4 

M3 

BE1# 

J16 

A14 

C5 

B4 

A 7 

013 

O5 

J2 

BE2# 

J15 

BIO 

E2 

B5 

As 

R13 

De 

L2 

BE3# 

F17 

B12 

E16 

El 

Ag 

oil 

D7 

L3 

BLAST# 

R16 

B13 

G2 

E17 

A 10 

S13 

Ds 

F2 

BOFF# 

D17 

B14 

G16 

G1 

All 

R12 

Dg 

D1 

BRDY# 

H15 

B16 

H16 

G17 

Ai2 

S7 

D1O 

E3 

BREQ# 

015 

CIO 

J1 

HI 

Ai3 

Q10 

D11 

C1 

BS8# 

D16 

C11 

K2 

H17 

Ai4 

S5 

Di2 

G3 

BS16# 

C17 

Cl 2 

K16 

K1 

Ai5 

R7 

Di3 

D2 

CLK 

C3 

C13 

LI 6 

K17 

Ai6 

Q9 

Di4 

K3 

D/C# 

M15 

G15 

M2 

LI 

Ai7 

03 

Di5 

F3 

DPO 

N3 

R17 

M16 

LI 7 

Ai8 

R5 

Di6 

J3 

DP1 

FI 

S4 

P16 

Ml 

Ai9 

Q4 

Di7 

D3 

DP2 

H3 


R3 

M17 

A20 

08 

Di8 

C2 

DP3 

A5 


R6 

' P17 

A 2 I 

Q5 

Dig 

B1 

EADS# 

B17 


R8 

02 

A22 

Q7 

D20 

A1 

FERR# 

C14 


R9 

R4 

A23 

S3 

D21 

B2 

FLUSH# 

C15 


RIO 

S6 

A24 

Q6 

D22 

A2 

HLDA 

PI 5 


R11 

S8 

A25 

R2 

D23 

A4 

HOLD 

E15 


R14 

S9 

A26 

S2 

□24 

A6 

IGNNE# 

A15 



S10 

A27 

S1 

D25 

B6 

INTR 

A16 



S11 

A28 

R1 

D26 

C7 

KEN# 

F15 



S12 

A29 

P2 

D27 

C6 

LOCK# 

N15 



S14 

A30 

P3 

D28 

C8 

M/IO# 

N16 




A 3 I 

Q1 

D 29 

A8 

NMI 

B15 






D 30 

C9 

PCD 

J17 






D31 

B8 

PCHK# 

017 








PWT 

L15 








PLOCK# 

016 








RDY# 

FI 6 








RESET 

C16 








W/R# 

N17 
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QUICK PIN REFERENCE 


What follows is a brief pin description. For detailed signal descriptions refer to Section 6. 


Symbol 

Type 

Name and Function 

CLK 

I 

Clock provides the fundamental timing and the internal operating frequency for the 486 



microprocessor. All external timing parameters are specified with respect to the rising 
edge of CLK. 

ADDRESS BUS 

A31-A4 

I/O 

A31 -A2 are the address lines of the microprocessor. A31 -A2, together with the bVte 

A2-A3 

0 

enables BE0#~BE3#, define the physical area of memory or input/output space 
accessed. Address lines A31 -A4 are used to drive addresses into the microprocessor to 
perform cache line invalidations. Input signals must meet setup and hold times X 22 and 
t 23 . A31 -A2 are not driven during bus or address hold. 

BEO-3# 

o 

The byte enable signals indicate active bytes during read and write cycles. During the 
first cycle of a cache fill, the external system should assume that all byte enables are 
active. BE3# applies to D24-D31, BE2# applies to D16-D23, BE1 # applies to D8- 
D15 and BEO# applies to D0-D7. BE0#-BE3# are active LOW and are not driven 
during bus hold. 

DATA BUS 

D31-D0 

I/O 

These are the data lines for the 486 microprocessor. Lines D0-D7 define the least 
significant byte of the data bus while lines D24-D31 define the most significant byte of 
the data bus. These signals must meet setup and hold times t 22 and t 23 for proper 
operation on reads. These pins are driven during the second and subsequent clocks of 
write cycles. 

DATA PARITY 

DP0-DP3 

I/O 

There is one data parity pin for each byte of the data bus. Data parity is generated on all 
write data cycles with the same timing as the data driven by the 486 microprocessor. 

Even parity Information must be driven back into the microprocessor on the data parity 
pins with the same timing as read Information to insure that the correct parity check 
status Is indicated by the 486 microprocessor. The signals read on these pins do not 
affect program execution. 

Input signals must meet setup and hold times t 22 and t 23 . DP0-DP3 should be 
connected to Vcc through a pullup resistor in systems which do not use parity. DP0-DP3 
are active HIGH and are driven during the second and subsequent clocks of write cycles. 

PCHK# 

0 

Parity Status is driven on the PCHK# pin the clock after ready for read operations. The 
parity status Is for data sampled at the end of the previous clock. A parity error is 
indicated by PCHK# being LOW. Parity status is only checked for enabled bytes as 
indicated by the byte enable and bus size signals. PCHK# is valid only In the clock 
immediately after read data Is returned to the microprocessor. At all other times PCHK# 
is Inactive (HIGH). PCHK# is never floated. 

BUS CYCLE DEFINITION 

M/IO# 

0 

The memory/input-output, data/control an6 write/read \\r\es are the primary bus 

D/C# 

0 

definition signals. These signals are driven valid as the ADS# signal is asserted. 

W/R# 

0 

M/IO# D/C# W/R# Bus Cycle initiated 



0 0 0 Interrupt Acknowledge 

0 0 1 Halt/Special Cycle 

0 1 0 I/O Read 

0 1 11/0 Write 

1 0 0 Code Read 

1 0 1 Reserved 

1 1 0 Memory Read 

1 1 1 Memory Write 



The bus definition signals are not driven during bus hold and follow the timing of the 
address bus. Refer to Section 7.2.1 1 for a description of the special bus cycles. 
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QUICK PIN REFERENCE (Continued) 


Symbol 

Type 

Name and Function 

BUS CYCLE DEFINITION (Continued) 

LOCK# 

0 

The bus lock pin indicates that the current bus cycle is locked. The 486 microprocessor 
will not allow a bus hold when LOCK# Is asserted (but address holds are allowed). 

LOCK# goes active in the first clock of the first locked bus cycle and goes inactive after 
the last clock of the last locked bus cycle. The last locked cycle ends when ready is 
returned. LOCK# is active LOW and is not driven during bus hold. Locked read cycles 
will not be transformed into cache fill cycles if KEN # is returned active. 

PLOCK# 

0 

The pseudo-lock pin indicates that the current bus transaction requires more than one 
bus cycle to complete. Examples of such operations are floating point long reads and 
writes (64 bits)i segment table descriptor reads (64 bits), in addition to cache line fills 
(128 bits). The 486 microprocessor will drive PLOCK# active until the addresses for the 
last bus cycle of the transaction have been driven regardless of whether RDY# or 

BRDY# have been returned. 

Normally PLOCK# and BLAST # are inverse of each other. However during the first bus 
cycle of a 64-bit floating point write, both PLOCK# and BLAST # will be asserted. 

PLOCK# is a function of the BS 8 #, BS16# and KEN# inputs. PLOCK# should be 
sampled only in the clock ready is returned. PLOCK# is active LOW and Is not driven 
during bus hold. 

BUS CONTROL 

ADS# 

0 

The address status output indicates that a valid bus cycle definition and address are 
available on the cycle definition lines and address bus. ADS# is driven active In the same 
clock as the addresses are driven. ADS# is active LOW and is not driven during bus hold. 

RDY# 

1 

The non-burst ready \rvpu\ indicates that the current bus cycle Is complete. RDY# 
indicates that the external system has presented valid data on the data pins In response 
to a read or that the external system has accepted data from the 486 microprocessor in 
response to a write. RDY# is ignored when the bus is idle and at the end of the first clock 
of the bus cycle. 

RDY# is active during address hold. Data can be returned to the processor while AHOLD 
is active. 

RDY# is active LOW, and is not provided with an internal pullup resistor. RDY# must 
satisfy setup and hold times ti q and ti 7 for proper chip operation. 

BURST CONTROL 

BRDY# 

1 

The burst ready input pedoxms the same function during a burst cycle that RDY# 
performs during a non-burst cycle. BRDY # indicates that the external system has 
presented valid data in response to a read or that the external system has accepted data 
in response to a write. BRDY # is Ignored when the bus is idle and at the end of the first 
clock in a bus cycle. 

BRDY# Is sampled in the second and subsequent clocks of a burst cycle. The data 
presented on the data bus will be strobed into the microprocessor when BRDY# is 
sampled active. If RDY# is returned simultaneously with BRDY#, BRDY# is ignored and 
the burst cycle is prematurely aborted. 

BRDY# is active LOW and is provided with a small pullup resistor. BRDY# must satisfy 
the setup and hold times t-ie and tiy. 

BLAST# 

0 

The burst last signal Indicates that the next time BRDY # is returned the burst bus cycle is 
complete. BLAST # is active for both burst and non-burst bus cycles. BLAST # is active 
LOW and is not driven during bus hold. 
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QUICK PIN REFERENCE (Continued) 


Symbol 

Type 

Name and Function 

INTERRUPTS 

RESET 

1 

The reset input forces the 486 microprocessor to begin execution at a known state. The 
microprocessor cannot begin execution of instructions until at least 1 ms after Vcc and 

CLK have reached their proper DC and AC specifications. The RESET pin should remain 
active during this time to insure proper microprocessor operation. RESET is active HIGH. 
RESET is asynchronous but must meet setup and hold times t 2 o and t 2 i for recognition in 
any specific clock. 

INTR 

1 

The maskable interrupt indicates that an external interrupt has been generated. If the 
internal interrupt flag is set in EFLAGS; active interrupt processing will be initiated. The 

486 microprocessor will generate two locked interrupt acknowledge bus cycles in 
response to the INTR pin going active. INTR must remain active until the interrupt 
acknowledges have been performed to assure that the interrupt is recognized. 

INTR is active HIGH and Is not provided with an internal pulldown resistor. INTR is 
asynchronous, but must meet setup and hold times t 2 o and t 2 i for recognition In any 
specific clock. 

NMI 

1 

The non-maskable interrupt request signal indicates that an external non-maskable 
interrupt has been generated. NMI is rising edge sensitive. NMI must be held LOW for at 
least four CLK periods before this rising edge. NMI is not provided with an internal 
pulldown resistor. NMI is asynchronous, but must meet setup and hold times t 2 o and t 2 i 
for recognition In any specific clock. 

BUS ARBITRATION 

BREQ 

0 

The internal cycle pending signal indicates that the 486 microprocessor has internally 
generated a bus request. BREQ Is generated whether or not the 486 microprocessor is 
driving the bus. BREQ is active HIGH and is never floated. 

HOLD 

1 

The bus hold request aWo^s another bus master complete control of the 486 
microprocessor bus. In response to HQLD going active the 486 microprocessor will float 
most of its output and input/output pins. HLDA will be asserted after completing the 
current bus cycle, burst cycle or sequence of locked cycles. The 486 microprocessor will 
remain in this state until HQLD Is deasserted. HQLD is active high and is not provided with 
an internal pulldown resistor. HQLD must satisfy setup and hold times t-ie and tig for 
proper operation. 

HLDA 

0 

Hold acknowledge goes active in response to a hold request presented on the HQLD pin. 
HLDA indicates that the 486 microprocessor has given the bus to another local bus 
master. HLDA is driven active in the same clock that the 486 microprocessor floats its 
bus. HLDA is driven inactive when leaving bus hold. HLDA is active HIGH and remains 
driven during bus hold. 

BOFF# 

1 

The backoff \nquX forces the 486 microprocessor to float its bus in the next clock. The 
microprocessor will float all pins normally floated during bus hold but HLDA will not be 
asserted in response to BQFF#. BQFF# has higher priority than RDY# or BRDY#; If 
both are returned in the same clock, BQFF# takes effect. The microprocessor remains In 
bus hold until BQFF# is negated. If a bus cycle was in progress when BQFF# was 
asserted the cycle will be restarted. BQFF# is active LQW and must meet setup and hold 
times ti 8 and ti g for proper operation. 

CACHE INVALIDATION 

AHOLD 

1 

The address hold request allows another bus master access to the 486 microprocessor’s 
address bus for a cache invalidation cycle. The 486 microprocessor will stop driving its 
address bus In the clock following AHQLD going active. Qnly the address bus will be 
floated during address hold, the remainder of the bus will remain active. AHQLD Is active 
HIGH and is provided with a small internal pulldown resistor. For proper operation AHQLD 
must meet setup and hold times tie and tig. 
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QUICK PIN REFERENCE (Continued) 


Symbol 

Type 

Name and Function 

CACHE INVALIDATION (Continued) 

EADS# 

I 

This signal indicates that a valid external address has been driven onto the 486 
microprocessor address pins. This address will be used to perform an internal cache 
invalidation cycle. EADS# is active LOW and is provided with an internal pullup resistor. 
EADS# must satisfy setup and hold times ti 2 and t^a for proper operation. 

CACHE CONTROL 

KEN# 

I 

The cache enable pin is used to determine whether the current cycle Is cacheable. When 
the 486 microprocessor generates a cycle that can be cached and KEN # is active, the 
cycle will become a cache line fill cycle. Returning KEN# active one clock before ready 
during the last read in the cache line fill will cause the line to be placed in the on-chip 
cache. KEN# is active LOW and is provided with a small internal pullup resistor. KEN# 
must satisfy setup and hold times ti 4 and ti 5 for proper operation. 

FLUSH# 

I 

The cache flush input forces the 486 microprocessor to flush its entire Internal cache. 
FLUSH # is active low and need only be asserted for one clock. FLUSH # is 
asynchronous but setup and hold times X 20 and t 2 i must be met for recognition in any 
specific clock. FLUSH # being sampled low In the clock before the falling edge of RESET 
causes the 486 microprocessor to enter the tri-state test mode. 

PAGE CACHEABILITY 

PWT 

0 

The page write-through and page cache disable pins reflect the state of the page 

PCD 

0 

attribute bits, PWT and PCD, in the page table entry or page directory entry. If paging is 
disabled or for cycles that are not paged, PWT and PCD reflect the state of the PWT and 
PCD bits in control register 3. PWT and PCD have the same timing as the cycle definition 
pins (M/IO#, D/C# and W/R#). PWT and PCD are active HIGH and are not driven 
during bus hold. PCD Is masked by the cache disable bit (CD) in Control Register 0. 

NUMERIC ERROR REPORTING 

FERR# 

0 

The floating point error p\n is driven active when a floating point error occurs. FERR# Is 
similar to the ERROR# pin on the 387 tm math coprocessor. FERR# is Included for 
compatibility with systems using DOS type floating point error reporting. FERR# Is active 
LOW, and is not floated during bus hold. 

IGNNE# 

I 

When the ignore numeric error p\n is asserted the 486 microprocessor will ignore a 
numeric error and continue executing non-control floating point instructions. When 

IGNNE# is deasserted the 486 microprocessor will freeze on a non-control floating point 
instruction, if a previous floating point instruction caused an error. IGNNE# has no effect 
when the NE bit in control register 0 is set. IGNNE# is active LOW and is provided with a 
small internal pullup resistor. IGNNE# is asynchronous but setup and hold times t 2 o and 
t 2 i must be met to insure recognition on any specific clock. 

BUS SIZE CONTROL 

BS16# 

I 

The bus size 16 and bus size 8 pins (bus sizing pins) cause the 486 microprocessor to run 

BS8# 

I 

multiple bus cycles to complete a request from devices that cannot provide or accept 32 
bits of data In a single cycle. The bus sizing pins are sampled every clock. The state of 
these pins In the clock before ready is used by the 486 microprocessor to determine the 
bus size. These signals are active LOW and are provided with internal pullup resistors. 
These inputs must satisfy setup and hold times t-j 4 and ti 5 for proper operation. 

ADDRESS MASK 

A20M# 

I 

When the address bit 20 mask pin is asserted, the 486 microprocessor masks physical 
address bit 20 (A20) before performing a lookup to the internal cache or driving a memory 
cycle on the bus. A20M# emulates the address wraparound at one Mbyte which occurs 
on the 8086. A20M# is active LOW and should be asserted only when the processor is in 
real mode. This pin is asynchronous but should meet setup and hold times t 2 o and t 2 i for 
recognition In any specific clock. For proper operation, A20M # should be sampled high 
at the falling edge of RESET. 
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Table 1.1. Output Pins 


Name 

Active 

Level 

When 

Floated 

BREQ 

HIGH 


HLDA 

HIGH 


BE0#-BE3# 

LOW 

Bus Hold 

PWT, PCD 

HIGH 

Bus Hold 

W/R#.D/C#,M/IO# 

HIGH 

Bus Hold 

LOCK# 

LOW 

Bus Hold 

PLOCK# 

LOW 

Bus Hold 

ADS# 

LOW 

Bus Hold 

BLAST# 

LOW 

Bus Hold 

PCHK# 

LOW 


FERR# 

LOW 


A2-A3 

HIGH 

Bus, Address Hold 


Table 1.2. Input Pins 


Name 

Active 

Level 

Synchronous/ 

Asynchronous 

CLK 

RESET 

HIGH 

Asynchronous 

HOLD 

HIGH 

Synchronous 

AHOLD 

HIGH 

Synchronous 

EADS# 

LOW 

Synchronous 

BOFF# 

LOW 

Synchronous 

FLUSH# 

LOW 

Asynchronous 

A20M# 

LOW 

Asynchronous 

BS16#, BS8# 

LOW 

Synchronous 

KEN# 

LOW 

Synchronous 

RDY# 

LOW 

Synchronous 

BRDY# 

LOW 

Synchronous 

INTR 

HIGH 

Asynchronous 

NMI 

HIGH 

Asynchronous 

IGNNE# 

LOW 

Asynchronous 


Table 1.3. Input/Output Pins 


Name 

Active 

When 

Level 

Floated 

D0-D31 

HIGH 

Bus Hold 

DP0-DP3 

HIGH 

Bus Hold 

A4-A31 

HIGH 

Bus, Address Hold 
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2.0 ARCHITECTURAL OVERVIEW 

The 486 microprocessor is a 32-bit architecture with 
on-chip memory management, floating point and 
cache memory units. 

The 486 microprocessor contains all the features of 
the 386 TM microprocessor with enhancements to in- 
crease performance. The instruction set includes the 
complete 386 microprocessor instruction set along 
with extensions to serve new applications. The on- 
chip memory management unit (MMU) is completely 
compatible with the 386 microprocessor MMU. The 
486 microprocessor brings the 387 tm math coproc- 
essor on-chip. All software written for the 386 micro- 
processor, 387 math coprocessor and previous 
members of the 86/87 architectural family will run on 
the 486 microprocessor without any modifications. 

Several enhancements have been added to the 486 
microprocessor to increase performance. On-chip 
cache memory allows frequently used data and 
code to be stored on-chip reducing accesses to the 
external bus. RISC design techniques have been 
used to reduce instruction cycle times. A burst bus 
feature enables fast cache fills. All of these features, 
combined, lead to performance greater than twice 
that of a 386 microprocessor. 

The memory management unit (MMU) consists of a 
segmentation unit and a paging unit. Segmentation 
allows management of the logical address space by 
providing easy data and code relocatibllity and effi- 
cient sharing of global resources. The paging mech- 
anism operates beneath segmentation and is trans- 
parent to the segmentation process. Paging is op- 
tional and can be disabled by system software. Each 
segment can be divided into one or more 4 Kbyte 
segments. To Implement a virtual memory system, 
the 486 microprocessor supports full restartablllty 
for all page and segment faults. 

Memory is organized into one or more variable 
length segments, each up to four gigabytes (232 
bytes) in size. A segment can have attributes associ- 
ated with It which include its location, size, type (i.e., 
stack, code or data), and protection characteristics. 
Each task on a 486 microprocessor can have a max- 
imum of 16,381 segments, each up to four gigabytes 
in size. Thus each task has a maximum of 64 tera- 
bytes (trillion bytes) of virtual memory. 

The segmentation unit provides four-levels of pro- 
tection for isolating and protecting applications and 
the operating system from each other. The hardware 
enforced protection allows the design of systems 
with a high degree of integrity. 


Mode Virtual Address Mode (Protected Mode). In 
Real Mode the 486 microprocessor operates as a 
very fast 8086. Real Mode Is required primarily to set 
up the processor for Protected Mode operation. Pro- 
tected Mode provides access to the sophisticated 
memory management paging and privilege capabili- 
ties of the processor. 

Within Protected Mode, software can perform a task 
switch to enter into tasks designated as Virtual 8086 
Mode tasks. Each virtual 8086 task behaves with 
8086 semantics, allowing 8086 software (an applica- 
tion program or an entire operating system) to exe- 
cute. 

The on-chip floating point unit operates In parallel 
with the arithmetic and logic unit and provides arith- 
metic instructions for a variety of numeric data types. 
It executes numerous built-in transcendental func- 
tions (e.g., tangent, sine, cosine, and log functions). 
The floating point unit fully conforms to the ANSI/ 
IEEE standard 754-1985 for floating point arithmetic. 

The on-chip cache Is 8 Kbytes in size. It is 4-way set 
associative and follows a write-through policy. The 
on-chip cache includes features to provide flexibility 
in external memory system design. Individual pages 
can be designated as cacheable or non-cacheable 
by software or hardware. The cache can also be en- 
abled and disabled by software or hardware. 

Finally the 486 microprocessor has features to facili- 
tate high performance hardware designs. The IX 
clock eases high frequency board level designs. The 
burst bus feature enables fast cache fills. These fea- 
tures are described beginning in Section 6. 


2.1 Register Set 

The 486 microprocessor register set includes all the 
registers contained In the 386 microprocessor and 
the 387 math coprocessor. The register set can be 
split into the following categories: 

Base Architecture Registers 
General Purpose Registers 
Instruction Pointer 
Flags Register 
Segment Registers 

Systems Level Registers 
Control Registers 
System Address Registers 


The 486 microprocessor has two modes of opera- 
tion: Real Address Mode (Real Mode) and Protected 
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Floating Point Registers 
Data Registers 
Tag Word 
Status Word 

Instruction and Data Pointers 


The base architecture includes six directly accessi- 
ble descriptors, each specifying a segment up to 4 
Gbytes in size. The descriptors are indicated by the 
selector values placed in the 486 microprocessor 
segment registers. Various selector values can be 
loaded as a program executes. 


Control Word 
Debug and Test Registers 


The selectors are also task-specific, so the segment 
registers are automatically loaded with new context 
upon a task switch operation. 


The base architecture and floating point registers 
are accessible by the applications program. The sys- 
tem level registers are only accessible at privilege 
level 0 and are used by the systems level program. 
The debug and test registers are also only accessi- 
ble at privilege level 0. 


2.1.1 BASE ARCHITECTURE REGISTERS 


Figure 2.1 shows the 486 microprocessor base ar- 
chitecture registers. The contents of these registers 
are task-specific and are automatically loaded with a 
new context upon a task switch operation. 


General Purpose Registers 


31 24 1 23 16 

15 8 1 7 0 


AH AX AL 


j 

BH BX BL 


1 

CH CX CL 


1 

DH DX DL 

1 


SI 


Dl 


BP 


SP 


EAX 

EBX 

ECX 

EDX 

ESI 

EDI 

EBP 

ESP 


Segment Registers 


CS Code Segment 
SS Stack Segment 
DS 


Data Segments 


31 


Instruction Pointer 

16 15 0 


EIP 


Flags Register 


FLAGS 


EFLAGS 


Figure 2.1. Base Architecture Registers 


2. 1.1.1 General Purpose Registers 

The eight 32-bit general purpose registers are 
shown in Figure 2.1. These registers hold data or 
address quantities. The general purpose registers 
can support data operands of 1, 8, 16 and 32 bits, 
and bit fields of 1 to 32 bits. Address operands of 16 
and 32 bits are supported. The 32-bit registers are 
named EAX, EBX, ECX, EDX, ESI, EDI, EBP and 
ESP. 

The least significant 1 6 bits of the general purpose 
registers can be accessed separately by' using the 
16-bit names of the registers AX, BX, CX, DX, SI, Dl, 
BP and SP. The upper 16 bits of the register are not 
changed when the lower 1 6 bits are accessed sepa- 
rately. 

Finally 8-bit operations can individually access the 
lowest byte (bits 0-7) and the higher byte (bits 8- 
15) of the general purpose registers AX, BX, CX and 
DX. The lowest bytes are named AL, BL, CL and DL 
respectively. The higher bytes are named AH, BH, 
CH and DH respectively. The individual byte acces- 
sibility offers additional flexibility for data operations 
but is not used for effective address calculation. 


2.1. 1.2 Instruction Pointer 

The instruction pointer, shown in Figure 2.1, is a 32- 
bit register named EIP. EIP holds the offset of the 
next instruction to be executed. The offset is always 
relative to the base of the code segment (CS). The 
lower 16 bits (bits 0-15) of the EIP contain the 16-bit 
instruction pointer named IP, which Is used for 16-bit 
addressing. 


2. 1.1. 3 Flags Register 

The flags register is a 32-bit register named 
EFLAGS. The defined bits and bit fields within 
EFLAGS control certain operations and indicate 
status of the 486 microprocessor. The lower 1 6 bits 
(bit 0-15) of EFLAGS contain the 16-bit register 
named FLAGS, which is most useful when executing 
8086 and 80286 code. EFLAGS is shown in Figure 
2 . 2 . 
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FLAGS 


3322222222221111111111 

109876 5 4321098765432109876543210 


EFLAGS 


RESERVED FOR INTEL 

A 

c 

V 

M 

R 

F 

0 

N 

T 

1 lOP 

[T 

0 

F 


F 

T 

F 




A 

F 


P 

F 

1 





T 

4 

A 

♦ 4 


ALIGNMENT CHECK 

VIRTUAL MODE 

RESUME FLAG 

NESTED TASK FLAG — 
I/O PRIVILEGE LEVEL - 

OVERFLOW 

DIRECTION FLAG 

INTERRUPT ENABLE — 


CARRY FLAG 
PARITY FLAG 
AUXILIARY CARRY 
ZERO FLAG 
SIGN FLAG 
TRAP FLAG 


240440-6 


NOTE: 

0 indicates Intel Reserved: do not define; see Section 2.1.6. 


Figure 2.2. Flags Register 


EFLAGS bits 1, 3, 5, 15 and 19-31 are “undefined”. 
When these bits are stored during interrupt process- 
ing or with a PUSHF instruction (push flags onto 
stack), a one is stored in bit 1 and zeros in bits 3, 5, 
15 and 19-31. 

The EFLAGS register in the 486 microprocessor 
contains a new bit not previously defined. The new 
bit, AC, is defined in the upper 1 6 bits of the register 
and it enables faults on accesses to misaligned 
data. 

AC (Alignment Check, bit 18) 

The AC bit enables the generation of faults If a 
memory reference is to a misaligned address. 
Alignment faults are enabled when AC is set 
to 1 . A mis-aligned address is a word access 


to an odd address, a dword access to an ad- 
dress that is not on a dword boundary, or an 
8-byte reference to an address that is not on a 
64-bit word boundary. See Section. 7.1.6 for 
more information on operand alignment. 

Alignment faults are only generated by pro- 
grams running at privilege level 3. The AC bit ' 
setting is ignored at privilege levels 0, 1 and 2. 
Note that references to the descriptor tables 
(for selector loads), or the task state segment 
(TSS), are implicitly level 0 references even if 
the instructions causing the references are 
executed at level 3. Alignment faults are re- 
ported through Interrupt 1 7, with an error code 
of 0. Table 2.1 gives the alignment required 
for the 486 microprocessor data types. 


Table 2.1. Data Type Alignment Requirements 


Memory Access 

Alignment (Byte Boundary) 

Word 

2 

Dword 

4 

Single Precision Real 

4 

Double Precision Real 

8 

Extended Precision Real 

8 

Selector 

2 

48-Bit Segmented Pointer 

4 

32-Bit Flat Pointer 

4 

32-Bit Segmented Pointer 

2 

48-Bit “Pseudo-Descriptor” 

4 

FSTENV/FLDENV Save Area 

4/2 (On Operand Size) 

FSAVE/FRSTOR Save Area 

4/2 (On Operand Size) 

Bit String 

4 
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IMPLEMENTATION NOTE: 

Several instructions on the 486 microprocessor 
generate misaligned references, even if their mem- 
ory address is aligned. For example, on the 486 mi- 
croprocessor, the SGDT/SIDT (store global/inter- 
rupt descriptor table) instruction reads/writes two 
bytes, and then reads/writes four bytes from a 
“pseudo-descriptor” at the given address. The 486 
microprocessor will generate misaligned references 
unless the address is on a 2 mod 4 boundary. The 
FSAVE and FRSTOR instructions (floating point 
save and restore state) will generate misaligned 
references for one-half of the register save/restore 
cycles. The 486 microprocessor will not cause any 
AC faults If the effective address given in the in- 
struction has the proper alignment. 

VM (Virtual 8086 Mode, bit 17) 

The VM bit provides Virtual 8086 Mode within 
Protected Mode. If set while the 486 Micro- 
processor is in Protected Mode, the 486 Mi- 
croprocessor will switch to Virtual 8086 opera- 
tion, handling segment loads as the 8086 
does, but generating exception 13 faults on 
privileged opcodes. The VM bit can be set 
only in Protected Mode, by the I RET instruc- 
tion (if current privilege level = 0) and by task 
switches at any privilege level. The VM bit is 
unaffected by POPF. PUSHF always pushes a 
0 in this bit, even If executing in Virtual 8086 
Mode. The EFLAGS image pushed during in- 
terrupt processing or saved during task 
switches will contain a 1 in this bit if the inter- 
rupted code was executing as a Virtual 8086 
Task. 

RF (Resume Flag, bit 16) 

The RF flag is used in conjunction with the 
debug register breakpoints. It is checked at 
Instruction boundaries before breakpoint pro- 
cessing. When RF Is set, it causes any debug 
fault to be Ignored on the next instruction. RF 
Is then automatically reset at the successful 
completion of every Instruction (no faults are 
signalled) except the IRET Instruction, the 
POPF instruction, (and JMP, CALL, and INT 
instructions causing a task switch). These in- 
structions set RF to the value specified by the 
memory image. For example, at the end of the 
breakpoint service routine, the IRET instruc- 
tion can pop an EFLAG image having the RF 
bit set and resume the program’s execution at 
the breakpoint address without generating an- 
other breakpoint fault on the same location. 

NT (Nested Task, bit 14) 

This flag applies to Protected Mode. NT is set 
to Indicate that the execution of this task is 
nested within another task. If set. It indicates 


that the current nested task’s Task State Seg- 
ment (TSS) has a valid back link to the previ- 
ous task’s TSS. This bit Is set or reset by con- 
trol transfers to other tasks. The value of NT 
in EFLAGS is tested by the IRET instruction to 
determine whether to do an Inter-task return 
or an intra-task return. A POPF or an IRET 
instruction will affect the setting of this bit ac- 
cording to the image popped, at any privilege 
level. 

lOPL (Input/Output Privilege Level, bits 12-13) 

This two-bit field applies to Protected Mode. 
lOPL indicates the numerically maximum CPL 
(current privilege level) value permitted to ex- 
ecute I/O instructions without generating an 
exception 13 fault or consulting the I/O Per- 
mission Bitmap. It also indicates the maximum 
CPL value allowing alteration of the IF (INTR 
Enable Flag) bit when new values are popped 
into the EFLAG register. POPF and IRET in- 
struction can alter the lOPL field when execut- 
ed at CPL = 0. Task switches can always al- 
ter the lOPL field, when the new flag image is 
loaded from the incoming task’s TSS. 

OF (Overflow Flag, bit 11) 

OF is set if the operation resulted in' a signed 
overflow. Signed overflow occurs when the 
operation resulted in carry/borrow Into the 
sign bit (high-order bit) of the result but did not 
result in a carry/borrow out of the high-order 
bit, or vice-versa. For 8-, 16-, 32-bit opera- 
tions, OF is set according to overflow at bit 7, 
15, 31, respectively. 

DF (Direction Flag, bit 10) 

DF defines whether ESI and/or EDI registers 
postdecrement or postincrement during the 
string instructions. Postincrement occurs if DF 
is reset. Postdecrement occurs if DF Is set. 

IF (INTR Enable Flag, bit 9) 

The IF flag, when set, allows recognition of 
external interrupts signalled on the INTR pin. 
When IF is reset, external interrupts signalled 
on the INTR are not recognized. lOPL indi- 
cates the maximum CPL value allowing altera- 
tion of the IF bit when new values are popped 
into EFLAGS or FLAGS. 

TF (Trap Enable Flag, bit 8) 

TF controls the generation of exception 1 trap 
when single-stepping through code. When TF 
is set, the 486 Microprocessor generates an 
exception 1 trap after the next Instruction Is 
executed. When TF Is reset, exception 1 traps 
occur only as a function of the breakpoint ad- 
dresses loaded into debug registers DRO- 
DR3. 


4-13 


i 486 TM MICROPROCESSOR 


int^ 


SF (Sign Flag, bit 7) 

SF is set if the high-order bit of the result Is 
set, It is reset otherwise. For 8-, 16-, 32-bit 
operations, SF reflects the state of bit 7, 15, 
31 respectively. 

ZF (Zero Flag, bit 6) 

ZF is set if all bits of the result are 0. Other- 
wise it Is reset. 

AF (Auxiliary Carry Flag, bit 4) 

The Auxiliary Flag is used to simplify the addi- 
tion and subtraction of packed BCD quanti- 
ties. AF is set if the operation resulted in a 
carry out of bit 3 (addition) or a borrow into bit 
3 (subtraction). Otherwise AF Is reset. AF is 
affected by carry out of, or borrow into bit 3 
only, regardless of overall operand length: 8, 
16 or 32 bits. 

PF (Parity Flags, bit 2) 

PF is set if the low-order eight bits of the oper- 
ation contains an even number of “1’s” (even 
parity). PF is reset if the low-order eight bits 
have odd parity. PF is a function of only the 
low-order eight bits, regardless of operand 
size. 

CF (Carry Flag, bit 0) 

CF Is set if the operation resulted in a carry 
out of (addition), or a borrow into (subtraction) 
the high-order bit. Otherwise CF is reset. For 
8-, 16- or 32-bit operations, CF is set accord- 
ing to carry/borrow at bit 7, 15 or 31, respec- 
tively. 


NOTE: 

In these descriptions, “set” means “set to 1,” and 
“reset” means “reset to 0.” 


2.1. 1.4 Segment Registers 

Six 16-bit segment registers hold segment selector 
values identifying the currently addressable memory 
segments. In protected mode, each segment may 
range in size from one byte up to the entire linear 
and physical address space of the machine, 4 
Gbytes ( 2^2 bytes). In real address mode, the maxi- 
mum segment size is fixed at 64 Kbytes (216 bytes). 

The six addressable segments are defined by the 
segment registers CS, SS, DS, ES, FS and GS. The 
selector in CS Indicates the current code segment; 
the selector in SS indicates the current stack seg- 
ment; the selectors in DS, ES, FS and GS indicate 
the current data segments. 

2.1. 1.5 Segment Descriptor Cache Registers 

The segment descriptor cache registers are not pro- 
grammer visible, yet it is very useful to understand 
their content. A programmer invisible descriptor 
cache register is associated with each programmer- 
visible segment register, as shown by Figure 2.3. 
Each descriptor cache register holds a 32-bit base 
address, a 32-bit segment limit, and the other neces- 
sary segment attributes. 
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Figure 2.3. i 486 TM Microprocessor Segment Registers and Associated Descriptor Cache Registers 
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When a selector value is loaded into a segment reg- 
ister, the associated descriptor cache register is au- 
tomatically updated with the correct information. In 
Real Address Mode, only the base address Is updat- 
ed directly (by shifting the selector value four bits to 
the left), since the segment maximum limit and attri- 
butes are fixed in Real Mode. In Protected Mode, 
the base address, the limit, and the attributes are all 
updated per the contents of the segment descriptor 
indexed by the selector. 

Whenever a memory reference occurs, the segment 
descriptor cache register associated with the seg- 
ment being used is automatically involved with the 
memory reference. The 32-bit segment base ad- 
dress becomes a component of the linear address 
calculation, the 32-bit limit is used for the limit-check 
operation, and the attributes are checked against 
the type of memory reference requested. 

2.1.2 SYSTEM LEVEL REGISTERS 

The system level registers. Figure 2.4, control opera- 
tion of the on-chip cache, the on-chip floating point 


unit (FPU) and the segmentation and paging mecha- 
nisms. These registers are only accessible to pro- 
grams running at privilege level 0, the highest privi- 
lege level. 

The system level registers include three control reg- 
isters and four segmentation base registers. The 
three control registers are CRO, CR2 and CR3. CR1 
is reserved for future Intel processors. The four seg- 
mentation base registers are the Global Descriptor 
Table Register (GDTR), the Interrupt Descriptor Ta- 
ble Register (GDTR), the Local Descriptor Table 
Register (LDTR) and the Task State Segment Regis- 
ter (TR). 


2.1.2.1 Control Registers 
Control Register 0 (CRO) 

CRO, shown in Figure 2.5, contains 10 bits for con- 
trol and status purposes. Five of the bits defined in 
the 486 microprocessor’s CRO are newly defined. 
The new bits are CD, NW, AM, WP and NE. The 
function of the bits in CRO can be categorized as 
follows: 


31 24|23 16|15 8|7 0 

CRO 
CR2 
CR3 


SYSTEM ADDRESS REGISTERS 
47 32-BIT LINEAR BASE ADDRESS 16 15 LIMIT 0 

GDTR I 

IDTR 


TR 
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Figure 2.4. System Level Registers ^ 
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486 Microprocessor Operating Modes: PG, PE 
(Table 2.2) 

On-Chip Cache Control Modes: CD, NW (Table 2.3) 

On-Floating Point Unit Control: TS, EM. MP, NE 
(Table 2.4) 

Alignment Check Control: AM 
Supervisor Write Protect: WP 


Table 2.2. Processor Operating Modes 


PG 

PE 

Mode 

0 

0 

REAL Mode. Exact 8086 semantics, 
with 32-blt extensions available with 
prefixes. 

0 

1 

Protected Mode. Exact 80286 
semantics, plus 32-blt extensions 
through both prefixes and “default” 
prefix setting associated with code 
segment descriptors. Also, a sub- 
mode is defined to support a virtual 
8086 within the context of the 
extended 80286 protection model. 

1 

0 

UNDEFINED. Loading CRO with this 
combination of PG and PE bits will 
raise a GP fault with error code 0. 

1 

1 

Paged Protected Mode. All the 
facilities of Protected mode, with 
paging enabled underneath 
segmentation. 


Table 2.3. On-Chip Cache Control Modes 


CD 

NW 

Operating Mode 

1 

1 

Cache fills disabled, write-through and 
invalidates disabled. 

1 

0 

Cache fills disabled, write-through and 
invalidates enabled. 

0 

1 

INVALID. If CRO is loaded with this 
configuration of bits, a GP fault with 
error code Is raised. 

0 

0 

Cache fills enabled, write-through and 
invalidates enabled. 


Table 2.4. On-Chip Floating Point Unit Control 


CRO BIT 

Instruction Type 

EM 

TS 

MP 

Floating-Point 

Wait 

0 

0 

0 

Execute 

Execute 

0 

0 

1 

Execute 

Execute 

0 

1 

0 

Trap 7 

Execute 

0 

1 

1 

Trap? 

Trap? 

1 

0 

0 

Trap? 

Execute 

1 

0 

1 

Trap ? 

Execute 

1 

1 

0 

Trap ? 

Execute 

1 

1 

1 

Trap ? 

Trap ? 


The low-order 1 6 bits of CRO are also known as the 
Machine Status Word (MSW), for compatibility with 
the 80286 protected mode. LMSW and SMSW (load 
and store MSW) instructions are taken as special 
aliases of the load and store CRO operations, where 
only the low-order 16 bits of CRO are Involved. The 
LMSW and SMSW Instructions in the 486 microproc- 
essor work in an identical fashion to the LMSW and 
SMSW instructions in the 80286 (I.e., they only oper- 
ate on the low-order 1 6 bits of CRO and ignores the 
new bits). New 486 microprocessor operating sys- 
tems should use the MOV CRO, Reg Instruction. 

The defined CRO bits are described below. 

PG (Paging Enable, bit 31) 

The PG bit is used to indicate whether paging is 
enabled (PG = 1) or disabled (PG = 0). See Ta- 
ble 2.2. 

CD (Cache Disable, bit 30) 

The CD bit is used to enable the on-chip cache. 
When CD = 1, the cache will not be filled on 
cache misses. When CD = 0, cache fills may be 
performed on misses. See. Table 2.3. 

The state of the CD bit, the cache enable Input 
pin (KEN#), and the relevant page cache dis- 
able (PCD) bit determine If a line read in re- 
sponse to a cache miss will be installed In the 
cache. A line is installed in the cache only if 
CD = 0 and KEN # and PCD are both zero. The 
relevant PCD bit comes from either the page 
table entry, page directory entry or control reg- 
ister 3. Refer to Section 5.6 for more details on 
page cacheability. 

CD Is set to one after RESET. 

NW (Not Write-Through, bit 29) 

The NW bit enables on-chip cache write- 
throughs and write-Invalldate cycles (NW = 0). 
When NW = 0, all writes, including cache hits, 
are sent out to the pins. Invalidate cycles are 
enabled when NW = 0. During an invalidate cy- 
cle a line will be removed from the cache if the 
invalidate address hits In the cache. See Table 
2.3. 

When NW = 1, write-throughs and write-invall- 
date cycles are disabled. A write will not be sent 
to the pins if the write hits in the cache. With 
NW = 1 the only write cycles that reach the ex- 
ternal bus are cache misses. Write hits with 
NW=1 will never update main memory. Invali- 
date cycles are ignored when NW = 1 . 

AM (Alignment Mask, bit 18) 

The AM bit controls whether the alignment 
check (AC) bit in the flag register (EFLAGS) can 
allow an alignment fault. AM = 0 disables the 
AC bit. AM = 1 enables the AC bit. AM = 0 is the 
386 microprocessor compatible mode. 
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386 microprocessor software may load incor- 
rect data into the AC bit in the EFLAGS register. 
Setting AM = 0 will prevent AC faults from oc- 
curring before the 486 microprocessor has cre- 
ated the AC interrupt service routine. 

WP (Write Protect, bit 1 6) 

WP protects read-only pages from supervisor 
write access. The 386 microprocessor allows a 
read-only page to be written from privilege lev- 
els 0-2. The 486 microprocessor is compatible 
with the 386 microprocessor when WP = 0. 
WP= 1 forces a fault on a write to a read-only 
page from any privilege level. Operating sys- 
tems with Copy-on-Write features can be sup- 
ported with the WP bit. Refer to Section 4.5.3 
for further details on use of the WP bit. 

NE (Numerics Exception, bit 5) 

The NE bit controls whether unmasked floating 
point exceptions (UFPE) are handled through 
interrupt vector 16 (NE = 1) or through an exter- 
nal interrupt (NE = 0). NE = 0 (default at reset) 
supports the DOS operating system error re- 
porting scheme from the 8087, 80287 and 387 
math coprocessor. In DOS systems, math co- 
processor errors are reported via external inter- 
rupt vector 13. DOS uses interrupt vector 16 for 
an operating system call. Refer to Sections 
6.2.13 and 7.2.14 for more information on float- 
ing point error reporting. 

For any UFPE the floating point error output pin 
(FERR#) will be driven active. 

For NE = 0, the 486 microprocessor works in 
conjunction with the ignore numeric error Input 
(IGNNE#) and the FERR# output pins. When a 
UFPE occurs and the IGNNE# input is inactive, 
the 486 microprocessor freezes Immediately 
before executing the next floating point Instruc- 
tion. An external interrupt controller will supply 
an interrupt vector when FERR# is driven ac- 
tive. The UFPE is ignored if IGNNE# is active 
and floating point execution continues. 

NOTE: 

The freeze does not take place if the next in- 
struction is one of the control instructions 
FNCLEX, FNINIT, FNSAVE, FNSTENV, 
FNSTCW, FNSTSW, FNSTSW AX, FNENI, 
FNDISI and FNSETPM. The freeze does occur 
if the next instruction is WAIT. 

For NE = 1, any UFPE will result in a software 
Interrupt 16, immediately before executing the 
next non-control floating point or WAIT Instruc- 
tion. The ignore numeric error Input (IGNNE#) 
signal will be Ignored. 


TS (Task Switched, bit 3) 

The TS bit is set whenever a task switch opera- 
tion is performed. Execution of a floating point 
instruction with TS = 1 will cause a device not 
available (DNA) fault (trap vector 7). If TS = 1 
and MP=1 (monitor coprocessor In CRO) a 
WAIT instruction will cause a DNA fault. See 
Table 2.4. 

EM (Emulate Coprocessor, bit 2) 

The EM bit determines whether floating point 
instructions are trapped (EM = 1) or executed. If 
EM = 1 , all floating point Instructions will cause 
fault 7. 

NOTE: 

WAIT instructions are not affected by the state 
of EM. See Table 2.4. 

MP (Monitor Coprocessor, bit 1) 

The MP bit is used in conjunction with the TS bit 
to determine If WAIT instructions should trap. If 
MP = 1 and TS=1, WAIT instructions cause 
fault 7. Refer to Table 2.4. The TS bit is set to 1 
on task switches by the 486 microprocessor. 
Floating point Instructions are not affected by 
the state of the MP bit. It is recommended that 
the MP bit be set to one for the normal opera- 
tion of the 486 microprocessor. 

PE (Protection Enable, bit 0) 

The PE bit enables the segment based protec- 
tion mechanism. If PE = 1 protection is enabled. 
When PE = 0 the 486 microprocessor operates 
in REAL mode, with segment based protection 
disabled, and addresses formed as In an 8086. 
Refer to Table 2.2. 

All new CRO bits added to the 386 and 486 micro- 
processors, except for ET and NE, are upward com- 
patible with the 80286 because they are in register 
bits not defined in the 80286. For strict compatibility 
with the 80286, the load machine status word 
(LMSW) instruction is defined to not change the ET 
or NE bits. 

Control Register 1 (CR1) 

CR1 is reserved for use in future Intel microproces- 
sors. 

Control Register 2 (CR2) 

CR2, shown in Figure 2.6, holds the 32-bit linear ad- 
dress that caused the last page fault detected. The 
error code pushed onto the page fault handler’s 
stack when it is Invoked provides additional status 
information on this page fault. 


4-17 


i 486 TM MICROPROCESSOR 




Figure 2.6. Control Registers 2 and 3 


Control Register 3 (CR3) 

CR3, shown in Figure 2.6, contains the physical 
base address of the page directory table. The 486 
microprocessor page directory is always page 
aligned (4 Kbyte-aligned). This alignment is enforced 
by only storing bits 20-31 in CR3. 

in the 486 microprocessor CR3 contains two new 
bits, page write-through (PWT) (bit 3) and page 
cache disable (PCD) (bit 4). The page table entry 
(PTE) and page directory entry (PDE) also contain 
PWT and PCD bits. PWT and PCD control page 
cacheability. When a page is accessed in external 
memory, the state of PWT and PCD are driven out 
on the PWT and PCD pins. The source of PWT and 
PCD can be CR3, the PTE or the PDE. PWT and 
PCD are sourced from CR3 under two conditions: 
when paging is disabled (PG = 0 in CRO) or when the 
PDE is being updated. 

A task switch through a task state segment (TSS) 
which changes the values in CR3, or an explicit load 
into CR3 with any value, will invalidate all cached 
page table entries in the translation lookaside buffer 
(TLB). 

The page directory base address in CR3 is a physi- 
cal address. The page directory can be paged out 
while its associated task is suspended, but the oper- 
ating system must ensure that the page directory is 
resident in physical memory before the task is dis- 
patched. The entry in the TSS for CR3 has a physi- 
cal address, with no provision for a present bit. This 
means that the page directory for a task must be 
resident in physical memory. The CR3 image in a 
TSS must point to this area, before the task can be 
dispatched through its TSS. 


2. 1.2.2 System Address Registers 

Four special registers are defined to reference the 
tables or segments supported by the 80286, 386 
and 486 microprocessor protection model. These ta- 
bles or segments are: 

GDT (Global Descriptor Table) 

IDT (Interrupt Descriptor Table) 

LDT (Local Descriptor Table) 

TSS (Task State Segment) 

The addresses of these tables and segments are 
stored in special registers, the System Address and 
System Segment Registers, illustrated in Figure 2.4. 
These registers are named GDTR, IDTR, LDTR and 
TR respectively. Section 4, Protected Mode Archi- 
tecture, describes the use of these registers. 

System Address Registers: GDTR and IDTR 

The GDTR and IDTR hold the 32-bit linear base ad- 
dress and 16-bit limit of the GDT and IDT, respec- 
tively. 

Since the GDT and IDT segments are global to all 
tasks In the system, the GDT and IDT are defined by 
32-bit linear addresses (subject to page translation if 
paging is enabled) and 16-blt limit values. 

System Segment Registers: LDTR and TR 

The LDTR and TR hold the 16-bit selector for the 
LDT descriptor and the TSS descriptor, respectively. 

Since the LDT and TSS segments are task specific 
segments, the LDT and TSS are defined by selector 
values stored in the system segment registers. 

NOTE: 

A programmer-invisible segment descriptor register 
is associated with each system segment register. 
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2.1.3 FLOATING POINT REGISTERS 

Figure 2.7 shows the floating point register set. The 
on-chip FPU contains eight data registers, a tag 
word, a control register, a status register, an instruc- 
tion pointer and a data pointer. 
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Figure 2.7. Floating Point Registers 

The operation of the 486 microprocessor’s on-chip 
floating point unit is exactly the same as the 387 
math coprocessor. Software written for the 387 
math coprocessor will run on the on-chip floating 
point unit (FPU) without any modifications. 


into “fields” corresponding to the FPU’s extended- 
precision data type. 

The FPU’s register set can be accessed either as a 
stack, with instructions operating on the top one or 
two stack elements, or as a fixed register set, with 
instructions operating on explicitly designated regis- 
ters. The TOP field in the status word identifies the 
current top-of-stack register. A “push” operation 
decrements TOP by one and loads a value into the 
new top register. A “pop” operation stores the value 
from the current top register and then increments 
TOP by one. Like other 486 microprocessor stacks 
in memory, the FPU register stack grows “down” 
toward lower-addressed registers. 

Instructions may address the data registers either 
implicitly or explicitly. Many instructions operate on 
the register at the TOP of the stack. These instruc- 
tions implicitly address the register at which TOP 
points. Other instructions allow the programmer to 
explicitly specify which register to use. This explicit 
register addressing is also relative to TOP. 


2. 1.3.2 Tag Word 

The tag word marks the content of each numeric 
data register, as shown In Figure 2.8. Each two-bit 
tag represents one of the eight data registers. The 
principal function of the tag word is to optimize the 
FPUs performance and stack handling by making it 
possible to distinguish between empty and nonemp- 
ty register locations. It also enables exception han- 
dlers to check the contents of a stack location with- 
out the need to perform complex decoding of the 
actual data. 


2. 1.3.1 Data Registers 

Floating point computations use the 486 microproc- 
essor’s FPU data registers. These eight 80-bit regis- 
ters provide the equivalent capacity of twenty 32-bit 
registers. Each of the eight data registers is divided 


2.1. 3.3 Status Word 

The 16-bit status word reflects the overall state of 
the FPU. The status word is shown in Figure 2.9 and 
Is located in the status register. 
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NOTE: 

The index i of tag(i) is not top-relative. A program typically uses the “top” field of Status Word to determine which tag(i) 
field refers to logical top of stack. 

TAG VALUES: 

00 = Valid 

01 = Zero 

10 = QNaN, SNaN, Infinity, Denormal and Unsupported Formats 

11 = Empty 


Figure 2.8. FPU Tag Word 
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EXCEPTION FLAGS : 

PRECISION 

UNDERFLOW 

OVERFLOW 

ZERO DIVIDE 

DENORMALIZED OPERAND 

INVALID OPERATION — 

240440-7 

ES is set if any unmasked exception bit is set; cleared otherwise. 

See Table 2.5 for interpretation of condition code. 

TOP values: 

000 = Register 0 is Top of Stack 

001 = Register 1 is Top of Stack 


111 = Register 7 is. Top of Stack 
For definitions of exceptions, refer to the Section entitled 
“Exception Handling”. 


Figure 2.9. FPU Status Word 


The B bit (Busy, bit 1 5) is included for 8087 compati- 
bility. The B bit reflects the contents of the ES bit (bit 
7 of the status word). 

Bits 13-11 (TOP) point to the FPU register that is 
the current top-of-stack. 


The four numeric condition code bits, C0-C3, are 
similar to the flags In EFLAGS. Instructions that per- 
form arithmetic operations update C0-C3 to reflect 
the outcome. The effects of these instructions on 
the condition codes are summarized In Tables 2.5 
through 2.8. 
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Table 2.5. FPU Condition Code Interpretation 


Instruction 

CO (S) C3 (2) 

Cl (A) 

C2 (C) 

FPREM, FPREM1 
(see Table 2.3) 

Three least significant bits 
of quotient 

02 QO 

01 

or 0/U# 

Reduction 

0 = complete 

1 = incomplete 

FCOM, FCOMP, 
FCOMPP, FTST, 
FUCOM, FUCOMP, 
FUCOMPP, FICOM, 
FICOMP 

Result of comparison 
(see Table 2.7) 

Zero 
or 0/U# 

Operand is not 
comparable 
(Table 2.7) 

FXAM 

Operand class 
(see Table 2.8) 

Sign 

orO/U# 

Operand class 
(Table 2.8) 

FCHS, FABS, FXCH, 
FINCTOP, FDECTOP, 
Constant loads, 
FXTRACT, FLD, 

FILD, FBLD, 

FSTP (ext real) 

UNDEFINED 

Zero 
or 0/U# 

UNDEFINED 

FIST, FBSTP, 

FRNDINT, FST, 

FSTP, FADD, FMUL, 
FDIV, FDIVR, 

. FSUB, FSUBR, 

FSCALE, FSQRT, 
FPATAN, F2XM1, 
FYL2X, FYL2XP1 

UNDEFINED 

Roundup 
or 0/U# 

UNDEFINED 

FPTAN, FSIN 

FCOS, FSINCOS 

UNDEFINED 

Roundup 
orO/U#, 
undefined 
ifC2 = 1 

Reduction 

0 = complete 

1 = incomplete 

FLDENV, FRSTOR 

Each bit loaded from memory 

FI NIT 

Clears these bits 

FLDCW, FSTENV, 
FSTCW, FSTSW, 

FCLEX, FSAVE 

UNDEFINED 

0/U# When both IE and SF bits of status word are set, indicating a stack exception, this bit 

distinguishes between stack overflow (Cl = 1) and underflow (C1 = 0). 

Reduction If FPREM or FPREM 1 produces a remainder that is less than the modulus, reduction is 

complete. When reduction is incomplete the value at the top of the stack is a partial 
remainder, which can be used as input to further reduction. For FPTAN, FSIN, FCOS, and 
FSINCOS, the reduction bit is set if the operand at the top of the stack is too large. In this 
case the original operand remains at the top of the stack. 

Roundup When the PE bit of the status word is set, this bit indicates whether the last rounding in the 

instruction was upward. 

UNDEFINED Do not rely on finding any specific value in these bits. 
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Table 2.6. Condition Code Interpretation after FPREM and FPREM1 Instructions 



Table 2.7. Condition Code Resulting from Comparison 


Order 

C3 

C2 

CO 

TOP > Operand 

0 

0 

0 

TOP < Operand 

0 

0 

1 

TOP = Operand 

1 

0 

0 

Unordered 

1 

1 

1 


Table 2.8. Condition Code Defining Operand Class 


C3 

C2 

C1 

CO 

Value at TOP 

0 

0 

0 

0 

+ Unsupported 

0 

0 

0 

1 

+ NaN 

0 

0 

1 

0 

- Unsupported 

0 

0 

1 

1 

- NaN 

0 

1 

0 

0 

+ Normal 

0 

1 

0 

1 

+ Infinity 

0 

1 

1 

0 

- Normal 

0 

1 

1 

1 

- Infinity 

1 

0 

0 

0 

+ 0 

1 

0 

0 

1 

+ Empty 

1 

0 

1 

0 

- 0 

1 

0 

1 

1 

- Empty 

1 

1 

0 

0 

+ Denormal 

1 

1 

1 

_J 

0 

- Denormal 
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Bit 7 is the error summary (ES) status bit. The ES bit 
is set if any unmasked exception bit (bits 0-5 in the 
status word) is set; ES is clear otherwise. The 
FERR# (floating point error) signal is asserted when 
ES is set. 

Bit 6 is the stack flag (SF). This bit is used to distin- 
guish invalid operations due to stack overflow or un- 
derflow. When SF is set, bit 9 (C1) distinguishes be- 
tween stack overflow (C1 = 1) and underflow 
(C1=0). 

Table 2.9 shows the six exception flags in bits 0-5 
of the status word. Bits 0-5 are set to indicate that 
the FPU has detected an exception while executing 
an instruction. 

The six exception flags in the status word can be 
individually masked by mask bits in the FPU control 
word. Table 2.9 lists the exception conditions, and 
their causes in order of precedence. Table 2.9 also 
shows the action taken by the FPU if the corre- 
sponding exception flag is masked. 

An exception that is not masked by the control word 
will cause three things to happen: the corresponding 
exception flag in the status word will be set, the ES 
bit in the status word will be set and the FERR# 
output signal will be asserted. When the 486 micro- 
processor attempts to execute another floating point 
or WAIT instruction, exception 16 occurs or an exter- 
nal interrupt happens if the NE= 1 in control register 


0. The exception condition must be resolved via an 
interrupt service routine. The FPU saves the address 
of the floating point instruction that caused the ex- 
ception and the address of any memory operand re- 
quired by that instruction in the instruction and data 
pointers (see Section 2. 1.3.4). 

Note that when a new value is loaded Into the status 
word by the FLDENV (load environment) or 
FRSTOR (restore state) instruction, the value of ES 
(bit 7) and its reflection In the B bit (bit 1 5) are not 
derived from the values loaded from memory. The 
values of ES and B are dependent upon the values 
of the exception flags in the status word and their 
corresponding masks in the control word. If ES is set 
in such a case, the FERR# output of the 486 micro- 
processor is activated immediately. 

2.1.3.4 Instruction and Data Pointers 

Because the FPU operates In parallel with the ALU 
(in the 486 microprocessor the arithmetic and logic 
unit (ALU) consists of the base architecture regis- 
ters), any errors detected by the FPU may be report- 
ed after the ALU has executed the floating point in- 
struction that caused it. To allow identification of the 
failing numeric instruction, the 486 microprocessor 
contains two pointer registers that supply the ad- 
dress of the failing numeric instruction and the ad- 
dress of its numeric memory operand (if appropri- 
ate). 


Table 2.9. FPU Exceptions 


Exception 

Cause 

Default Action 
(if exception is masked) 

Invalid 

Operation 

Operation on a signaling NaN, unsupported format, 
indeterminate form (0* oo , 0/0, ( + ) + ( - °° ), etc.), or 

stack overflow/underflow (SF is also set). 

Result is a quiet NaN, Integer 
indefinite, or BCD indefinite 

Denormalized 

Operand 

At least one of the operands is denormalized, i.e., it has 
the smallest exponent but a nonzero significand. 

Normal processing 
continues 

Zero Divisor 

The divisor is zero while the dividend is a noninfinite, 
nonzero number. 

Result is oo 

Overflow 

The result is too large in magnitude to fit In the specified 
format. 

Result is largest finite value 
or oo 

Underflow 

The true result is nonzero but too small to be 
represented in the specified format, and. If underflow 
exception is masked, denormalization causes loss of 
accuracy. 

Result is denormalized or 

zero 

Inexact 

Result 

(Precision) 

The true result is not exactly representable In the 
specified format (e.g., 1 /3); the result is rounded 
according to the rounding mode. 

Normal processing 
continues 
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The instruction and data pointers are provided for 
user-written error handlers. These registers are ac- 
cessed by the FLDENV (load environment), 
FSTENV (store environment), FSAVE (save state) 
and FRSTOR (restore state) instructions. Whenever 
the 486 microprocessor decodes a new floating 
point instruction, it saves the instruction (including 
any prefixes that may be present), the address of 
the operand (if present) and the opcode. 

The instruction and data pointers appear in one of 
four formats depending on the operating mode of 
the 486 microprocessor (protected mode or real-ad- 


dress mode) and depending on the operand-size at- 
tribute in effect (32-bit operand or 16-bit operand). 
When the 486 microprocessor is in the virtual-86 
mode, the real address mode formats are used. The 
four formats are shown In Figures 2.10-2.13. The 
floating point instructions FLDENV, FSTENV, 
FSAVE and FRSTOR are used to transfer these val- 
ues to and from memory. Note that the value of the 
data pointer is undefined if the prior floating point 
instruction did not have a memory operand. 

NOTE: 

The operand size attribute Is the D bit in a segment 
descriptor. 


32-BIT PROTECTED MODE FORMAT 


31 23 15 7 0 


1 

RESERVED 

1 

^ ^ 

CONTROL WORD 

I 

1 

RESERVED 

1 

I 

STATUS WORD 

1 

1 

RESERVED 

1 

1 

TAG WORD 

1 

1 

IP OF 

1 

FSET 

1 

00000 OPCODE 10..0 

1 

CS SELECTOR 

1 

DATA OPER> 

I 

1 

\ND OFFSET 

1 

I 

RESERVED 

^ 

I 

OPERAND SELECTOR 

1 


Figure 2.10. Protected Mode FPU Instruction and Data Pointer Image in Memory, 32-Bit Format 


32-BIT REAL-ADDRESS MODE FORMAT 

31 23 15 7 0 


1 

RESERVED 

1 

1 

CONTROL WORD 

1 

RESERVED 

1 

STATUS WORD 

1 

RESERVED 

1 

TAG WORD 

1 

RESERVED 

1 

INSTRUCTION POINTER 15..0 

0000 

INSTRUCTION POINTER 31.. 16 

1 


0 OPCODE 10..0 

RESERVED 

OPERAND POINTER 15..0 

1 

0000 

OPERAND POINTER 31..16 
1 

— 

0000 00000000 
1 


Figure 2.11. Real Mode FPU Instruction and Data Pointer Image in Memory, 32-Bit Format 
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1 6-BIT PROTECTED MODE FORMAT 

15 7 0 

1 



1 

CONTROL WORD 

1 

0 


1 

STATUS WORD 

1 

2 


1 

TAG WORD 

1 

4 


1 

IP OFFSET 

1 

6 


1 

CS SELECTOR 

1 

8 


1 

OPERAND OFFSET 

1 

A 


1 

OPERAND SELECTOR 

1 

C 


1 



Figure 2.12. Protected Mode FPU 
Instruction and Data Pointer 
Image in Memory, 16-Bit Format 


15 


16-BIT REAL-ADDRESS MODE AND 
VIRTUAL-8086 MODE FORMAT 

7 0 


CONTROL WORD 


H- 


STATUSWORD 


TAG WORD 


INSTRUCTION POINTER 15..0 


IP19.16 


OPCODE 10..0 


OPERAND POINTER 15..0 


DP 19.16 


00000000000 


Figure 2.13. Real Mode FPU 
Instruction and Data Pointer 
Image in Memory, 16-Bit Format 


2.1.3.5 FPU Control Word 

The FPU provides several processing options that are selected by loading a control word from memory into 
the control register. Figure 2.14 shows the format and encoding of fields in the control word. 


15 


n 

XXX 

I I 


T 

RC 

J_ 


PC 

_L 


T" 

X X 


RESERVED - 


EXCEPTION MASKS : 

PRECISION 

UNDERFLOW 

OVERFLOW 

ZERO DIVIDE 

DENORMALIZED OPERAND 

INVALID OPERATION 


RESERVED 
RESERVED* 
ROUNDING CONTROL 
PRECISION CONTROL 


* "0” AFTER RESET OR FINIT; 
CHANGEABLE UPON LOADING THE 
CONTROL WORD (CW). PROGRAMS 
MUST IGNORE THIS BIT. 


240440-8 


Precision Control 

00 — 24 bits (single precision) 

01 — (reserved) 

1 0 — 53 bits (double precision) 

11 — 64 bits (extended precision) 


Rounding Control 

00 — Round to nearest or even 

01 — Round down (toward -oo) 

10 — Round up (toward + oo) 

11 — Chop (truncate toward zero) 


Figure 2.14. FPU Control Word 
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The low-order byte of the FPU control word config- 
ures the FPU error and exception masking. Bits 0-5 
of the control word contain individual masks for each 
of the six exceptions that the FPU recognizes. 

The high-order byte of the control word configures' 
the FPU operating mode, including precision and 
rounding. 

RC (Rounding Control, bits 10-11) 

The RC bits provide for directed rounding and 
true chop, as well as the unbiased round to 
nearest even mode specified in the IEEE stan- 
dard. Rounding control affects only those in- 
structions that perform rounding at the end of 
the operation (and thus can generate a preci- 
sion exception); namely, FST, FSTP, FIST, all 
arithmetic instructions (except FPREM, 
FPREM1, FXTRACT, FABS and FCHS), and all 
transcendental Instructions. 

PC (Precision Control, bits 8-9) 

The PC bits can be used to set the FPU internal 
operating precision of the significand at less 
than the default of 64 bits (extended precision). 
This can be useful in providing compatibility with 
early generation arithmetic processors of small- 
er precision. PC affects only the instructions 
ADD, SUB, DIV, MUL, and SORT. For all other 
instructions, either the precision is determined 
by the opcode or extended precision Is used. 

2.1.4 DEBUG AND TEST REGISTERS 

2.1. 4.1 Debug Registers 

The six programmer accessible debug registers. Fig- 
ure 2.15, provide on-chip support for debugging. De- 
bug registers DRO-3 specify the four linear break- 
points. The Debug control register DR7, is used to 
set the breakpoints and the Debug Status Register, 
DR6, displays the current state of the breakpoints. 
The use of the Debug registers is described In Sec- 
tion 9. 


Debug Registers 



LINEAR BREAKPOINT ADDRESS 0 

DRO 


LINEAR BREAKPOINT ADDRESS 1 

DR1 


LINEAR BREAKPOINT ADDRESS 2 

DR2 


LINEAR BREAKPOINT ADDRESS 3 

DR3 


Intel Reserved Do Not Define 

DR4 


Intel Reserved Do Not Define 

DR5 


BREAKPOINT STATUS 

DR6 


BREAKPOINT CONTROL 

DR7 

Test Registers 



CACHE TEST DATA 

TR3 


CACHE TEST STATUS 

TR4 


CACHE TEST CONTROL 

TR5 


TLB TEST CONTROL 

TR6 


TLB TEST STATUS 

TR7 

TLB = Translation Lookaside Buffer 



Figure 2.15 


2. 1.4.2 Test Registers 

The 486 microprocessor contains five test registers. 
The test registers are shown in Figure 2.15. TR6 and 
TR7 are used to control the testing of the translation 
lookaside buffer. TR3, TR4 and TR5 are used for 
testing the on-chip cache. The use of the test regis- 
ters Is discussed in Section 8. 


2.1.5 REGISTER ACCESSIBILITY 

There are a few differences regarding the accessibil- 
ity of the registers In Real and Protected Mode. Ta- 
ble 2.10 summarizes these differences. See Section 
4, Protected Mode Architecture, for further details. 
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Table 2.10. Register Usage 


Register 

Use in 

Real Mode 

Use in 

Protected Mode 

Use in 

Virtual 8086 Mode 

Load 

Store 

Load 

Store 

Load 

Store 

General Registers 

Yes 

Yes 

Yes 

Yes 

Yes 

Yes 

Segment Register 

Yes 

Yes 

Yes 

Yes 

Yes 

Yes 

Flag Register 

Yes 

Yes 

Yes 

, Yes 

lOPL 

lOPL* 

Control Registers 

Yes 

Yes 

PL = 0 

PL = 0 

No 

Yes 

GDTR 

Yes 

Yes 

PL = 0 

Yes 

No 

Yes 

IDTR 

Yes 

Yes 

PL = 0 

Yes 

No 

Yes 

LDTR 

No 

No 

o 

II 

_j 

CL 

Yes 

No 

No 

TR 

No 

No 

O 

II 

_J 

CL 

Yes 

• No 

No 

FPU Data Registers 

Yes 

Yes 

Yes 

Yes 

Yes 

Yes 

FPU Control Registers 

Yes 

Yes 

Yes 

Yes 

Yes 

Yes 

FPU Status Registers 

Yes 

Yes 

Yes 

Yes 

Yes 

Yes 

FPU Instruction Pointer 

Yes 

Yes 

Yes 

Yes 

Yes 

Yes 

FPU Data Pointer 

Yes 

Yes 

Yes 

Yes 

Yes 

Yes 

Debug Registers 

Yes 

Yes 

PL = 0 

PL = 0 

No 

No 

Test Registers 

Yes 

Yes 

PL = 0 

PL = 0 

No 

No 


NOTES: 

PL = 0: The registers can be accessed only when the current privilege level is zero. 

*IOPL: The PUSHF and POPF instructions are made I/O Privilege Level sensitive in Virtual 86 Mode. 


3) Do not depend on the ability to retain infor- 
mation written into any undefined bits. 

4) When loading registers always load the unde- 
fined bits as zeros. 

5) However, registers which have been previ- 
ously stored may be reloaded without mask- 
ing. 

Depending upon the values of undefined regis- 
ter bits will make your software dependent upon 
the unspecified 486 Microprocessor handling of 
these bits. Depending on undefined values risks 
making your software incompatible with future 
processors that define usages for the 486 Micro- 
processor-undefined bits. AVOID ANY SOFT- 
WARE DEPENDENCE UPON THE STATE OF UN- 
DEFINED 486 MICROPROCESSOR REGISTER 
BITS. 


2.1.6 COMPATIBILITY 

VERY IMPORTANT NOTE: 

COMPATIBILITY WITH FUTURE PROCESSORS 

In the preceding register descriptions, note cer- 
tain 486 Microprocessor register bits are Intel re- 
served. When reserved bits are called out, treat 
them as fully undefined. This is essential for 
your software compatibility with future proces- 
sors! Follow the guidelines below: 

1) Do not depend on the states of any unde- 
fined bits when testing the values of defined 
register bits. Mask them out when testing. 

2) Do not depend on the states of any unde- 
fined bits when storing them to memory or 
another register. 
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2.2 Instruction Set 

The 486 microprocessor instruction set can be divid- 
ed into 1 1 categories of operations: 

Data Transfer 

Arithmetic 

Shift/ Rotate 

String Manipulation 

Bit Manipulation 

Control Transfer 

High Level Language Support 

Operating System Support 

Processor Control 

Floating Point 

Floating Point Control 

The 486 microprocessor instructions are listed in 
Section 10. Note that all floating point unit instruc- 
tion mnemonics begin with an F. 

All 486 microprocessor instructions operate on ei- 
ther 0, 1 , 2 or 3 operands; where an operand resides 
in a register, in the instruction itself or in memory. 
Most zero operand instructions (e.g., CLI, STI) take 
only one byte. One operand instructions generally 
are two bytes long. The average instruction is 3.2 
bytes long. Since the 486 microprocessor has a 32- 
byte instruction queue, an average of 1 0 instructions 
will be prefetched. The use of two operands permits 
the following types of common instructions: 

Register to Register 
Memory to Register 
Memory to Memory 
Immediate to Register . 

Register to Memory 
Immediate to Memory 

The operands can be either 8, 16, or 32 bits long. As 
a general rule, when executing code written for the 
486 or 386 microprocessors (32-bit code), operands 
are 8 or 32 bits; when executing existing 80286 or 
8086 code (16-bit code), operands are 8 or 16 bits. 
Prefixes can be added to all instructions which over- 
ride the default length of the operands (i.e., use 32- 
bit operands for 1 6-bit code, or 1 6-bit operands for 
32-bit code). 


2.3 Memory Organization 
Introduction 

Memory on the 486 Microprocessor is divided up 
into 8-bit quantities (bytes), 1 6-bit quantities (words), 
and 32-bit quantities (dwords). Words are stored in 
two consecutive bytes in memory with the low-order 
byte at the lowest address, the high order byte at the 


high address. Dwords are stored in four consecutive 
bytes in memory with the low-order byte at the low- 
est address, the high-order byte at the highest ad- 
dress. The address of a word or dword is the byte 
address of the low-order byte. 

In addition to these basic data types, the 486 Micro- 
processor supports two larger units of memory: 
pages and segments. Memory can be divided up 
into one or more variable length segments, which 
can be swapped to disk or shared between pro- 
grams. Memory can also be organized into one or 
more 4 Kbyte pages. Finally, both segmentation and 
paging can be combined, gaining the advantages of 
both systems. The 486 Microprocessor supports 
both pages and segments in order to provide maxi- 
mum flexibility to the system designer. Segmentation 
and paging are complementary. Segmentation is 
useful for organizing memory in logical modules, and 
as such is a tool for the application programmer, 
while pages are useful for the system programmer 
for managing the physical memory of a system. 

2.3.1 ADDRESS SPACES 

The 486 Microprocessor has three distinct address 
spaces: logical, linear, and physical. A logical 
address (also known as a virtual address) consists 
of a selector and an offset. A selector is the con- 
tents of a segment register. An offset is formed by 
summing all of the addressing components (BASE, 
INDEX, DISPLACEMENT) discussed in Section 
2.5.3 Memory Addressing Modes into an effective 
address. Since each task on the 486 Microproces- 
sor has a maximum of 16K (214 -i) selectors, and 
offsets can be 4 gigabytes, (2^2 bits) this gives a 
total of 246 bits or , 64 terabytes of logical address 
space per task. The programmer sees this virtual 
address space. 

The segmentation unit translates the logical ad- 
dress space Into a 32-bit linear address space. If the 
paging unit is not enabled then the 32-bit linear ad- 
dress corresponds to the physical address. The 
paging unit translates the linear address space into 
the physical address space. The physical address 
is what appears on the address pins. 

The primary difference between Real Mode and Pro- 
tected Mode is how the segmentation unit performs 
the translation of the logical address into the linear 
address. In Real Mode, the segmentation unit shifts 
the selector left four bits and adds the result to the 
offset to form the linear address. While in Protected 
Mode every selector has a linear base address as- 
sociated with it. The linear base address is stored in 
one of two operating system tables (i.e., the Local 
Descriptor Table or Global Descriptor Table). The 
selector’s linear base address is added to the offset 
to form the final linear address. 
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SEGMENT 

REGISTER 
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Figure 2.16. Address Translation 


Figure 2.16 shows the relationship between the vari- 
ous address spaces. 

2.3.2 SEGMENT REGISTER USAGE 

The main data structure used to organize memory is 
the segment. On the 486 Microprocessor, segments 
are variable sized blocks of linear addresses which 
have certain attributes associated with them. There 
are two main types of segments: code and data, the 
segments are of variable size and can be as small 
as 1 byte or as large as 4 gigabytes (2^2 bytes). 

In order to provide compact instruction encoding, 
and increase processor performance, instructions 
do not need to explicitly specify which segment reg- 
ister Is used. A default segment register is automati- 
cally chosen according to the rules of Table 2.11 
(Segment Register Selection Rules). In general, data 
references use the selector contained in the DS reg- 
ister; Stack references use the SS register and In- 
struction fetches use the CS register. The contents 
of the Instruction Pointer provide the offset. Special 
segment override prefixes allow the explicit use of a 
given segment register, and override the implicit 
rules listed in Table 2.11. The override prefixes also 
allow the use of the ES, FS and GS segment regis- 
ters. 

There are no restrictions regarding the overlapping 
of the base addresses of any segments. Thus, all 6 
segments could have the base address set to zero 


and create a system with a four gigabyte linear ad- 
dress space. This creates a system where the virtual 
address space is the same as the linear address 
space. Further details of segmentation are dis- 
cussed in Section 4.1. 


2.4 I/O Space 

The 486 Microprocessor has two distinct physical 
address spaces: Memory and I/O. Generally, periph- 
erals are placed in I/O space although the 486 Mi- 
croprocessor also supports memory-mapped periph- 
erals. The I/O space consists of 64 Kbytes, It can be 
divided Into 64K 8-bit ports, 32K 1 6-bit ports, or 1 6K 
32-bit ports, or any combination of ports which add 
up to less than 64 Kbytes. The 64K I/O address 
space refers to physical memory rather than linear 
address since I/O instructions do not go through the 
segmentation or paging hardware. The M/IO# pin 
acts as an additional address line thus allowing the 
system designer to easily determine which address 
space the processor is accessing. 

The I/O ports are accessed via the IN and OUT I/O 
instructions, with the port address supplied as an 
immediate 8-blt constant in the instruction or in the 
DX register. All 8- and 1 6-bit port addresses are zero 
extended on the upper address lines. The I/O In- 
structions cause the M/IO# pin to be driven low. 

I/O port addresses 00F8H through OOFFH are re- 
served for use by Intel. 
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Table 2.11. Segment Register Selection Rules 


Type of 

Implied (Default) 

Segment Override 

Memory Reference 

Segment Use 

Prefixes Possible 

Code Fetch 

CS 

None 

Destination of PUSH, PUSHF, INT, 
CALL, PUSHA Instructions 

ss 

None 

Source of POP, POPA, POPF, 

IRET, RET Instructions 

ss 

None 

Destination of STOS, MOVS, REP 
STOS, REP MOVS Instructions 
(Dl Is Base Register) 

ES 

None 

other Data References, with 

Effective Address Using Base 
Register of: 



[EAX] 

DS 


lEBX] 

DS 


[ECX] 

DS 


[EDXl 

DS 

All 

[ESI] 

DS 

[EDI] 

DS 


[EBP] 

SS 


[ESP] 

SS 



2.5 Addressing Modes 

2.5.1 ADDRESSING MODES OVERVIEW 

The 486 Microprocessor provides a total of 1 1 ad- 
dressing modes for instructions to specify operands. 
The addressing modes are optimized to allow the 
efficient execution of high level languages such as C 
and FORTRAN, and they cover the vast majority of 
data references needed by high-level languages. 

2.5.2 REGISTER AND IMMEDIATE MODES 

Two, of the addressing modes provide for instruc- 
tions that operate on register or immediate oper- 
ands; 

Register Operand Mode: The operand is located in 
one of the 8-, 1 6- or 32-bit general registers. 

Immediate Operand Mode: The operand is includ- 
ed in the Instruction as part of the opcode. 


2.5.3 32-BIT MEMORY ADDRESSING MODES 

The remaining 9 modes provide a mechanism for 
specifying the effective address of an operand. The 
linear address consists of two components; the seg- 
ment base address and an effective address. The 
effective address is calculated by using combina- 
tions of the following four address elements; 

DISPLACEMENT: An 8-, or 32-blt immediate value, 
following the instruction. 

BASE: The contents of any general purpose regis- 
ter. The base registers are generally used by compil- 
ers to point to the start of the local variable area. 

INDEX: The contents of any general purpose regis- 
ter except for ESP. The Index registers are used to 
access the elements of an array, or a string of char- 
acters. 

SCALE: The index register’s value can be multiplied 
by a scale factor, either 1, 2, 4 or 8. Scaled index 
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mode is especially useful for accessing arrays or 
structures. 

Combinations of these 4 components make up the 9 
additional addressing modes. There is no perform- 
ance penalty for using any of these addressing com- 
binations, since the effective address calculation is 
pipelined with the execution of other instructions. 
The one exception is the simultaneous use of Base 
and Index components which requires one addition- 
al clock. 

As shown in Figure 2.17, the effective address (EA) 
of an operand is calculated according to the follow- 
ing formula. 

EA = Base Reg + (Index Reg * Scaling) + Displacement 

Direct Mode: The operand’s offset is contained as 
part of the instruction as an 8-, 16- or 32-bit dis- 
placement. 

EXAMPLE: INC Word PTR [500] 

Register Indirect Mode: A BASE register contains 
the address of the operand. 

EXAMPLE: MOV [ECX], EDX 


Based Mode: A BASE register’s contents is added 
to a DISPLACEMENT to form the operand’s offset. 

EXAMPLE: MOV ECX, [EAX + 24] 

Index Mode: An INDEX register’s contents is added 
to a DISPLACEMENT to form the operand’s offset. 

EXAMPLE: ADD EAX, TABLE[ESI] 

Scaled Index Mode: An INDEX register’s contents is 
multiplied by a scaling factor which is added to a 
DISPLACEMENT to form the operand’s offset. 

EXAMPLE: IMUL EBX, TABLE[ESIM],7 

Based Index Mode: The contents of a BASE register 
is added to the contents of an INDEX register to 
form the effective address of an operand. 

EXAMPLE: MOV EAX, [ESI] [EBX] 

Based Scaled Index Mode: The contents of an IN- 
DEX register is multiplied by a SCALING factor and 
the result is added to the contents of a BASE regis- 
ter to obtain the operand’s offset. 

EXAMPLE: MOV ECX, [EDX*8] [EAX] 



Figure 2.17. Addressing Mode Calculations 
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Based index Mode with Displacement: The contents 
of an INDEX Register and a BASE register’s con- 
tents and a DISPLACEMENT are all summed to- 
gether to form the operand offset. 

EXAMPLE: ADD EDX, [ESI] [EBP + OOFFFFFOH] 

Based Scaled Index Mode with Displacement: The 
contents of an INDEX register are multiplied by a 
SCALING factor, the result is added to the contents 
of a BASE register and a DISPLACEMENT to form 
the operand’s offset. 

EXAMPLE: MOV EAX, LOCALTABLE[EDIM] 
[EBP + 80] 


2.5.4 DIFFERENCES BETWEEN 16- AND 32-BIT 
ADDRESSES 

In order to provide software compatibility with the 
80286 and the 8086, the 486 Microprocessor can 
execute 16-bit instructions in Real and Protected 
Modes. The processor determines the size of the 
instructions it is executing by examining the D bit in 
the CS segment Descriptor. If the D bit Is 0 then all 
operand lengths and effective addresses are as- 
sumed to be 16 bits long. If the D bit is 1 then the 
default length for operands and addresses is 32 bits. 
In Real Mode the default size for operands and ad- 
dresses is 1 6-bits. 

Regardless of the. default precision of the operands 
or addresses, the 486 Microprocessor is able to exe- 
cute either 1 6- or 32-bit Instructions. This is specified 
via the use of override prefixes. Two prefixes, the 
Operand Size Prefix and the Address Length Pre- 
fix, override the value of the D bit on an individual 
instruction basis. These prefixes are automatically 
added by Intel assemblers. 

Example: The processor is executing in Real Mode 
and the programmer needs to access the EAX regis- 
ters. The assembler code for this might be MOV 
EAX, 32-bit MEMORYOP, ASM486 Macro Assem- 
bler automatically determines that an Operand Size 
Prefix is needed and generates it. 

Example: The D bit is 0, and the programmer wishes 
to use Scaled Index addressing mode to access an 
array. The Address Length Prefix allows the use of 
MOV DX, TABLE[ESP2]. The assembler uses an 


Address Length Prefix since, with D = 0, the default 
addressing mode is 16-blts. 

Example: The D bit is 1 , and the program wants to 
store a 1 6-bit quantity. The Operand Length Prefix is 
used to specify only a 16-bit value; MOV MEM16, 
DX. 

The OPERAND LENGTH and Address Length Pre- 
fixes can be applied separately or In combination to 
any instruction. The Address Length Prefix does not 
allow addresses over 64 Kbytes to be accessed In 
Real Mode. A memory address which exceeds 
FFFFH will result in a General Protection Fault. An 
Address Length Prefix only allows the use of the ad- 
ditional 486 Microprocessor addressing modes. 

When executing 32-bit code, the 486 Microproces- 
sor uses either 8-, or 32-bit displacements, and any 
register can be used as base or index registers. 
When executing 1 6-bit code, the displacements are 
either 8, or 1 6 bits, and the base and index register 
conform to the 80286 model. Table 2.12 illustrates 
the differences. 


2.6 Data Formats 

2.6.1 DATA TYPES 

The 486 microprocessor can support a wide-varlety 
of data types. In the following descriptions, the on- 
chip floating point unit (FPU) consists of the floating 
point registers. The central processing unit (CPU) 
consists of the base architecture registers. 

2.6. 1.1 Unsigned Data Types 

The FPU does not support unsigned data types. Re- 
fer to Table 2.13. 

Byte: Unsigned 8-blt quantity 

Word: Unsigned 16-bit quantity 
Dword; Unsigned 32-blt quantity 

The least significant bit (LSB) in a byte is bit 0, and 
the most significant bit is 7. 


Table 2.12. BASE and INDEX Registers for 16- and 32-Bit Addresses 



16-Bit Addressing 

32-Bit Addressing 

BASE REGISTER 

BX,BP 

Any 32-blt GP Register 

INDEX REGISTER 

SI,DI 

Any 32-bit GP Register 
Except ESP 

SCALE FACTOR 

none 

1,2, 4,8 

DISPLACEMENT 

0, 8, 16 bits 

0, 8, 32 bits 
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2.6.1.2 Signed Data Types 

All signed data types assume 2’s complement nota- 
tion. The signed data types contain two fields, a sign 
bit and a magnitude. The sign bit is the most signifi- 
cant bit (MSB). The number is negative if the sign bit 
is 1. If the sign bit is 0, the number is positive. The 
magnitude field consists of the remaining bits in the 
number. Refer to Table 2.13. 

8-bit Integer: Signed 8-bit quantity 
16-bit Integer: Signed 16-bit quantity 
32-bit Integer: Signed 32-bit quantity 
64-bit Integer: Signed 64-bit quantity 

The FPU only supports 16-, 32- and 64-bit integers. 
The CPU only supports 8-, 16- and 32-bit integers. 

2.6.1. 3 Floating Point Data Types 

Floating point data type in the 486 microprocessor 
contain three fields, sign, significand and exponent. 
The sign field is one bit and is the MSB of the float- 
ing point number. The number is negative if the sign 
bit is 1 . If the sign bit is 0, the number is positive. The 
significand gives the significant bits of the number. 
The exponent field contains the power of 2 needed 
to scale the significand. Refer to Table 2.13. 

Only the FPU supports floating point data types. 

Single Precision Real: 23-bit significand and 8- 

bit exponent. 32 bits total. 

Double Precision Real: 52-bit significand and li- 
bit exponent. 64 bits total. 

Extended Precision Real: 64-bit significand and 15- 
bit exponent. 80 bits total. 


2.6.1.4 BCD Data Types 

The 486 microprocessor supports packed and un- 
packed binary coded decimal (BCD) data types. A 
packed BCD data type contains two digits per byte, 
the lower digit is in bits 0-3 and the upper digit in 
bits 4-7. An unpacked BCD data type contains 1 
digit per byte stored in bits 0-3. 

The CPU supports 8-blt packed and unpacked BCD 
data types. The FPU only supports 80-bit packed 
BCD data types. Refer to Table 2.13. 

2.6. 1.5 String Data Types 

A string data type is a contiguous sequence of bits, 
bytes, words or dwords. A string may contain be- 
tween 1 byte and 4 Gbytes. Refer to Table 2.14. 

String data types are only supported by the CPU. 

Byte String: Contiguous sequence of bytes. 

Word String: Contiguous sequence of words. 

Dword String: Contiguous sequence of dwords. 

Bit String: A set of contiguous bits. In the 486 micro- 
processor bit strings can be up to 4 gigabits long. 

2.6. 1.6 ASCII Data Types 

The 486 microprocessor supports ASCII (American 
Standard Code for Information Interchange) strings 
and can perform arithmetic operations (such as ad- 
dition and division) on ASCII data. The CPU can only 
operate on ASCII data. Refer to Table 2.14. 
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Table 2.13. i486TM Microprocessor Data Types 


Supported by Supported by 
Base Registers FPU 

i i 


Data Format 


Least Significant Byte 

I 


Range Precision 7 0 7 0 7 0 7 0 7 0 7 0 7 0 7 0 7 0 7 0 


X 0-255 8 bits 


X 0-64K 16bits 


X 0-4G 32 bits 


B-Bit Integer 


X 10*" 8 bits 


7 0 

Two’s 

Complement 

Sign Bit t 


16-Bit Integer 


XX 10^ 16bits 


Two’s 

Complement | 
Sign Bit T 


32-Bit Integer 


X X lO"" 32 bits 


Two’s 

Complement | 
Sign Bit t 


64-Bit Integer 


X 10^^ 64 bits 


Two’s 

Complement I I 
Sign Bit t 


8-Bit Unpacked BCD X 0-9 1 Digit 


One BCD Digit per Byte 


B-Bit Packed BCD X 0-9 2 Digits 


Two BCD Digits per Byte 


BO-Bit Packed BCD X ±10"^® 18 Digits 'snored 


Single Precision Real X ±10“^® 24 Bits 


Double Precision Real X ± 1 0 - 53 Bits 


Extended Precision Real X ± 10“^^'^'^ 64 Bits | Exp. |i 

t Sign Bit 




i 486 TM MICROPROCESSOR 


Table 2.14. String and ASCII Data Types 



2.6.1.? Pointer Data Types 

A pointer data type contains a value that gives the 
address of a piece of data. The 486 microprocessor 
supports two types of pointers. Refer to Table 2.15. 


Table 2.15. Pointer Data Types 


Least Sig Byte 

i 


Data Format 


48-bit Pointer: 1 6-bit selector and 32-bit offset 


48-Bit Pointer 


Selector Offset 


32-blt Pointer: 32-bit offset 


32-Blt Pointer 
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2.6.2 LITTLE ENDIAN vs BIG ENDIAN 
DATA FORMATS 

The 486 microprocessor, as well as all other mem- 
bers of the 86 architecture use the “little-endian” 
method for storing data types that are larger than 
one byte. Words are stored in two consecutive bytes 
in memory with the low-order byte at the lowest ad- 
dress and the high order byte at the high address, 
□words are stored in four consecutive bytes in mem- 
ory with the low-order byte at the lowest address 
and the high order byte at the highest address. The 
address of a word or dword data item is the byte 
address of the low-order byte. 

Figure 2.18 illustrates the differences between the 
big-endian and little-endian formats for dwords. The 
32 bits of data are shown with the low order bit num- 
bered bit 0 and the high order bit numbered 32. Big- 
endian data is stored with the high-order bits at the 
lowest addressed byte. Little-endian data is stored 
with the high-order bits in the highest addressed 
byte. 

The 486 microprocessor has two instructions which 
can convert 16- or 32-bit data between the two byte 
orderings. BSWAP (byte swap) handles four byte 
values and XCHG (exchange) handles two byte val- 
ues. 


m + 3 m + 2 m+1 m 

31 24 23 16 15 8 7 0 


Dword in Little-Endian Memory Format 

m m+1 m+2 m+3 

31 24 23 16 15 8 7 0 


Dword in Big-Endian Memory Format 


Figure 2.18. Big vs Little Endian Memory Format 


2.7 Interrupts 

2.7.1 INTERRUPTS AND EXCEPTIONS 

Interrupts and exceptions alter the normal program 
flow, in order to handle external events, to report 
errors or exceptional conditions. The difference be- 
tween interrupts and exceptions is that interrupts are 
used to handle asynchronous external events while 
exceptions handle instruction faults. Although a pro- 
gram can generate a software interrupt via an I NT N 
instruction, the processor treats software interrupts 
as exceptions. 


Hardware interrupts occur as the result of an exter- 
nal event and are classified into two types: maskable 
or non-maskable. Interrupts are serviced after the 
execution of the current instruction. After the inter- 
rupt handler is finished servicing the interrupt, exe- 
cution proceeds with the Instruction immediately 
after the interrupted Instruction. Sections 2.7.3 and 
2.7.4 discuss the differences between Maskable and 
Non-Maskable interrupts. 

Exceptions are classified as faults, traps, or aborts 
depending on the way they are reported, and wheth- 
er or not restart of the instruction causing the excep- 
tion is supported. Faults are exceptions that are de- 
tected and serviced before the execution of the 
faulting instruction. A fault would occur in a virtual 
memory system, when the processor referenced a 
page or a segment which was not present. The oper- 
ating system would fetch the page or segment from 
disk, and then the 486 Microprocessor would restart 
the instruction. Traps are exceptions that are report- 
ed immediately after the execution of the instruction 
which caused the problem. User defined interrupts 
are examples of traps. Aborts are exceptions which 
do not permit the precise location of the instruction 
causing the exception to be determined. Aborts are 
used to report severe errors, such as a hardware 
error, or illegal values in system tables. 

Thus, when an interrupt service routine has been 
completed, execution proceeds from the Instruction 
immediately following the interrupted instruction. On 
the other hand, the return address from an excep- 
tion fault routine will always point at the instruction 
causing the exception and include any leading In- 
struction prefixes. Table 2.16 summarizes the possi- 
ble interrupts for the 486 Microprocessor and shows 
where the return address points. 

The 486 Microprocessor has the ability to handle up 
to 256 different interrupts/exceptions. In order to 
service the interrupts, a table with up to 256 interrupt 
vectors must be defined. The interrupt vectors are 
simply pointers to the appropriate interrupt service 
routine. In Real Mode (see Section 3.1), the vectors 
are 4 byte quantities, a Code Segment plus a 1 6-blt 
offset; in Protected Mode, the Interrupt vectors are 8 
byte quantities, which are put in an Interrupt Descrip- 
tor Table (see Section 4.3. 3.4). Of the 256 possible 
interrupts, 32 are reserved for use by Intel, the re- 
maining 224 are free to be used by the system de- 
signer. 

2.7.2 INTERRUPT PROCESSING 

When an interrupt occurs the following actions hap- 
pen. First, the current program address and the 
Flags are saved on the stack to allow resumption of 
the interrupted program. Next, an 8-bit vector is sup- 
plied to the 486 Microprocessor which identifies the 
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appropriate entry in the interrupt table. The table 
contains the starting address of the interrupt service 
routine. Then, the user supplied interrupt service 
routine Is executed. Finally, when an IRET Instruc- 
tion is executed the old processor state is restored 
and program execution resumes at the appropriate 
instruction. 

The 8-bit interrupt vector is supplied to the 486 Mi- 
croprocessor in several different ways: exceptions 
supply the interrupt vector internally; software INT 
instructions contain or imply the vector; maskable 
hardware interrupts supply the 8-bit vector via the 
interrupt acknowledge bus sequence. Non-Maska- 
ble hardware interrupts are assigned to interrupt 
vector 2. 


2.7.3 MASKABLE INTERRUPT 

Maskable interrupts are the most common way used 
by the 486 Microprocessor to respond to asynchro- 
nous external hardware events. A hardware interrupt 
occurs when the INTR is pulled high and the Inter- 
rupt Flag bit (IF) Is enabled. The processor only re- 
sponds to interrupts between instructions, (REPeat 
String instructions, have an “interrupt window”, be- 
tween memory moves, which allows interrupts dur- 
ing long string moves). When an interrupt occurs the 
processor reads an 8-bit vector supplied by the 
hardware which identifies the source of the interrupt, 
(one of 224 user defined interrupts). The exact na- 
ture of the interrupt sequence is discussed in Sec- 
tion 7.2.10. 


Table 2.16. Interrupt Vector Assignments 


Function 

Interrupt 

Number 

Instruction Which 

Can Cause 

Exception 

Return Address 
Points to 
Faulting 
Instruction 

Type 

Divide Error 

0 

DIV, IDIV 

YES 

FAULT 

Debug Exception 

1 

Any Instruction 

YES 

TRAP* 

NMI Interrupt 

2 

INT 2 or NMI 

NO 

NMI 

One Byte Interrupt 

3 

INT 

NO 

TRAP 

Interrupt on Overflow 

4 

INTO 

NO 

TRAP 

Array Bounds Check 

5 

BOUND 

YES 

FAULT 

Invalid OP-Code 

6 

Any Illegal Instruction 

YES 

FAULT 

Device Not Available 

7 

ESC, WAIT 

YES 

FAULT 

Double Fault 

8 

Any Instruction That Can 

Generate an Exception 


ABORT 

Intel Reserved 

9 




Invalid TSS 

10 

JMP, CALL, IRET, INT 

YES 

FAULT 

Segment Not Present 

11 

Segment Register Instructions 

YES 

FAULT 

Stack Fault 

■ 12 

Stack References 

YES 

FAULT 

General Protection Fault 

13 

Any Memory Reference 

YES 

FAULT 

Page Fault 

14 

Any Memory Access or Code Fetch 

YES 

FAULT 

Intel Reserved 

15 




Floating Point Error 

16 

Floating Point, WAIT 

YES 

FAULT 

Alignment Check Interrupt 

17 

Unaligned Memory Access 

YES 

FAULT 

Intel Reserved 

18-32 




Two Byte Interrupt 

0-255 

INTn 

NO 

TRAP 


*Some debug exceptions may report both traps on the previous instruction, and faults on the next instruction. 
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The IF bit in the EFLAG registers is reset when an 
interrupt is being serviced. This effectively disables 
servicing additional interrupts during an interrupt 
service routine. However, the IF may be set explicitly 
by the interrupt handler, to allow the nesting of Inter- 
rupts. When an IRET Instruction is executed the 
original state of the IF Is restored. 

2.7.4 NON-MASKABLE INTERRUPT 

Non-maskable interrupts provide a method of servic- 
ing very high priority interrupts. A common example 
of the use of a non-maskable Interrupt (NMI) would 
be to activate a power failure routine. When the NMI 
input is pulled high it causes an interrupt with an 
internally supplied vector value of 2. Unlike a normal 
hardware interrupt, no interrupt acknowledgment se- 
quence is performed for an NMI. 

While executing the NMI servicing procedure, the 
486 Microprocessor will not service further NMI re- 
quests until an Interrupt return (IRET) instruction is 
executed or the processor is reset. If NMI occurs 
while currently servicing an NMI, its presence will be 
saved for servicing after executing the first IRET in- 
struction. The IF bit is cleared at the beginning of an 
NMI interrupt to inhibit further INTR Interrupts. 

2.7.5 SOFTWARE INTERRUPTS 

A third type of interrupt/exception for the 486 Micro- 
processor is the software interrupt. An I NT n instruc- 
tion causes the processor to execute the interrupt 
service routine pointed to by the nth vector in the 
interrupt table. 

A special case of the two byte software interrupt I NT 
n is the one byte I NT 3, or breakpoint Interrupt. By 
inserting this one byte instruction in a program, the 
user can set breakpoints in his program as a debug- 
ging tool. 

A final type of software interrupt is the single step 
interrupt. It is discussed in Section 9.2. 


2.7.6 INTERRUPT AND EXCEPTION PRIORITIES 

Interrupts are externally-generated events. Maska- 
ble Interrupts (on the INTR input) and Non-Maskable 
Interrupts (on the NMI input) are recognized at in- 
struction boundaries. When NMI and maskable 
INTR are both recognized at the same instruction 
boundary, the 486 Microprocessor invokes the NMI 
service routine first. If, after the NMI service routine 
has beep invoked, maskable Interrupts are still en- 
abled, then the 486 Microprocessor will invoke the 
appropriate interrupt service routine. 

Table 2.17a. i486'rM Microprocessor Priority for 
Invoking Service Routines in Case of _ 
Simultaneous External Interrupts 

1. NMI 

2. INTR 


Exceptions are internally-generated events. Excep- 
tions are detected by the 486 Microprocessor if, In 
the course of executing an instruction, the 486 Mi- 
croprocessor detects a problematic condition. The 
486 Microprocessor then immediately invokes the 
appropriate exception service routine. The state of 
the 486 Microprocessor is such that the instruction 
causing the exception can be restarted. If the excep- 
tion service routine has taken care of the problemat- 
ic condition, the instruction will execute without 
causing the same exception. 

It is possible for a single instruction to generate sev- 
eral exceptions (for example, transferring a single 
operand could generate two page faults if the oper- 
and location spans two “not present” pages). How- 
ever, only one exception is generated upon each at- 
tempt to execute the instruction. Each exception 
service routine should correct its corresponding ex- 
ception, and restart the instruction. In this manner, 
exceptions are serviced until the instruction exe- 
cutes successfully. 

As the 486 Microprocessor executes instructions, it 
follows a consistent cycle in checking for excep- 
tions, as shown in Table 2.17b. This cycle is repeat- 
ed as each instruction is executed, and occurs in 
parallel with instruction decoding and execution. 


4-38 




i 486 TM MICROPROCESSOR 


inM 


Table 2.17b. Sequence of Exception Checking 


Consider the case of the 486 Microprocessor 
having just completed an instruction. It then per- 
forms the following checks before reaching the 
point where the next instruction is completed: 

1. Check for Exception 1 Traps from the instruc- 
tion just completed (single-step via Trap Flag, 
or Data Breakpoints set in the Debug Regis- 
ters). 

2. Check for Exception 1 Faults in the next in- 
struction (Instruction Execution Breakpoint set 
in the Debug Registers for the next instruc- 
tion). 

3. Check for external NMI and INTR. 

4. Check for Segmentation Faults that prevented 
fetching the entire next instruction (exceptions 
11 or 13). 

5. Check for Page Faults that prevented fetching 
the entire next instruction (exception 14). 

6. Check for Faults decoding the next instruction 
(exception 6 if illegal opcode; exception 6 if in 
Real Mode or in Virtual 8086 Mode and at- 
tempting to execute an instruction for Protect- 
ed Mode only (see Section 4.6.4); or exception 
13 if instruction is longer than 15 bytes, or priv- 
ilege violation in Protected Mode (i.e., not at 
lOPL oratCPL = 0). 

7. If WAIT opcode, check if TS = 1 and MP=1 
(exception 7 if both are 1). 

8. If opcode for Floating Point Unit, check if 
EM = 1 or TS = 1 (exception 7 if either are 1). 

9. If opcode for Floating Point Unit (FPU), check 
FPU error status (exception 1 6 if error status is 
asserted). 

10. Check in the following order for each memo- 
ry reference required by the instruction: 

a. Check for Segmentation Faults that pre- 
vent transferring the entire memory quanti- 
ty (exceptions 11, 12, 13). 

b. Check for Page Faults that prevent trans- 
ferring the entire memory quantity (excep- 
tion 14). 

NOTE: 

The order stated supports the concept of the 
paging mechanism being “underneath” the seg- 
mentation mechanism. Therefore, for any given 
code or data reference in memory, segmenta- 
tion exceptions are generated before paging ex- 
ceptions are generated. 


2.7.7 INSTRUCTION RESTART 

The 486 Microprocessor fully supports restarting all 
Instructions after faults. If an exception is detected in 
the Instruction to be executed (exception categories 
4 through 10 in Table 2.17b), the 486 Microproces- 
sor Invokes the appropriate exception service rou- 
tine. The 486 Microprocessor is in a state that per- 
mits restart of the instruction, for all cases but those 
in Table 2.17c. Note that all such cases are easily 
avoided by proper design of the operating system. 

Table 2.17c. Conditions Preventing 
Instruction Restart 


An instruction causes a task switch to a task 
whose Task State Segment is partially “not 
present”. (An entirely “not present” TSS is re- 
startable.) Partially present TSS’s can be avoid- 
ed either by keeping the TSS’s of such tasks 
present in memory, or by aligning TSS segments 
to reside entirely within a single 4K page (for TSS 
segments of 4 Kbytes or less). 

NOTE: 

These conditions are avoided by using the oper- 
ating system designs mentioned in this table. 


2.7.8 DOUBLE FAULT 

A Double Fault (exception 8) results when the proc- 
essor attempts to Invoke an exception service rou- 
tine for the segment exceptions (10, 11, 12 or 13), 
but in the process of doing so, detects an exception 
other than a Page Fault (exception 14). 

A Double Fault (exception 8) will also be generated 
when the processor attempts to Invoke the Page 
Fault (exception 14) service routine, and detects an 
exception other than a second Page Fault. In any 
functional system, the entire Page Fault service rou- 
tine must remain “present” in memory. 

When a Double Fault occurs, the 486 Microproces- 
sor invokes the exception service routine for excep- 
tion 8. 


2.7.9 FLOATING POINT INTERRUPT VECTORS 

Several Interrupt vectors of the 486 microprocessor 
are used to report exceptional conditions while exe- 
cuting numeric programs in either real or protected 
mode. Table 2.18 shows these interrupts and their 
causes. 
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Table 2.18. Interrupt Vectors Used by FPU 


Interrupt 

Number 

Cause of Interrupt 

7 

A Floating Point Instruction was encountered when EM or TS of the 486 ™ processor 
control register zero (CRO) was set. EM = 1 Indicates that software emulation of the 
instruction is required. When TS is set, either a Floating Point or WAIT Instruction causes 
interrupt 7. This indicates that the current FPU context may not belong to the current task. 

13 

The first word or doubleword of a numeric operand is not entirely within the limit of Its 
segment. The return address pushed onto the stack of the exception handler points at the 
Floating Point Instruction that caused the exception, including any prefixes. The FPU has 
not executed this instruction; the instruction pointer and data pointer register refer to a 
previous, correctly executed instruction. 

16 

The previous numerics instruction caused an unmasked exception. The address of the 
faulty instruction and the address of its operand are stored in the Instruction pointer and 
data pointer registers. Only Floating Point and WAIT instructions can cause this Interrupt. 

The 486 TM processor return address pushed onto the stack of the exception handler 
points to a WAIT or Floating Point instruction (including prefixes). This Instruction can be 
restarted after clearing the exception condition in the FPU. The FNINIT, FNCLEX, 

FNSTSW, FNSTENV, and FNSAVE instructions cannot cause this interrupt. 


3.Q REAL MODE ARCHITECTURE 


3.1 Real Mode Introduction 

When the processor is reset or powered up it is ini- 
tialized in Real Mode. Real Mode has the same base 
architecture as the 8086, but allows access to the 
32-bit register set of the 486 Microprocessor. The 
addressing mechanism, memory size, interrupt han- 
dling, are all identical to the Real Mode on the 
80286. 


All of the 486 Microprocessor instructions are avail- 
able in Real Mode (except those Instructions listed 
in Section 4.6.4). The default operand size in Real 
Mode Is 1 6 bits, just like the 8086. In order to use the 
32-bit registers and addressing modes, override pre- 
fixes must be used. In addition, the segment 
size on the 486 Microprocessor in Real Mode is 
64 Kbytes so 32-blt effective addresses must have a 
value less the OOOOFFFFH. The primary purpose of 
Real Mode is to set up the processor for Protected 
Mode Operation. 



Figure 3.1. Real Address Mode Addressing 
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The LOCK prefix on the 486 Microprocessor, even in 
Real Mode, is more restrictive than on the 80286. 
This is due to the addition of paging on the 486 Mi- 
croprocessor in Protected Mode and Virtual 8086 
Mode. Paging makes it impossible to guarantee that 
repeated string instructions can be LOCKed. The 
486 Microprocessor can’t require that all pages 
holding the string be physically present in memory. 
Hence, a Page Fault (exception 14) might have to be 
taken during the repeated string instruction. There- 
fore the LOCK prefix can’t be supported during re- 
peated string instructions. 


These are the only instruction forms where the 
LOCK prefix is legal on the 486 Microprocessor: 


Opcode 

Operands 
(Dest, Source) 

BIT Test and 

Mem, Reg/lmmed 

SET/RESET/COMPLEMENT 


XCHG 

Reg, Mem 

XCHG 

Mem, Reg 

ADD, OR, ADC, SBB, 

Mem, Reg/immed 

AND, SUB, XOR 


NOT, NEG, INC, DEC 

Mem 


An exception 6 will be generated if a LOCK prefix is 
placed before any instruction form or opcode not 
listed above. The LOCK prefix allows Indivisible 
read/modify/write operations on memory operands 
using the instructions above. For example, even the 
ADD Reg, Mem is not LOCKable, because the Mem 
operand is not the destination (and therefore no 
memory read/modify/operation is being performed). 

Since, on the 486 Microprocessor, repeated string 
instructions are not LOCKable, it is not possible to 
LOCK the bus for a long period of time. Therefore, 
the LOCK prefix is not lOPL-sensitive on the 486 
Microprocessor. The LOCK prefix can be used at 
any privilege level, but only on the instruction forms 
listed above. 


3.2 Memory Addressing 

In Real Mode the maximum memory size is limited to 
1 megabyte. Thus, only address lines A2-A19 are 
active. (Exception, after RESET address lines A20- 
A31 are high during CS-relative memory cycles until 
an intersegment jump or call is executed (see Sec- 
tion 6.5)). 

Since paging is not allowed In Real Mode the linear 
addresses are the same as physical addresses. 
Physical addresses are formed in Real Mode by 
adding the contents of the appropriate segment reg- 
ister which is shifted left by four bits to an effective 


address. This addition results in a physical address 
from OOOOOOOOH to 0010FFEFH. This is compatible 
with 80286 Real Mode. Since segment registers are 
shifted left by 4 bits. Real Mode segments always 
start on 16 byte boundaries. 

All segments in Real Mode are exactly 64 Kbytes 
long, and may be read, written, or executed. The 486 
Microprocessor will generate an exception 13 if a 
data operand or instruction fetch occurs past the 
end of a segment (i.e.. If an operand has an offset 
greater than FFFFH, for example a word with a low 
byte at FFFFH and the high byte at OOOOH). 

Segments may be overlapped in Real Mode. Thus, if 
a particular segment does not use all 64 Kbytes an- 
other segment can be overlayed on top of the un- 
used portion of the previous segment. This allows 
the programmer to minimize the amount of physical 
memory needed for a program. 


3.3 Reserved Locations 

There are two fixed areas in memory which are re- 
served in Real address mode: system initialization 
area and the interrupt table area. Locations OOOOOH 
through 003FFH are reserved for interrupt vectors. 
Each one of the 256 possible interrupts has a 4-byte 
jump vector reserved for it. Locations FFFFFFFOH 
through FFFFFFFFH are reserved for system initiali- 
zation. 


3.4 Interrupts 

Many of the exceptions shown in Table 2.16 and 
discussed in Section 2.7 are not applicable to Real 
Mode operation, in particular exceptions 10, 11, 14, 
will not happen in Real Mode.' Other exceptions 
have slightly different meanings in Real Mode; Table 
3.1 identifies these exceptions. 


3.5 Shutdown and Halt 

The HLT Instruction stops program execution and 
prevents the processor from using the local bus until 
restarted. Either NMI, INTR with Interrupts enabled 
(IF= 1), or RESET will force the 486 Microprocessor 
out of halt. If interrupted, the saved CS:IP will point 
to the next instruction after the HLT. 

Shutdown will occur when a severe error is detected 
that prevents further processing. In Real Mode, 
shutdown can occur under two conditions: 

An interrupt or an exception occur (exceptions 8 or 
13) and the interrupt vector is larger than the Inter- 
rupt Descriptor Table (i.e., there is not an interrupt 
handler for the interrupt). 
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Table 3.1. Exceptions with Different Meanings in Real Mode (see Table 2.16) 


Function 

interrupt 

Number 

Related 

instructions 

Return 

Address Location 

Interrupt table limit too small 

8 

INT Vector is not 
within table limit 

Before 

Instruction 

CS, DS, ES, FS, GS 

Segment overrun exception 

13 

Word memory reference 
beyond offset = FFFFH. 

An attempt to execute 
past the end of CS segment. 

Before 

Instruction 

SS Segment overrun exception 

12 

Stack Reference 
beyond offset = FFFFH 

Before 

Instruction 


A CALL, INT or PUSH instruction attempts to wrap 
around the stack segment when SP is not even (i.e., 
pushing a value on the stack when SP = 0001 re- 
sulting in a stack segment greater than FFFFH). 

An NMI input can bring the processor out of shut- 
down if the Interrupt Descriptor Table limit is large 
enough to contain the NMI Interrupt vector (at least 
001 7H) and the stack has enough room to contain 
the vector and flag information (i.e., SP is greater 
than 0006H). Otherwise shutdown can only be exit- 
ed via the RESET input. 


4.0 PROTECTED MODE 
ARCHITECTURE 


4.1 Introduction 

The complete capabilities of the 486 Microprocessor 
are unlocked when the processor operates In Pro- 
tected Virtual Address Mode (Protected Mode). Pro- 
tected Mode vastly Increases the linear address 
space to four gigabytes (232 bytes) and allows the 
running of virtual memory programs of almost unlim- 
ited size (64 terabytes or 2^6 bytes). In addition Pro- 
tected Mode allows the 486 Microprocessor to run 
all of the existing 8086, 80286 and 386 microproces- 
sor software, while providing a sophisticated memo- 
ry management and a hardware-assisted protection 
mechanism. Protected Mode allows the use of addi- 
tional instructions especially optimized for support- 
ing multitasking operating systems. The base archi- 
tecture of the 486 Microprocessor remains the 
same, the registers, instructions, and addressing 
modes described in the previous sections are re- 


tained. The main difference between Protected 
Mode, and Real Mode from a programmer’s view is 
the increased address space, and a different ad- 
dressing mechanism. 


4.2 Addressing Mechanism 

Like Real Mode, Protected Mode uses two compo- 
nents to form the logical address, a 16-bit selector is 
used to determine the linear base address of a seg- 
ment, the base address is added to a 32-bit effective 
address to form a 32-blt linear address. The linear 
address Is then either used as the 32-blt physical 
address, or if paging Is enabled the paging mecha- 
nism maps the 32-bit linear address into a 32-bit 
physical address. 

The difference between the two modes lies in calcu- 
lating the base address. In Protected Mode the se- 
lector is used to specify an Index into an operating 
system defined table (see Figure 4.1). The table 
contains the 32-bit base address of a given seg- 
ment. The physical address is formed by adding the 
base address obtained from the table to the offset. 

Paging provides an additional memory management 
mechanism which operates only in Protected Mode. 
Paging provides a means of managing the very large 
segments of the 486 Microprocessor. As such, pag- 
ing operates beneath segmentation. The paging 
mechanism translates the protected linear address 
which comes from the segmentation unit into a 
physical address. Figure 4.2 shows the complete 
486 Microprocessor addressing mechanism with 
paging enabled. 
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DESCRIPTOR 


240440-10 


Figure 4.1. Protected Mode Addressing 


48 BIT POINTER 



4K BYTES 

4K BYTES 

4K BYTES 

PHYSICAL PAGE: 
4K BYTES 

4K BYTES 

4K BYTES 

4K BYTES 

240440-11 


Figure 4.2. Paging and Segmentation 


4.3 Segmentation 

4.3.1 SEGMENTATION INTRODUCTION 

Segmentation is one method of memory manage- 
ment. Segmentation provides the basis for protec- 
tion. Segments are used to encapsulate regions of 
memory which have common attributes. For exam- 
ple, all of the code of a given program could be con- 
tained in a segment, or an operating system table 
may reside in a segment. All information about a 
segment is stored in an 8 byte data structure called 
a descriptor. All of the descriptors in a system are 
contained in tables recognized by hardware. 


4.3.2 TERMINOLOGY 

The following terms are used throughout the discus- 
sion of descriptors, privilege levels and protection: 

PL: Privilege Level — One of the four hierarchical 
privilege levels. Level 0 is the most privileged level 
and level 3 is the least privileged. More privileged 
levels are numerically smaller than less privileged 
levels. ' 

RPL: Requestor Privilege Level — The privilege level 
of the original supplier of the selector. RPL is deter- 
mined by the least two significant bits of a selector. 
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DPL: Descriptor Privilege Level — This is the least 
privileged level at which a task may access that de- 
scriptor (and the segment associated with that de- 
scriptor). Descriptor Privilege Level is determined by 
bits 6:5 in the Access Right Byte of a descriptor. 

CPL: Current Privilege Level — ^The privilege level at 
which a task is currently executing, which equals the 
privilege level of the code segment being executed. 
CPL can also be determined by examining the low- 
est 2 bits of the CS register, except for conforming 
code segments. 

EPL: Effective Privilege Level — The effective privi- 
lege level is the least privileged of the RPL and DPL. 
Since smaller privilege level values indicate greater 
privilege, EPL is the numerical maximum of RPL and 
DPL. 

Task: One instance of the execution of a program. 
Tasks are also referred to as processes. 


4.3.3 DESCRIPTOR TABLES 

4.3.3. 1 Descriptor Tables Introduction 

The descriptor tables define ail of the segments 
which are used in an 486 Microprocessor system. 
There are three types of tables on the 486 Micro- 
processor which hold descriptors: the Global De- 
scriptor Table, Local Descriptor Table, and the Inter- 
rupt Descriptor Table. All of the tables are variable 
length memory arrays. They can range in size be- 
tween 8 bytes and 64 Kbytes. Each table can hold 
up to 8192 8-byte descriptors. The upper 13 bits of a 
selector are used as an index into the descriptor ta- 
ble. The tables have registers associated with them 
which hold the 32-blt linear base address, and the 
1 6-bit limit of each table. 

Each of the tables has a register associated with it, 
the GDTR, LDTR, and the IDTR (see Figure 4.3). 
The LGDT, LLDT, and LIDT Instructions, load the 
base and limit of the Global, Local, and Interrupt De- 
scriptor Tables, respectively, into the appropriate 
register. The SGDT, SLDT, and SIDT store the base 
and limit values. These tables are manipulated by 
the operating system. Therefore, the load descriptor 
table instructions are privileged instructions. 



LDT DESCR 
SELECTOR 


15 0 


IDT LIMIT 

IDT BASE 

LINEAR ADDRESS 

31 

0 


15 0 


GDT LIMIT 

GDT BASE 

LINEAR ADDRESS 

31 

0 


LOT BASE 
LINEAR ADDRESS 


32 

PROGRAM INVISIBLE 
AUTOMATICALLY LOADED \ 
FROM LDT DESCRIPTOR 


Figure 4.3. Descriptor Table Registers 


4.3.3.2 Global Descriptor Table 

The Global Descriptor Table (GDT) contains de- 
scriptors which are possibly available to all of the 
tasks in a system. The GDT can contain any type of 
segment descriptor except for descriptors which are 
used for servicing interrupts (i.e., Interrupt and trap 
descriptors). Every 486 Microprocessor system con- 
tains a GDT. Generally the GDT contains code and 
data segments used by the operating systems and 
task state segments, and descriptors for the LDTs in 
a system. 

The first slot of the Global Descriptor Table corre- 
sponds to the null selector and is not used. The null 
selector defines a null pointer value. 


4.3.3.3 Local Descriptor Table 

LDTs contain descriptors which are associated with 
a given task. Generally, operating systems are de- 
signed so that each task has a separate LDT. The 
LDT may contain only code, data, stack, task gate, 
and call gate descriptors. LDTs provide a mecha- 
nism for isolating a given task’s code and data seg- 
ments from the rest of the operating system, while 
the GDT contains descriptors for segments which 
are common to all tasks. A segment cannot be ac- 
cessed by a task if its segment descriptor does not 
exist in either the current LDT or the GDT. This pro- 
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vides both isolation and protection for a task’s seg- 
ments, while still allowing global data to be shared 
among tasks. 

Unlike the 6 byte GDT or IDT registers which contain 
a base address and limit, the visible portion of the 
LDT register contains only a 16-bit selector. This se- 
lector refers to a Local Descriptor Table descriptor in 
the GDT. 


4.3.3.4 Interrupt Descriptor Table 

The third table needed for 486 Microprocessor sys- 
tems is the Interrupt Descriptor Table. (See Figure 
4.4.) The IDT contains the descriptors which point to 
the location of up to 256 interrupt service routines. 
The IDT may contain only task gates, interrupt 
gates, and trap gates. The IDT should be at least 
256 bytes In size In order to hold the descriptors for 
the 32 Intel Reserved Interrupts. Every interrupt 
used by a system must have an entry In the IDT. The 
IDT entries are referenced via I NT instructions, ex- 
ternal interrupt vectors, and exceptions. (See Sec- 
tion 2.7 Interrupts). 



Table Register Use 


4.3.4 DESCRIPTORS 

4.3.4. 1 Descriptor Attribute Bits 

The object to which the segment selector points to 
is called a descriptor. Descriptors are eight byte 
quantities which contain attributes about a given re- 
gion of linear address space (i.e., a segment). These 
attributes include the 32-bit base linear address of 
the segment, the 20-bit length and granularity of the 
segment, the protection level, read, write or execute 
privileges, the default size of the operands (16-bit or 
32-bit), and the type of segment. All of the attribute 
information about a segment is contained in 12 bits 
in the segment descriptor. Figure 4.5 shows the gen- 
eral format of a descriptor. All segments on the 486 
Microprocessor have three attribute fields in com- 
mon: the P bit, the DPL bit, and the S bit. The Pres- 
ent P bit is 1 if the segment is loaded in physical 
memory, if P = 0 then any attempt to access this 
segment causes a not present exception (exception 
11). The Descriptor Privilege Level DPL is a two-bit 
field which specifies the protection level 0-3 associ- 
ated with a segment. 

The 486 Microprocessor has two main categories of 
segments: system segments and non-system seg- 
ments (for code and data). The segment S bit in the 
segment descriptor determines If a given segment is 
a system segment or a code or data segment. If the 
S bit is 1 then the segment Is either a code or data 
segment, if it is 0 then the segment is a system seg- 
ment. 


4.3.4.2 I486TM CPU Code, Data Descriptors 
(S=1) 

Figure 4.6 shows the general format of a code and 
data descriptor and Table 4.1 illustrates how the bits 
in the Access Rights Byte are interpreted. 
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BYTE 

ADDRESS 

0 


+ 4 


BASE Base Address of the segment 
LIMIT The length of the segment 

P Present Bit 1 = Present 0 = Not Present 

DPL Descriptor Privilege Level 0-3 

S Segment Descriptor 0 = System Descriptor 1 =Code or Data Segment Descriptor 

TYPE Type of Segment 

A Accessed Bit 

G Granularity Bit 1 = Segment length is page granular 0 = Segment length is byte granular 

D Default Operation Size (recognized in code segment descriptors only) 

1 = 32-bit segment 0 = 1 6-bit segment 
0 Bit must be zero (0) for compatibility with future processors 

AVL Available field for user or OS 

NOTE: 

In a maximum-size segment (i.e., a segment with G = 1 and segment limit 19...0 = FFFFFH), the lowest 12 bits of the 
segment base should be zero (i.e., segment base 11. ..000= OOOH). 


Figure 4.5. Segment Descriptors 


31 . 0 


SEGMENT BASE15...0 

SEGMENT LIMIT 1 5... 0 

BASE 31 ... 24 

G 

D 

0 

AVL 

LIMIT 

19. ..16 

P 

DPL 

1 

s 

TYPE 

1 1 

A 

BASE 
23... 16 


31 0 


SEGMENT BASE 15. 

..0 




SEGMENT LIMIT 1 5... 0 






LIMIT 
19. ..16 

ACCESS 

BASE 

BASE 31 . . 24 

G 

D 

0 

AVL 

RIGHTS 

BYTE 

23... 16 


D/B 1 = Default Instruction Attributes are 32-Bits 
0 = Default Instruction Attributes are 16-Bits 
AVL Available field for user or OS 
G Granularity Bit 1 = Segment length is page granular 
0 = Segment length is byte granular 
0 Bit must be zero (0) for compatibility with future processors 


0 

+ 4 


Figure 4.6. Segment Descriptors 
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Table 4.1. Access Rights Byte Definition for Code and Data Descriptions 


Type 

Field 

Definition 


Bit 

Position 

Name 

Function 


7 

Present (P) 

P = 1 Segment is mapped into physical memory. 

P = 0 No mapping to physical memory exits, base and limit are 
not used. 

6-5 

Descriptor Privilege 
Level (DPL) 

Segment privilege attribute used in privilege tests. 

4 

Segment Descrip- 
tor (S) 

S = 1 Code or Data (includes stacks) segment descriptor. 

S = 0 System Segment Descriptor or Gate Descriptor. 

3 

Executable (E) 

E = 0 Descriptor type is data segment: 

If 

2 

Expansion DIrec- 

ED = 0 Expand up segment, offsets must be ^ limit. 

Data 


tion (ED) 

ED - 1 Expand down segment, offsets must be > limit. 

- Segment 

1 

Writeable (W) 

W = 0 Data segment may not be written into. 

W = 1 Data segment may be written into. 

{S = 1, 

E = 0) 

3 

Executable (E) 

E = 1 Descriptor type is code segment: ] 

If 

2 

Conforming (C) 

C = 1 Code segment may only be executed 
when CPL ^ DPL and CPL 
remains unchanged. 

Code 
^Segment 
(S= 1. 

1 

Readable (R) 

R = 0 Code segment may not be read. 

R = 1 Code segment may be read. J 

E= 1) 

0 

Accessed (A) 

A = 0 Segment has not been accessed. 

A = 1 Segment selector has been loaded into segment register 
or used by selector test instructions. 


Code and data segments have several descriptor 
fields in common. The accessed A bit is set whenev- 
er the processor accesses a descriptor. The A bit is 
used by operating systems to keep usage statistics 
on a given segment. The G bit, or granularity bit, 
specifies if a segment length is byte-granular or 
page-granular. 486 Microprocessor segments can 
be one megabyte long with byte granularity (G = 0) 
or four gigabytes with page granularity (G = 1), (i.e., 
220 pages each page is 4 Kbytes in length). The 
granularity is totally unrelated to paging. A 486 Mi- 
croprocessor system can consist of segments with 
byte granularity, and page granularity, whether or not 
paging is enabled. 

The executable E bit tells if a segment is a code or 
data segment. A code segment (E = 1 , S = 1 ) may be 
execute-only or execute/read as determined by the 
Read R bit. Code segments are execute only if 
R = 0, and execute/read if R = 1. Code segments 
may never be written into. 

NOTE: 

Code segments may be modified via aliases. Alias- 
es are writeable data segments which occupy the 
same range of linear address space as the code 
segment. 


The D bit indicates the default length for operands 
and effective addresses. If D=1 then 32-bit oper- 
ands and 32-bit addressing modes are assumed. If 
D = 0 then 16-bit operands and 16-bit addressing 
modes are assumed. Therefore all existing 80286 
code segments will execute on the 486 Microproc- 
essor assuming the D bit is set 0. 

Another attribute of code segments is determined by 
the conforming C bit. Conforming segments, C=1, 
can be executed and shared by programs at differ- 
ent privilege levels. (See Section 4.4 Protection.) 

Segments Identified as data segments (E = 0, S = 1 ) 
are used for two types of 486 Microprocessor seg- 
ments: stack and data segments. The expansion di- 
rection (ED) bit specifies if a segment expands 
downward (stack) or upward (data). If a segment is a 
stack segment all offsets must be greater than the 
segment limit. On a data segment all offsets must be 
less than or equal to the limit. In other words, stack 
segments start at the base linear address plus the 
maximum segment limit and grow down to the base 
linear address plus the limit. On the other hand, data 
segments start at the base linear address and ex- 
pand to the base linear address plus limit. 
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The write W bit controls the ability to write into a 
segment. Data segments are read-only If W = 0. The 
stack segment must have W = 1 . 

The B bit controls the size of the stack pointer regis- 
ter. If B = 1, then PUSHes, POPs, and CALLs all use 
the 32-bit ESP register for stack references and as- 
sume an upper limit of FFFFFFFFH. If B = 0, stack 
Instructions all use the 16-bit SP register and as- 
sume an upper limit of FFFFH. 

4.3.4.3 System Descriptor Formats 

System segments describe information about oper- 
ating system tables, tasks, and gates. Figure 4.7 
shows the general format pf system segment de- 
scriptors, and the various types of system segments. 
486 Microprocessor system descriptors contain a 
32-bit base linear address and a 20-bit segment lim- 
it. 80286 system descriptors have a 24-bit base ad- 
dress and a 1 6-bit segment limit. 80286 system de- 
scriptors are identified by the upper 1 6 bits being all 
zero. 

4.3.4.4 LDT Descriptors (S = 0, TYPE = 2) 

LDT descriptors (S = 0, TYPE = 2) contain informa- 
tion about Local Descriptor Tables. LDTs contain a 
table of segment descriptors, unique to a particular 
task. Since the instruction to load the LDTR Is only 
available at privilege level 0, the DPL field is Ignored. 
LDT descriptors are only allowed in the Global De- 
scriptor Table (GDT). 


4.3.4.5 TSS Descriptors (S = 0, 

TYPE=1, 3, 9, B) 

A Task State Segment (TSS) descriptor contains in- 
formation about the location, size, and privilege level 
of a Task State Segment (TSS). A TSS in turn is a 
special fixed format segment which contains all the 
state information for a task and a linkage field to 
permit nesting tasks. The TYPE field is used to Indi- 
cate whether the task is currently BUSY (I.e., on a 
chain of active tasks) or the TSS Is available. The 
TYPE field also indicates if the segment contains a 
80286 or a 486 Microprocessor TSS. The Task Reg- 
ister (TR) contains the selector which points to the 
current Task State Segment. 

4.3.4.6 Gate Descriptors (S = 0, 

TYPE = 4-7, C, F) 

Gates are used to control access to entry points 
within the target code segment. The various types of 
gate descriptors are call gates, task gates, 
interrupt gates, and trap gates. Gates provide a 
level of indirection between the source and destina- 
tion of the control transfer. This indirection allows 
the processor to automatically perform protection 
checks. It also allows system designers to control 
entry points to the operating system. Call gates are 
used to change privilege levels (see Section 4.4 
Protection), task gates are used to perform a task 
switch, and interrupt and trap gates are used to 
specify interrupt service routines. 


31 16 0 
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BASE 31 ... 24 
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0 

0 

0 

LIMIT 
19... 16 
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DPL 
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0 

TYPE 

1 \ 1 
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Type 
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Type 
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0 

Invalid 

8 

invalid 

1 

Available 80286 TSS 

9 

Available 486tm CPU TSS 

2 

LDT 

A 

Undefined (Intel Reserved) 

3 

Busy 80286 TSS 

B 

Busy 486TM CPU TSS 

4 

80286 Call Gate 

C 

486TM CPU Call Gate 

5 

Task Gate (for 80286 or 486TM CPU Task) 

D 

Undefined (Intel Reserved) 

6 

80286 Interrupt Gate 

E 

486TM CPU Interrupt Gate 

7 

80286 Trap Gate 

F 

486TM CPU Trap Gate 


Figure 4.7. System Segment Descriptors 
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Figure 4.8 shows the format of the four types of gate 
descriptors. Call gates are primarily used to transfer 
program control to a more privileged level. The call 
gate descriptor consists of three fields: the access 
byte, a long pointer (selector and offset) which 
points to the start of a routine and a word count 
which specifies how many parameters are to be cop- 
ied from the caller’s stack to the stack of the called 
routine. The word count field is only used by call 
gates when there is a change in the privilege level, 
other types of gates ignore the word count field. 

Interrupt and trap gates use the destination selector 
and destination offset fields of the gate descriptor as 
a pointer to the start of the interrupt or trap handler 
routines. The difference between interrupt gates and 
trap gates is that the interrupt gate disables inter- 
rupts (resets the IF bit) while the trap gate does not. 

Task gates are used to switch tasks. Task gates 
may only refer to a task state segment (see Section 
4.4.6 Task Switching) therefore only the destination 
selector portion of a task gate descriptor is used, 
and the destination offset is ignored. 

Exception 13 is generated when a destination selec- 
tor does not refer to a correct descriptor type, i.e., a 
code segment for an interrupt, trap or call gate, a 
TSS for a task gate. 


The access byte format is the same for all gate de- 
scriptors. P=1 indicates that the gate contents are 
valid. P = 0 indicates the contents are not valid and 
causes exception 11 if referenced. DPI is the de- 
scriptor privilege level and specifies when this de- 
scriptor may be used by a task (see Section 4.4 
Protection). The S field, bit 4 of the access rights 
byte, must be 0 to indicate a system control descrip- 
tor. The type field specifies the descriptor type as 
indicated in Figure 4.8. 

4.3.4.7 Differences Between i486TM 

Microprocessor and 80286 Descriptors 

In order to provide operating system compatibility 
between the 80286 and 486 Microprocessor, the 
486 Microprocessor supports all of the 80286 seg- 
ment descriptors. Figure 4.9 shows the general for- 
mat of an 80286 system segment descriptor. The 
only differences between 80286 and 486 Microproc- 
essor descriptor formats are that the values of the 
type fields, and the limit and base address fields 
have been expanded for the 486 Microprocessor. 
The 80286 system segment descriptors contained a 
24-bit base address and 16-blt limit, while the 486 
Microprocessor system segment descriptors have a 
32-bit base address, a 20-bit limit field, and a granu- 
larity bit. 


31 24 16 850 


SELECTOR 

OFFSET 15... 0 

OFFSET 31 ...16 

P 

DPL 

1 

0 

TYPE 

1 1 1 

0 

0 

0 

WORD 

COUNT 

4...0 


Name 

Type 


P 


Value 

4 

5 

6 
7 
C 
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F 
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Gate Descriptor Fields 

Description 

80286 call gate 

Task gate (for 80286 or 486 tm CPU task) 

80286 interrupt gate 

80286 trap gate 

486 TM CPU call gate 

486TM CPU interrupt gate 

486TM CPU trap gate 

Descriptor contents are not valid 

Descriptor contents are valid 


DPL— least privileged level at which a task may access the gate. WORD COUNT 0-31— the number of parameters to copy from caller’s stack 
to the called procedure’s stack. The parameters are 32-bit quantities for 486™ CPU gates, and 1 6-bit quantities for 80286 gates. 

DESTINATION 16-bit Selector to the target code segment 

SELECTOR selector or 

Selector to the target task state segment for task gate 


DESTINATION offset Entry point within the target code segment 

OFFSET 16-bit 80286 

32-bit 486™ CPU 


Figure 4.8. Gate Descriptor Formats 
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By supporting 80286 system segments the 486 Mi- 
croprocessor Is able to execute 80286 application 
programs on a 486 Microprocessor operating sys- 
tem. This Is possible because the processor auto- 
matically understands which descriptors are 80286- 
style descriptors and which descriptors are 486 Mi- 
croprocessor-style descriptors. In particular, if the 
upper word of a descriptor is zero, then that descrip- 
tor is a 80286-style descriptor. 

The only other differences between 80286-style de- 
scriptors and 486 Microprocessor descriptors Is the 
Interpretation of the word count field of call gates 
and the B bit. The word count field specifies the 
number of 16-bit quantities to copy for 80286 call 
gates and 32-blt quantities for 486 Microprocessor 
call gates. The B bit controls the size of PUSHes 
when using a call gate; if B = 0 PUSHes are 16 bits, 
if B = 1 PUSHes are 32 bits. 

4.3.4.8 Selector Fields 

A selector in Protected Mode has three fields: Local 
or Global Descriptor Table Indicator (Tl), Descriptor 


Entry Index (Index), and Requestor (the selector’s) 
Privilege Level (RPL) as shown In Figure 4.10. The 
Tl bits select one of two memory-based tables of 
descriptors (the Global Descriptor Table or the Local 
Descriptor Table). The Index selects one of 8K de- 
scriptors in the appropriate descriptor table. The 
RPL bits allow high speed testing of the selector’s 
privilege attributes. 

4.3.4.9 Segment Descriptor Cache 

In addition to the selector value, every segment reg- 
ister has a segment descriptor cache register asso- 
ciated with it. Whenever a segment register’s con- 
tents are changed, the 8-byte descriptor associated 
with that selector is automatically loaded (cached) 
on the chip. Once loaded, all references to that seg- 
ment use the cached descriptor information instead 
of reaccessing the descriptor. The contents of the 
descriptor cache are not visible to the programmer. 
Since descriptor caches only change when a seg- 
ment register is changed, programs which modify 
the descriptor tables must reload the appropriate 
segment registers after changing a descriptor’s val- 
ue. 


31 0 


SEGMENT BASE 1 5... 0 

SEGMENT LIMIT 1 5... 0 

Intel Reserved 

Set to 0 

P 

DPL 
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S 

TYPE 

I I I 

BASE 
23... 16 


BASE Base Address of the segment DPL Descriptor Privilege Level 0-3 

LIMIT The length of the segment S System Descriptor 0 = System 1=User 

P Present Bit 1= Present 0 = Not Present TYPE Type of Segment 


Figure 4.9. 80286 Code and Data Segment Descriptors 
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Figure 4.10. Example Descriptor Selection 


4.3.4.10 Segment Descriptor Register Settings 

The contents of the segment descriptor cache vary 
depending on the mode the 486 Microprocessor is 
operating in. When operating in Real Address Mode, 
the segment base, limit, and other attributes within 
the segment cache registers are defined as shown 
in Figure 4.1 1. For compatibility with the 8086 archi- 


tecture, the base is set to sixteen times the current 
selector value, the limit is fixed at OOOOFFFFH, and 
the attributes are fixed so as to indicate the segment 
is present and fully usable. In Real Address Mode, 
the internal “privilege level” is always fixed to the 
highest level, level 0, so I/O and other privileged 
opcodes may be executed. 
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SEGMENT DESCRIPTOR CACHE REGISTER CONTENTS 


32 -BIT BASE 32 -BIT LIMIT OTHER AHRIBUTES 

(UPDATED DURING SELECTOR (FIXED) (FIXED) 

LOAD INTO SEGMENT REGISTER) 

CONFORMING PRIVILEGE 

STACK SIZE 

EXECUTABLE 

WRITEABLE 

READABLE 

EXPANSION DIRECTION 

GRANULARITY 

ACCESSED 

PRIVILEGE LEVEL 

present 

BASE LIMIT 


CS 

16X CURRENT CS SELECTOR* 

OOOOFFFFH 

Y 

0 

Y 

B 

U 

Y 

Y 

Y 

- 

N 

ss 

16X CURRENT SS SELECTOR 

OOOOFFFFH 

Y 

0 

Y 

B 

Y 

Y 

Y 

N 

W 

- 

DS 

16X CURRENT DS SELECTOR 

OOOOFFFFH 

Y 

0 

Y 

B 

U 

Y 

Y 

N 

- 

- 

ES 

1 6X CURRENT ES SELECTOR 

OOOOFFFFH 

Y 

0 

Y 

B 

U 

Y 

Y 

N 

- 

- 

FS 

16X CURRENT FS SELECTOR 

OOOOFFFFH 

Y 

0 

Y 

B 

U 

Y 

Y 

N 

- 

- 

GS 

16X CURRENT GS SELECTOR 

OOOOFFFFH 

Y 

0 

Y 

B 

U 

Y 

Y 

N 

- 

- 
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* Except the 32-bit CS base is initialized to FFFFFOOOH after reset until first intersegment control transfer (i.e., intersegment CALL, or 


intersegment JMP, or INT). (See Figure 4.13 Example.) 
Key: Y = yes 

N = no 

0 = privilege level 0 

1 = privilege level 1 

2 = privilege level 2 

3 = privilege level 3 

U = expand up 


D = expand down 
B = byte granularity 
P = page granularity 
W = push/pop 16-bit words 
F = push/pop 32-bit dwords 
- = does not apply to that segment cache register 


Figure 4.11. Segment Descriptor Caches for Real Address Mode 
(Segment Limit and Attributes are Fixed) 


When operating in Protected Mode, the segment 
base, limit, and other attributes within the segment 
cache registers are defined as shown in Figure 4.12. 
In Protected Mode, each of these fields are defined 


according to the contents of the segment descriptor 
indexed by the selector value loaded into the seg- 
ment register. 
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SEGMENT DESCRIPTOR CACHE REGISTER CONTENTS 


32 -BIT BASE 

(UPDATED DURING 
SELECTOR LOAD INTO 
SEGMENT REGISTER) 


32 -BIT LIMIT 

(UPDATED DURING 
SELECTOR LOAD INTO 
SEGMENT REGISTER) 


OTHER ATTRIBUTES 

(UPDATED DURING 
SELECTOR LOAD INTO 
SEGMENT REGISTER) 


CONFORMING PRIVILEGE - 

STACK SIZE 

EXECUTABLE 

WRITEABLE 

READABLE 

EXPANSION DIRECTION — 

GRANULARITY 

ACCESSED 

PRIVILEGE LEVEL 

PRESENT - 


BASE 


LIMIT 




cs 

BASE PER SEG DESCR 

LIMIT PER SEG DESCR 

_P^ 

d 

d 

d 

d 

d 

N 

Y 

- 

d 

SS 

BASE PER SEG DESCR 

LIMIT PER SEG DESCR 

_P 

"d 

"d 

T 

T 

r 

w 

¥ 

d 


DS 

BASE PER SEG DESCR 

LIMIT PER SEG DESCR 

_P_ 

d 

d 

d 

d 

T 

T 

¥ 



ES 

BASE PER SEG DESCR 

LIMIT PER SEG DESCR 


d 

d 

d 

3 

"d" 

d 

N 

- 

- 

FS 

BASE PER SEG DESCR 

LIMIT PER SEG DESCR 

_P_ 

d 

T 

d 

d 

T 

d 

¥ 

- 

- 

GS 

BASE PER SEG DESCR 

LIMIT PER SEG DESCR 

P 

T 

"d" 

T 

3 

T 

T 

¥ 

- 

“ 
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Key: Y = fixed yes 

N = fixed no 

d = per segment descriptor 

p = per segment descriptor; descriptor must indicate “present” to avoid exception 1 1 
(exception 1 2 in case of SS) 

r = per segment descriptor, but descriptor must indicate “readable” to avoid exception 13 
(special case for SS) 

w = per segment descriptor, but descriptor must indicate “writable” to avoid exception 13 
(special case for SS) 

- = does not apply to that segment cache register 


Figure 4.12. Segment Descriptor Caches for Protected Mode (Loaded per Descriptor) 


When operating in a Virtual 8086 Mode within the 
Protected Mode, the segment base, limit, and other 
attributes within the segment cache registers are de- 
fined as shown in Figure 4.13. For compatibility with 
the 8086 architecture, the base is set to sixteen 
times the current selector value, the limit is fixed at 


OOOOFFFFH, and the attributes are fixed so as to 
indicate the segment is present and fully usable. The 
virtual program executes at lowest privilege level, 
level 3, to allow trapping of all lOPL-sensitive in- 
structions and level-O-only instructions. 
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int^ 


SEGMENT DESCRIPTOR CACHE REGISTER CONTENTS 


32 - BIT BASE 32 - BIT LIMIT OTHER AHRIBUTES 


(UPDATED DURING SELECTOR 
LOAD INTO SEGMENT REGISTER) 

CONFORMING PRIVILEGE 

STACK SIZE 

EXECUTABLE 

WRITEABLE 

READABLE 

EXPANSION DIRECTION 

GRANULARITY 

ACCESSED 

PRIVILEGE LEVEL 

PRESENT 

BASE 


(FIXED) (FIXED) 



cs 

16X CURRENT CS SELECTOR 

OOOOFFFFH 

Y 

3 

Y 

B 

U 

Y 

Y 

Y 

- 

N 

ss 

16X CURRENT SS SELECTOR 

OOOOFFFFH 

Y 

3 

Y 

B 

U 

Y 

Y 

N 

W 

- 

DS 

1 6X CURRENT DS SELECTOR 

OOOOFFFFH 

Y 

3 

Y 

B 

U 

Y 

Y 

N 

- 

- 

ES 

16X CURRENT ES SELECTOR 

OOOOFFFFH 

X 

X 

X 

X 

X 

X 

X 

X 

- 

- 

FS 

1 6X CURRENT FS SELECTOR 

OOOOFFFFH 

X 

X 

X 

X 

X 

X 

X 

X 

- 

- 

GS 

16X CURRENT GS SELECTOR 

OOOOFFFFH 

Y 

3 

Y 

B 

U 

Y 

Y 

N 

- 

- 


Key: Y = yes 

N = no 

0 = privilege level 0 

1 = privilege level 1 

2 = privilege level 2 

3 = privilege level 3 

U = expand up 


240440-17 


D = expand down 
B = byte granularity 
P = page granularity 
W = push/pop 16-bit words 
F = push /pop 32-bit dwords 
- = does not apply to that segment cache register 


Figure 4.13. Segment Descriptor Caches for Virtual 8086 Mode within Protected Mode 
(Segment Limit and Attributes are Fixed) 


4.4 Protection Microprocessor has four levels of protec- 

tion which are optimized to support the needs of a 
multi-tasking operating system to isolate and protect 
user programs from each other and the operating 
system. The privilege levels control the use of privi- 
leged instructions, I/O Instructions, and access to 
segments and segment descriptors. Unlike tradition- 
al microprocessor-based systems where this protec- 
tion is achieved only through the use of complex 
external hardware and software the 486 Microproc- 
essor provides the protection as part of its integrat- 
ed Memory Management Unit. The 486 Microproc- 
essor offers an additional type of protection on a 
page basis, when paging is enabled (See Section 
4.5.3 Page Level Protection). 

The four-level hierarchical privilege system is illus- 
trated in Figure 4-14. It Is an extension of the user/ 
supervisor privilege mode commonly used by mini- 
computers and, in fact, the user/supervisor mode Is 
fully supported by the 486 Microprocessor paging 


Figure 4.14. Four-Level Hierarchical Protection 


4.4.1 PROTECTION CONCEPTS 
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iny 


mechanism. The privilege levels (PL) are numbered 
0 through 3. Level 0 is the most privileged or trusted 
level. 


4.4.2 RULES OF PRIVILEGE 

The 486 Microprocessor controls access to both 
data and procedures between levels of a task, ac- 
cording to the following rules. 

• Data stored in a segment with privilege level p can 
be accessed only by code executing at a privilege 
level at least as privileged as p. 

• A code segment/procedure with privilege level p 
can only be called by a task executing at the same 
or a lesser privilege level than p. 

4.4.3 PRIVILEGE LEVELS 

4.4.3.1 Task Privilege 

At any point in time, a task on the 486 Microproces- 
sor always executes at one of the four privilege lev- 
els. The Current Privilege Level (CPL) specifies the 
task’s privilege level. A task’s CPL may only be 
changed by control transfers through gate descrip- 
tors to a code segment with a different privilege lev- 
el. (See Section 4.4.4 Privilege Level Transfers) 
Thus, an application program running at PL = 3 may 
call an operating system routine at PL = 1 (via a 
gate) which would cause the task’s CPL to be set to 
1 until the operating system routine was finished. 

4.4.3.2 Selector Privilege (RPL) 

The privilege level of a selector is specified by the 
RPL field. The RPL Is the two least significant bits of 
the selector. The selector’s RPL is only used to es- 
tablish a less trusted privilege level than the current 
privilege level for the use of a segment. This level is 
called the task’s effective privilege level (EPL). The 
EPL is defined as being the least privileged (I.e. nu- 
merically larger) level of a task’s CPL and a selec- 
tor’s RPL. Thus, If selector’s RPL = 0 then the CPL 
always specifies the privilege level for making an ac- 
cess using the selector. On the other hand if RPL = 
3 then a selector can only access segments at level 


3 regardless of the task’s CPL. The RPL is most 
commonly used to verify that pointers passed to an 
operating system procedure do not access data that 
is of higher privilege than the procedure that origi- 
nated the pointer. Since the originator of a selector 
can specify any RPL value, the Adjust RPL (ARPL) 
instruction is provided to force the RPL bits to the 
originator’s CPL. 

4.4.3.3 I/O Privilege and I/O Permission Bitmap 

The I/O privilege level (lOPL, a 2-blt field in the 
EFLAG register) defines the least privileged level at 
which I/O instructions can be unconditionally per- 
formed. I/O instructions can be unconditionally per- 
formed when CPL ^ lOPL. (The I/O Instructions are 
IN, OUT, INS, OUTS, REP INS, and REP OUTS.) 
When CPL > lOPL, and the current task is associat- 
ed with a 286 TSS, attempted I/O instructions cause 
an exception 13 fault. When CPL > lOPL, and the 
current task is associated with a 486 Microprocessor 
TSS, the I/O Permission Bitmap (part of a 486 Mi- 
croprocessor TSS) is consulted on whether I/O to 
the port Is allowed, or an exception 13 fault is to be 
generated instead. For diagrams of the I/O Permis- 
sion Bitmap, refer to Figures 4.15a and 4.15b. For 
further information on how the I/O Permission Bit- 
map is used in Protected Mode or in Virtual 8086 
Mode, refer to Section 4.6.4 Protection and I/O Per- 
mission Bitmap. 

The I/O privilege level (lOPL) also affects whether 
several other Instructions can be executed or cause 
an exception 1 3 fault instead. These instructions are 
called “lOPL-sensitive” instructions and they are 
CLI and STI. (Note that the LOCK prefix is not lOPL- 
sensltlve on the 486 Microprocessor.) 

The lOPL also affects whether the IF (interrupts en- 
able flag) bit can be changed by loading a value into 
the EFLAGS register. When CPL ^ lOPL, then the 
IF bit can be changed by loading a new value into 
the EFLAGS register. When CPL > lOPL, the IF bit 
cannot be changed by a new value POP’ed into (or 
otherwise loaded into) the EFLAGS register; the IF 
bit merely remains unchanged and no exception is 
generated. 
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Table 4.2. Pointer Test Instructions 


Instruction 

Operands 

Function 

ARPL 

Selector, 

Register 

Adjust Requested Privi- 
lege Level: adjusts the 

RPL of the selector to the 
numeric maximum of 
current selector RPL value 
and the RPL value in the 
register. Set zero flag if 
selector RPL was 
changed. 

VERR 

Selector 

VERify for Read: sets the 
zero flag if the segment 
referred to by the selector 
can be read. 

VERW 

Selector 

VERify for Write: sets the 
zero flag if the segment 
referred to by the selector 
can be written. 

LSL 

Register, 

Selector 

Load Segment Limit: reads 
the segment limit into the 
register if privilege rules 
and descriptor type allow. 
Set zero flag if successful. 

LAR 

Register, 

Selector 

Load Access Rights: reads 
the descriptor access 
rights byte into the register 
if privilege rules allow. Set 
zero flag If successful. 


4.4.3.4 Privilege Validation 

The 486 Microprocessor provides several instruc- 
tions to speed pointer testing and help maintain sys- 
tem integrity by verifying that the selector value 
refers to an appropriate segment. Table 4.2 summa- 
rizes the selector validation procedures available for 
the 486 Microprocessor. 

This pointer verification prevents the common prob- 
lem of an application at PL = 3 calling a operating 
systems routine at PL = 0 and passing the operat- 
ing system routine a “bad” pointer which corrupts a 
data structure belonging to the operating system. If 
the operating system routine uses the ARPL instruc- 


tion to ensure that the RPL of the selector has no 
greater privilege than that of the caller, then this 
problem can be avoided. 

4.4.3.5 Descriptor Access 

There are basically two types of segment accesses: 
those Involving code segments such as control 
transfers, and those involving data accesses. Deter- 
mining the ability of a task to access a segment in- 
volves the type of segment to be accessed, the in- 
struction used, the type of descriptor used and CPL, 
RPL, and DPL as described above. 

Any time an instruction loads data segment registers 
(DS, ES, FS, GS) the 486 Microprocessor makes 
protection validation checks. Selectors loaded in the 
DS, ES, FS, GS registers must refer only to data 
segments or readable code segments. The data ac- 
cess rules are specified in Section 4.4.2 Rules of 
Privilege. The only exception to those rules is read- 
able conforming code segments which can be ac- 
cessed at any privilege level. 

Finally the privilege validation checks are performed. 
The CPL is compared to the EPL and if the EPL Is 
more privileged than the CPL an exception 1 3 (gen- 
eral protection fault) is generated. 

The rules regarding the stack segment are slightly 
different than those involving data segments. In- 
structions that load selectors into SS must refer to 
data segment descriptors for writeable data seg- 
ments. The DPL and RPL must equal the CPL. All 
other descriptor types or a privilege level violation 
will cause exception 13. A stack not present fault 
causes exception 1 2. Note that an exception 1 1 is 
used for a not-present code or data segment. 

4,4.4 PRIVILEGE LEVEL TRANSFERS 

Inter-segment control transfers occur when a selec- 
tor is loaded in the CS register. For a typical system 
most of these transfers are simply the result of a call 
or a jump to another routine. There are five types of 
control transfers which are summarized in Table 4.3. 
Many of these transfers result in a privilege level 
transfer. Changing privilege levels is done only via 
control transfers, by using gates, task switches, and 
interrupt or trap gates. 
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Table 4.3. Descriptor Types Used for Control Transfer 


Control Transfer Types 

Operation Types 

Descriptor 

Referenced 

Descriptor 

Table 

Intersegment within the same privilege level 

JMP, CALL, RET, IRET* 

Code Segment 

GDT/LDT 

Intersegment to the same or higher privilege level 
Interrupt within task may change CPL 

CALL 

Call Gate 

GDT/LDT 

Interrupt Instruction, 
Exception, External 
Interrupt 

Trap or 

Interrupt 

Gate 

IDT 

Intersegment to a lower privilege level 
(changes task CPL) 

RET, IRET* 

Code Segment 

GDT/LDT 


CALL, JMP 

Task State 
Segment 

GDT 

Task Switch 

CALL, JMP 

Task Gate 

GDT/LDT 

IRET** 

Interrupt Instruction, 
Exception, External 
Interrupt 

Task Gate 

IDT 


*NT (Nested Task bit of flag register) = 0 
**NT (Nested Task bit of flag register) = 1 


Control transfers can only occur if the operation 
which loaded the selector references the correct de- 
scriptor type. Any violation of these descriptor usage 
rules will cause an exception 13 (e.g. JMP through a 
call gate, or IRET from a normal subroutine call). 

In order to provide further system security, all control 
transfers are also subject to the privilege rules. 

The privilege rules require that: 

— Privilege level transitions can only occur via 
gates. 

— JMPs can be made to a non-conforming code 
segment with the same privilege or to a conform- 
ing code segment with greater or equal privilege. 

— CALLS can be made to a non-conforming code 
segment with the same privilege or via a gate to a 
more privileged level. 

— Interrupts handled within the task obey the same 
privilege rules as CALLs. 

— Conforming Code segments are accessible by 
privilege levels which are the same or less privi- 
leged than the conforming-code segment’s DPL. 

— Both the requested privilege level (RPL) in the 
selector pointing to the gate and the task’s CPL 
must be of equal or greater privilege than the 
gate’s DPL. 

— The code segment selected in the gate must be 
the same or more privileged than the task’s CPL. 


— Return instructions that do not switch tasks can 
only return control to a code segment with same 
or less privilege. 

— Task switches can be performed by a CALL, 
JMP, or INT which references either a task gate 
or task state segment who’s DPL is less privi- 
leged or the same privilege as the old task’s CPL. 

Any control transfer that changes CPL within a task 
causes a change of stacks as a result of the privi- 
lege level change. The initial values of SS:ESP for 
privilege levels 0, 1 , and 2 are retained in the task 
state segment (see Section 4.4.6 Task Switching). 
During a JMP or CALL control transfer, the new 
stack pointer is loaded into the SS and ESP regis- 
ters and the previous stack pointer is pushed onto 
the new stack. 

When RETurnIng to the original privilege level, use 
of the lower-privileged stack Is restored as part of 
the RET or IRET instruction operation. For subrou- 
tine calls that pass parameters on the stack and 
cross privilege levels, a fixed number of words (as 
specified in the gate’s word count field) are copied 
from the previous stack to the current stack. The 
inter-segment RET Instruction with a stack adjust- 
ment value will correctly restore the previous stack 
pointer upon return. 
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Figure 4.15a. i 486 TM Microprocessor TSS and TSS Registers 
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Figure 4.15b. Sample I/O Permission Bit Map 


4.4.5 CALL GATES 

Gates provide protected, indirect CALLs. One of the 
major uses of gates is to provide a secure method of 
privilege transfers within a task. Since the operating 
system defines all of the gates in a system, it can 
ensure that all gates only allow entry into a few trust- 
ed procedures (such as those which allocate memo- 
ry, or perform I/O). 

Gate descriptors follow the data access rules of priv^ 
ilege; that is, gates can be accessed by a task if the 
EPL, is equal to or more privileged than the gate 
descriptor’s DPL. Gates follow the control transfer 
rules of privilege and therefore may only transfer 
control to a more privileged level. 

Call Gates are accessed via a CALL instruction and 
are syntactically identical to calling a normal subrou- 
tine. When an inter-level 486 Microprocessor call 
gate is activated, the following actions occur. 

1. Load CS:EIP from gate check for validity 

2. SS is pushed zero-extended to 32 bits 

3. ESP is pushed 

4. Copy Word Count 32-bit parameters from the 
old stack to the new stack 

5. Push Return address on stack 

The procedure is identical for 80286 Call gates, ex- 
cept that 16-blt parameters are copied and 16-bit 
registers are pushed. 

Interrupt Gates and Trap gates work in a similar 
fashion as the call gates, except there Is no copying 
of parameters. The only difference between Trap 
and Interrupt gates is that control transfers through 
an Interrupt gate disable further interrupts (i.e. the IF 
bit is set to 0), and Trap gates leave the interrupt 
status unchanged. 

4.4.6 TASK SWITCHING 

A very important attribute of any multl-tasking/multi- 
user operating systems is its ability to rapidly switch 
between tasks or processes. The 486 Microproces- 
sor directly supports this operation by providing a 
task switch instruction in hardware. The 486 Micro- 
processor task switch operation saves the entire 


state of the machine (all of the registers, address 
space, and a link to the previous task), loads a new 
execution state, performs protection checks, and 
commences execution in the new task, in about 17 
microseconds. Like transfer of control via gates, the 
task switch operation is invoked by executing an in- 
ter-segment JMP or CALL instruction which refers to 
a Task State Segment (TSS), or a task gate descrip- 
tor in the GDT or LOT. An INT n instruction, excep- 
tion, trap, or external interrupt may also invoke the 
task switch operation if there is a task gate descrip- 
tor in the associated IDT descriptor slot. 

The TSS descriptor points to a segment (see Figure 
4.15) containing the entire 486 Microprocessor exe- 
cution state while a task gate descriptor contains a 
TSS selector. The 486 Microprocessor supports 
both 80286 and 486 Microprocessor style TSSs. Fig- 
ure 4.16 shows a 80286 TSS. The limit of a 486 
Microprocessor TSS must be greater than 0064H 
(002BH for a 80286 TSS), and can be as large as 4 
Gigabytes. In the additional TSS space, the operat- 
ing system is free to store additional information 
such as the reason the task is inactive, time the task 
has spent running, and open files belong to the task. 

Each task must have a TSS associated with It. The 
current TSS Is identified by a special register in the 
486 Microprocessor called the Task State Segment 
Register (TR). This register contains a selector refer- 
ring to the task state segment descriptor that de- 
fines the current TSS. A hidden base and limit regis- 
ter associated with TR are loaded whenever TR is 
loaded with a new selector. Returning from a task Is 
accomplished by the IRET instruction. When IRET Is 
executed, control is returned to the task which was 
Interrupted. The current executing task’s state Is 
saved in the TSS and the old task state Is restored 
from its TSS. 

Several bits in the flag register and machine status 
word (CRO) give Information about the state of a 
task which are useful to the operating system. The 
Nested Task (NT) (bit 14 in EFLAGS) controls the 
function of the IRET instruction. If NT = 0, the IRET 
instruction performs the regular return; when NT = 
1 , IRET performs a task switch operation back to the 
previous task. The NT bit Is set or reset in the follow- 
ing fashion: 
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Figure 4.16. 80286 TSS 


When a CALL or INT instruction initiates a task 
switch, the new TSS will be marked busy and the 
back link field of the new TSS set to the old TSS 
selector. The NT bit of the new task is set by CALL 
or INT initiated task switches. An interrupt that does 
not cause a task switch will clear NT. (The NT bit will 
be restored after execution of the interrupt handler) 
NT may also be set or cleared by POPF or IRET 
instructions. 

The 486 Microprocessor task state segment is 
marked busy by changing the descriptor type field 
from TYPE 9H to TYPE BH. An 80286 TSS is 
marked busy by changing the descriptor type field 
from TYPE 1 to TYPE 3. Use of a selector that refer- 
ences a busy task state segment causes an excep- 
tion 13. 

The Virtual Mode (VM) ,bit 1 7 is used to indicate if a 
task, is a virtual 8086 task. If VM = 1 , then the tasks 
will use the. Real Mode addressing mechanism. The 
virtual 8086 environment is only entered and exited 
via a task switch (see Section 4.6 Virtual Mode). 

The FPU’s state is not automatically saved when a 
task switch occurs, because the incoming task may 
not use the FPU. The Task Switched (TS) Bit (bit 3 in 
the CRO) helps deal with the FPU’s state in a multi- 
tasking environment. Whenever the 486 Micro- 


processor switches tasks, it sets the TS bit. The 486 
Microprocessor detects the first use of a processor 
extension instruction after a task switch and causes 
the processor extension not available exception 7. 
The exception handler for exception 7 may then de- 
cide whether to save the state of the FPU. A proces- 
sor extension not present exception (7) will occur 
when attempting to execute a Floating Point or 
WAIT instruction if the Task Switched and Monitor 
coprocessor extension bits are both set (i.e. TS = 1 
and MP = 1). 

The T bit in the 486 Microprocessor TSS indicates 
that the processor should generate a debug excep- 
tion when switching to a task. If T = 1 then upon 
entry to a new task a debug exception 1 will be gen- 
erated. 


4.4.7 INITIALIZATION AND TRANSITION TO 
PROTECTED MODE 

Since the 486 Microprocessor begins executing in 
Real Mode immediately after RESET it is necessary 
to Initialize the system tables and registers with the 
appropriate values. 

The GDT ahd IDT registers must refer to a valid GDT 
and IDT. The IDT should be at least 256 bytes long, 
and GDT must contain descriptors for the initial 
code, and data segments. Figure 4.17 shows the ta- 
bles and Figure 4.18 the descriptors needed for a 
simple Protected Mode 486 Microprocessor system. 
It has a single code and single data/stack segment 
each four gigabytes long and a single privilege level 
PL = 0. 

The actual method of enabling Protected Mode is to 
load CRO with the PE bit set, via the MOV CRO, R/M 
instruction. This puts the 486 Microprocessor in Pro- 
tected Mode. 

After enabling Protected Mode, the next instruction 
should execute an intersegment JMP to load the CS 
register and flush the instruction decode queue. The 
final step is to load ail of the data segment registers 
with the initial selector values. 

An alternate approach to entering Protected Mode 
which Is especially appropriate for multi-tasking op- 
erating systems, is to use the built in task-switch to 
load all of the registers. In this case the GDT would 
contain two TSS descriptors in addition to the code 
and data descriptors needed for the first task. The 
first JMP instruction in Protected Mode would jump 
to the TSS causing a task switch and loading all of 
the registers with the values stored In the TSS. The 
Task State Segment Register should be initialized to 
point to a valid TSS descriptor since a task switch 
saves the state of the current task in a task state 
segment. 
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Figure 4.18. GOT Descriptors for Simple System 


4.4.8 TOOLS FOR BUILDING PROTECTED 
SYSTEMS 

In order to simplify the design of a protected multi- 
tasking system, Intel provides a tool which allows 
the system designer an easy method of constructing 
the data structures needed for a Protected Mode 
486 Microprocessor system. This tool is the builder 
BLD-386TM. BLD-386 lets the operating system writ- 
er specify all of the segment descriptors discussed 
in the previous sections (LDTs, IDTs, GDIs, Gates, 
and TSSs) in a high-level language. 


4.5 Paging 

4.5.1 PAGING CONCEPTS 

Paging is another type of memory management 
useful for virtual memory multitasking operating sys- 
tems. Unlike segmentation which modularizes pro- 
grams and data into variable length segments, pag- 
ing divides programs into multiple uniform size 
pages. Pages bear no direct relation to the logical 
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Structure of a program. While segment selectors can 
be considered the logical “name” of a program 
module or data structure, a page most likely corre- 
sponds to only a portion of a module or data struc- 
ture. 

By taking advantage of the locality of reference dis- 
played by most programs, only a small number of 
pages from each active task need be in memory at 
any one moment. 

4.5.2 PAGING ORGANIZATION 

4.5.2.1 Page Mechanism 

The 486 Microprocessor uses two levels of tables to 
translate the linear address (from the segmentation 
unit) into a physical address. There are three com- 
ponents to the paging mechanism of the 486 Micro- 
processor: the page directory, the page tables, and 
the page itself (page frame). All memory-resident el- 
ements of the 486 Microprocessor paging mecha- 
nism are the same size, namely, 4 Kbytes. A uniform 
size for ail of the elements simplifies memory alloca- 
tion and reallocation schemes, since there is no 
problem with memory fragmentation. Figure 4.19 
shows how the paging mechanism works. 


4.5.2.2 Page Descriptor Base Register 

GR2 Is the Page Fault Linear Address register. It, 
holds the 32-blt linear address which caused the last 
page fault detected. 

GR3 is the Page Directory Physical Base Address 
Register. It contains the physical starting address of 
the Page Directory. The lower 12 bits of GR3 are 
always zero to ensure that the Page Directory is al- 
ways page aligned. Loading it via a MOV GR3, reg 
instruction causes the Page Table Entry cache to be 
flushed, as will a task switch through a TSS which 
changes the value of GRO. (See 4.5.5 Translation 
Lookaside Buffer). 

4.5.2.3 Page Directory 

The Page Directory is 4 Kbytes long and allows up to 
1024 Page Directory Entries. Each Page Directory 
Entry contains the address of the next level of ta- 
bles, the Page Tables and information about the 
page table. The contents of a Page Directory Entry 
are shown in Figure 4.20. The upper 10 bits of the 
linear address (A22-A31) are used as an index to 
select the correct Page Directory Entry. 


TWO LEVEL PAGING SCHEME 



240440-23 

Figure 4.19. Paging Mechanism 
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Figure 4.21. Page Table Entry (Points to Page) 


4.5.2.4 Page Tables 

Each Page Table is 4 Kbytes and holds up to 1024 
Page Table Entries. Page Table Entries contain the 
starting address of the page frame and statistical 
information about the page (see Figure 4.21). Ad- 
dress bits A12-A21 are used as an index to select 
one of the 1024 Page Table Entries. The 20 upper- 
bit page frame address is concatenated with the 
lower 12 bits of the linear address to form the physi- 
cal address. Page tables can be shared between 
tasks and swapped to disks. 

4.5.2.5 Page Directory/Table Entries 

The lower 12 bits of the Page Table Entries and 
Page Directory Entries contain statistical information 
about pages and page tables respectively. The P 
(Present) bit 0 Indicates if a Page Directory or Page 
Table entry can be used in address translation. If 
P = 1 the entry can be used for address translation 
If P = 0 the entry can not be used for translation, 
and all of the other bits are available for use by the 
software. For example the remaining 31 bits could 
be used to Indicate where on the disk the page is 
stored. 

The A (Accessed) bit 5, is set by the 486 Microproc- 
essor for both types of entries before a read or write 
access occurs to an address covered by the entry. 
The D (Dirty) bit 6 is set to 1 before a write to an 
address covered by that page table entry occurs. 
The D bit is undefined for Page Directory Entries. 
When the P, A and D bits are updated by the 486 
Microprocessor, the processor generates a Read- 
Modify-Write cycle which locks the bus and prevents 
conflicts with other processors or perpherials. Soft- 
ware which modifies these bits should use the LOCK 
prefix to ensure the integrity of the page tables in 
multi-master systems. 

The 3 bits marked OS Reserved in Figure 4.20 and 
Figure 4.21 (bits 9-11) are software definable. OSs 
are free to use these bits for whatever purpose they 
wish. An example use of the OS Reserved bits 
would be to store information about page aging. By 
keeping track of how long a page has been in mem- 
ory since being accessed, an operating system can 
implement a page replacement algorithm like Least 
Recently Used. 


The (User/Supervisor) U/S bit 2 and the (Read/ 
Write) R/W bit 1 are used to provide protection attri- 
butes for individual pages. 

4.5.3 PAGE LEVEL PROTECTION 
(R/W, U/S BITS) 

The 486 microprocessor provides a set of protection 
attributes for paging systems. The paging mecha- 
nism distinguishes between two levels of protection: 
User which corresponds to level 3 of the segmenta- 
tion based protection, and supervisor which encom- 
passes all of the other protection levels (0, 1 , 2). 

The R/W and U/S bits are used in conjunction with 
the WP bit in the flags register (EFLAGS). The 386 
microprocessor does not contain the WP bit. The 
WP bit has been added to the 486 microprocessor 
to protect read-only pages from supervisor write ac- 
cesses. The 386 microprocessor allows a read-only 
page to be written from protection levels 0, 1 or 2. 
WP = 0 is the 386 microprocessor compatible mode. 
When WP = 0 the supervisor can write to a read-only 
page as defined by the U/S and R/W bits. When 
WP=1 supervisor access to a read-only page 
(R/W=0) will cause a page fault (exception 14). 

Table 4.4 shows the affect of the WP, U/S and R/W 
bits on accessing memory. When WP = 0, the super- 
visor can write to pages regardless of the state of 
the R/W bit. When WP = 1 and R/W = 0 the supervi- 
sor cannot write to a read-only page. A user attempt 
to access a supervisor only page (U/S = 0), or write 
to a read only page will cause a page fault (excep- 
tion 14). 

The R/W and U/S bits provide protection from user 
access on a page by page basis since the bits are 
contained in the Page Table Entry and the Page Di- 
rectory Table. The U/S and R/W bits In the first level 
Page Directory Table apply to all entries in the page 
table pointed to by that directory entry. The U/S and 
R/W bits in the second level Page Table Entry apply 
only to the page described by that entry. The most 
restrictive of the U/S and R/W bits from the Page 
Directory Table and the Page Table Entry are used 
to address a page. 

Example: If the U/S and R/W bits for the Page Di- 
rectory entry were 10 (user read/execute) and the 
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U/S and R/W bits for the Page Table Entry were 01 
(no user access at all), the access rights for the 
page would be 01, the numerically smaller of the 
two. 

Note that a given segment can be easily made read- 
only for level 0, 1 or 2 via use of segmented protec- 
tion mechanisms. (Section 4.4 Protection). 

4.5.4 PAGE CACHEABILITY 
(PWT AND PCD BITS) 

PWT (page write through) and PCD (page cache dis- 
able) are two new bits defined In entries in both lev- 
els of the page table structure, the Page Directory 
Table and the Page Table Entry. PCD and PWT con- 
trol page cacheabllity and write policy. 

PWT controls write policy. PWT = 1 defines a write- 
through policy for the current page. PWT = 0 allows 
the possibility of write-back. PWT is Ignored internal- 
ly because the 486 microprocessor has a write- 
through cache. PWT can be used to control the write 
policy of a second level cache. 

PCD controls cacheabllity. PCD = 0 enables caching 
in the on-chip cache. PCD alone does not enable 
caching, it must be conditioned by the KEN# (cache 
enable) Input signal and the state of the CD (cache 
disable bit) and NW (no write-through) bits In control 
register 0 (CRO). When PCD = 1, caching Is disabled 
regardless of the state of KEN#, CD and NW. (See 
Section 5.0, On-Chip Cache). 

The state of the PCD and PWT bits are driven out on 
the PCD and PWT pins during a memory access. 

The PWT and PCD bits for a bus cycle are obtained 
either from control register 3 (CR3), the Page Direc- 
tory Entry or the Page Table Entry, depending on the 
type of cycle run. If paging is not enabled (PG = 0 in 
CRO), or for cycles which bypass paging (I.e., I/O 
(input/output) references, INTR (interrupt request) 
and Halt cycles), the PWT and PCD bits are taken 


from bits 3 and 4 of CR3. These bits in CR3 are 
initialized to zero at reset, but can be set to any val- 
ue by level 0 software. 

When paging is enabled (PG = 1 in CRO), the bits 
from the page table entry are cached in the transla- 
tion lookaside buffer (TLB), and are driven any time 
the page mapped by the TLB entry is referenced. 
For normal memory cycles run with paging enabled, 
the PWT and PCD bits are taken from the Page Ta- 
ble Entry. During TLB refresh cycles when the Page 
Directory and Page Table entries are read, the PWT 
and PCD bits must be obtained elsewhere. The bits 
are taken from CR3 when a Page Directory Entry Is 
being read. The bits are taken from the Page Direc- 
tory Entry when the Page Table Entry is being updat- 
ed. 


4.5.5 TRANSLATION LOOKASIDE BUFFER 

The 486 Microprocessor paging hardware Is de- 
signed to support demand paged virtual memory 
systems. However, performance would degrade 
substantially if the processor was required to access 
two levels of tables for every memory reference. To 
solve this problem, the 486 Microprocessor keeps a 
cache of the most recently accessed pages, this 
cache Is called the Translation Lookaside Buffer 
(TLB). The TLB Is a four-way set associative 32-en- 
try page table cache. It automatically keeps the most 
commonly used Page Table Entries In the proces- 
sor. The 32-entry TLB coupled with a 4K page size, 
results in coverage of 128 Kbytes of memory ad- 
dresses. For many common multi-tasking systems, 
the TLB will have a hit rate of about 98%. This 
means that the processor will only have to access 
the two-level page structure on 2% of all memory 
references. Figure 4.22 Illustrates how the TLB com- 
plements the 486 Microprocessor’s paging mecha- 
nism. 

Reading a new entry into the TLB (TLB refresh) is a 
two step process handled by the 486 microproces- 
sor hardware. The sequence of data cycles to per- 
form a TLB refresh are: 


Table 4.4. Page Level Protection Attributes 


U/S 

R/W 

WP 

User Access 

Supervisor Access 

0 

0 

0 

None 

Read/Write/Execute 

0 
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None 

Read/ Write/ Execute 
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0 

Read /Execute 

Read/Write/Execute 
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0 

Read/ Write/ Execute 

Read/ Write/ Execute 

0 
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None 

Read/ Execute 
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1 
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None 

Read/ Write/ Execute 
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Read/ Execute 

Read/ Execute 
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Read/ Write/ Execute 
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1 . Read the correct Page Directory Entry, as point- 
ed to by the page base register and the upper 10 
bits of the linear address. The page base register 
is in control register 3. 

la. Optionally perform a locked read/write to set the 
accessed bit in the directory entry. The directory 
entry will actually get read twice if the 486 micro- 
processor needs to set any of the bits in the en- 
try. If the page directory entry changes between 
the first and second reads, the data returned for 
the second read will be used. 

2. Read the correct entry in the Page Table and 
place the entry in the TLB. 

2a. Optionally perform a locked read/write to set the 
accessed and/or dirty bit in the page table entry. 
Again, note that the page table entry will actually 
get read twice if the 486 microprocessor needs 
to set any of the bits in the entry. Like the direc- 
tory entry, if the data changes between the first 
and second read the data returned for the sec- 
ond read will be used. 

Note that the directory entry must always be read 
into the processor, since directory entries are never 
placed in the paging TLB. Page faults can be sig- 
naled from either the page directory read or the 
page table read. Page directory and page table en- 
tries may be placed in the 486 on-chip cache just 
like normal data. 


4.5.6 PAGING OPERATION 



Figure 4.22. Translation Lookaside Buffer 


The paging hardware operates in the following fash- 
ion. The paging unit hardware receives a 32-bit lin- 
ear address from the segmentation unit. The upper 
20 linear address bits are compared with all 32 en- 
tries in the TLB to deterrtiine if there is a match. If 
there is a match (i.e., a TLB hit), then the 32-bit 
physical address is calculated and will be placed on 
the address bus. 


However, if the page table entry is not in the TLB, 
the 486 Microprocessor will read the appropriate 
Page Directory Entry. If P = 1 on the Page Directory 
Entry indicating that the page table is in memory, 
then the 486 Microprocessor will read the appropri- 
ate Page Table Entry and set the Access bit. If P = 
1 on the Page Table Entry indicating that the page is 
in memory, the 486 Microprocessor will update the 
Access and Dirty bits as needed and fetch the oper- 
and. The upper 20 bits of the linear address, read 
from the page table, will be stored in the TLB for 
future accesses. However, if P = 0 for either the 
Page Directory Entry or the Page Table Entry, then 
the processor will generate a page fault, an Excep- 
tion 14. 

The processor will also generate an exception 14 
page fault, if the memory reference violated the 
page protection attributes (i.e., U/S or R/W) (e.g., 
trying to write to a read-only page). CR2 will hold the 
linear address which caused the page fault. If a sec- 
ond page fault occurs, while the processor is at- 
tempting to enter the service routine for the first, 
then the processor will invoke the page fault (excep- 
tion 14) handler a second time, rather than the dou- 
ble fault (exception 8) handler. Since Exception 14 is 
classified as a fault, CS: EIP will point to the instruc- 
tion causing the page fault. The 16-bit error code 
pushed as part of the page fault handler will contain 
status bits which indicate the cause of the page 
fault. 

The 1 6-bit error code is used by the operating sys- 
tem to determine how to handle the page fault. Fig- 
ure 4.23a shows the format of the page-fault error 
code and the interpretation of the bits. 

NOTE: 

Even though the bits in the error code (U/S, W/R, 
and P) have similar names as the bits in the Page 
Directory/Table Entries, the interpretation of the er- 
ror code bits is different. Figure 4.23b indicates 
what type of access caused the page fault. 
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Figure 4.23a. Page Fault Error Code Format 


U/S: The U/S bit indicates whether the access 
causing the fault occurred when the processor was 
executing In User Mode (U/S = 1) or in Supervisor 
mode (U/S = 0). 

W/R: The W/R bit indicates whether the access 
causing the fault was a Read (W/R = 0) or a Write 
(W/R = 1). 
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P: The P bit indicates whether a page fault was 
caused by a not-present page (P = 0), or by a page 
level protection violation (P = 1). 

U: UNDEFINED 


U/S 

W/R 

Access Type 

0 

0 

Supervisor* Read 

0 

1 

Supervisor Write 

1 

0 

User Read 

1 

1 

User Write 


* Descriptor table access will fault with U/S = 0, even if the program 
is executing at level 3. 


Figure 4.23b. Type of Access 
Causing Page Fault 

4.5.7 OPERATING SYSTEM RESPONSIBILITIES 

The 486 Microprocessor takes care of the page ad- 
dress translation process, relieving the burden from 
an operating system in a demand-paged system. 
The operating system is responsible for setting up 
the initial page tables, and handling any page faults. 
The operating system also is required to invalidate 
(i.e., flush) the TLB when any changes are made to 
any of the page table entries. The operating system 
must reload CR3 to cause the TLB to be flushed. 

Setting up the tables is simply a matter of loading 
CR3 with the address of the Page Directory, and 
allocating space for the Page Directory and the 
Page Tables. The primary responsibility of the oper- 
ating system Is to Implement a swapping policy and 
handle all of the page faults. 

A final concern of the operating system Is to ensure 
that the TLB cache matches the Information In the 
paging tables. In particular, any time the operating 
system sets the P present bit of page table entry to 
zero, the TLB must be flushed. Operating systems 
may want to take advantage of the fact that CR3 is 
stored as part of a TSS, to give every task or group 
of tasks its own set of page tables. 


4.6 Virtual 8086 Environment 

4.6.1 EXECUTING 8086 PROGRAMS 

The 486 Microprocessor allows the execution of 
8086 application programs in both Real Mode and in 
the Virtual 8086 Mode (Virtual Mode). Of the two 
methods. Virtual 8086 Mode offers the system de- 
signer the most flexibility. The Virtual 8086 Mode al- 
lows the execution of 8086 applications, while still 
allowing the system designer to take full advantage 
of the 486 Microprocessor protection mechanism. In 


particular, the 486 Microprocessor allows the simul- 
taneous execution of 8086 operating systems and 
its applications, and a 486 Microprocessor operating 
system and both 80286 and 486 Microprocessor ap- 
plications. Thus, In a multi-user 486 Microprocessor 
computer, one person could be running an MS-DOS 
spreadsheet, another person using MS-DOS, and a 
third person could be running multiple Unix utilities 
and applications. Each person in this scenario would 
believe that he had the computer completely to him- 
self. Figure 4.24 illustrates this concept. 

4.6.2 VIRTUAL 8086 MODE ADDRESSING 
MECHANISM 

One of the major differences between 486 Micro- 
processor Real and Protected modes is how the 
segment selectors are interpreted. When the proc- 
essor is executing in Virtual 8086 Mode the segment 
registers are used In an identical fashion to Real 
Mode. The contents of the segment register is shift- 
ed left 4 bits and added to the offset to form the 
segment base linear address. 

The 486 Microprocessor allows the operating sys- 
tem to specify which programs use the 8086 style 
address mechanism, and which programs use Pro- 
tected Mode addressing, on a per task basis. 
Through the use of paging, the one megabyte ad- 
dress space of the Virtual Mode task can be mapped 
to anywhere in the 4 gigabyte linear address space 
of the 486 Microprocessor. Like Real Mode, Virtual 
Mode effective addresses (i.e., segment offsets) that 
exceed 64 Kbyte will cause an exception 13. Howev- 
er, these restrictions should not prove to be impor- 
tant, because most tasks running in Virtual 8086 
Mode will simply be existing 8086 application pro- 
grams. 

4.6.3 PAGING IN VIRTUAL MODE 

The paging hardware allows the concurrent running 
of multiple Virtual Mode tasks, and provides protec- 
tion and operating system Isolation. Although It is 
not strictly necessary to have the paging hardware 
enabled to run Virtual Mode tasks, it Is needed in 
order to run multiple Virtual Mode tasks or to relo- 
cate the address space of a Virtual Mode task to 
physical address space greater than one megabyte. 

The paging hardware allows the 20-bit linear ad- 
dress produced by a Virtual Mode program to be 
divided Into up to 256 pages. Each one of the pages 
can be located anywhere within the maximum 4 gig- 
abyte physical address space of the 486 Microproc- 
essor. In addition, since CR3 (the Page Directory 
Base Register) is loaded by a task switch, each Vir- 
tual Mode task can use a different mapping scheme 
to map pages to differerit physical locations. 
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Finally, the paging hardware allows the sharing of 
the 8086 operating system code between multiple 
8086 applications. Figure 4.24 shows how the 486 
Microprocessor paging hardware enables multiple 
8086 programs to run under a virtual memory de- 
mand paged system. 

4.6.4 PROTECTION AND I/O PERMISSION 
BITMAP 

All Virtual 8086 Mode programs execute at privilege 
level 3, the level of least privilege. As such, Virtual 
8086 Mode programs are subject to all of the protec- 
tion checks defined in Protected Mode. (This is dif- 
ferent from Real Mode which implicitly is executing 
at privilege level 0, the level of greatest privilege.) 
Thus, an attempt to execute a privileged instruction 
when in Virtual 8086 Mode will cause an exception 
1 3 fault. 

The following are privileged Instructions, which may 
be executed only at Privilege Level 0. Therefore, at- 
tempting to execute these instructions in Virtual 
8086 Mode (or anytime CPL > 0) causes an excep- 
tion 1 3 fault: 


LIDT; 

MOV 

DRn,reg ; 

MOV 

reg,DRn ; 

LGDT; 

MOV 

TRn,reg ; 

MOV 

reg,TRn ; 

LMSW; 
CLTS; 
HLT ; 

MOV 

CRn,reg ; 

MOV 

reg,CRn. 


Several instructions, particularly those applying to 
the multitasking model and protection model, are 
available only in Protected Mode. Therefore, at- 
tempting to execute the following Instructions in 
Real Mode or in Virtual 8086 Mode generates an 
exception 6 fault: 

LTR ; STR ; 

LLDT ; SLOT ; 

LAR ; VERR ; 

LSL ; VERW ; 

ARPL. 

The instructions which are lOPL-sensItive in Protect- 
ed Mode are: 

IN;, STI; 

OUT ; CLI 

INS; 

OUTS; 

REP INS ; 

REP OUTS; 
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In Virtual 8086 Mode, a slightly different set of in- 
structions are made lOPL-sensitive. The following in- 
structions are lOPL-sensitive in Virtual 8086 Mode: 

INT n; STI ; 

PUSHF ; CLI ; 

POPF ; IRET 

The PUSHF, POPF, and IRET Instructions are lOPL- 
sensitive In Virtual 8086 Mode only. This provision 
allows the IF flag (interrupt enable flag) to be virtual- 
ized to the Virtual 8086 Mode program. The INT n 
software interrupt Instruction Is also lOPL-sensitive 
In Virtual 8086 Mode. Note, however, that the INT 3 
(opcode OCCH), INTO, and BOUND instructions are 
not lOPL-sensItive In Virtual 8086 mode (they aren’t 
lOPL sensitive In Protected Mode either). 

Note that the I/O Instructions (IN, OUT, INS, OUTS, 
REP INS, and REP OUTS) are not lOPL-sensitive in 
Virtual 8086 mode. Rather, the I/O instructions be- 
come automatically sensitive to the I/O Permission 
Bitmap contained in the 486 Microprocessor Task 
State Segment. The I/O Permission Bitmap, auto- 
matically used by the 486 Microprocessor in Virtual 
8086 Mode, is illustrated by Figures 4.15a and 
4.15b. 

The I/O Permission Bitmap can be viewed as a 0- 
64 Kbit bit string, which begins in memory at offset 

Bit_Map_Offset in the current TSS. Bit Map 

Offset must be < DFFFH so the entire bit map and 
the byte FFH which follows the bit map are all at 
offsets ^ FFFFH from the TSS base. The 16-bit 

pointer Bit Map Offset (1 5:0) is found In the word 

beginning at offset 66H (102 decimal) from the TSS 
base, as shown in Figure 4.15a. 

Each bit in the I/O Permission Bitmap corresponds 
to a single byte-wide I/O port, as illustrated In Figure 
4.15a. If a bit is 0, I/O to the corresponding byte- 
wide port can occur without generating an excep- 
tion. Otherwise the I/O instruction causes an excep- 
tion 13 fault. Since every byte-wide I/O port must be 
protectable, all bits corresponding to a word-wide or 
dword-wide port must be 0 for the word-wide or 
dword-wlde I/O to be permitted. If all the referenced 
bits are 0, the I/O will be allowed. If any referenced 
bits are 1, the attempted I/O will cause an exception 
1 3 fault. 

Due to the use of a pointer to the base of the I/O 
Permission Bitmap, the bitmap may be located any- 
where within the TSS, or may be ignored completely 

by pointing the Bit Map Offset (1 5:0) beyond the 

limit of the TSS segment. In the same manner, only 
a small portion of the 64K I/O space need have an 
associated map bit, by adjusting the TSS limit to 
truncate the bitmap. This eliminates the commitment 
of 8K of memory when a complete bitmap Is not 
required, while allowing the fully general case if de- 
sired. 


EXAMPLE OF BITMAP FOR I/O PORTS 0-255: 

Setting the TSS limit to (bit Map_Offset + 31 

+ 1**1 (** see note below] will allow a 32-byte bit- 
map for the I/O ports #0-255, plus a terminator 
byte of alM’s [** see note below]. This allows the 
I/O bitmap to control I/O Permission to I/O port 0- 
255 while causing an exception 1 3 fault on attempt- 
ed I/O to any I/O port 80256 through 65,565. 

**IMPORTANT IMPLEMENTATION NOTE: Beyond 
the last byte of I/O mapping information in the I/O 
Permission Bitmap must be a byte containing all 1 ’s. 
The byte of all 1 ’s must be within the limit of the 486 
Microprocessor TSS segment (see Figure 4.15a). 

4.6.5 INTERRUPT HANDLING 

In order to fully support the emulation of an 3086 
machine, interrupts in Virtual 8086 Mode are han- 
dled in a unique fashion. When running in Virtual 
Mode all interrupts and exceptions involve a privi- 
lege change back to the host 486 Microprocessor 
operating system. The 486 Microprocessor operat- 
ing system determines if the interrupt comes from a 
Protected Mode application or from a Virtual Mode 
program by examining the VM bit in the EFLAGS 
image stored on the stack. 

When a Virtual Mode program is interrupted and ex- 
ecution passes to the interrupt routine at level 0, the 
VM bit is cleared. However, the VM bit is still set in 
the EFLAG image on the stack. 

The 486 Microprocessor operating system In turn 
handles the exception or interrupt and then returns 
control to the 8086 program. The 486 Microproces- 
sor operating system may choose to let the 8086 
operating system handle the interrupt or it may emu- 
late the function of the interrupt handler. For exam- 
ple, many 8086 operating system calls are accessed 
by PUSHing parameters on the stack, and then exe- 
cuting an INT n Instruction. If the lOPL is set to 0 
then all INT n instructions will be intercepted by the 
486 Microprocessor operating system. The 486 Mi- 
croprocessor operating system could emulate the 
8086 operating system’s call. Figure 4.25 shows 
how the 486 Microprocessor operating system could 
intercept an 8086 operating system’s call to “Open 
a File’’. 

A 486 Microprocessor operating system can provide 
a Virtual 8086 Environment which is totally transpar- 
ent to the application software via intercepting and 
then emulating 8086 operating system’s calls, and 
intercepting IN and OUT ihstructions. 
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4.6.6 ENTERING AND LEAVING VIRTUAL 
8086 MODE 

Virtual 8086 mode is entered by executing an IRET 
instruction (at CPL = 0), or Task Switch (at any CPL) 
to a 486 Microprocessor task whose 486 Microproc- 
essor TSS has a FLAGS image containing a 1 in the 
VM bit position while the processor is executing in 
Protected Mode. That is, one way to enter Virtual 
8086 mode is to switch to a task with a 486 Micro- 
processor TSS that has a 1 in the VM bit in the 
EFLAGS image. The other way is to execute a 32-bit 
IRET instruction at privilege level 0, where the stack 
has a 1 in the VM bit in the EFLAGS image. POPF 
does not affect the VM bit, even if the processor is in 
Protected Mode or level 0, and so cannot be used to 
enter Virtual 8086 Mode. PUSHF always pushes a 0 
in the VM bit, even if the processor is in Virtual 8086 
Mode, so that a program cannot tell if it is executing 
in REAL mode, or in Virtual 8086 mode. 

The VM bit can be set by executing an IRET instruc- 
tion only at privilege level 0, or by any instruction or 
Interrupt which causes a task switch in Protected 
Mode (with VM = 1 in the new FLAGS image), and 
can be cleared only by an Interrupt or exception In 
Virtual 8086 Mode. IRET and POPF instructions exe- 
cuted in REAL mode or Virtual 8086 mode will not 
change the value in the VM bit. 

The transition out of virtual 8086 mode to 486 Micro- 
processor protected mode occurs only on receipt of 
an interrupt or exception (such as due to a sensitive 
Instruction). In Virtual 8086 mode, all interrupts and 
exceptions vector through the protected mode IDT, 
and enter an interrupt handler In protected 486 Mi- 
croprocessor mode. That is, as part of interrupt pro- 
cessing, the VM bit Is cleared. 

Because the matching IRET must occur from level 0, 
if an Interrupt or Trap Gate Is used to field an inter- 
rupt or exception out of Virtual 8086 mode, the Gate 
must perform an inter-level interrupt only to level 0. 
Interrupt or Trap Gates through conforming seg- 
ments, or through segments with DPL>0, will raise a 
GP fault with the CS selector as the error code. 


4.6.6.1 Task Switches To/From Virtual 
8086 Mode 

Tasks which can execute in virtual 8086 mode must 
be described by a TSS with the new 486 Microproc- 
essor format (TYPE 9 or 11 descriptor). 

A task switch out of virtual 8086 mode will operate 
exactly the same as any other task switch out of a 
task with a 486 Microprocessor TSS. All of the pro- 
grammer visible state. Including the FLAGS register 
with the VM bit set to 1, is stored in the TSS. 


The segment registers in the TSS will contain 8086 
segment base values rather than selectors. 

A task switch into a task described by a 486 Micro- 
processor TSS will have an additional check to de- 
termine if the incoming task should be resumed in 
virtual 8086 mode. Tasks described by 80286 format 
TSSs cannot be resumed in virtual 8086 mode, so 
no check is required there (the FLAGS image in 
80286 format TSS has only the low order 16 FLAGS 
bits). Before loading the segment register Images 
from a 486 Microprocessor TSS, the FLAGS image 
is loaded, so that the segment registers are loaded 
from the TSS image as 8086 segment base values. 
The task is now ready to resume in virtual 8086 exe- 
cution mode. 


4.6.6.2 Transitions Through Trap and Interrupt 
Gates, and IRET 

A task switch is one way to enter or exit virtual 8086 
mode. The other method is to exit through a Trap or 
Interrupt gate, as part of handling an interrupt, and 
to enter as part of executing an IRET instruction. 
The transition out must use a 486 Microprocessor 
Trap Gate (Type 14), or 486 Microprocessor Inter- 
rupt Gate (Type 15), which must point to a non-con- 
forming level 0 segment (DPL = 0) in order to permit 
the trap handler to IRET back to the Virtual 8086 
program. The Gate must point to a non-conforming 
level 0 segment to perform a level switch to level 0 
so that the matching IRET can change the VM bit. 
486 Microprocessor gates must be used, since 
80286 gates save only the low 16 bits of the FLAGS 
register, so that the VM bit will not be saved on tran- 
sitions through the 80286 gates. Also, the 16-bit 
IRET (presumably) used to terminate the 80286 In- 
terrupt handler will pop only the lower 16 bits from 
FLAGS, and will not affect the VM bit. The action 
taken for a 486 Microprocessor Trap or Interrupt 
gate if an interrupt occurs while the task is executing 
in virtual 8086 mode is given by the following se- 
quence. 

(1) Save the FLAGS register in a temp to push later. 
Turn off the VM and TF bits, and if the interrupt is 
serviced by an Interrupt Gate, turn off IF also. 

(2) Interrupt and Trap gates must perform a level 
switch from 3 (where the VM86 program exe- 
cutes) to level 0 (so IRET can return). This pro- 
cess involves a stack switch to the stack given in 
the TSS for privilege level 0. Save the Virtual 
8086 Mode SS and ESP registers to push In a 
later step. The segment register load of SS will 
be done as a Protected Mode segment load, 
since the VM bit was turned off above. 
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8086 Application makes “Open File Call” — ► causes 
General Protection Fault (Arrow # 1 ) 

Virtual 8086 Monitor intercepts call. Calls 486 ™ CPU OS (Arrow #2) 
486™ CPU OS opens file returns control to 8086 OS (Arrow #3) 
8086 OS returns control to application. (Arrow #4) 

Transparent to Application 
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Figure 4.25. Virtual 8086 Environment Interrupt and Call Handling 


(3) Push the 8086 segment register values onto the 
new stack, in the order: GS, FS, DS, ES. These 
are pushed as 32-bit quantities, with undefined 
values in the upper 16 bits. Then load these 4 
registers with null selectors (0). 

(4) Push the old 8086 stack pointer onto the new 
stack by pushing the SS register (as 32-bits, high 
bits undefined), then pushing the 32-bit ESP reg- 
ister saved above. 

(5) Push the 32-bit FLAGS register saved in step 1 . 

(6) Push the old 8086 instruction pointer onto the 
new stack by pushing the CS register (as 32-bits, 
high bits undefined), then pushing the 32-bit EIP 
register. 

(7) Load up the new CSiElP value from the interrupt 
gate, and begin execution of the interrupt routine 
in protected 486 Microprocessor mode. 

The transition out of virtual 8086 mode performs a 
level change and stack switch, in addition to chang- 
ing back to protected mode. In addition, all of the 
8086 segment register images are stored on the 
stack (behind the SSiESP image), and then loaded 
with null (0) selectors before entering the Interrupt 
handler. This will permit the handler to safely save 
and restore the DS, ES, FS, and GS registers as 
80286 selectors. This is needed so that interrupt 
handlers which don’t care about the mode of the 
interrupted program can use the same prolog and 
epilog code for state saving (i.e., push all registers in 
prolog, pop all in epilog) regardless of whether or not 


a “native” mode or Virtual 8086 mode program was 
interrupted. Restoring null selectors to these regis- 
ters before executing the I RET will not cause a trap 
in the Interrupt handler. Interrupt routines which ex- 
pect values in the segment registers, or return val- 
ues in segment registers will have to obtain/return 
values from the 8086 register images pushed onto 
the new stack. They will need to know the mode of 
the interrupted program in order to know where to 
find/return segment registers, and also to know how 
to interpret segment register values. 

The IRET instruction will perform the inverse of the 
above sequence. Only the extended 486 Microproc- 
essors IRET instruction (operand size = 32) can be 
used, and must be executed at level 0 to change the 
VM bit to 1. 

(1) If the NT bit in the FLAGs register is on, an inter- 
task return is performed. The current state is 
stored in the current TSS, and the link field in the 
current TSS is used to locate the TSS for the 
interrupted task which is to be resumed. 

Otherwise, continue with the following sequence. 

(2) Read the FLAGS image from SS:8[ESP] into the 
FLAGS register. This will set VM to the value ac- 
tive in the interrupted routine. 

(3) Pop off the Instruction pointer CS:EIP. EIP is 
popped first, then a 32-bit word is popped which 
contains the CS value In the lower 16 bits. If 
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VM = 0, this CS load is done as a protected 
mode segment load. If VM = 1, this will be done 
as an 8086 segment load. 

(4) Increment the ESP register by 4 to bypass the 
FLAGS image which was “popped” in step 1. 

(5) If VM = 1, load segment registers ES, DS, FS, 

and GS from memory locations SS:[ESP + 8], 
SS:[ESP + 12], SS:[ESP+16], and 

SS:[ESP + 20], respectively, where the new val- 
ue of ESP stored in step 4 is used. Since VM = 1 , 
these are done as 8086 segment register loads. 

Else If VM = 0, check that the selectors in ES, 
DS, FS, and GS are valid in the interrupted rou- 
tine. Null out Invalid selectors to trap if an at- 
tempt is made to access through them. 

(6) If (RPL(CS) > CPL), pop the stack pointer 
SS:ESP from the stack. The ESP register is 
popped first, followed by 32-bits containing SS in 
the lower 16 bits. If VM = 0, SS is loaded as a 
protected mode segment register load. If VM = 1 , 
an 8086 segment register load is used. 

(7) Resume execution of the interrupted routine. The 
VM bit in the FLAGS register (restored from the 
interrupt routine’s stack Image In step 1) deter- 
mines whether the processor resumes the inter- 
rupted routine in Protected mode of Virtual 8086 
mode. 


5.0 ON-CHIP CACHE 


software transparent to maintain binary compatibility 
with previous generations of the x86 architecture. 

The on-chip cache has been designed for maximum 
flexibility and performance. The cache has several 
operating modes offering flexibility during program 
execution and debugging. Memory areas can be de- 
fined as non-cacheable by software and external 
hardware. Protocols for cache line Invalidations and 
replacement are implemented in hardware, easing 
system design. 


5.1 Cache Organization 

The on-chip cache Is a unified code and data cache. 
The cache is used for both instruction and data ac- 
cesses and acts on physical addresses. 

The cache organization Is 4-way set associative and 
each line is 16 bytes wide. The eight Kbytes of 
cache memory are logically organized as 128 sets, 
each containing four lines. 

The cache memory Is physically split into four 
2-Kbyte blocks each containing 128 lines (see Fig- 
ure 5.1). Associated with each 2-Kbyte block are 
128 21 -bit tags. There is a valid bit for each line in 
the cache. Each line in the cache is either valid or 
not valid. There are no provisions for partially valid 
lines. 


To meet its performance goals the 486 microproces- 
sor contains an eight Kbyte cache. The cache is 
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The write strategy of on-chip cache is write-through. 
All writes will drive an external write bus cycle in 
addition to writing the information to the internal 
cache if the write was a cache hit. A write to an 
address not contained in the internal cache will only 
be written to external memory. Cache allocations 
are not made on write misses. 


5.2 Cache Control 

Control of the cache is provided by the CD and NW 
bits in CRO. CD enables and disables the cache. NW 
controls memory write-through and Invalidates. 

The CD and NW bits define four operating modes of 
the on-chip cache as given in Table 5.1. These 
modes provide flexibility in how the on-chip cache is 
used. 

The CD and NW bits define four operating modes of 
the on-chip code and data cache, as given In the 
following table: 


Table 5.1. Cache Operating Modes 


CD 

NW 

Operating Mode 

1 

1 

Cache fills disabled, write-through and 
invalidates disabled 

1 

0 

Cache fills disabled, write-through and 
invalidates enabled 

0 

1 

INVALID. IF CRO is loaded with this 
configuration of bits, a GP fault with 
error code of 0 is raised. 

0 

0 

Cache fills enabled, write-through and 
Invalidates enabled 


.CD=1, NW=1 

The cache is completely disabled by setting 
CD=1 and NW = 1 and then flushing the 
cache. This mode may be useful for debug- 
ging programs where it Is important to see 
all memory cycles at the pins. Writes which 
hit in the cache will not appear on the exter- 
nal bus. 

It is possible to use the on-chip cache as 
fast static RAM by “pre-loading” certain 
memory areas into the cache and then set- 
ting CD = 1 and N W = 1 . Pre-loading can be 
done by careful choice of memory refer- 
ences with the cache turned on or by use of 
the testability functions (see Section 8.2). 
When the cache is turned off the memory 
mapped by the cache is “frozen” into the 
cache since fills and invalidates are dis- 
abled. 


CD = 1, NW = 0 

Cache fills are disabled but write-throughs 
and invalidates are enabled. This mode is 
the same as if the KEN # pin was strapped 
HIGH disabling cache fills. Write-throughs 
and invalidates may still occur to keep the 
cache valid. This mode is useful if the soft- 
ware must disable the cache for a short pe- 
riod of time, and then re-enable It without 
flushing the original contents. 

CD = 0, NW=1 

INVALID. If CRO is loaded with this bit con- 
figuration, a General Protection fault with 
error code of 0 is raised. Note that this 
mode would irnply a non-transparent write- 
back cache. A future processor may define 
this combination of bits to Implement a 
write-back cache. 

CD = 0, NW = 0 

This Is the normal operating mode. 

Completely disabling the cache is a two step pro- 
cess. First CD and NW must be set to 1 and then the 
cache must be flushed. If the cache Is not flushed, 
cache hits on reads will still occur and data will be 
read from the cache. 


5.3 Cache Line Fills 

Any area of memory can be cached in the 486 mi- 
croprocessor. Non-cacheable portions of memory 
can be defined by the external system or by soft- 
ware. The external system can inform the 486 micro- 
processor that a memory address is non-cacheable 
by returning the KEN# pin inactive during a memory 
access (refer to Section 7.2.3). Software can pre- 
vent certain pages from being cached by setting the 
PCD bit in the page table entry. 

A read request can be generated from program op- 
eration or by an instruction pre-fetch. The data will 
be supplied from the on-chip cache if a cache hit 
occurs on the read address. If the address is not in 
the cache, a read request for the data is generated 
on the external bus. 

If the read request Is to a cacheable portion of mem- 
ory, the 486 microprocessor initiates a cache line fill. 
During a line fill a 1 6-byte line Is read into the 486 
microprocessor. 

Cache fills will only be generated for read misses. 
Write misses will never cause a line in the internal 
cache to be allocated. If a cache hit occurs on a 
write, the line will be updated. 
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Cache line fills can be performed over 8- and 1 6-blt 
busses using the dynamic bus sizing feature. Refer 
to Section 7.1.3 for a description of dynamic bus 
sizing. 

Refer to Section 7.2.3 for further information on 
cacheable cycles. 

5.4 Cache Line Invalidations 

The 486 microprocessor contains both a hardware 
and software mechanism for invalidating lines in its 
internal cache. Cache line invalidations are needed 
to keep the 486 microprocessor’s cache contents 
consistent with external memory. 

Refer to Section 7.2.8 for further information on 
cache line Invalidations. 


5.5 Cache Replacement 

When a line needs to be placed in its internal cache 
the 486 microprocessor first checks to see if there is 
a non-valid line in the set that can be replaced. If all 
four lines in the set are valid, a pseudo least-recent- 
ly-used mechanism is used to determine which line 
should be replaced. 

A valid bit Is associated with each line in the cache. 
When a line needs to be placed in a set, the four 


valid bits are checked to see if there is a non-valid 
line that can be replaced. If a non-valid line is found, 
that line is marked for replacement. 

The four lines in the set are labeled lO, 11, 12, and I3. 
The order in which the valid bits are checked during 
an invalidation is lO, II, 12 and 13. All valid bits are 
cleared when the processor is reset or when the 
cache is flushed. 

Replacement in the cache is handled by a pseudo 
least recently used (LRU) mechanism when all four 
lines In a set are valid. Three bits, BO, B1 and B2, 
are defined for each of the 1 28 sets in the cache. 
These bits are called the LRU bits. The LRU bits are 
updated for every hit or replace In the cache. 

If the most recent access to the set was to 10 or II, 
BO is set to 1 . BO is set to 0 if the most recent ac- 
cess was to 12 or 13. If the most recent access to 
10:11 was to 10, B1 Is set to 1, else B1 is set to 0. If 
the most recent access to 12:13 was to 12, B2 is set to 
1 , else B2 is set to 0. 

The pseudo LRU mechanism works in the following 
manner. When a line must be replaced, the cache 
will first select which of 10:11 and I2:I3 was least re- 
cently used. Then the cache will determine which of 
the two lines was least recently used and mark it for 
replacement. This decision tree is shown in Figure 
5.2. When the processor is reset or when the cache 
is flushed all 128 sets of three LRU bits are set to 0. 
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5.6 Page Cacheability 

Two bits for cache control, PWT and PCD, are de- 
fined in the page table and page directory entries. 
The state of these bits are driven out on the PWT 
and PCD pins during memory access cycles. 

The PWT bit controls write policy for second level 
caches used with the 486 microprocessor. Setting 
PWT = 1 defines a write-through policy for the cur- 
rent page while PWT = 0 allows the possibility of 


write-back. The state of PWT is ignored internally by 
the 486 microprocessor since the on-chip cache Is 
write through. 

The PCD bit controls cacheability on a page by page 
basis. The PCD bit is Internally ANDed with the 
KEN# signal to control cacheability on a cycle by 
cycle basis (see Figure 5.3). PCD = 0 enables cach- 
ing while PCD= 1 forbids It. Note that cache fills are 
enabled when PCD=0 AND KEN# =0. This logical 
AND is implemented physically with a NOR gate. 
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The state of the PCD bit in the page table entry is 
driven on the PCD pin when a page in external mem- 
ory is accessed. The state of the PCD pin informs 
the external system of the cacheability of the re- 
quested information. The external system then re- 
turns KEN# telling the 486 microprocessor if the 
area Is cacheable. The 486 microprocessor Initiates 
a cache line fill if PCD and KEN# indicate that the 
requested information is cacheable. 

The PCD bit is masked with the CD (cache disable) 
bit In control register 0 to determine the state of the 
PCD pin. If CD = 1 the 486 microprocessor forces 
the PCD pin HIGH. If CD = 0 the PCD pin is driven 
with the value for the page table entry/directory. See 
Figure 5.3. 

The PWT and PCD bits for a bus cycle are obtained 
from either CR3, the page directory or page table 
entry. If paging is not enabled, or for cycles that by- 
pass paging, (I/O references, interrupt acknowledge 
and Halt cycles), the PWT and PCD bits are taken 
from CR3. These bits are initialized to 0 on reset, but 
can be set to any value by level 0 software. 

When paging is enabled, the bits from the page table 
entry are cached in the TLB, and are driven any time 
the page mapped by the TLB entry is referenced. 
For normal memory cycles, PWT and PCD are taken 
from the page table entry. During TLB refresh cycles 
where the page table and directory entries are read, 
the PWT and PCD bits must be obtained elsewhere. 
During page table updates the bits are obtained from 
the page directory. When the page directory is up- 
dated the bits are obtained from CR3. 


5.7 Cache Flushing 

The on-chip cache can be flushed by external hard- 
ware or by software instructions. Flushing the cache 
clears all valid bits for all lines In the cache. The 
cache is flushed when external hardware asserts the 
FLUSH# pin. 

The instructions INVD and WBINVD cause the on- 
cache to be flushed. External caches connected to 
the 486 microprocessor are signalled to flush their 
contents when these Instructions are executed. 

WBINVD will cause an external write-back cache to 
write back dirty lines before flushing Its contents. 
The external cache is signalled using the bus cycle 
definition pins and the byte enables (refer to Section 
6.2.5 for the bus cycle definition pins and Section 
7.2.11 for special bus cycles). Refer to the 486 mi- 
croprocessor programmers reference manual for de- 
tailed instruction definitions. 


The results of the INVD and WBINVD instructions 
are identical for the operation of the 486 microproc- 
essor’s on-chip cache since the cache is write- 
through. Note that the INVD and WBINVD instruc- 
tions are machine dependent. Future members of 
the 486 microprocessor family may change the defi- 
nition of this instruction. 


5.8 Caching Translation Lookaside 
Buffer Entries 

The 486 microprocessor contains an integrated pag- 
ing unit with a translation lookaside buffer (TLB). The 
TLB contains 32 entries. The TLB has been en- 
hanced over the 386 microprocessor’s TLB by up- 
grading the replacement strategy to a pseudo-LRU 
(least recently used) algorithm. The pseudo-LRU re- 
placement algorithm is the same as that used in the 
on-chip cache. 

The paging TLB operation is automatic whenever 
paging is enabled. The TLB contains the most re- 
cently used page table entries. A page table entry 
translates the linear address pointing to a particular 
page to the physical address where the page is 
stored in memory (refer to Section 4.5, Paging). 

The paging unit will look up the linear address in the 
TLB in response to an internal bus request. The cor- 
responding physical address Is passed on to the on- 
chip cache or the external bus (in the event of a 
cache miss) when the linear address is present In 
the TLB. 

The paging unit will access the page tables In exter- 
nal' memory if the linear address Is not In the TLB. 
The required page table entry will be read Into the 
TLB and then the cache or bus cycle for the actual 
data will take place. The process of reading a new 
page table entry Into the TLB is called a TLB refresh. 

A TLB refresh is a two step process. The paging unit 
must first read the page directory entry which points 
to the appropriate page table. The page table entry 
to be stored In the TLB is then read from the page 
table. Control register 3 (CR3) points to the base of 
the page directory table. 

The 486 microprocessor will allow page directory 
and page table entries (returned during TLB refresh- 
es) to be stored In the on-chip cache. Setting the 
PCD bits in CR3 and the page directory entry to 1 
will prevent the page directory and page table en- 
tries from being stored In the on-chip cache (see 
Section 5.6, Page Cacheability). 
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6.0 HARDWARE INTERFACE 


6.1 Introduction 

The 486 microprocessor bus has been designed to 
be similar to the 386 microprocessor bus whenever 
possible. Several new features have been added to 
the 486 microprocessor bus resulting in increased 
performance and functionality. New features include 
a 1X clock, a burst bus mechanism for high-speed 
internal cache fills, a cache line invalidation mecha- 
nism, enhanced bus arbitration capabilities, a BS8# 
bus sizing mechanism and parity support. 


nal memory in the same manner as the 386 micro- 
processor: The address lines form the upper 30 bits 
of the address and the byte enables select individual 
bytes within a 4 byte location. The address lines are 
bidirectional for use in cache line invalidations. 

The 486 microprocessor’s burst bus mechanism en- 
ables high-speed cache fills from external memory. 
Burst cycles can strobe data into the processor at a 
rate of one item every clock. Non-burst cycles have 
a maximum rate of one item every two clocks. Burst 
cycles are not limited to cache fills: all bus cycles 
requiring more than a single data cycle can be burst- 
ed. 


The 486 microprocessor is driven by a 1 X clock as 
opposed to a 2X clock in the 386 microprocessor. A 
25 MHz 486 microprocessor uses a 25 MHz clock in 
contrast to a 25 MHz 386 microprocessor which re- 
quires a 50 MHz clock. A 1X clock allows simpler 
system design by cutting in half the clock speed re- 
quired in the external system. 

Like the 386 microprocessor, the 486 microproces- 
sor has separate parallel busses for data and ad- 
dresses. The bidirectonal data bus is 32 bits in width. 
The address bus consists of two components: 30 
address lines (A2-A31) and 4 byte enable lines 
(BE0#“BE3#). The address bus addresses exter- 


The 486 microprocessor has a bus hold feature simi- 
lar to that of the 386 microprocessor. During bus 
hold, the 486 microprocessor relinquishes control of 
the local bus by floating Its address, data and control 
busses. 

The 486 microprocessor has an address hold fea- 
ture in addition to bus hold. During address hold only 
the address bus is floated, the data and control bus- 
ses can remain active. Address hold is used for 
cache line Invalidations. 

Ahead is a brief description of the 486 microproces- 
sor input and output signals arranged by functional 
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groups. Before beginning the signal descriptions a 
few terms need to be defined. The # symbol at the 
end of a signal name indicates the active, or assert- 
ed, state occurs when the signal is at a loW voltage. 
When a # is not present after the signal name, the 
signal Is active at the high voltage level. The term 
“ready” Is used to indicate that the cycle is terminat- 
ed with RDY# or BRDY#. 

Section 6 and 7 will discuss bus cycles and data 
cycles. A bus cycle is at least two clocks long and 
begins with ADS# active in the first clock and ready 
active in the last clock. Data is transferred to or from 
the 486, microprocessor during a data cycle. A bus 
cycle contains one or more data cycles. 


6.2 Signal Descriptions 

6.2.1 CLOCK (CLK) 

CLK provides the fundamental timing and the inter- 
nal operating frequency for the 486 microprocessor. 
All external timing parameters are specified with re- 
spect to the rising edge of CLK. 

The 486 microprocessor can operate over a wide 
frequency range but CLK’s frequency cannot 
change rapidly while RESET is inactive. CLK’s fre- 
quency must be stable for proper chip operation 
since a single edge of CLK is used internally to gen- 
erate two phases. CLK only needs TTL levels for 
proper operation. Figure 6.2 Illustrates the CLK 
waveform. 


6.2.2 Address Bus (A31-A2, BE0#-BE3#) 

A31-A2 and BE0#-BE3# form the address bus 
and provide physical memory and I/O port address- 


es. The 486 microprocessor is capable of address- 
ing 4 gigabytes of physical memory space 
(OOOOOOOOH through FFFFFFFFH), and 64 Kbytes 
of I/O address space (OOOOOOOOH through 
OOOOFFFFH). A31 -A2 identify addresses to a 4-byte 
location. BE0#-BE3# identify which bytes within 
the 4-byte location are involved in the current trans- 
fer. 

Addresses are driven back into the 486 microproc- 
essor over A31-A4 during cache line invalidations. 
The address lines are active HIGH. When used as 
Inputs into the processor, A31-A4 must meet the 
setup and hold times, t 22 and t 23 . A31-A2 are not 
driven during bus or address hold. 

The byte enable outputs, BE0#-BE3#, determine 
which bytes must be driven valid for read and write 
cycles to external memory. 

BE3# applies to D24-D31 
BE2# applies to D16-D23 
BE1 # applies to D8-D15 
BEO# applies to D0~D7 

BE0#-BE3# can be decoded to generate AO, A1 
and BHE# signals used in 8- and 16-bit systems 
(see Table 7.5). BE0#-BE3# are active LOW and 
are not driven during bus hold. 

6.2.3 DATA LINES (D31-D0) 

The bidirectional lines, D31-D0, form the data bus 
for the 486 microprocessor. D0-D7 define the least 
significant byte' and D24-D31 the most significant 
byte. Data transfers to 8- or 1 6-blt devices Is possi- 
ble using the data bus sizing feature controlled by 
the BS8# or BS16# input pins. 



ty = input hold times, output float, valid and hold times 


Figure 6.2. CLK waveform 
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D31-D0 are active HIGH. For reads, D31-D0 must 
meet the setup and hold times, t 22 and t 23 . D31-D0 
are not driven during read cycles and bus hold. 

6.2.4 PARITY 

Data Parity Input/Outputs (DP0-DP3) 

DP0-DP3 are the data parity pins for the processor. 
There is one pin for each byte of the data bus. Even 
parity is generated or checked by the parity genera- 
tors/checkers. Even parity means that there are an 
even number of HIGH inputs on the eight corre- 
sponding data bus pins and parity pin. 

Data parity is generated on all write data cycles with 
the same timing as the data driven by the 486 micro- 
processor. Even parity information must be driven 
back to the 486 microprocessor on these pins with 
the same timing as read information to insure that 
the correct parity check status is indicated by the 
486 microprocessor. 

The values read on these pins do not affect program 
execution. It Is the responsibility of the system to 
take appropriate actions if a parity error occurs. 

Input signals on DP0-DP3 must meet setup and 
hold times t 22 and t 23 for proper operation. 

Parity Status Output (PCHK#) 

Parity status Is driven on the PCHK# pin, and a pari- 
ty error is indicated by this pin being LOW. PCHK# 
is driven the clock after ready for read operations to 
indicate the parity status for the data sampled at the 
end of the previous clock. Parity is checked during 
code reads, memory reads and I/O reads. Parity is 
not checked during interrupt acknowledge cycles. 
PCHK# only checks the parity status for enabled 
bytes as indicated by the byte enable and bus size 
signals. It is valid only in the clock Immediately after 
read data is returned to the 486 microprocessor. At 
ail other times it is inactive (HIGH). PCHK# is never 
floated. 

Driving PCHK# is the only effect that bad input pari- 
ty has on the 486 microprocessor. The 486 micro- 
processor will not vector to a bus error interrupt 
when bad data parity is returned. In systems that will 
not employ parity, PCHK# can be ignored. In sys- 
tems not using parity, DP0-DP3 should be connect- 
ed to Vcc through a pullup resistor. 


6.2.5 BUS CYCLE DEFINmON 

M/IO#, D/C#, W/R# Outputs 

M/IO#, D/C# and W/R# are the primary bus cycle 
definition signals. They are driven valid as the ADS# 
signal Is asserted. M/IO# distinguishes between 
memory and I/O cycles, D/C# distinguishes be- 
tween data and control cycles and W/R# distin- 
guishes between write and read cycles. 

Bus cycle definitions as a function of M/IO#, D/C# 
and W/R# are given in Table 6.1. Note there is a 
difference between the 486 microprocessor and 386 
microprocessor bus cycle definitions. The halt bus 
cycle type has been moved to location 001 in the 
486 microprocessor from location 101 In the 386 mi- 
croprocessor. Location 101 is now reserved and will 
never be generated by the 486 microprocessor. 


Table 6.1. ADS# Initiated Bus Cycie Definitions 


M/IO# 

D/C# 

W/R# 

Bus Cycle Initiated 

0 

0 

0 

Interrupt Acknowledge 

0 

0 

1 

Halt/Special Cycle 

0 

1 

0 

I/O Read 

0 

1 

1 

I/O Write 

1 

0 

0 

Code Read 

1 

0 

1 

Reserved 

1 

1 

0 

Memory Read 

1 

1 

1 

Memory Write 


Special bus cycles are discussed in Section 7.2.11. 

Bus Lock Output (LOCK # ) 

LOCK# indicates that the 486 microprocessor Is 
running a read-modify-write cycle where the external 
bus must not be relinquished between the read and 
write cycles. Read-modify-write cycles are used to 
implement memory-based semaphores. Multiple 
reads or writes can be locked. 

When LOCK# is asserted, the current bus cycle is 
locked and the 486 microprocessor should be al- 
lowed exclusive access to the system bus. LOCK# 
goes active in the first clock of the first locked bus 
cycle and goes inactive after ready is returned indi- 
cating the last locked bus cycle. 

The 486 microprocessor will not acknowledge bus 
hold when LOCK# is asserted (though it will allow 
an address hold). LOCK# is active LOW and is float- 
ed during bus hold. Locked read cycles will not be 
transformed into cache fill cycles if KEN# is re- 
turned active. Refer to Section 7.2.6 for a detailed 
discussion of Locked bus cycles. 
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Pseudo-Lock Output (PLOCK#) 

The pseudo-lock feature allows atomic reads and 
writes of memory operands greater than 32 bits. 
These operands require more than one cycle to 
transfer. The 486 microprocessor asserts PLOCK# 
during floating point long reads and writes (64 bits), 
segment table descriptor reads (64 bits) and cache 
line fills (128 bits). 

When PLOCK# is asserted no other master will be 
given control of the bus between cycles. A bus hold 
request (HOLD) is not acknowledged during pseudo- 
locked reads and writes. The 486 microprocessor 
will drive PLOCK# active until the addresses for the 
last bus cycle of the transaction have been driven 
regardless of whether BRDY# or RDY# are re- 
turned. 

A pseudo-locked transfer is meaningful only if the 
memory operand is aligned and if its completely con- 
tained within a single cache line. A 64-bit floating 
point number must be aligned to an 8-byte boundary 
to guarantee an atomic access. 

Normally PLOCK# and BLAST# are inverse of 
each other. However during the first cycle of a 64-bit 
floating point write, both PLOCK# and BLAST# will 
be asserted. 

Since PLOCK# is a function of the bus size and 
KEN# inputs, PLOCK# should be sampled only In 
the clock ready is returned. This pin is active LOW 
and is not driven during bus hold. Refer to Section 
7.2.7 for a detailed discussion of pseudo-locked bus 
cycles. 

6.2.6 BUS CONTROL 

The bus control signals allow the processor to Indi- 
cate when a bus cycle has begun, and allow other 
system hardware to control burst cycles, data bus 
width and bus cycle termination. 

Address Status Output (ADS#) 

The ADS# output indicates that the address and 
bus cycle definition signals are valid. This signal will 
go active in the first clock of a bus cycle and go 
inactive in the second and subsequent clocks of the 
cycle. ADS# is also inactive when the bus is idle. 

ADS# Is used by external bus circuitry as the indica- 
tion that the processor has started a bus cycle. The 
external circuit must sample the bus cycle definition 
pins on the next rising edge of the clock after ADS# 
Is driven active. 


Non-burst Ready Input (RDY#) 

RDY# indicates that the current bus cycle is com- 
plete. In response to a read, RDY# indicates that 
the external system has presented valid data on the 
data pins. In response to a write request, RDY# indi- 
cates that the external system has accepted the 486 
microprocessor data. RDY# is ignored when the 
bus Is idle and at the end of the first clock of the bus 
cycle. Since RDY# Is sampled during address hold, 
data can be returned to the processor when AHOLD 
Is active. 

RDY# Is active LOW, and is not provided with an 
internal pullup resistor. This input must satisfy setup 
and hold times tie and tiy for proper chip operation. 

6.2.7 BURST CONTROL 

Burst Ready Input (BRDY#) 

BRDY# performs the same function during a burst 
cycle that RDY# performs during a non-burst cycle. 
BRDY# indicates that the external system has pre- 
sented valid data on the data pins in response to a 
read or that the external system has accepted the 
486 microprocessor data in response to a write. 
BRDY# is ignored when the bus is idle and at the 
end of the first clock in a bus cycle. 

During a burst cycle, BRDY# will be sampled each 
clock, and if active, the data presented on the data 
bus pins will be strobed into the 486 microprocessor. 
ADS# is negated during the second through last 
data cycles in the burst, but address lines A2-A3 
and byte enables will change to reflect the next data 
Item expected by the 486 microprocessor. 

If RDY# Is returned simultaneously with BRDY#, 
BRDY# js ignored and the burst cycle is premature- 
ly aborted. An additional complete bus cycle will be 
Initiated after an aborted burst cycle if the cache line 
fill was not complete. BRDY# is treated as a normal 
ready for the last data cycle in a burst transfer or for 
non-burstable cycles. Refer to Section 7.2.2 for 
burst cycle timing. 

BRDY# is active LOW and is provided with a small 
internal pullup resistor. BRDY# must satisfy the set- 
up and hold times tie ^nd tiy. 

Burst Last Output (BLAST#) 

BLAST# indicates that the next time BRDY# is re- 
turned it will be treated as a normal RDY#, terminat- 
ing the line fill or other multiple-data-cycle transfer. 
BLAST# is active for all bus cycles regardless of 
whether they are cacheable or not. This pin is active 
LOW and is not driven during bus hold. 


ADS# is active LOW and is not driven during bus 
hold. 
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6.2.8 INTERRUPT SIGNALS (RESET, INTR, NMi) 

The interrupt signals can interrupt or suspend exe- 
cution of the processor’s current instruction stream. 

Reset Input (RESET) 

RESET forces the 486 microprocessor to begin exe- 
cution at a known state. Vcc and CLK must reach 
their proper DC and AC specifications for at least 
1 ms before the 486 microprocessor begins instruc- 
tion execution. The RESET pin should remain active 
during this time to ensure proper 486 microproces- 
sor operation. The testability operating modes are 
programmed by the falling (inactive going) edge of 
RESET. (Refer to Section 8.0 for a description of the 
test modes during reset.) 

Maskable Interrupt Request Input (INTR) 

INTR indicates that an external Interrupt has been 
generated. Interrupt processing is initiated if the IF 
flag is active in the EFLAGS register. 

The 486 microprocessor will generate two locked in- 
terrupt acknowledge bus cycles in response to as- 
serting the INTR pin. An 8-bit interrupt number will 
be latched from an external interrupt controller at 
the end of the second interrupt acknowledge cycle. 
INTR must remain active until the interrupt acknowl- 
edges have been performed to assure program In- 
terruption. Refer to Section 7.2.10 for a detailed dis- 
cussion of interrupt acknowledge cycles. 

The INTR pin is active HIGH and is not provided with 
an Internal pulldown resistor. INTR is asynchronous, 
but the INTR setup and hold times, t 2 o and t 2 i, must 
be met to assure recognition on any specific clock. 

Non-maskable interrupt Request Input (NMI) 

NMI is the non-maskable interrupt request signal. 
Asserting NMI causes an interrupt with an Internally 
supplied vector value of 2. External interrupt ac- 
knowledge cycles are not generated since the NMI 
interrupt vector is internally generated. When NMI 
processing begins, the NMi signal will be masked 
Internally until the IRET Instruction Is executed. 

NMI is rising edge sensitive after internal synchroni- 
zation. NMI must be held LOW for at least four CLK 
periods before this rising edge for proper operation. 
NMI is not provided with an internal pulldown resis- 
tor. NMI is asynchronous but setup and hold times, 
t 2 o and t 2 i must be met to assure recognition on any 
specific clock. 


6.2.9 BUS ARBITRATION SIGNALS 

This section describes the mechanism by which the 
processor relinquishes control of its local bus when 
requested by another bus master. 

Bus Request Output (BREQ) 

The 486 asserts BREQ whenever a bus cycle Is 
pending Internally. Thus, BREQ is always asserted in 
the first clock of a bus cycle, along with ADS#. Fur- 
thermore, if the 486 is currently not driving the bus 
(due to HOLD, AHOLD, or BOFF#), BREQ Is assert- 
ed In the same clock that ADS# would have been 
asserted If the processor were driving the bus. After 
the first clock of the bus cycle, BREQ may change 
state. It will be asserted if additional cycles are nec- 
essary to complete a transfer (via BS8#, BS16#, 
KEN#), or if more cycles are pending Internally. 
However, if no additional cycles are necessary to 
complete the current transfer, BREQ can be negat- 
ed before ready comes back for the current cycle. 
External logic can use the BREQ signal to arbitrate 
among multiple processors. This pin Is driven re- 
gardless of the state of bus hold or address hold. 
BREQ is active HIGH and is never floated. 

Bus Hold Request Input (HOLD) 

HOLD allows another bus master complete control 
of the 486 microprocessor bus. The 486 microproc- 
essor will respond to an active HOLD signal by as- 
serting HLDA and placing most of Its output and in- 
put/output pins in a high Impedance state (floated) 
after completing its current bus cycle, burst cycle, or 
sequence of locked cycles. The BREQ, HLDA, 
PCHK# and FERR# pins are not floated during bus 
hold. The 486 microprocessor will maintain Its bus In 
this state until the HOLD is deasserted. Refer to 
Section 7.2.9 for timing diagrams for a bus hold cy- 
cle. 

Unlike the 386 microprocessor, the 486 microproc- 
essor will recognize HOLD during reset. Pullup resis- 
tors are not provided for the outputs that are floated 
in response to HOLD. HOLD is active HIGH and Is 
not provided with an internal pulldown resistor. 
HOLD must satisfy setup and hold times t-is and tig 
for proper chip operation. 

Bus Hold Acknowledge Output (HLDA) 

HLDA Indicates that the 486 microprocessor has 
given the bus to another local bus master. HLDA 
goes active in response to a hold request presented 
on the HOLD pin. HLDA Is driven active in the same 
clock that the 486 microprocessor floats Its bus. 
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HLDA will be driven inactive when leaving bus hold 
and the 486 microprocessor will resume driving the 
bus. The 486 microprocessor will not cease internal 
activity during bus hold since the internal cache will 
satisfy the majority of bus requests. HLDA is active 
HIGH and remains driven during bus hold. 

Backoff Input (BOFF#) 

Asserting the BOFF# input forces the 486 micro- 
processor to release control of its bus in the next 
clock. The pins floated are exactly the same as in 
response to HOLD. The response to BOFF# differs 
from the response to HOLD in two ways; First, the 
bus is floated Immediately in response to BOFF# 
while the 486 completes the current bus cycle be- 
fore floating its bus in response to HOLD. Second 
the 486 does not assert HLDA in response to 
BOFF#. 

The processor remains in bus hold until BOFF# is 
negated. Upon negation, the 486 microprocessor re- 
starts the bus cycle aborted when BOFF# was as- 
serted. To the Internal execution engine the effect of 
BOFF# is the same as inserting a few wait states to 
the original cycle. Refer to Section 7.2.12 for a de- 
scription of bus cycle restart. 

Any data returned to the processor while BOFF# is 
asserted is ignored. BOFF# has higher priority than 
RDY# or BRDY#. If both BOFF# and ready are 
returned in the same clock, BOFF# takes effect. If 
BOFF# is asserted while the bus is idle, the 486 
microprocessor will float Its bus in the next clock. 
BOFF# is active LOW and must meet setup and 
hold times t-is and tig for proper chip operation. 

6.2.10 CACHE INVALIDATION 

The AHOLD and EADS# inputs are used during 
cache invalidation cycles. AHOLD conditions the 
486 microprocessors address lines, A4~A31, to ac- 
cept an address input. EADS# indicates that an ex- 
ternal address is actually valid on the address 
inputs. Activating EADS# will cause the 486 mi- 
croprocessor to read the external address bus 
and perform an internal cache invalidation cycle to 
the address indicated. Refer to Section 7.2.8 for 
cache invalidation cycle timing. 

Address Hold Request Input (AHOLD) 

AHOLD is the address hold request. It allows anoth- 
er bus master access to the 486 microprocessor 
address bus for performing an Internal cache Invali- 


dation cycle. Asserting AHOLD will force the 486 mi- 
croprocessor to stop driving its address bus in the 
next clock. While AHOLD Is active only the address 
bus will be floated, the remainder of the bus can 
remain active. For example, data can be returned for 
a previously specified bus cycle when AHOLD is ac- 
tive. The 486 microprocessor will not initiate another 
bus cycle during address hold. Since the 486 micro- 
processor floats its bus immediately In response to 
AHOLD, an address hold acknowledge is not re- 
quired. If AHOLD Is asserted while a bus cycle is in 
progress, and no readies are returned during the 
time AHOLD Is asserted, the 486 will redrIve the 
same address (that it originally sent out) once 
AHOLD is negated. 

AHOLD is recognized during reset. Since the entire 
cache Is invalidated by reset, any invalidation cycles 
run during reset will be unnecessary. AHOLD Is ac- 
tive HIGH and is provided with a small internal pull- 
down resistor. It must satisfy the setup and hold 
times ti8 and tig for proper chip operation. This pin 
determines whether or not the built In self test fea- 
tures of the 486 microprocessor will be exercised on 
assertion of RESET. 

Externa! Address Valid Input (EADS // ) 

EADS# indicates that a valid external address has 
been driven onto the 486 address pins. This address 
will be used to perform an Internal cache invalidation 
cycle. The external address will be checked with the 
current cache contents. If the address specified 
matches any areas in the cache, that area will Imme- 
diately be Invalidated. 

An invalidation cycle may be run by asserting 
EADS# regardless of the state of AHOLD, HOLD 
and BOFF#. EADS# is active LOW and is provided 
with an internal pullup resistor. EADS# must satisfy 
the setup and hold times ti 2 and tig for proper chip 
operation. 

6.2.11 CACHE CONTROL 

Cache Enable Input (KEN#) 

KEN# Is the cache enable pin. KEN# Is used to 
determine whether the data being returned by the 
current cycle is cacheable. When KEN# Is active 
and the 486 microprocessor generates a cycle that 
can be cached (most any memory read cycle), the 
cycle will be transformed Into a cache line fill cycle. 

A cache line is 1 6 bytes long. During the first cycle of 
a cache line fill the byte-enable pins should be ig- 
nored and data should be returned as if all four byte 
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enables were asserted. The 486 microprocessor will 
run between 4 and 16 contiguous bus cycles to fill 
the line depending on the bus data width selected by 
BS8# and BS16#. Refer to Section 7.2.3 for a de- 
scription of cache line fill cycles. 

The KEN # input is active LOW and is provided with 
a small Internal pullup resistor. It must satisfy the 
setup and hold times t-14 and ti5 for proper chip op- 
eration. 

Cache Flush Input (FLUSH#) 

The FLUSH# input forces the 486 microprocessor 
to flush Its entire internal cache. FLUSH # is active 
LOW and need only be asserted for one clock. 
FLUSH # is asynchronous but setup and hold times 
t2o and t2i must be met for recognition on any spe- 
cific clock. 

FLUSH # also determines whether or not the tristate 
test mode of the 486 microprocessor will be invoked 
on assertion of RESET. 


6.2.12 PAGE CACHE ABILITY (PWT, PCD) 

The PWT and PCD output signals correspond to two 
user attribute bits In the page table entry. When pag- 
ing is enabled, PWT and PCD correspond to bits 3 
and 4 of the page table entry respectively. When 
paging is disabled, or for cycles that are not paged 
when paging Is enabled (for example I/O cycles) 
PWT and PCD correspond to bits 3 and 4 in control 
register 3. 

PCD is masked by the CD (cache disable) bit in con- 
trol register 0 (CRO). When CD = 1 (cache line fills 
disabled) the 486 microprocessor forces PCD HIGH. 
When CD = 0, PCD Is driven with the value of the 
page table entry/directory. 

The purpose of PCD is to provide a cacheable/non- 
cacheable indication on a page by page basis. The 
486 will not perform a cache fill to any page in which 
bit 4 of the page table entry Is set. PWT corresponds 
to the write-back bit and can be used by an external 
cache to provide this functionality. Refer to Sections 
4.5.4 and 5.6 for a discussion of non-cacheable 
pages. 

PCD and PWT have the same timing as the cycle 
definition pins (M/IO#, D/C#, W/R#). PCD and 
PWT are active HIGH and are not driven during bus 
hold. 


6.2.13 NUMERIC ERROR REPORTING 
(FERR#, IGNNE#) 

To allow PC-type floating point error reporting, the 
486 microprocessor provides two pins, FERR# and 
IGNNE#. 

Floating Point Error Output (FERR#) 

The 486 microprocessor asserts FERR# whenever 
an unmasked floating point error Is encountered. 
FERR# is similar to the ERROR# pin on the 387 
math coprocessor. FERR# can be used by external 
logic for PC-type floating point error reporting in 486 
microprocessor systems. FERR# is active LOW, 
and is not floated during bus hold. 

Ignore Numeric Error Input (IGNNE#) 

The 486 microprocessor will ignore a numeric error 
and continue executing non-control floating point 
Instructions when IGNNE# Is asserted. When deas- 
serted, the 486 microprocessor will freeze on a 
non-control floating point instruction If a previous In- 
struction caused an error. IGNNE# has no effect 
when the NE bit in control register 0 is set. 

The IGNNE# Input is active LOW and is provided 
with a small internal pullup resistor. This Input Is 
asynchronous, but must meet setup and hold times 
t2o and t2i to Insure recognition on any specific 
clock. 


6.2.14 BUS SIZE CONTROL (BS16#, BS8#) 

The BS16# and BS8# Inputs allow external 16- and 
8-blt busses to be supported with a small number of 
external components. The 486 CPU samples these 
pins every clock. The value sampled In the clock 
before ready determines the bus size. When assert- 
ing BS16# or BS8# only 16 or 8 bits of the data bus 
need be valid'. If both BS16# and BS8# are assert- 
ed, an 8-bit bus width Is selected. 

When BS16# or BS8# are asserted the 486 micro- 
processor will convert a larger data request to the 
appropriate number of smaller transfers. The byte 
enables will also be modified appropriately for the 
bus size selected. 

BS16# and BS8# are active LOW and are provided 
with small Internal pullup resistors. BS16# and 
BS8# must satisfy the setup and hold times ti4 and 
ti5 for proper chip operation. 
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6.2.15 ADDRESS BIT 20 MASK (A20M#) 

Asserting the A20M# input causes the 486 micro- 
processor to mask physical address bit 20 before 
performing a lookup in the internal cache and before 
driving a memory cycle to the outside world. When 
A20M# Is asserted, the 486 microprocessor emu- 
lates the 1 Mbyte address wraparound that occurs 
on the 8086. A20M# is active LOW and must be 
asserted only when the processor Is in real mode. 
A20M# is asynchronous but should meet setup and 
hold times t 2 o and t 2 i for recognition in any specific 
clock. For correct operation of the chip, A20M# 
should be sampled high at the falling edge of RE- 
SET. 


6.3 Write Buffers 

The 486 microprocessor contains four write buffers 
to enhance the performance of consecutive writes 
to memory. The buffers can be filled at a rate of one 
write per clock until all four buffers are filled. 

When all four buffers are empty and the bus Is Idle, a 
write request will propagate directly to the external 
bus bypassing the write buffers. If the bus is not 
available at the time the write Is generated internally, 
the write will be placed in the write buffers and prop- 
agate to the bus as soon as the bus becomes avail- 
able. The write is stored In the on-chip cache imme- 
diately if the write is a cache hit. 

Writes will be driven onto the external bus In the 
same order in which they are received by the write 
buffers. Under certain conditions a memory read will 
go onto the external bus before the memory writes 
pending in the buffer even though the writes oc- 
curred earlier in the program execution. 

A memory read will only be reordered in front of all 
writes in the buffers under the following conditions: If 
all writes pending in the buffers are cache hits and 
the read is a cache miss. Under these conditions the 
486 microprocessor will not read from an external 
memory location that needs to be updated by one of 
the pending writes. 

Reordering of a read with the writes pending In the 
buffers can only occur once before all the buffers 
are emptied. The problem with reordering more than 
one write Is illustrated with the following example. A 
write to external memory location M is pending in the 
write buffers. This write was a cache hit to location C 
In the on-chip cache. A read is reordered ahead of 
the write to location M. The data from this read re- 
places the data in location C in the on-chip cache. 
Before the pending write can update location M the 
processor generates a read to location M. This read 
is a cache miss since the previous read replaced the 


information in on-chip location C. If the 486 micro- 
processor reordered this second read ahead of the 
pending write to location M, the processor would 
read stale data. 


6.3.1 WRITE BUFFERS AND I/O CYCLES 

Input/Output (I/O) cycles must be handled In a dif- 
ferent manner by the write buffers. 

I/O reads are never reordered in front of buffered 
memory writes. This Insures that the 486 microproc- 
essor will update all memory locations before read- 
ing status from an I/O device. 

The 486 microprocessor never buffers single I/O 
writes. When processing an OUT instruction. Internal 
execution stops until the I/O write actually com- 
pletes on the external bus. This allows time for the 
external system to drive an invalidate into the 486 
microprocessor or to mask Interrupts before the 
processor progresses to the instruction following 
OUT. Repeated OUTS instructions will be buffered. 

I/O device recovery time must be handled slightly 
differently by the 486 microprocessor than with the 
386 microprocessor. I/O device back-to-back write 
recovery times could bo guaranteed by the 386 mi- 
croprocessor by inserting a jump to the next instruc- 
tion in the code that writes to the device. The jump 
forces the 386 microprocessor to generate a pre- 
fetch bus cycle which can’t begin until the I/O write 
completes. 

Inserting a jump to the next write will not work with 
the 486 microprocessor because the prefetch could 
be satisfied by the on-chip cache. A read cycle must 
be explicitly generated to a non-cacheable location 
In memory to guarantee that a read bus cycle is per- 
formed. This read will not be allowed to proceed to 
the bus until after the I/O write has completed be- 
cause I/O writes are not buffered. The I/O device 
will have time to recover to accept another write dur- 
ing the read cycle. 

6.3.2 WRITE BUFFERS IMPLICATIONS ON 
LOCKED BUS CYCLES 

Locked bus cycles are used for read-modify-write 
accesses to memory. During a read-modify-write ac- 
cess, a memory base variable is read, modified and 
then written back to the same memory location. It is 
important that no other bus cycles, generated by 
other bus masters or by the 486 microprocessor it- 
self, be allowed on the external bus between the 
read and write portion of the locked sequence. 

During a locked read cycle the 486 microprocessor 
will always access external memory, It will never 
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look for the location in the on-chip cache. All data 
pending In the 486 microprocessor’s write buffers 
will be written to memory before a locked cycle is 
allowed to proceed to the external bus. 

The 486 microprocessor will assert the LOCK# pin 
after the write buffers are emptied during a locked 
bus cycle. With the LOCK# pin asserted, the micro- 
processor will read the data, operate on the data 
and place the results in a write buffer. The contents 
of the write buffer will then be written to external 
memory. LOCK# will become inactive after the write 
part of the locked cycle. 


6.4 Interrupt and Non-Maskable 
Interrupt Interface 

The 486 microprocessor provides two asynchronous 
interrupt Inputs, INTR (interrupt request) and NMI 
(non-maskable interrupt input). This section de- 
scribes the hardware interface between the instruc- 
tion execution unit and the pins. For a description of 
the algorithmic response to interrupts refer to Sec- 
tion 2.7. For interrupt timings refer to Section 7.2.10. 

6.4.1 INTERRUPT LOGIC 

The 486 microprocessor contains a two-clock syn- 
chronizer on the interrupt line. An interrupt request 
will reach the internal instruction execution unit two 
clocks after the INTR pin is asserted. If proper setup 
Is provided to the first stage of the synchronizer. 
There is no special logic In the interrupt path other 
than the synchronizer. The INTR signal is level sen- 
sitive and must remain active for the Instruction exe- 
cution unit to recognize It. The Interrupt will not be 
serviced by the 486 microprocessor if the INTR sig- 
nal does not remain active. 

The instruction execution unit will look at the state of 
the synchronized interrupt signal at specific clocks 
during the execution of instructions (if interrupts are 
enabled). These specific clocks are at Instruction 
boundaries, or Iteration boundaries in the case of 
string move instructions. Interrupts will only be ac- 
cepted at these boundaries. 

An interrupt must be presented to the 486 micro- 
processor INTR pin three clocks before the end of 
an instruction for the interrupt to be acknowledged. 
Presenting the Interrupt 3 clocks before the end of 
an instruction allows the interrupt to pass through 
the two clock synchronizer leaving one clock to pre- 
vent the initiation of the next sequential instruction 
and to begin interrupt service. If the interrupt Is not 
received in time to prevent the next instruction, it will 
be accepted at the end of next instruction, assuming 
INTR Is still held active. The interrupt service micro- 
code will start after two dead clocks. 


The longest latency between when an Interrupt re- 
quest is presented on the INTR pin and when the 
Interrupt service begins is: longest instruction used 
+ the two clocks for synchronization + one clock 
required to vector into the Interrupt service micro- 
code. 


6.4.2 NMI LOGIC 

The NMI pin has a synchronizer like that used on the 
INTR line. Other than the synchronizer, the NMI log- 
ic is different from that of the maskable interrupt. 

NMI is edge triggered as opposed to the level trig- 
gered INTR signal. The rising edge of the NMI signal 
is used to generate the interrupt request. The NMI 
input need not remain active until the interrupt Is ac- 
tually serviced. The NMI pin only needs to remain 
active for a single clock If the required setup and 
hold times are met. NMI will operate properly if it is 
held active for an arbitrary number of clocks. 

The NMI input must be held Inactive for at least four 
clocks after it is asserted to reset the edge triggered 
logic. A subsequent NMI may not be generated if the 
NMI is not held Inactive for at least two clocks after 
being asserted. 

The NMI input is internally masked whenever the 
NMI routine Is entered. The NMI Input will remain 
masked until an IRET (return from interrupt) instruc- 
tion is executed. Masking the NMI signal prevents 
recursive NMI calls. If another NMI occurs while the 
NMI is masked off, the pending NMI will be executed 
after the current NMI is done. Only one NMI can be 
pending while NMI is masked. 


6.5 Reset and Initialization 

The 486 microprocessor has a built in self test 
(BIST) that can be run during reset. The BIST Is in- 
voked if the AHOLD pin Is asserted on the falling 
edge of RESET. Refer to Section 8.0 for Information 
on 486 microprocessor testability. 

The 486 microprocessor registers have the values 
shown in Table 6.2 after RESET Is performed. The 
EAX register contains information on the success or 
failure of the BIST If the self test Is executed. The 
DX register always contains a component identifier 
at the conclusion of RESET. The upper byte of DX 
(DH) will contain 04 and the lower byte (DL) will con- 
tain a stepping Identifier. The floating point registers 
are initialized as if the FINIT/FNINIT (initialize proc- 
essor) instruction was executed if the BIST was per- 
formed. If the BIST Is not executed, the floating point 
registers are unchanged. 
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Table 6.2. Register Values after Reset 


Register 

Initial Value (BIST) 

Initial Value (No Bist) 

EAX 

Zero (Pass) 

Undefined 

ECX 

Undefined 

Undefined 

EDX 

0400 + Revision ID 

0400 + Revision ID 

EBX 

Undefined 

Undefined 

ESP 

Undefined 

Undefined 

EBP 

Undefined 

Undefined 

ESI 

Undefined 

Undefined 

EDI 

Undefined 

Undefined 

EFLAGS 

00000002h 

00000002h 

EIP 

OFFFOh 

OFFFOh 

ES 

OOOOh 

OOOOh 

CS 

FOOOh* 

FOOOh* 

SS 

OOOOh 

OOOOh 

DS 

OOOOh 

OOOOh 

FS 

OOOOh 

OOOOh 

GS 

OOOOh 

OOOOh 

IDTR 

Base = 0, Limit = 3FFh 

Base = 0, Limit = 3FFh 

CRO 

60000000h 

OOOOOOOOh 

DR7 

OOOOOOOOh 

OOOOOOOOh 

CW 

037Fh 

Unchanged 

SW 

OOOOh 

Unchanged 

TW 

FFFFh 

Unchanged 

FIP 

OOOOOOOOh 

Unchanged 

FEA 

OOOOOOOOh 

Unchanged 

FCS 

OOOOh 

Unchanged 

FDS 

OOOOh 

Unchanged 

FOP 

, OOOh 

Unchanged 

FSTACK 

Undefined 

Unchanged 


The 486 microprocessor will start executing instruc- 
tions at location FFFFFFFOH after RESET. When 
the first Intersegment Jump or Call is executed, ad- 
dress lines A20-A31 will drop LOW for CS-relative 
memory cycles, and the 486 microprocessor will 
only execute Instructions in the lower one Mbyte of 
physical memory. This allows the system designer to 
use a ROM at the top of physical memory to initialize 
the system and take care of RESETS. 

RESET forces the 486 microprocessor to terminate 
all execution and local bus activity. No instruction or 
bus activity will occur as long as RESET is active. 

All entries in the cache are invalidated by RESET. 

6.5.1 PIN STATE DURING RESET 

The 486 microprocessor recognizes and can re- 
spond to HOLD, AHOLD, and BOFF# requests re- 


gardless of the state of RESET. Thus, even though 
the processor is In reset, it can still float Its bus in 
response to any of these requests. 

While in reset, the 486 microprocessor bus is in the 
state shown In Figure 6.3 if the HOLD, AHOLD and 
BOFF# requests are inactive. Note that the address 
(A31-A2, BE3#-BE0#) and cycle definition 

(M/IO#, D/C#, W/R#) pins are undefined from the 
time reset is asserted up to the start of the first bus 
cycle. All undefined pins (except FERR#) assume 
known values at the beginning of the first bus cycle. 
The first bus cycle is always a code fetch to address 
FFFFFFFOH. FERR# reflects the state of the ES 
(error summary status) bit In the floating point unit 
status word. The ES bit is initialized whenever the 
floating point unit state is initialized. 
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Figure 6.3. Pin States during RESET 

4-86 


A31-A4, MIO#. BLAST 


BE 0 -BE 3 #. PWT, PCD 
A3, A2, PLOCK# 
D/C#, W/R# 


-i At least 20 CLK periods ^ 

217 CLKs if no self-test ► 


„ ^ CLKs If self-test ► 





NOTES: 

1. RESET Is an asynchronous input t 2 o must be met only to guarantee recognition on a specific clock edge. 

2. High on this clock edge for correct operation of the part. 

3. Low on this clock edge if tri-state output test mode is to be entered. 

4. High on this clock edge to initiate self-test. 

5. Hold Is recognized normally during RESET. 
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7.0 BUS OPERATION 


7.1 Data Transfer Mechanism 

All data transfers occur as a result of one or more 
bus cycles. Logical data operands of byte, word and 
dword lengths may be transferred without restric- 
tions on physical address alignment. Data may be 
accessed at any byte boundary but two or three cy- 
cles may be required for unaligned data transfers. 
See Section 7.1.3 Dynamic Bus Sizing and 7.1.6 Op- 
erand Alignment. 

The 486 microprocessor address signals are split 
into two components. High-order address bits are 
provided by the address lines, A2-A31. The byte 
enables, BE0#-BE3#, form the low-order address 
and provide linear selects for the four bytes of the 
32-bit address bus. 

The byte enable outputs are asserted when their as- 
sociated data bus bytes are involved with the pres- 
ent bus cycle, as listed in Table 7.1. Byte enable 
patterns which have a negated byte enable separat- 
ing two or three asserted byte enables will never 
occur (see Table 7.5). All other byte enable patterns 
are possible. 


Address bits AO and A1 of the physical operand’s 
base address can be created when necessary. Use 
of the byte enables to create AO and A1 is shown in 
Table 7.2. The byte enables can also be decoded to 
generate BLE# (byte low enable) and BHE# (byte 
high enable). These signals are needed to address 
16-bit memory systems (see Section 7.1.4 Inter- 
facing with 8- and 16-bit memories). 


Table 7.2. Generating A0-A31 from 
BE0#-BE3# and A2-A31 


486TM CPU Ac 

A31 A2 

Idress 

BE3# 

Signals 

BE2# 

BE1# 

BEO# 

A31 

Physical Base 
Address 






A2 

A1 

AO 

A31 


A2 

0 

0 

X 

X 

X 

Low 

A31 


A2 

0 

1 

X 

X 

Low 

High 

A31 


A2 

1 

0 

X 

Low 

High 

High 

A31 


A2 

1 

1 

Low 

High 

High 

High 


7.1.1 MEMORY AND I/O SPACES 


Table 7.1. Byte Enables and Associated 
Data and Operand Bytes 


Byte 

Enable 

Associated Data Bus Signals 

Signal 


BEO# 

D0-D7 (byteO — least significant) 

BE1# 

D8-D15 (bytel) 

BE2# 

D16-D23 (byte 2) 

BE3# 

D24-D31 (byte 3 — most significant) 


Bus cycles may access physical memory space or 
I/O space. Peripheral devices in the system may ei- 
ther be memory-mapped, or I/O-mapped, or both. 
Physical memory addresses range from OOOOOOOOH 
to FFFFFFFFH (4 gigabytes). I/O addresses range 
from OOOOOOOOH to OOOOFFFFH (64 Kbytes) for pro- 
grammed I/O. See Figure 7.1. 
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7.1.2 MEMORY AND I/O SPACE 
ORGANIZATION 

The 486 microprocessor datapath to memory and 
input/output (I/O) spaces can be 32-, 16- or 8-bits 
wide. The byte enable signals, BE0#-BE3#, allow 
byte granularity when addressing any memory or I/O 
structure whether 8, 1 6 or 32 bits wide. 

The 486 microprocessor includes bus control pins, 
BS16# and BS8#, which allow direct connection to 
16- and 8-bit memories and I/O devices. Cycles to 
32-, 16- and 8-bit may occur in any sequence, since 
the BS8# and BS16# signals are sampled during 
each bus cycle. 

32-blt wide memory and I/O spaces are organized 
as arrays of physical 4-byte words. Each memory or 
I/O 4-byte word has four individually addressable 
bytes at consecutive byte addresses (see Figure 
7.2). The lowest addressed byte is associated with 
data signals D0~D7; the highest-addressed byte 
with D24~D31. Physical 4-byte words begin at ad- 
dresses divisible by four. 


32-Bit Wide Organization 

FFFFFFFFH r — pppppppCH 


00000003H 


OOOOOOOOH 


BE3# BE2# BE1# BEO# 


240440-34 


16-Bit Wide Organization 


FFFFFFFFH 


FFFFFFFEH 


00000001 H 


OOOOOOOOH 


BHE# BLE# 


240440-35 


Figure 7.2. Physical Memory 
and i/0 Space Organization 
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1 6-bit memories are organized as arrays of physical 
2-byte words. Physical 2-byte words begin at ad- 
dresses divisible by two. The byte enables BEO#- 
BE3#, must be decoded to A1, BLE# and BHE# to 
address 16-bit memories (see Section 7.1.4). 

To address 8-bit memories, the two low order ad- 
dress bits AO and A1 , must be decoded from BEO# - 
BE3#. The same logic can be used for 8- and 16-bit 
memories since the decoding logic for BLE# and AO 
are the same (see Section 7.1.4). 

7.1.3 DYNAMIC DATA BUS SIZING 

Dynamic data bus sizing is a feature allowing proc- 
essor connection to 32-, 1 6- or 8-bit buses for mem- 
ory or I/O. A processor may connect to all three bus 
sizes. Transfers to or from 32-, 16- or 8-bit devices 
are supported by dynamically determining the bus 
width during each bus cycle. Address decoding cir- 
cuitry may assert BS16# for 16-bit devices, or 
BS8# for 8-bit devices during each bus cycle. BS8# 
and BS16# must be negated when addressing 32- 
bit devices. An 8-blt bus width is selected if both 
BS16# and BS8# are asserted. 

BS16# and BS8# force the 486 microprocessor to 
run additional bus cycles to complete requests larg- 
er than 1 6- or 8 bits. A 32-blt transfer will be convert- 
ed into two 16-bit transfers (or 3 transfers If the data 
is misaligned) when BS16# Is asserted. Asserting 
BS8# will convert a 32-bit transfer into four 8-blt 
transfers. 

Extra cycles forced by BS16# or BS8# should be 
viewed as independent bus cycles. BS16# or BS8# 
must be driven active during each of the extra cycles 
unless the addressed device has the ability to 
change the number of bytes it can return between 
cycles. 


The 486 microprocessor will drive the byte enables 
appropriately during extra cycles forced by BS8# 
and BS16#. A2-A31 will not change if accesses are 
to a 32-bit aligned area. Table 7.3 shows the set of 
byte enables that will be generated on the next cycle 
for each of the valid possibilities of the byte enables 
on the current cycle. 

The dynamic bus sizing feature of the 486 micro- 
processor is significantly different than that of the 
386 microprocessor. Unlike the 386 microprocessor, 
the 486 microprocessor requires that data bytes be 
driven on the addressed data pins. The simplest ex- 
ample of this function is a 32-bit aligned, BS16# 
read. When the 486 microprocessor reads the two 
high order bytes, they must be driven on the data 
bus pins D16-D31. The 486 microprocessor ex- 
pects the two low order bytes on D0-D15. The 386 
microprocessor expects both the high and low order 
bytes on D0-D15. The 386 microprocessor always 
reads or writes data on the lower 1 6 bits of the data 
bus when BS16# Is asserted. ^ 

The external system must contain buffers to enable 
the 486 microprocessor to read and write data on 
the appropriate data bus pins. Table 7.4 shows the 
data bus lines where the 486 microprocessor ex- 
pects data to be returned for each valid combination 
of byte enables and bus sizing options. 

Valid data will only be driven onto data bus pins cor- 
responding to active byte enables during write cy- 
cles. Other pins In the data bus may be driven but 
they will not contain valid data. Unlike the 386 micro- 
processor, the 486 microprocessor will not duplicate 
write data onto parts of the data bus for which the 
corresponding byte enable is negated. 


Table 7.3. Next Byte Enable Values for BSn# Cycles 


BE3# 

Current 
BE2# BE1# 

BEO# 

BE3# 

Next with BS8# 
BE2# BE1# 

BEO# 

BE3# 

Next with BS16# 
BE2# BE1# 

BEO# 

1 

1 

1 

0 . 

n 

n 

n 

n 

n 

n 

n 

n 

1 

1 

0 

0 

1 

1 

0 

1 

n 

n 

n 

n 

1 

0 

0 

0 

1 

0 

0 

1 

1 

0 

1 

1 

0 

0 

0 

0 

0 

0 

0 

1 

0 

0 

1 

1 

1 

1 

0 

1 

n 

n 

n 

n 

n 

n 

n 

n 

1 

0 

0 

1 

1 

0 

1 

1 

1 

0 

1 

1 

0 

0 

0 

1 

0 

0 

1 

1 

0 

0 

1 

1 

1 

0 

1 

1 

n 

n 

n 

n 

n 

n 

n 

n 

0 

0 

1 

1 

0 

1 

1 

1 

n 

n 

n 

n 

0 

1 

1 

1 

n 

n 

ri 

n 

n 

n 

n 

n 


“n” means that another bus cycle will not be required to satisfy the request. 
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Table 7.4. Data Pins Read with Different Bus Sizes 


BE3# 

BE2# 

BE1# 

BEO# 

w/0BS8#/BS16# 

wBS8# 

WBS16# 

1 

1 

1 

0 

D7-D0 

D7-D0 

D7-D0 

1 

1 

0 

0 

D15-D0 

D7-D0 

D15-D0 

1 

0 

0 

0 

D23--D0 

D7-D0 

D15-D0 

0 

0 

0 

0 

D31-D0 

D7-D0 

D15-D0 

1 

1 

0 

1 

D15-D8 

D15-D8 

D15-D8 

1 

0 

0 

1 

D23-D8 

D15-D8 

D15-D8 

0 

0 

0 

1 

D31-D8 

D15-D8 

D15~D8 

1 

0 

1 

1 

D23-D16 

D23-D16 

D23-D16 

0 

0 

1 

1 

D31-D16 

D23-P16 

D31~D16 

0 

1 

1 

1 

D31-D24 

D31-D24 

D31-D24 


7.1.4 INTERFACING WITH 8-, 16- AND 32-BIT 
MEMORIES 

In 32-bit physical memories such as Figure 7.3, each 
4-byte word begins at a byte address that is a multi- 
ple of four. A2-A31 are used as a 4-byte word se- 
lect. BE0#-BE3# select individual bytes within the 
4-byte word. BS8# and BS16# are negated for ail 
bus cycles involving the 32-bit array. 



32, DATA BUS (D0-D31) 


486'*’^ 


32-BIT 

CPU 

ADDRESS BUS (BE0#-BE3#.A2-A31 ) ^ 

MEMORY 




i ^ i 

BS8# 

BS16# 


"HIGH" "HIGH’ 


240440-36 


Figure 7.3. i 486 TM Microprocessor 
with 32-Bit Memory 


16- and 8-blt memories require external byte swap- 
ping logic for routing data to the appropriate data 
lines and logic for generating BHE#, BLE# and A1. 
In systems where mixed memory widths are used, 
extra address decoding logic is necessary to assert 
BS16# or BS8#. 

Figure 7.4 shows the 486 microprocessor address 
bus interface to 32-, 16- and 8-blt memories. To ad- 
dress 16-bit memories the byte enables must be 
decoded to produce A1, BHE# and BLE# (AO). For 
8-blt wide memories the byte enables must be de- 
coded to produce AO and A1 . The same byte select 
logic can be used in 16- and 8-bit systems since 
BLE# is exactly the same as AO (see Table 7.5). 

BE0#-BE3# can be decoded as shown in Table 
7.5 to generate A1, BHE# and BLE#. The byte se- 
lect logic necessary to generate BHE# and BLE# is 
shown In Figure 7.5. 



240440-37 


Figure 7.4. Addressing 16- and 8-Bit Memories 
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Table 7.5. Generating A1, BHE# and BLE# for Addressing 16-Bit Devices 


i486TM CPU Signals 

8, 16-Bit Bus Signals 

Comments 

BE3# 

BE2# 

BE1# 

BEO# 

A1 

BHE# 

BLE# (AO) 

H* 

H* 

H* 


X 

X 

X 

X — no active bytes 

H 

H 

H 

L 

L 

H 

L 


H 

H 

L 

H 

L 

L 

H 


H 

H 

L 

L 

L 

L 

L 


H 

L 

H 

H 

H 

H 

L 


H* 

L* 

H* 


X 

X 

X 

X — not contiguous bytes 

H 

L 

L 

H 

L 

L 

H 


H 

L 

L 

L 

L 

L 

L 


L 

H 

H 

H 

H 

L 

H 


L* 

H* 

H* 

L* 

X 

X 

X 

X — not contiguous bytes 

L* 

H* 

L* 


X 

X 

X 

X — not contiguous bytes 

L* 

H* 

L* 

L* 

X 

X 

X 

X — not contiguous bytes 

L 

L 

H 

H 

H 

L 

L 


L* 

L* 

H* 


X 

X 

X 

X — not contiguous bytes 

L 

L 

L 

H 

L 

L 

H 


L 

L 

L 

L 

L 

L 

L 



BLE# asserted when D0-D7 of 16-bit bus is active. 
BHE# asserted when D8-D15 of 16-bit bus is active. 
A1 low for all even words; A1 high for all odd words. 


Key: 

X = don’t care 
H = high voltage level 
L = low voltage level 

* = a non-occurring pattern of Byte Enables; either none are asserted, 
or the pattern has Byte Enables asserted for non-contiguous bytes 



Figure 7.5. Logic to Generate A1, BHE# and BLE# for 16-Bit Busses 


Combinations of BE0#-BE3# which never occur 
are those in which two or three asserted byte en- 
ables are separated by one or more negated byte 
enables. These combinations are “don’t care’’ con- 
ditions in the decoder. A decoder can use the non- 
occurring BE0#~BE3# combinations to its best ad- 
vantage. 


Figure 7.6 shows a 486 microprocessor data bus in- 
terface to 16- and 8-bit wide memories. External 
byte swapping logic is needed on the data lines so 
that data is supplied to, and received from the 486 
microprocessor on the correct data pins (see Table 
7.4). 
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Figure 7.6. Data Bus Interface to 16- and 8-bit Memories 


7.1.5 DYNAMIC BUS SIZING DURING CACHE 

LINE FILLS 

and BS16# can be driven during cache line 
fills. The 486 microprocessor will generate enough 
8- or 16-bit cycles to fill the cache line. This can be 
up to 16 8-bit cycles. 

The external system should assume that all byte en- 
ables are active for the first cycle of a cache line fill. 
The 486 microprocessor will generate proper byte 
enables for subsequent cycles in the line fill. Table 
7.6 shows the appropriate AO (BLE#), A1 and 
BHE# for the various combinations of the 486 mi- 
croprocessor byte enables on both the first and sub- 
sequent cycles of the cache line fill. The marks 
all combinations of byte enables that will be generat- 
ed by the 486 microprocessor during a cache line fill. 


7.1.6 OPERAND ALIGNMENT 

Physical 4-byte words begin at addresses that are 
multiples of four. It is possible to transfer a logical 
operand that spans more than one physical 4-byte 
word of memory or I/O at the expense of extra cy- 
cles. Examples are 4-byte operands beginning at ad- 
dresses that are not evenly divisible by 4, or 2-byte 
words split between two physical 4-byte words. 
These are referred to as unaligned transfers. 

Operand alignment and data bus size dictate when 
multiple bus cycles are required. Table 7.7 describes 
the transfer cycles generated for all combinations of 
logical operand lengths, alignment, and data bus siz- 
ing. When multiple cycles are required to transfer a 
multi-byte logical operand, the highest-order bytes 
are transferred first. For example, when the proces- 
sor does a 4-byte unaligned read beginning at loca- 
tion x1 1 in the 4-byte aligned space, the three high 
order bytes are read in the first bus cycle. The low 
byte is read in a subsequent bus cycle. 


Table 7.6. Generating AO, A1 and BHE# from the i 486 TM Microprocessor Byte Enables 


BE3# 

BE2# 

BE1# 

BEO# 

First Cache Fill Cycle 

AO A1 BHE# 

Any Other Cycle 

AO A1 BHE# 

1 

1 

1 

0 

0 

0 

0 

0 

0 

1 

1 

1 

0 

0 

0 

0 

0 

0 

0 

0 

1 

0 

0 

0 

0 

0 

0 

0 

0 

0 

*0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

1 

1 

0 

1 

0 

0 

0 

1 

0 

0 

1 

0 

0 

1 

0 

0 

0 

1 

0 

0 

*0 

0 

0 

1 

0 

0 

0 

1 

0 

0 

1 

0 

. 1 

1 

0 

0 

0 

0 

1 

1 

*0 

0 

1 

1 

0 

0 

0 

0 

1 

0 

*0 

1 

1 

1 

0 

0 

0 

1 

1 

0 
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Table 7.7. Transfer Bus Cycles for Bytes, Words and Dwords 



Byte-Length of Logical Operand 


1 

2 

4 

Physical Byte Address in 
Memory (Low Order Bits) 

XX 

00 

01 

10 

11 

00 

01 

10 

11 

Transfer Cycles 
over 32-Bit Bus 

b 

w 

w 

w 

hb 

Ib 

d 

hb 

13 

hw 

Iw 

h3 

Ib 

Transfer Cycles over 



lb 



hb 

Iw 

hb 

hw 

mw 

16-Bit Data Bus 
= BS16# Asserted 

b 

w 

hb 


w 

Ib 

hw 

ib 

Iw , 

hb 







mw 


Ib 

Transfer Cycles over 







Ib 

hb 

mhb 

mib 

8-Bit Data Bus 
= BS8# Asserted 

b 

lb 

lb 


ib 

hb 

mib 


hb 

mhb 


hb 

hb 


hb 

Ib 

mhb 

mIb 

Ib 

hb 






I 


hb 

mhb 

mib 

Ib 


KEY: 

b = byte transfer 
w = 2-byte transfer 
3 = 3-byte transfer 
d = 4-byte transfer 


h = high-order portion 
I = low-order portion 
m = mid-order portion 


4-Byte Operand 


lb 

mIb 

mhb 

hb 


T 

byte with 

lowest 

address 


T 

byte with 
highest 
address 


The function of unaligned transfers with dynamic 
bus sizing is not obvious. When the external systems 
asserts BS16# or BS8# forcing extra cycles, low- 
order bytes or words are transferred first (opposite 
to the example above). When the 486 microproces- 
sor requests a 4-byte read and the external system 
asserts BS16#, the lower 2 bytes are read first fol- 
lowed by the upper 2 bytes. 

In the unaligned transfer described above, the proc- 
essor requested three bytes on the first cycle. If the 
external system asserted BS16# during this 3-byte 
transfer, the lower word is transferred first followed 
by the upper byte. In the final cycle the lower byte of 
the 4-byte operand Is transferred as in the 32-bit ex- 
ample above. 


This section begins with basic non-cacheable non- 
burst single cycle transfers. It moves on to multiple 
cycle transfers and introduces the burst mode. 
Cacheability is Introduced in Section 7.2.3. The re- 
maining sections describe locked, pseudo-locked, 
invalidate, bus hold and interrupt cycles. 

Bus cycles and data cycles are discussed in this 
section. A bus cycle is at least two clocks long and 
begins with ADS# active In the first clock and ready 
active in the last clock. Data is transferred to or from 
the 486 microprocessor during a data cycle. A bus 
cycle contains one or more data cycles. 

Refer to Section 7.2.13 for a description of the bus 
states shown in the timing diagrams. 


7.2 Bus Functional Description 

The 486 microprocessor supports a wide variety of 
bus transfers to meet the needs of high performance 
systems. Bus transfers can be single cycle or multi- 
ple cycle, burst or non-burst, cacheable or non- 
cacheable, 8-, 16- or 32-blt, and pseudo-locked. To 
support multiprocessing systems there are cache in- 
validation cycles and locked cycles. 


7.2.1 NON-CACHEABLE NON-BURST SINGLE 
CYCLE 

7.2.1. 1 No Wait States 

The fastest non-burst bus cycle that the 486 micro- 
processor supports is two clocks long. These cycles 
are called 2-2 cycles because reads and writes take 
two cycles each. The first 2 refers to reads and the 
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second to writes. For example, if a wait state needs 
to be added to a write, the cycle would be called 2-3. 

Basic two clock read and write cycles are shown in 
Figure 7.7. The 486 microprocessor initiates a cycle 
by asserting the address status signal (ADS#) at the 
rising edge of the first clock. The ADS# output Indi- 
cates that a valid bus cycle definition and address Is 
available on the cycle definition lines and address 
bus. 

The non-burst ready input (RDY#) is returned by the 
external system in the second clock. RDY# indi- 
cates that the external system has presented valid 
data on the data pins in response to a read or the 
external system has accepted data in response to a 
write. 

The 486 microprocessor samples RDY# at the end 
of the second clock. The cycle is complete if RDY# 
is active (LOW) when sampled. Note that RDY# Is 
ignored at the end of the first clock of the bus cycle. 

The burst last signal (BLAST#) is asserted (LOW) 
by the 486 microprocessor during the second clock 
of the first cycle In all bus transfers illustrated in Fig- 
ure 7.7. This indicates that each transfer is complete 
after a single cycle. The 486 microprocessor asserts 
BLAST # In the last cycle of a bus transfer. 

The timing of the parity check output (PCHK#) Is 
shown in Figure 7.7. The 486 microprocessor drives 
the PCHK# output one clock after ready terminates 
a read cycle. PCHK# Indicates the parity status for 
the data sampled at the end of the previous clock. 
The PCHK# signal can be used by the external sys- 
tem. The 486 microprocessor does nothing in re- 
sponse to the PCHK# output. 

7.2. 1.2 Inserting Wait States 

The external system can insert wait states into the 
basic 2-2 cycle by driving RDY# inactive at the end 
of the second clock. RDY# must be driven inactive 
to insert a wait state. Figure 7.8 illustrates a simple 
non-burst, non-cacheable signal with one wait state 
added. Any number of wait states can be added to a 
486 microprocessor bus cycle by maintaining RDY# 
inactive. 

The burst ready input (BRDY#) must be driven inac- 
tive on all clock edges where RDY# is driven inac- 
tive for proper operation of these simple non-burst 
cycles. 


7.2.2 MULTIPLE AND BURST CYCLE BUS 
TRANSFERS 

Multiple cycle bus transfers can be caused by inter- 
nal requests from the 486 microprocessor or by the 
external memory system. An internal request for a 
64-blt floating point load or a 1 28-bit pre-fetch must 
take more than one cycle. Internal requests for un- 
aligned data may also require multiple bus cycles. A 
cache line fill requires multiple cycles to complete. 
The external system can cause a multiple cycle 
transfer when it can only supply 8 or 16 bits per 
cycle. 

Only multiple cycle transfers caused by internal re- 
quests are considered in this section. Cacheable cy- 
cles and 8- and 1 6-blt transfers are covered in Sec- 
tions 7.2.3 and 7.2.5. 


7.2.2. 1 Burst Cycles 

The 486 microprocessor can accept burst cycles for 
any bus requests that require more than a single 
data cycle. During burst cycles, a new data item Is 
strobed into the 486 microprocessor every clock 
rather than every other clock as in non-burst cycles. 
The fastest burst cycle requires 2 clocks for the first 
data Item with subsequent data items returned every 
clock. 

The 486 microprocessor is capable of bursting a 
maximum of 32 bits during a write. Burst writes can 
only occur if BS8# or BS16# is asserted. For exam- 
ple, the 486 microprocessor can burst write four 8- 
bit operands or two 1 6-bit operands in a single burst 
cycle. But the 486 microprocessor cannot burst mul- 
tiple 32-bit writes in a single burst cycle. 

Burst cycles begin with the 486 microprocessor driv- 
ing out an address and asserting ADS# in the same 
manner as non-burst cycles. The 486 microproces- 
sor Indicates that it Is willing to perform a burst cycle 
by holding the burst last signal (BLAST #) inactive in 
the second clock of the cycle. The external system 
indicates its willingness to do a burst cycle by return- 
ing the burst ready signal (BRDY#) active. 

The addresses of the data Items in a burst cycle will 
all fall within the same 1 6-byte aligned area (corre- 
sponding to an internal 486 microprocessor cache 
line). A 16-byte aligned area begins at location 
XXXXXXXO and ends at location XXXXXXXF. During 
a burst cycle, only BEO-3#, A2, and A3 may 
change. A4-A31, M/IO#, D/C#, and W/R# will re- 
main stable throughout a burst. Given the first ad- 
dress in a burst, external hardware can easily calcu- 
late the address of subsequent transfers in advance. 
An external memory system can be designed to 
quickly fill the 486 microprocessor internal cache 
lines. 
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Burst cycles are not limited to cache line fills. Any 
multiple cycle read request by the 486 microproces- 
sor can be converted into a burst cycle. The 486 
microprocessor will only burst the number of bytes 
needed to complete a transfer. For example, eight 
bytes will be bursted in for a 64-bit floating point 
non-cacheable read. 

The external system converts a multiple cycle re- 
quest into a burst cycle by returning BRDY# active 
rather than RDY# (non-burst ready) in the first cycle 
of a transfer. For cycles that cannot be bursted such 
as interrupt acknowledge and halt, BRDY# has the 
same effect as RDY#. BRDY# is ignored if both 
BRDY# and RDY# are returned in the same clock. 
Memory areas and peripheral devices that cannot 
perform bursting must terminate cycles with RDY#. 

7.2.2.2 Terminating Multiple and 
Burst Cycle Transfers 

The 486 microprocessor drives BLAST # inactive for 
all but the last cycle In a multiple cycle transfer. 
BLAST # is driven inactive in the first cycle to inform 
the external system that the transfer could take ad- 
ditional cycles. BLAST # is driven active in the last 
cycle of the transfer indicating that the next time 
BRDY# or RDY# is returned the transfer is com- 
plete. 

BLAST # Is not valid in the first clock of a bus cycle. 
It should be sampled only in the second and subse- 
quent clocks when RDY# or BRDY# is returned. 

The number of cycles in a transfer is a function of 
several factors including the number of bytes the mi- 
croprocessor needs to complete an internal request 
(1, 2, 4, 8, or 16), the state of the bus size inputs 
(BS8# and BS16#)^, the state of the cache enable 
input (KEN#) and alignment of the data to be trans- 
ferred. 

When the 486 microprocessor Initiates a request It 
knows how many bytes will be transferred and if the 
data Is aligned. The external system must tell the 
microprocessor whether the data Is cacheable (If the 
transfer is a read) and the width of the bus by return- 
ing the state of the KEN#, BS8# and BS16# inputs 
one clock before RDY# or BRDY# is returned. The 
486 microprocessor determines how many cycles a 
transfer will take based on its internal information 
and inputs from the external system. 


BLAST # is not valid In the first clock of a bus cycle 
because the 486 microprocessor cannot determine 
the number of cycles a transfer will take until the 
external system returns KEN#, BS8# and BS16#. 
BLAST # should only be sampled in the second and 
subsequent clocks of a cycle when the external sys- 
tem returns RDY# or BRDY#. 

7.2.2.3 Non-Cacheable, Non-Burst, Multiple 
Cycle Transfers 

Figure 7.9 illustrates a 2 cycle non-burst, non-cache- 
able multiple cycle read. This transfer is simply a 
sequence of two single cycle transfers. The 486 mi- 
croprocessor Indicates to the external system that 
this is a multiple cycle transfer by driving BLAST # 
inactive during the second clock of the first cycle. 
The external system returns RDY# active indicating 
that it will not burst the data. The external system 
also indicates that the data is not cacheable by re- 
turning KEN# Inactive one clock before it returns 
RDY# active. When the 486 microprocessor sam- 
ples RDY# active it Ignores BRDY#. 

Each cycle in the transfer begins when ADS# is 
driven active and the cycle is complete when the 
external system returns RDY# active. 

The 486 microprocessor indicates the last cycle of 
the transfer by driving BLAST# active. The next 
RDY# returned by the external system terminates 
the transfer. 

7.2.2.4 Non-Cacheabie Burst Cycles 

The external system converts a multiple cycle re- 
quest into a burst cycle by returning BRDY# active 
rather than RDY# in the first cycle of the transfer. 
This Is illustrated in Figure 7.10. 

There are several features to note in the burst read. 
ADS# Is only driven active during the first cycle of 
the transfer. RDY# must be driven inactive when 
BRDY # is returned active. 

BLAST # behaves exactly as it does in the non-burst 
read. BLAST # Is driven inactive in the second clock 
of the first cycle of the transfer indicating more cy- 
cles to follow. In the last cycle, BLAST # Is driven 
active telling the external memory system to end the 
burst after returning the next BRDY#. 
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7.2.3 CACHEABLE CYCLES 

Any memory read can become a cache fill operation. 
The external memory system can allow a read re- 
quest to fill a cache line by returning KEN# active 
one clock before RDY# or BRDY# during the first 
cycle of the transfer on the external bus. Once 
KEN# Is asserted and the remaining three require- 
ments described below are met, the 486 microproc- 
essor will fetch an entire cache line regardless of the 
state of KEN#. KEN# must be returned active In 
the last cycle of the transfer for the data to be writ- 
ten into the Internal cache. The 486 microprocessor 
will only convert memory reads or prefetches into a 
cache fill. 

KEN# is ignored during write or I/O cycles. Memory 
writes will only be stored in the on-chip cache if 
there Is a cache hit. I/O space is never cached in 
the internal cache. 

To transform a read or a prefetch into a cache line 
fill the following conditions must be met: 

1. The KEN# pin must be asserted one clock pri- 
or to RDY# or BRDY# being returned for the 
first data cycle. 

2. The cycle must be of the type that can be inter- 
nally cached. (Locked reads, I/O reads, and in- 
terrupt acknowledge cycles are never cached). 

3. The page table entry must have the page cache 
disable bit (PCD) set to 0. To cache a page 
table entry, the page directory must have 
PCD = 0. To cache reads or prefetches when 
paging is disabled, or to cache the page direc- 
tory entry, control register 3 (CR3) must have 
PCD = 0. 

4. The cache disable (CD) bit in control register 0 
(CRO) must be clear. 

External hardware can determine when the 486 mi- 
croprocessor has transformed a read or prefetch 
Into a cache fill by examining the KEN#, M/IO#, 
D/C#, W/R#, LOCK#, and PCD pins. These pins 
convey to the system the outcome of conditions 1 -3 
In the above list. In addition, the 486 drives PCD high 
whenever the CD bit in CRO is set, so that external 
hardware can evaluate condition 4. 

Cacheable cycles can be burst or non-burst. 


7.2.3. 1 Byte Enables during a Cache Line Fili 

For the first cycle in the line fill, the state of the byte 
enables should be Ignored. In a non-cacheable 
memory read, the byte enables indicate the bytes 
actually required by the memory or code fetch. 

The 486 microprocessor expects to receive valid 
data on its entire bus (32 bits) in the first cycle of a 
cache line fill. Data should be returned with the as- 
sumption that all the byte enable pins are driven ac- 
tive. However If BS8# Is asserted only one byte 
need be returned on data lines D0-D7. Similarly if 
BS16# is asserted two bytes should be returned on 
D0-D15. 

The 486 microprocessor will generate the addresses 
and byte enables for all subsequent cycles in the 
line fill. The order In which data is read during a line 
fill depends on the address of the first item read. 
Byte ordering Is discussed in Section 7.2.4. 

7.2.3.2 Non-Burst Cacheable Cycles 

Figure 7.1 1 shows a non-burst cacheable cycle. The 
cycle becomes a cache fill when the 486 microproc- 
essor samples KEN# active at the end of the first 
clock. The 486 microprocessor drives BLAST # in- 
active in the second clock in response to KEN#. 
BLAST # is driven Inactive because a cache fill re- 
quires 3 additional cycles to complete. BLAST # re- 
mains inactive until the last transfer In the cache line 
fill. 

Note that this cycle would be a single bus cycle if 
KEN # was not sampled active at the end of the first 
clock. The subsequent three reads would not have 
happened since a cache fill was not requested. 

The BLAST # output Is invalid in the first clock of a 
cycle. BLAST # may be active during the first clock 
due to earlier inputs. Ignore BLAST # until the sec- 
ond clock. 

During the first cycle of the cache line fill the exter- 
nal system should treat the byte enables as If they 
are all active. In subsequent cycles in the burst, the 
486 microprocessor drives the address lines and 
byte enables (see Section 7.2.4.2 for Burst and 
Cache Line Fill Order). 
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Figure 7.11. Non-Burst, Cacheable Cycles 


7.2.3.3 Burst Cacheable Cycles The external system informs the 486 microproces- 

sor that it will burst the line in by driving BRDY# 

Figure 7.12 illustrates a burst mode cache fill. As in active at the end of the first cycle in the transfer. 
Figure 7.11, the transfer becomes a cache line fill 

when the external system returns KEN# active at Note that during a burst cycle ADS# is only driven 
the end of the first clock in the cycle. with the first address. 
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7.2.3.4 Effect of Changing KEN# during a 
Cache Line Fill 

KEN# can change multiple times as long as It ar- 
rives at its final value in the clock before RDY# or 
BRDY# Is returned. This is illustrated in Figure 7.13. 
Note that the timing of BLAST# follows that of 
KEN# by one clock. In the first clock KEN# Is driv- 
en active converting the cycle Into a cache fill and in 
the second clock BLAST# is driven inactive in re- 
sponse. In the second clock, KEN# is driven Inac- 


tive converting the cache fill back to a normal cycle 
and BLAST # responds by going active in the next 
clock. Finally In the third clock KEN# goes active 
again converting the cycle to a cache fill and 
BLAST # go inactive In the next clock. RDY # is re- 
turned active in the fourth clock starting the cache 
fill. 

KEN # can also change multiple times before a burst 
cycle as long as it arrives at its final value one clock 
before ready is returned active. 
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ADS# 

A2-A31 

M/IO# 

D/C# 

W/R# 

BEO-3# 

RDY# 


KEN# 


BLAST# 


DATA 



Figure 7.13. Effect of Changing KEN# 


7.2.4 BURST MODE DETAiLS 

7.2.4. 1 Adding Wait States to Burst Cycles 

Burst cycles need not return data on every clock. 
The 486 nnicroprocessor will only strobe data into 
the chip when either RDY# or BRDY# are active. 


Driving BRDY# and RDY# inactive adds a wait 
state to the transfer. A burst cycle where two clocks 
are required for every burst item is shown in Figure 
7.14. 
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Figure 7.14. Slow Burst Cycle 


7.2.4.2 Burst and Cache Line Fill Order 

The burst order used by the 486 microprocessor is 
shown in Table 7.7. Non-burst cache line fills also 
follow the order in Table 7.7. 

The microprocessor presents each request for data 
in an order determined by the first address in the 
transfer. For example, if the first address was 104 
the next three addresses in the burst will be 100, 
IOC and 108. 


Table 7.7. Burst Order 


First 

Addr. 

Second 

Addr. 

Third 

Addr. 

Fourth 

Addr. 

0 

4 

8 

C 

4 

0 

C 

8 

8 

C 

0 

4 

C 

8 

4 

0 


An example of burst address sequencing is shown in 
Figure 7.15. 
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Figure 7.15. Burst Cycle Showing Order of Addresses 


The sequences shown in Table 7.7 accommodate 
systems with 64-bit busses as well as systems with 
32-bit data busses. The sequence applies to all 
bursts, regardless of whether the purpose of the 
burst is to fill a cache line, do a 64-bit read, or do a 
pre-fetch. If either BS8# or BS16# is returned ac- 
tive, the 486 microprocessor completes the transfer 
of the current 32-bit word before progressing to the 
next 32-bit word. For example, a BS16# burst to 
address 4 has the following order: 4-6-0-2-C-E-8-A. 

7.2.4.3 Interrupted Burst Cycles 

Some memory systems may not be able to respond 
with burst cycles in the order defined in Table 7.7. 
To support these systems the 486 microprocessor 
allows a burst cycle to be interrupted at any time. 


The 486 microprocessor will automatically generate 
another normal bus cycle after being interrupted to 
complete the data transfer. This is called an inter- 
rupted burst cycle. The external system can respond 
to an Interrupted burst cycle with another burst cy- 
cle. 

The external system can interrupt a burst cycle by 
returning RDY# instead of BRDY#. RDY# can be 
returned after any number of data cycles terminated 
with BRDY#. 

An example of an Interrupted burst cycle is shown In 
Figure 7.16. The 486 microprocessor Immediately 
drives ADS# active to initiate a new bus cycle after 
RDY# is returned active. BLAST# is driven inactive 
one clock after ADS# begins the second bus cycle 
indicating that the transfer is not complete. 
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Figure 7.16. Interrupted Burst Cycle 


KEN# need not be returned active in the first data 
cycle of the second part of the transfer in Figure 
7.16. The cycle had been converted to a cache fill in 
the first part of the transfer and the 486 microproc- 
essor expects the cache fill to be completed. Note 
that the first half and second half of the transfer in 
Figure 7.16 are each two cycle burst transfers. 

The order In which the 486 microprocessor requests 
operands during an interrupted burst transfer is de- 
termined by Table 7.7. Mixing RDY# and BRDY# 
does not change the order In which operand ad- 
dresses are requested by the 486 microprocessor. 


An example of the order In which the 486 microproc- 
essor requests operands during a cycle In which the 
external system mixes RDY# and BRDY# is shown 
in Figure 7.17. The 486 microprocessor initially re- 
quests a transfer beginning at location 1 04. The 
transfer becomes a cache line fill when the external 
system returns KEN# active. The first cycle of the 
cache fill transfers the contents of location 104 and 
Is terminated with RDY#. The 486 microprocessor 
drives out a new request (by asserting ADS#) to 
address 100. If the external system terminates the 
second cycle with BRDY#, the 486 microprocessor 
will next request/expect address IOC. The correct 
order Is determined by the first cycle In the transfer, 
which may not be the first cycle in the burst if the 
system mixes RDY# with BRDY#. 
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Figure 7.17. Interrupted Burst Cycle with Unobvious Order of Addresses 


7.2.5 8- AND 16-BIT CYCLES 

The 486 microprocessor supports both 1 6- and 8-bit 
external busses through the BS16# and BS8# in- 
puts. BS16# and BS8# allow the external system to 
specify, on a cycle by cycle basis, whether the ad- 
dressed component can supply 8, 16 or 32 bits. 
BS16# and BS8# can be used in burst cycles as 
well as non-burst cycles. If both BS16# and BS8# 
are returned active for any bus cycle, the 486 micro- 
processor will respond as If only BS8# were active. 

The timing of BS16# and BS8# is the same as that 
of KEN#. BS16# and BS8# must be driven active 
before the first RDY# or BRDY# is driven active. 


Driving the BS16# and BS8# active can force the 
486 microprocessor to run additional cycles to com- 
plete what would have been only a single 32-bit cy- 
cle. BS8# and BS16# may change the state of 
BLAST # when they force subsequent cycles from 
the transfer. 

Figure 7.18 shows an example In which BS8# 
forces the 486 microprocessor to run two extra cy- 
cles to complete a transfer. The 486 microprocessor 
Issues a request for 24 bits of Information. The ex- 
ternal system drives BS8# active indicating that 
only eight bits of data can be supplied per cycle. The 
486 microprocessor issues two extra cycles to com- 
plete the transfer. 
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Figure 7.18. 8-Bit Bus Size Cycle 


Extra cycles forced by the BS16# and BS8# should BS8# and BS16# operate during burst cycles in ex- 

be viewed as independent bus cycles. BS16# and actly the same manner as non-burst cycles. For ex- 

BS8# should be driven active for each additional ample, a single non-cacheable read could be trans- 
cycle unless the addressed device has the ability to ferred by the 486 microprocessor as four 8-bit burst 

change the number of bytes it can return between data cycles. Similarly, a single 32-bit write could be 

cycles. The 486 microprocessor will drive BLAST # written as four 8-bit burst data cycles. An example of 

Inactive until the last cycle before the transfer Is a burst write is shown in Figure 7.19. Burst writes 

complete. can only occur if BS8# or BS16# Is asserted. 

Refer to Section 7.1.3 for the sequencing of ad- 
dresses while BS8# or BS16# are active. 
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7.2.6 LOCKED CYCLES 

Locked cycles are generated in software for any in- 
struction that performs a read-modify-write opera- 
tion. During a read-modify-write operation the proc- 
essor can read and modify a variable In external 
memory and be assured that the variable Is not ac- 
cessed between the read and write. 

Locked cycles are automatically generated during 
certain bus transfers. The xchg (exchange) instruc- 
tion generates a locked cycle when one of its oper- 
ands is memory based. Locked cycles are generat- 
ed when a segment or page table entry is updated 


and during Interrupt acknowledge cycles. Locked cy- 
cles are also generated when the LOCK instruction 
prefix Is used with selected Instructions. 

Locked cycles are Implemented in hardware with the 
LOCK# pin. When LOCK# Is active, the processor 
is performing a read-modify-write operation and the 
external bus should not be relinquished until the cy- 
cle Is complete. Multiple reads or writes can be 
locked. A locked cycle is shown in Figure 7.20. 
LOCK# goes active with the address and bus defini- 
tion pins at the beginning of the first read cycle and 
remains active until RDY# Is returned for the last 
write cycle. 
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Figure 7.20. Locked Bus Cycle 


When LOCK# is active, the 486 microprocessor will 
recognize address hold and backoff but will not rec- 
ognize bus hold. It Is left to the external system to 
properly arbitrate a central bus when the 486 micro- 
processor generates LOCK#. 

7.2.7 PSEUDO-LOCKED CYCLES 

Pseudo-locked cycles assure that no other master 
will be given control of the bus during operand trans- 
fers which take more than one bus cycle. Examples 
include 64-bit floating point read and writes, 64-bit 
descriptor loads and cache line fills. 

Pseudo-locked transfers are indicated by the 
PLOCK# pin. The memory operands must be 
aligned for correct operation of a pseudo-locked cy- 
cle. 


PLOCK# need not be examined during burst reads. 
A 64-bit aligned operand can be retrieved in one 
burst (note: this is only valid In systems that do not 
interrupt bursts). 

The system must examine PLOCK# during 64-blt 
writes since the 486 microprocessor cannot burst 
write more than 32 bits. A 64-blt write will be driven 
out as two non-burst bus cycles. BLAST # is assert- 
ed during both writes since a burst is not possible. 
PLOCK# is asserted during the first write to indicate 
that another write follows. This behavior is shown in 
Figure 7.21. 

The first cycle of a 64-blt floating point write is the 
only case in which both PLOCK# and BLAST# are 
asserted. Normally PLOCK# and BLAST# are the 
inverse of each other. 
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Figure 7.21. Pseudo Lock Timing 


PLOCK# can change several times during a cycle 
settling to its final value in the clock ready is re- 
turned. 


7.2.8 INVALIDATE CYCLES 

Invalidate cycles are needed to keep the 486 micro- 
processor’s internal cache contents consistent with 
external memory. The 486 microprocessor contains 
a mechanism for listening to writes by other devices 
to external memory. When the processor finds a 
write to a Section of external memory contained in 
its internal cache, the processor’s Internal copy is 
invalidated. 

Invalidations use two pins, address hold request 
(AHOLD) and valid external address (EADS#). 
There are two steps in an invalidation cycle. First, 
the external system asserts the AHOLD input forcing 
the 486 microprocessor to immediately relinquish its 
address bus. Next, the external system asserts 
EADS# Indicating that a valid address is on the 486 
microprocessor’s address bus. The microprocessor 
reads the address over its address lines. If the mi- 
croprocessor finds this address in Its internal cache, 
the cache entry is invalidated. Note that the 486 mi- 
croprocessor’s address bus is input/output unlike 
the 386 microprocessor’s bus, which is output only. 


The 486 microprocessor immediately relinquishes Its 
address bus in the next clock upon assertion of 
AHOLD. For example, the bus could be 3 wait states 
Into a read cycle. If AHOLD is activated, the 486 
microprocessor will immediately float its address bus 
before ready Is returned terminating the bus cycle. 

When AHOLD is asserted only the address bus is 
floated, the data bus can remain active. Data can be 
returned for a previously specified bus cycle during 
address hold (see Figures 7.22, 7.23). 

EADS# is normally asserted when an external mas- 
ter drives an address onto the bus. AHOLD need not 
be driven for EADS# to generate an internal invali- 
date. If EADS# alone Is asserted while the 486 mi- 
croprocessor is driving the address bus. It is possible 
that the invalidation address will come from the 486 
microprocessor itself. 

Running an invalidate cycle prevents the 486 micro- 
processor cache from satisfying other internal re- 
quests, so invalidations should be run only when 
necessary. The fastest possible Invalidate cycle is 
shown in Figure 7.22, while a more realistic invalida- 
tion cycle is shown in 7.23. Both of the examples 
take one clock of cache access from the rest of the 
486 microprocessor. 
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7.2.8. 1 Rate of Invalidate Cycles 

The 486 microprocessor can accept one invalidate 
per clock except in the last clock of a line fill. One 
invalidate per clock is possible as long as EADS# Is 
negated in ONE or BOTH of the following cases: 

1. In the clock RDY# or BRDY# is returned for 
the last time. 

2. In the clock following RDY# or BRDY# being 
returned for the last time. 

This definition allows two system designs. Simple 
designs can restrict invalidates to one every other 
clock. The simple design need not track bus activity. 
Alternatively, systems can request one invalidate 
per clock provided that the bus is monitored. 


7.2.8.2 Running Invalidate Cycles Concurrently 
with Line Fills 

Precautions are necessary to avoid caching stale 
data in the 486 microprocessor’s cache In a system 
with a second level cache. An exartiple of a system 
with a second level cache is shown in Figure 7.24. 
An external device can be writing to main memory 
over the system bus while the 486 microprocessor is 
retrieving data from the second level cache. The 486 
microprocessor will need to invalidate a line in its 
internal cache if the external device is writing to a 
main memory address also contained in the 486 mi- 
croprocessor’s cache. 
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Figure 7.24. System with Second Level Cache 

A potential problem exists If the external device is 
writing to an address in external memory, and at the 
same time the 486 microprocessor is reading data 
from the same address in the second level cache. 
The system must force an invalidation cycle to invali- 
date the data that the 486 microprocessor has re- 
quested during the line fill. 


If the system asserts EADS# before the first data In 
the line fill is returned to the 486 microprocessor, the 
system must return data consistent with the new 
data in the external memory upon resumption of the 
line fill after the invalidation cycle. This is illustrated 
by the asserted EADS# signal labeled 1 in Figure 
7.25. 
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NOTES: 

1 . Data returned must be consistent if its address equals the invalidation address in this clock 

2. Data returned will not be cached if its address equals the invalidation address in this clock 


Figure 7.25. Cache Invalidation Cycle Concurrent with Line Fill 


If the system asserts EADS# at the same time or 
after the first data in the line fill is returned (in the 
same clock that the first RDY# or BRDY# is re- 
turned or any subsequent clock in the line fill) the 
data will be read into the 486 microprocessors input 
buffers but it will not be stored in the on-chip cache. 
This is illustrated by asserted EADS# signal labeled 
2 in Figure 7.25. The stale data will be used to satis- 
fy the request that initiated the cache fill cycle. 


or sequence of locked cycles is complete. An exam- 
ple of a HOLD/HLDA transaction is shown in Figure 
7.26. Unlike the 386 microprocessor, the 486 micro- 
processor can respond to HOLD by floating its bus 
and asserting HLDA while RESET is asserted. 

The pins floated during bus hold are: BE0#-BE3#, 
PCD, PWT, W/R#, D/C#, M/IO#, LOCK#, 
PLOCK#, ADS#, BLAST#, D0-D31. A2-A31, 
DP0-DP3. 


7.2.9 BUS HOLD 

The 486 microprocessor provides a bus hold, hold 
acknowledge protocol using the bus hold request 
(HOLD) and bus hold acknowledge (HLDA) pins. As- 
serting the HOLD Input Indicates that another bus 
master desires control of the 486 microprocessor’s 
bus. The processor will respond by floating its bus 
and driving HLDA active when the current bus cycle. 


7.2.10 INTERRUPT ACKNOWLEDGE 

The 486 microprocessor generates Interrupt ac- 
knowledge cycles in response to maskable interrupt 
requests generated on the interrupt request input 
(INTR) pin. Interrupt acknowledge cycles have a 
unique cycle type generated on the cycle type pins. 
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Figure 7.26. HOLD/HLDA Cycles 


An example interrupt acknowledge transaction is The state of A2 distinguishes the first and second 
shown in Figure 7.27. Interrupt acknowledge cycles interrupt acknowledge cycles. The byte address 
are generated in locked pairs. Data returned during driven during the first interrupt acknowledge cycle Is 

the first cycle is ignored. The interrupt vector is re- 4 (A31-A3 low, A2 high, BE3#-BE1# high, and 

turned during the second cycle on the lower 8 bits of BED# low). The address driven during the second 

the data bus. The 486 microprocessor has 256 pos- interrupt acknowledge cycle is 0 (A31 -A2 low, 

sible Interrupt vectors. BE3#-BE1 # high, BEO# low). 



Figure 7.27. Interrupt Acknowledge Cycles 
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Each of the interrupt acknowledge cycles are termi- 
nated when the external system returns RDY# or 
BRDY#. Walt states can be added by withholding 
RDY# or BRDY#. The 486 microprocessor auto- 
matically generates four idle clocks between the first 
and second cycles to allow for 8259A recovery time. 

7.2.11 SPECIAL BUS CYCLES 

The 486 microprocessor provides four special bus 
cycles to indicate that certain instructions have been 
executed, or certain conditions have occurred inter- 
nally. The special bus cycles in Table 7.8 are defined 
when the bus cycle definition pins are In the follow- 
ing state: M/IO# = 0, D/C# =0 and W/R# = 1. 

Two of the special cycles indicate halt or shutdown. 
Another special cycle Is generated when the 486 mi- 
croprocessor executes an INVD (Invalidate data 
cache) instruction and could be used to flush an ex- 
ternal cache. The Write Back cycle is generated 
when the 486 microprocessor executes the 
WBINVD (write-back invalidate data cache) instruc- 
tion and could be used to synchronize an external 
write-back cache. 

The external hardware must acknowledge these 
special bus cycles by returning RDY# or BRDY#. 


Table 7.8. Special Bus Cycle Encoding 


BE3# 

BE2# 

BE1# 

BEO# 

Special 
Bus Cycle 

1 

1 

1 

0 

Shutdown 

1 

1 

0 

1 

Flush 

1 

0 

1 

1 

Halt 

0 

1 

1 

1 

Write Back 


7.2.12 BUS CYCLE RESTART 

In a multi-master system another bus master may 
require the use of the bus to enable the 486 micro- 
processor to complete Its current bus request. In this 
situation the 486 microprocessor will need to restart 
its bus cycle after the other bus master has complet- 
ed its bus transaction. 

A bus cycle may be restarted if the external system 
asserts the backoff (BOFF#) input. The 486 micro- 
processor samples the BOFF# pin every clock. The 
486 microprocessor will Immediately (in the next 
clock) float its address, data and status pins when 
BOFF# Is asserted (see Figure 7.28). Any bus cycle 
in progress when BOFF # Is asserted is aborted and 
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Figure 7.28. Restarted Read Cycle 
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Figure 7.29. Restarted Write Cycle 


any data returned to the processor is ignored. The 
same pins are floated in response to BOFF # as are 
floated in response to HOLD. HLDA is not generated 
in response to BOFF#. BOFF# has higher priority 
than RDY# or BRDY#. If either RDY# or BRDY# 
are returned in the same clock as BOFF#, BOFF# 
takes effect. 

The device asserting BOFF# is free to run any cy- 
cles It wants while the 486 microprocessor bus is in 
its high Impedance state. If backoff is requested af- 
ter the 486 microprocessor has started a cycle, the 
new master should wait for memory to return RDY# 
or BRDY# before assuming control of the bus. Wait- 
ing for ready provides a handshake to insure that the 
memory system is ready to accept a new cycle. If 
the bus is Idle when BOFF# is asserted, the new 
master can start its cycle two clocks after Issuing 
BOFF#. 

The external memory can view BOFF# in the same 
manner as BLAST#. Asserting BOFF# tells the ex- 
ternal memory system that the current cycle is the 
last cycle in a transfer. 

The bus remains in the high impedance state until 
BOFF# is negated. Upon negation, the 486 micro- 
processor restarts Its bus cycle by driving out the 
address and status and asserting ADS#. The bus 
cycle then continues as usual. 

Asserting BOFF# during a burst, BS8# or BS16# 
cycle will force the 486 microprocessor to ignore 


data returned for that cycle only. Data from previous 
cycles will still be valid. For example, if BOFF# is 
asserted on the third BRDY# of a burst, the 486 
microprocessor assumes the data returned with the 
first and second BRDY#’s is correct and restarts 
the burst beginning with the third item. The same 
rule applies to transfers broken into multiple cycle by 
BS8# or BS16#. 

Asserting BOFF# In the same clock as ADS# will 
cause the 486 microprocessor to float its bus In the 
next clock and leave ADS# floating low. Since 
ADS# is floating low, a peripheral may think that a 
new bus cycle has begun even-though the cycle was 
aborted. There are two possible solutions to this 
problem. The first is to have all devices recognize 
this condition and ignore ADS# until ready comes 
back. The second approach is to use a “two clock” 
backoff: in the first clock AHOLD is asserted, and In 
the second clock BOFF# is asserted. This guaran- 
tees that ADS# will not be floating low. This Is only 
necessary in systems where BOFF# may be assert- 
ed in the same clock as ADS#. 


7.2.13 BUS STATES 

A bus state diagram is shown in Figure 7.30. A de- 
scription of the signals used in the diagram is given 
in Table 7.9. 
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(RDY# + BRDY# ASSERTED) • 
(HOLD ♦ AHOLD ♦ NO REQUEST) • 
BOFF# NEGATED 



BOFF# NEGATED 
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Figure 7.30. Bus State Diagram 


Tabie 7.9. Bus State Description 


State 

Means 

Ti 

Bus is Idle. Address and status signals may be driven to undefined values, or 
the bus may be floated to a high impedance state. 

T1 

First clock cycle of a bus cycle. Valid address and status are driven and 

ADS# is asserted. 

T2 

Second and subsequent clock cycles of a bus cycle. Data Is driven if the 
cycle Is a write, or data is expected If the cycle is a read. RDY # and BRDY # 
are sampled. 

Tib 

First clock cycle of a restarted bus cycle. Valid address and status are driven 
and ADS# is asserted. 

Tb 

Second and subsequent clock cycles of an aborted bus cycle. 
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7.2.14 FLOATING POINT ERROR HANDLING 

The 486 microprocessor provides two options for re- 
porting floating point errors. The simplest method is 
to raise interrupt 16 whenever an unmasked floating 
point error occurs. This option may be enabled by 
setting the NE bit in control register 0 (CRO). 

The 486 microprocessor also provides the option of 
allowing external hardware to determine how float- 
ing point errors are reported. This option is neces- 
sary for compatibility with the error reporting scheme 
used in DOS based systems. The NE bit must be 
cleared in CRO to enable user-defined error report- 
ing. User-defined error reporting is the default condi- 
tion because the NE bit is cleared on reset. 

Two pins, floating point error (FERR#) and ignore 
numeric error (IGNNE#), are provided to direct the 
actions of hardware if user-defined error reporting is 
used. The 486 microprocessor asserts the FERR# 
output to indicate that a floating point error has oc- 
curred. FERR# corresponds to the ERROR# pin on 
the 387 math coprocessor. 

IGNNE# is an input to the 486 microprocessor. 
When the NE bit in CRO is cleared, and IGNNE# is 
asserted, the 486 microprocessor will ignore a user 
floating point error and continue executing floating 
point instructions. When IGNNE# is negated, the 
486 microprocessor will freeze on floating point in- 
structions which get errors (except for the control 
instructions FNCLEX, FNINIT, FNSAVE, FNSTENV, 
FNSTCW, FNSTSW, FNSTSW AX, FNENI, FNDISI 
and FNSETPM). IGNNE# may be asynchronous to 
the 486 clock. 


In systems with user-defined error reporting, the 
FERR# pin is connected to the interrupt controller. 
When an unmasked floating point error occurs, an 
interrupt Is raised. If IGNNE# is high at the time of 
this Interrupt, the 486 microprocessor will freeze 
(disallowing execution of a subsequent floating point 
instruction) until the interrupt handler is invoked. By 
driving the IGNNE# pin low (when clearing the inter- 
rupt request), the Interrupt handler can allow execu- 
tion of a floating point instruction, within the interrupt 
handler, before the error condition is cleared (by 
FNCLEX, FNINIT, FNSAVE or FNSTENV). If execu- 
tion of a non-control floating point Instruction, within 
the floating point interrupt handler, is not needed, 
the IGNNE# pin can be tied HIGH. 


8-0 TESTABILITY 

Testing In the 486 microprocessor can be divided 
into two categories; Built-in Self Test (BIST) and ex- 
ternal testing. The BIST tests the non-random logic, 
control ROM (CROM), translation lookaside buffer 
(TLB) and on-chip cache memory. External tests can 
be run on the TLB and the on-chip cache. The 486 
microprocessor also has a test mode in which all 
outputs are tristated. 


8.1 Built-In Self Test (BIST) 

The BIST Is initiated by holding the AHOLD (address 
hold) pin HIGH in the clock prior to RESET going 
from HIGH to LOW as shown in Figure 6.3. The BIST 
takes approximately 2**20 clocks, or approximately 
42 milliseconds with a 25 MHz 486 microprocessor. 
No bus cycles will be run by the 486 microprocessor 
until the BIST is concluded. 

The results of BIST is stored in the EAX register. 
The 486 microprocessor has successfully passed 
the BIST if the contents of the EAX register are zero. 
If the results in EAX are not zero then the BIST has 
detected a flaw In the microprocessor. The micro- 
processor performs reset and begins normal opera- 
tion at the completion of the BIST. 
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The non-random logic, control ROM, on-chip cache 
and translation lookaside buffer (TLB) are tested 
during the BIST. 

The cache portion of the BIST verifies that the 
cache is functional and that it is possible to read and 
write to the cache. The BIST manipulates test regis- 
ters TR3, TR4 and TR5 while testing the cache. 
These test registers are described in Section 8.2. 

The cache testing algorithm writes a value to each 
cache entry, reads the value back, and checks that 
the correct value was read back. The algorithm may 
be repeated more than once for each of the 512 
cache entries using different constants. 

The TLB portion of the BIST verifies that the TLB is 
functional and that it is possible to read and write to 
the TLB. The BIST manipulates test registers TR6 
and TR7 while testing the TLB. TR6 and TR7 are 
described in Section 8.3. 


The 486 microprocessor contains a cache fill buffer 
and a cache read buffer. For testability writes, data 
must be written to the cache fill buffer before it can 
be written to a location in the cache. Data must be 
read from a cache location into the cache read buff- 
er before the microprocessor can access the data. 
The cache fill and cache read buffer are both 128 
bits wide. 


8.2.1 CACHE TESTING REGISTERS TR3, TR4 
AND TR5 

Figure 8.1 shows the three cache testing registers: 
the Cache Data Test Register (TR3), the Cache 
Status Test Register (TR4) and the Cache Control 
Test Register (TR5). External access to these regis- 
ters is provided through MOV reg,TREG and MOV 
TREG, reg instructions. 


8.2 On-Chip Cache Testing 


The on-chip cache testability hooks are designed to 
be accessible during the BIST and for assembly lan- 
guage testing of the cache. 



Figure 8.1. Cache Test Registers 


4-118 




i 486 TM MICROPROCESSOR 



Cache Data Test Register: TR3 

The cache fill buffer and the cache read buffer can 
only be accessed through TR3. Data to be written to 
the cache fill buffer must first be written to TR3. Data 
read from the cache read buffer must be loaded into 
TR3. 

TR3 is 32 bits wide while the cache fill and read 
buffers are 128 bits wide. 32 bits of data must be 
written to TR3 four times to fill the cache fill buffer. 
32 bits of data must be read from TR3 four times to 
empty the cache read buffer. The entry select bits in 
TR5 determine which 32 bits of data TR3 will access 
in the buffers. 

Cache Status Test Register: TR4 

TR4 handles tag, LRU and valid bit information dur- 
ing cache tests. TR4 must be loaded with a tag and 
a valid bit before a write to the cache. After a read 
from a cache entry, TR4 contains the tag and valid 
bit from that entry, and the LRU bits and four valid 
bits from the accessed set. 

Cache Control Test Register: TR5 

TR5 specifies which testability operation will be per- 
formed and the set and entry within the set which 
will be accessed. 

The seven bit set select field determines which of 
the 128 sets will be accessed. 

The functionality of the two entry select bits depend 
on the state of the control bits. When the fill or read 


buffers are being accessed, the entry select bits 
point to the 32-bit location in the buffer being ac- 
cessed. When a cache location is specified, the en- 
try select bits point to one of the four entries In a set. 
Refer to Table 8.1. 

Five testability functions can be performed on the 
cache. The two control bits in TR5 specify the oper- 
ation to be executed. The five operations are: 

1 . Write cache fill buffer 

2. Perform a cache testability write 

3. Perform a cache testability read 

4. Read the cache read buffer 

5. Perform a cache flush 

Table 8.1 shows the encoding of the two control bits 
in TR5 for the cache testability functions. Table 8.1 
also shows the functionality of the entry and set se- 
lect bits for each control operation. 

The cache tests attempt to use as much of the nor- 
mal operating circuitry as possible. Therefore when 
cache tests are being performed, the cache must be 
disabled (the CD and NW bits in control register 
must be set to 1 to disable the cache. See Section 
5). 

8.2.2 CACHE TESTABILITY WRITE 

A testability write to the cache is a two step process. 
First the cache fill buffer must be loaded with 128 
bits of data and TR4 loaded with the tag and valid 
bit. Next the contents of the fill buffer are written to a 
cache location. Sample assembly code to do a write 
Is given in Figure 8.2. 


Table 8.1. Cache Control Bit Encoding and Effect of 
Control Bits on Entry Select and Set Select Functionality 


Control Bits 

Operation 

Entry Select Bits 

Set Select Bits 

Bit 1 

BitO 

Function 

0 

0 

_ r Fill Buffer Write 

® 1 Read Buffer Read 

Select 32-bit location in fill/read 
buffer 

— 

0 

1 

Perform Cache Write 

Select an entry in set. 

Select a set to write to 

1 

0 

Perform Cache Read 

Select an entry in set. 

Select a set to read from 

1 

1 

Perform Flush Cache 

— 

— 
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Sample Assembly Code 

An example assembly language sequence to perform a cache write is; 

» 

; eax. ebx. ecx. edx contain the cache line to write 
; edi contains the tag information to load 
; CRO already says to enable reads/write to TR5 

; fill the cache buffer 
mov esijO 
raov tr5,esi 
mov tr3,eax 
mov esi,4 
mov tr5,esi 
mov tr3,ebx 
mov esi,8 
mov tr5,esi 
mov tr3,ecx 
mov esi.Och 
mov tr5,esi 
mov tr3,edx 

9 

, ; load the Cache Status Register 
♦ 

mov tr4»edi ? load 21-bit tag and valid bit 

9 

; perform the cache write 

9 

mov esi,l 

mov tr5,esi ; write the cache (set 0, entry 0) 

An example assembly language sequence to perform a cache read is; 

♦ 

; data into eax, ebx, ecx, edx; status into edi 

9 

; read the cache line back 

9 

mov esi,2 

mov tr5,esi ; do cache testability read (set 0, entry 0) 

9 

; read the data from the read buffer 

mov esi,0 
mov tr5,esi 
mov eax,tr3 
mov esi,4 
mov tr5,esi 
mov ebx,tr3 
mov esi,8 
mov tr5,esi 
mov ecx,tr3 
mov esi,0ch 
mov tr5,esi 
mov edx,tr3 

9 

; read the status from TR4 

9 

mov edi,tr4 

Figure 8.2 Sample Assembly Code for Cache Testing 


; set up command 
; load to TR5 

; load data into cache fill buffer 
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Loading the fill buffer is accomplished by first writing 
to the entry select bits in TR5 and setting the control 
bits in TR5 to 00. The entry select bits identify one of 
four 32-bit locations in the cache fill buffer to put 32 
bits of data. Following the write to TR5, TR3 is writ- 
ten with 32 bits of data which are immediately 
placed in the cache fill buffer. Writing to TR3 initiates 
the write to the cache fill buffer. The cache fill buffer 
is loaded with 128 bits of data by writing to TR5 and 
TR3 four times using a different entry select location 
each time. 

TR4 must be loaded with the 21 -bit tag and valid bit 
(bit 10 in TR4) before the contents of the fill buffer 
are written to a cache location. 

The contents of the cache fill buffer are written to a 
cache location by writing TR5 with a control field of 
01 along with the set select and entry select fields. 
The set select and entry select field Indicate the lo- 
cation in the cache to be written. The normal cache 
LRU update circuitry updates the internal LRU bits 
for the selected set. 

Note that a cache testability write can only be done 
when the cache is disabled for replaces (the CD bit 
is control register 0 is reset to 1 ). Also note that care 
must be taken when directly writing to entries in the 
cache. If the entry is set to overlap an area of mem- 
ory. that is being used in external memory, that 
cache entry could inadvertently be used instead of 
the external memory. Of course, this is exactly the 
type of operation that one vyould desire If the cache 
were to be used as a high speed RAM. 

8.2.3 CACHE TESTABILITY READ 

A cache testability read Is a two step process. First 
the contents of the cache location are read into the 
cache read buffer. Next the data Is examined by 
reading it out of the read buffer. Sample assembly 
code to do a testability read Is given in Figure 8.5. 

Reading the contents of a cache location into the 
cache read buffer Is initiated by writing TR5 with the 
control bits set to 1 0 and the desired seven-bit set 
select and two-bit entry select. In response to the 
write to TR5, TR4 is loaded with the 21 -bit tag field 
and the single valid bit from the cache entry read. 
TR4 Is also loaded with the three LRU bits and four 
valid bits corresponding to the cache set that was 
accessed. The cache read buffer Is filled with the 
128-bit value which was found in the data array at 
the specified location. 

The contents of the read buffer are examined by 
performing four reads of TR3. Before reading TR3 
the entry select bits In TR5 must loaded to indicate 
which of the four 32-bit words in the read buffer to 


' transfer into TR3 and the control bits in TR5 must be 
loaded with 00. The register read of TR3 will initiate 
the transfer of the 32-bit value from the read buffer 
to the specified general purpose register. 

Note that It is very important that the entire 1 28-blt 
quantity from the read buffer and also the informa- 
tion from TR4 be read before any memory refer- 
ences are allowed to occur. If memory operations 
are allowed to happen, the contents of the read buff- 
er will be corrupted. This is because the testability 
operations use hardware that Is used in normal 
memory accesses for the 486 microprocessor 
whether the cache is enabled or not. 


8.2.4 FLUSH CACHE 

The control bits in TR5 must be written with 11 to 
flush the cache. None of the other bits in TR5 have 
any meaning when 1 1 Is written to the control bits. 
Flushing the cache will reset the LRU bits and the 
valid bits to 0, but will not change the cache tag or 
data arrays. 

When the cache is flushed by writing to TR5 the 
special bus cycle indicating a cache flush to the ex- 
ternal system is not run (see Section 7.2.1 1, Special 
Bus Cycles). The cache should be flushed with the 
instruction INVD (Invalidate Data Cache) instruction 
or the WBINVD (Write-back and Invalidate Data 
Cache) instruction. 


8.3 Translation Lookaside Buffer 
(TLB) Testing 

The 486 microprocessor TLB testability hooks are 
similar to those In the 386 microprocessor. The test- 
ability hooks have been enhanced to provide added 
test features and to include new features in the 486 
microprocessor. The TLB testability hooks are de- 
signed to be accessible during the BIST and for as- 
sembly language testing of the TLB. 


8.3.1 TRANSLATION LOOKASIDE BUFFER 
ORGANIZATION 

The 486 microprocessors TLB is 4-way set associa- 
tive and has space for 32 entries. The TLB is logical- 
ly split Into three blocks shown in Figure 8.3. 

The data block is physically split into four arrays, 
each with space for eight entries. An entry In the 
data block is 22 bits wide containing a 20-blt physi- 
cal address and two bits for the page attributes. The 
page attributes are the PCD (page cache disable) bit 
and the PWT (page write-through) bit. Refer to Sec- 
tion 4.5.4 for a discussion of the PCD and PWT bits. 
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Figure 8.3. TLB Organization 


The tag block is also split into four arrays, one for 
each of the data arrays. A tag entry is 21 bits wide 
containing a 17-bit linear address and four protec- 
tion bits. The protection bits are valid (V), user/su- 
pervisor (U/S), read/write (R/W) and dirty (D). 

The third block contains eight three bit quantities 
used in the pseudo least recently used (LRU) re- 
placement algorithm. These bits are called the LRU 
bits. The LRU replacement algorithm used in the 


TLB is the same as used by the on-chip cache. For a 
description of this algorithm refer to Section 5.5. 

8.3.2 TLB TEST REGISTERS TR6 AND TR7 

The two TLB test registers are shown in Figure 8.4. 
TR6 is the command test register and TR7 is the 
data test register. External access to these registers 
is provided through MOV reg,TREG and MOV 
TREG.reg instructions. 


31 

12 

11 

10 

9 

8 

7 

6 

5 

4 


1 

0 



Linear Address 

V 

D 

D# 

U 

U# 

W 

W# 


Option 

TR6 

TLB Command 
Test Register 

31 

12 

11 

10 

9 

8 

7 

6 

5 

4 

3 2 

1 

0 



Physical Address 

PCD 

PWT 

L2 

LP 

L1 

tUE 

LO 

lits 





TR7 

TLB Data 

Test Register 

= unused 

T 

Replacement Pointer Select (Writes) 
Hit Indication (Lookup) 

T 

Replacement Pointer (Writes) 

Hit Location (Lookup) 


Figure 8.4. TLB Test Registers 
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Command Test Register: TR6 

TR6 contains the tag information and control infor- 
mation used in a TLB test. Loading TR6 with tag and 
control Information initiates a TLB write or lookup 
test. 

TR6 contains three bit fields, a 20-bit linear address 
(bits 12-31), seven bits for the TLB tag protection 
bits (bits 5-11) and one bit (bit 0) to define the type 
of operation to be performed on the TLB. 

The 20-bit linear address forms the tag information 
used In the TLB access. The lower three bits of the 
linear address select which of the eight sets are ac- 
cessed. The upper 17 bits of the linear address form 
the tag stored in the tag array. 

The seven TLB tag protection bits are described be- 
low. 

V: The valid bit for this TLB entry 

D,D#: The dirty bit for/from the TLB entry 

U,U#: The user/supervisor bit for/from the TLB 
entry 

W,W#: The read/write bit for/from the TLB entry 

Two bits are used to represent the D, U/S and R/W 
bits in the TLB tag to permit the option of a forced 
miss or hit during a TLB lookup operation. The 
forced miss or hit will occur regardless of the state 
of the actual bit In the TLB. The meaning of these 
pairs of bits is given in Table 8.2. 

The operation bit in TR6 determines if the TLB test 
operation will be a write or a lookup. The function of 
the operation bit is given in Table 8.3. 


Table 8.3. TR6 Operation Bit Encoding 


TR6 

TLB Operation 

BitO 

to Be Performed 

0 

TLB Write 

1 

TLB Lookup 


Data Test Register: TR7 

TR7 contains the information stored or read from the 
data block during a TLB test operation. Before a TLB 


test write, TR7 contains the physical address and 
the page attribute bits to be stored in the entry. After 
a TLB test lookup hit, TR7 contains the physical ad- 
dress, page attributes, LRU bits and entry location 
from the access. 

TR7 contains a 20-blt physical address (bits 12-31), 
two bits for PCD (bit 11) and PWT (bit 10) and three 
bits for the LRU bits (bits 7-9). The LRU bits in TR7 
are only used during a TLB lookup test. The func- 
tionality of TR7 bit 4 differs for TLB writes and look- 
ups. The encoding of bit 4 is defined in Tables 8.4 
and 8.5. Finally TR7 contains two bits (bits 2-3) to 
specify a TLB replacement pointer or the location of 
a TLB hit. 


Table 8.4. Encoding of Bit 4 of TR7 on Writes 


TR7 

Replacement Pointer 

Bit 4 

Used on TLB Write 

0 

Pseudo-LRU Replacement Pointer 

1 

Data Test Register Bits 3:2 


Table 8.5. Encoding of Bit 4 of TR7 on Lookups 


TR7 

Meaning after TLB 

Bit 4 

Lookup Operation 

0 

TLB Lookup Resulted in a Miss 

1 

TLB Lookup Resulted in a Hit 


A replacement pointer is used during a TLB write. 
The pointer indicates which of the four entries In an 
accessed set is to be written. The replacement 
pointer can be specified to be the internal LRU bits 
or bits 2-3 in TR7. The source of the replacement 
pointer is specified by TR7 bit 4. The encoding of bit 
4 during a write is given by Table 8.4. 

Note that both testability writes and lookups affect 
the state of the Internal LRU bits regardless of the 
replacement pointer used. All TLB write operations 
(testability or normal operation) cause the written 
entry to become the most recently used. For exam- 
ple, during a testability write with the replacement 
pointer specified by TR7 bits 2-3, the indicated en- 
try is written and that entry becomes the most re- 
cently used as specified by the internal LRU bits. 


Table 8.2. Meaning of a Pair of TR6 Protection Bits 


TR6 Protection Bit 
(B) 

TR6 Protection Bit# 
(B#) 

Meaning on 

TLB Write Operation 

Meaning on 

TLB Lookup Operation 

0 

0 

Undefined 

Miss any TLB TAG Bit B 

0 

1 

Write 0 to TLB TAG Bit B 

Match TLB TAG Bit B if 0 

1 

0 

Write 1 to TLB TAG Bit B 

Match TLB TAG Bit B if 1 

1 

1 

Undefined 

Match any TLB TAG Bit B 
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There are two TLB testing operations: write entries 
into the TLB, and perform TLB lookups. One major 
enhancement over TLB testing in the 386 micro- 
processor is that paging need not be disabled while 
executing testability writes or lookups. 

Note that any time one TLB set contains the same 
linear address in more than one of its entries, look- 
ing up that linear address will not result in a hit. 
Therefore a single linear address should not be writ- 
ten to one TLB set more than once. 


8.3.3 TLB WRITE TEST 

To perform a TLB write TR7 must be loaded fol- 
lowed by a TR6 load. The register operations must 
be performed in this order since the TLB operation is 
triggered by the write to TR6. 

TR7 is loaded with a 20-bit physical address and 
values for PCD and PWT to be written to the data 
portion of the TLB. In addition, bit 4 of TR7 must be 
loaded to indicate whether to use TR7 bits 3-2 or the 
internal LRU bits as the replacement pointer on the 
TLB write operation. Note that the LRU bits in TR7 
are not used in a write test. 

TR6 must be written to initiate the TLB write opera- 
tion. Bit 0 in TR6 must be reset to zero to indicate a 
TLB write. The 20-bit linear address and the seven 
page protection bits must also be written in TR6 to 
specify the tag portion of the TLB entry. Note that 
the three least significant bits of the linear address 
specify which of the eight sets in the data block will 
be loaded with the physical address data. Thus only 
17 of the linear address bits are stored in the tag 
array. 

8.3.4 TLB LOOKUP TEST 

To perform a TLB lookup it is only necessary to write 
the proper tags and control information into TR6. Bit 
0 in TR6 must be set to 1 to indicate a TLB lookup. 
TR6 must be loaded with a 20-bit linear address and 
the seven protection bits. To force misses and 
matches of the individual protection bits on TLB 
lookups, set the seven protection bits as specified in 
Table 8.2. 


A TLB lookup operation is initiated by the write to 
TR6. TR7 will indicate the result of the lookup opera- 
tion following the write to TR6. The hit/mIss indica- 
tion can be found in TR7 bit 4 (see Table 8.5). 

TR7 will contain the following information if bit 4 Indi- 
cated that the lookup test resulted In a hit. Bits 2-3 
will Indicate in which set the match occurred. The 22 
most significant bits in TR7 will contain the physical 
address and page attributes contained In the entry. 
Bits 9-7 will contain the LRU bits associated with 
the accessed set. The state of the LRU bits is previ- 
ous to their being updated for the current lookup. 

If bit 4 in TR7 indicated that the lookup test resulted 
in a miss the remaining bits in TR7 are undefined. 

Again it should be noted that a TLB testability lookup 
operation affects the state of the LRU bits. The LRU 
bits will be updated if a hit occurred. The entry which 
was hit will become the most recently used. 


8.4 Tristate Output Test Mode 

The 486 microprocessor provides the ability to float 
all Its outputs and bidirectional pins. This includes all 
pins floated during bus hold as well as pins which 
are never floated in normal operation of the chip 
(HLDA, BREQ, FERR# and PCHK#). When the 486 
microprocessor is In the tristate output test mode 
external testing can be used to test board connec- 
tions. 

The tristate test mode is Invoked by driving FLUSH # 
low in the clock prior to RESET going low (see Fig- 
ure 6.3). The 486 microprocessor remains in the tri- 
state test mode until the next RESET. 
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9.0 DEBUGGING SUPPORT 

The 486 Microprocessor provides several features 
which simplify the debugging process. The three cat- 
egories of on-chip debugging aids are: 

1) the code execution breakpoint opcode (OCCH), 

2) the single-step capability provided by the TF bit 
in the flag register, and 

3) the code and data breakpoint capability provided 
by the Debug Registers DRO-3, DR6, and DR7. 


9.1 Breakpoint Instruction 

A single-byte-opcode breakpoint instruction is avail- 
able for use by software debuggers. The breakpoint 
opcode is OCCH, and generates an exception 3 trap 
when executed. In typical use, a debugger program 
can “plant” the breakpoint instruction at all desired 
code execution breakpoints. The single-byte break- 
point opcode is an alias for the two-byte general 
software interrupt instruction, INT n, where n = 3. 
The only difference between INT 3 (OCCh) and INT n 
is that INT 3 is never lOPL-sensitive but INT n is 
lOPL-sensitive in Protected Mode and Virtual 8086 
Mode. 


9.2 Single-Step Trap 

If the single-step flag (TF, bit 8) in the EFLAG regis- 
ter is found to be set at the end of an instruction, a 
single-step exception occurs. The single-step ex- 
ception is auto vectored to exception number 1 . Pre- 
cisely, exception 1 occurs as a trap after the instruc- 
tion following the instruction which set TF. In typical 
practice, a debugger sets the TF bit of a flag register 
Image on the debugger’s stack. It then typically 
transfers control to the user program and loads the 
flag image with a signal instruction, the IRET instruc- 
tion. The single-step trap occurs after executing one 
instruction of the user program. 

Since the exception 1 occurs as a trap (that is, it 
occurs after the Instruction has already executed), 
the CSiElP pushed onto the debugger’s stack points 
to the next unexecuted Instruction of the program 
being debugged. An exception 1 handler, merely by 
ending with an IRET instruction, can therefore effi- 
ciently support single-stepping through a user pro- 
gram. 


9.3 Debug Registers 

The Debug Registers are an advanced debugging 
feature of the 486 Microprocessor. They allow data 
access breakpoints as well as code execution 
breakpoints. Since the breakpoints are Indicated by 
on-chip registers, an instruction execution break- 
point can be placed In ROM code or in code shared 
by several tasks, neither of which can be supported 
by the INT3 breakpoint opcode. 

The 486 Microprocessor contains six Debug Regis- 
ters, providing the ability to specify up to four distinct 
breakpoints addresses, breakpoint control options, 
and read breakpoint status. Initially after reset, 
breakpoints are in the disabled state. Therefore, no 
breakpoints will occur unless the debug registers are 
programmed. Breakpoints set up In the Debug Reg- 
isters are autovectored to exception number 1 . 


9.3.1 LINEAR ADDRESS BREAKPOINT 
REGISTERS (DR0-DR3) 

Up to four breakpoint addresses can be specified by 
writing into Debug Registers DR0-DR3, shown In 
Figure 9.1. The breakpoint addresses specified are 
32-bit linear addresses. 486 Microprocessor hard- 
ware continuously compares the linear breakpoint 
addresses in DR0-DR3 with the linear addresses 
generated by executing software (a linear address is 
the result of computing the effective address and 
adding the 32-bit segment base address). Note that 
if paging Is not enabled the linear address equals the 
physical address. If paging is enabled, the linear ad- 
dress is translated to a physical 32-bit address by 
the on-chip paging unit. Regardless of whether pag- 
ing is enabled or not, however, the breakpoint regis- 
ters hold linear addresses. 


9.3.2 DEBUG CONTROL REGISTER (DR7) 

A Debug Control Register, DR7 shown in Figure 9.1, 
allows several debug control functions such as en- 
abling the breakpoints and setting up other control 
options for the breakpoints. The fields within the De- 
bug Control Register, DR7, are as follows: 

LENI (breakpoint length specification bits) 

A 2-bit LEN field exists for each of the four break- 
points. LEN specifies the length of the associated 
breakpoint field. The choices for data breakpoints 
are: 1 byte, 2 bytes, and 4 bytes. Instruction execu- 
tion breakpoints must have a length of 1 (LENi = 
00). Encoding of the LENi field is as follows: 
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Oindicates Intel reserved: Do not define; SEE SECTION 2.3.10 

Figure 9.1. Debug Registers 



LENi 

bncoding 

Breakpoint 
Field Width 

Usage of Least 
Significant Bits in 
Breakpoint Address 
Register i, (i = 0-3) 

00 

1 byte 

All 32-blts used to 
specify a single-byte 
breakpoint field. 

01 

2 bytes 

A1 -A31 used to 
specify a two-byte, 
word-allaned 
breakpoint field. AO in 
Breakpoint Address 
Register is not used. 

10 

Undefined — 
do not use 
this encoding 


11 

4 bytes 

A2-A31 used to 
specify a four-byte, 
dword-aligned 
breakpoint field. AO 
and A1 In Breakpoint 
Address Register are 
not used. 


The LENi field controls the size of breakpoint field i 
by controlling whether all low-order linear address 
bits In the breakpoint address register are used to 
detect the breakpoint event. Therefore, all break- 
point fields are aligned; 2-byte breakpoint fields be- 
gin on Word boundaries, and 4-byte breakpoint 
fields begin on Dword boundaries. 


The following is an example of various size break- 
point fields. Assume the breakpoint linear address in 
DR2 is 00000005H. In that situation, the following 
illustration indicates the region of the breakpoint 
field for lengths of 1 , 2, or 4 bytes. 
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RWi (memory access qualifier bits) 

A 2-bit RW field exists for each of the four break- 
points. The 2-bit RW field specifies the type of usage 
which must occur in order to activate the associated 
breakpoint. 


RW 

Usage 

Encoding 

Causing Breakpoint 

00 

Instruction execution only 

01 

Data writes only 

10 

Undefined — do not use this encoding 

11 

Data reads and writes only 


RW encoding 00 is used to set up an instruction 
execution breakpoint. RW encodings 01 or 11 are 
used to set up write-only or read/write data break- 
points. 

Note that instruction execution breakpoints are 
taken as faults (i.e., before the instruction exe- 
cutes), but data breakpoints are taken as traps 
(I.e., after the data transfer takes place). 

Using LENi and RWi to Set Data Breakpoint i 


The Debug Registers can only be accessed In Real 
Mode or at privilege level 0 in Protected Mode. The 
GD bit, when set, provides extra protection against 
any Debug Register access even in Real Mode or at 
privilege level 0 in Protected Mode. This additional 
protection feature is provided to guarantee that a 
software debugger can have full control over the De- 
bug Register resources when required. The GD bit, 
when set, causes an exception 1 fault if an instruc- 
tion attempts to read or write any Debug Register. 
The GD bit is then automatically cleared when the 
exception 1 handler is invoked, allowing the excep- 
tion 1 handler free access to the debug registers. 

GE and LE (Exact data breakpoint match, global and 
local) 

The breakpoint mechanism of the 486 Microproces- 
sor differs from that of the 386. The 486 Microproc- 
essor always does exact data breakpoint matching, 
regardless of GE/LE bit settings. Any data break- 
point trap will be reported exactly after completion of 
the instruction that caused the operand transfer. Ex- 
act reporting is provided by forcing the 486 Micro- 
processor execution unit to wait for completion of 
data operand transfers before beginning execution 
of the next instruction. 


A data breakpoint can be set up by writing the linear 
address into DRI (I = 0-3). For data breakpoints, 
RWi can = 01 (write-only) or 11 (write/read). LEN 
can = 00, 01, or 11. 

If a data access entirely or partly falls within the data 
breakpoint field, the data breakpoint condition has 
occurred, and if the breakpoint is enabled, an excep- 
tion 1 trap will occur. 


When the 486 Microprocessor performs a task 
switch, the LE bit is cleared. Thus, the LE bit sup- 
ports fast task switching out of tasks, that have 
enabled the exact data breakpoint match for their 
task-local breakpoints. The LE bit is cleared by the 
processor during a task switch, to avoid having ex- 
act data breakpoint match enabled In the new task. 
Note that exact data breakpoint match must be re- 
enabled under software control. 


Using LENi and RWi to Set Instruction Execution 
Breakpoint i 

An Instruction execution breakpoint can be set up by 
writing address of the beginning of the instruction 
(including prefixes If any) into DRi (i = 0-3). RWi 
must = 00 and LEN must = 00 for instruction exe- 
cution breakpoints. 

If the instruction beginning at the breakpoint address 
is about to be executed, the instruction execution 
breakpoint condition has occurred, and if the break- 
point is enabled, an exception 1 fault will occur be- 
fore the instruction is executed. 

Note that an Instruction execution breakpoint ad- 
dress must be equal to the beginning byte address 
of an instruction (including prefixes) In order for the 
Instruction execution breakpoint to occur. 

GD (Global Debug Register access detect) 


The 486 Microprocessor GE bit is unaffected during 
a task switch. The GE bit supports exact data break- 
point match that is to remain enabled during all tasks 
executing in the system. 

Note that instruction execution breakpoints are al- 
ways reported exactly. 

Gi and LI (breakpoint enable, global and local) 

If either Gi or Li is set then the associated breakpoint 
(as defined by the linear address in DRI, the length 
in LENi and the usage criteria in RWi) is enabled. If 
either Gi or Li is set, and the 486 Microprocessor 
detects the ith breakpoint condition, then the excep- 
tion 1 handler is Invoked. 

When the 486 Microprocessor performs a task 
switch to a new Task State Segment (TSS), all Li 
bits are cleared. Thus, the Li bits support fast task 
switching out of tasks that use some task-local 
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breakpoint registers. The Li bits are cleared by the 
processor during a task switch, to avoid spurious ex- 
ceptions in the new task. Note that the breakpoints 
must be re-enabled under software control. 

All 486 Microprocessor Gi bits are unaffected during 
a task switch. The GI bits support breakpoints that 
are active in all tasks executing in the system. 

9.3.3 DEBUG STATUS REGISTER (DR6) 

A Debug Status Register, DR6 shown in Figure 9.1, 
allows the exception 1 handler to easily determine 
why it was invoked. Note the exception 1 handler 
can be invoked as a result of one of several events: 

1) DRO Breakpoint fault/trap. 

2) DR1 Breakpoint fault/trap. 

3) DR2 Breakpoint fault/trap. 

4) DR3 Breakpoint fault/trap. 

5) Single-step (TF) trap. 

6) Task switch trap. 

7) Fault due to attempted debug register access 
whenGD = 1. 

The Debug Status Register contains single-bit flags 
for each of the possible events invoking exception 1 . 
Note below that some of these events are faults (ex- 
ception taken before the instruction is executed), 
while other events are traps (exception taken after 

thfl rlAhiin nriniirreHV 

The flags in DR6 are set by the hardware but never 
cleared by hardware. Exception 1 handler software 
should clear DR6 before returning to the user pro- 
gram to avoid future confusion in identifying the 
source of exception 1 . 

The fields within the Debug Status Register, DR6, 
are as follows: 

Bl (debug fault/trap due to breakpoint 0-3) 

Four breakpoint indicator flags, B0-B3, correspond 
one-to-one with the breakpoint registers In DRO- 
DR3. A flag Bi is set when the condition described 
by DRi, LENI, and RWi occurs. 

If Gi or Li is set, and if the ith breakpoint Is detected, 
the processor will invoke the exception 1 handler. 
The exception is handled as a fault if an Instruction 
execution breakpoint occurred, or as a trap if a data 
breakpoint occurred. 

IMPORTANT NOTE: A flag Bi is set whenever the 
hardware detects a match condition on enabled 


breakpoint I. Whenever a match is detected on at 
least one enabled breakpoint I, the hardware imme- 
diately sets all Bi bits corresponding to breakpoint 
conditions matching at that instant, whether enabled 
or not. Therefore, the exception 1 handler may see 
that multiple Bi bits are set, but only set Bi bits corre- 
sponding to enabled breakpoints (Li or GI set) are 
true indications of why the exception 1 handler was 
Invoked. 

BD (debug fault due to attempted register access 
when GD bit set) 

This bit is set if the exception 1 handler was invoked 
due to an instruction attempting to read or write to 
the debug registers when GD bit was set. If such an 
event occurs, then the GD bit is automatically 
cleared when the exception 1 handler Is invoked, 
allowing handler access to the debug registers. 

BS (debug trap due to single-step) 

This bit is set if the exception 1 handler was invoked 
due to the TF bit in the flag register being set (for 
single-stepping). 

BT (debug trap due to task switch) 

This bit is set if the exception 1 handler was Invoked 
due to a task switch occurring to a task having a 486 
Microprocessor TSS with the T bit set. Note the task 
switch into the new task occurs normally, but before 

*hr» ir^tinn nf fh/a took ic ovq/-»i ifrsrl thp OY- 

ception 1 handler is invoked. With respect to the 
task switch operation, the operation is considered to 
be a trap. 

9.3.4 USE OF RESUME FLAG (RF) IN FLAG 
REGISTER 

The Resume Flag (RF) in the flag word can sup- 
press an instruction execution breakpoint when the 
exception 1 handler returns to a user program at a 
user address which Is also an instruction execution 
breakpoint. 


10.0 INSTRUCTION SET SUMMARY 

This section describes the 486 microprocessor in- 
struction set. Tables 10.1 through 10.3 list all In- 
structions along with instruction encoding diagrams 
and clock counts. Further details of the instruction 
encoding are then provided in Section 10.2, which 
completely describes the encoding structure and the 
definition of all fields occurring within the 486 micro- 
processor instructions. 
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10.1 1486™ Microprocessor 

Instruction Encoding and Clock 
Count Summary 

To calculate elapsed time for an instruction, multiply 
the Instruction clock count, as listed in Tables 10.1 
through 10.3 by the processor clock period (e.g., 
40 ns for a 25 MHz 486 microprocessor). 

For more detailed information on the encodings of 
instructions, refer to Section 1 0.2 Instruction Encod- 
ings. Section 10.2 explains the general structure of 
Instruction encodings, and defines exactly the en- 
codings of all fields contained within the instruction. 

INSTRUCTION CLOCK COUNT ASSUMPTIONS 

The 486 microprocessor instruction clock count ta- 
bles give clock counts assuming data and instruction 
accesses hit in the cache. A separate penalty col- 
umn defines clocks to add if a data access misses in 
the cache. The combined instruction and data cache 
hit rate is over 90%. 

A cache miss will force the 486 microprocessor to 
run an external bus cycle. The 486 microprocessor 
32-bit burst bus is defined as r-b-w. 

Where: 

r = The number of clocks in the first cycle of a 
burst read or the number of clocks per data 
cycle in a non-burst read. 

b = The number of clocks for the second and sub- 
sequent cycles in a burst read. 

w = The number of clocks for a write. 

The fastest bus the 486 microprocessor can support 
is 2 - 1 -2 assuming 0 wait states. The clock counts 
in the cache miss penalty column assume a 2 - 1 -2 
bus. For slower busses add r-2 clocks to the cache 
miss penalty for the first dword accessed. Other fac- 
tors also affect instruction clock counts. 

Instruction Clock Count Assumptions 

1 . The external bus is available for reads or writes at 
all times. Else add clocks to reads until the bus is 
available. 

2. Accesses are aligned. Add three clocks to each 
misaligned access. 

3. Cache fills complete before subsequent accesses 
to the same line. If a read misses the cache dur- 
ing a cache fill due to a previous read or pre-fetch, 
the read must wait for the cache fill to complete. If 
a read or write accesses a cache line still being 
filled, It must wait for the fill to complete. 


4. If an effective address is calculated, the base 
register is not the destination register of the pre- 
ceding instruction. If the base register is the des- 
tination register of the preceding instruction add 
1 to the clock counts shown. Back-to-back 
PUSH and POP instructions are not affected by 
this rule. 

5. An effective address calculation uses one base 
register and does not use an Index register. 
However, if the effective address calculation 
uses an index register, 1 clock may be added to 
the clock count shown. 

6. The target of a jump is in the cache. If not, add r 
clocks for accessing the destination instruction 
of a jump. If the destination instruction is not 
completely contained in the first dword read, add 
a maximum of 3b clocks. If the destination in- 
struction is not completely contained in the first 
16 byte burst, add a maximum of another r + 3b 
clocks. 

7. If no write buffer delay, w clocks are added only 
in the case in which all write buffers are full. Typi- 
cally, this case rarely occurs. 

8. Displacement and immediate not used together. 
If displacement and immediate used together, 1 
clock may be added to the clock count shown. 

9. No Invalidate cycles. Add a delay of 1 clock for 
each Invalidate cycle if the invalidate cycle con- 
tends for the internal cache/external bus when 
the 486 CPU needs to use it. 

10. Page translation hits in TLB. A TLB miss will add 
13, 21 or 28 clocks to the instruction depending 
on whether the Accessed and/or Dirty bit in nei- 
ther, one or both of the page entries needs to be 
set in memory. This assumes that neither page 
entry is in the data cache and a page fault does 
not occur on the address translation. 

11. No exceptions are detected during instruction 
execution. Refer to Interrupt Clock Counts Table 
for extra clocks if an interrupt is detected. 

12. Instructions that read multiple consecutive data 
items (i.e. task switch, POPA, etc.) and miss the 
cache are assumed to start the first access on a 
16-byte boundary. If not, an extra cache line fill 
may be necessary which may add up to (r+3b) 
clocks to the cache miss penalty. 
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Table 10.1. i486TM Microprocessor Integer Clock Count Summary 


INSTRUCTION 


INTEGER OPERATIONS 


I 1 1 reg1 reg2 1 

I I 1 reg1 reg2 1 
I mod reg r/m j 
I mod reg r/m \ 


Penalty if 
Cache Miss 


Immediate to reg 


1 1 1 0 0 0 reg I immediate data 


Immediate to Memory | 1 1 0001 1' 

Memory to Accumulator ( 101 0000 

Accumulator to Memory { 1010001' 

MOVSX/MOVZX = Move with Sign/Ze ro Extension 

reg2 to regl [ 0 0 0 01 1 1 


mod 0 0 0 r/m 


] full displacement 
] full displacement 


1011z11w |11 regl reg2 1 
1011z11w ( mod reg r/m | 


z instruction 

0 MOVZX 

1 MOVSX 


PUSHA = Push All 


POPA = Pop All 


XCHG = Exchange 


1 1 1 110 reg { 


I 0 1 0 1 0 reg I 


I mod 110 r/m I 


I immediate data 


1 1 1 0 0 0 reg i 


I 0 1 0 1 1 reg I 


mod 0 00 r/m 


1 1 1 reg1 reg2 \ 


Accumulator with reg 
Memory with reg 

NOP = No Operation 


I mod reg r/m | 


LEA = Load EA to Register 

no index register 
with index register 


I mod reg r/m | 
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Table 10.1. i486'rM Microprocessor Integer Clock Count Summary (Continued) 


INSTRUCTION 

INTEGER OPERATIONS (Continued) 


FORMAT 


Cache Hit 


Penalty if 
Cache Miss 


Notes 


Instruction TTT 

ADD = Add 000 

ADC = Add with Carry 010 

AND = Logical AND 100 

OR = Logical OR 001 

SUB = Subtract 101 

SBB = Subtract with Borrow 01 1 

XOR = Logical Exclusive OR 110 


regl to reg2 
reg2 to regl 
memory to register 
register to memory 
immediate to register 
immediate to accumulator 
immediate to memory 

Instruction 

INC = Increment 

DEC = Decrement 

reg 

or 

memory 

Instruction 

NOT = Logical Complement 
NEG = Negate 

reg 

memory 

CMP = Compare 

regl with reg2 

reg2 with regl 
memory with register 
register with memory 
immediate with register 
immediate with acc. 
immediate with memory 

TEST = Logical Compare 

regl and reg2 
memory and register 
immediate and register 
immediate and acc. 
immediate and memory 


OOTTTOOw |l1 regl re^ 
OOTTTOIw |l1 regl re^ 
0 0 T T T 0 1 w I mod reg r/m] 


OOTTTOOw I mod reg r/m 


lOOOOOsw |l1 TTT reg I immediate register 


0 OTTT 1 0 w I immediate data 
lOOOOOsw I mod TTT r/m] immediate data 


TTT 


000 

001 


1 1 1 1 1 1 1 1 w 

1 1 TTT 

reg| 

I 0 1 T T T reg 






1 1 1 1 1 1 1 1 w I 

|mod TTT 

r/m{ 


TTT 

010 

oil 

1 1 1 101 1 w 1 1 1 TTT regl 
1 1 1 1 0 1 1 w I mod TTT r/m] 


I OOlllOOw |l1 regl reg2 1 
I 0 0 1 1 1 0 1 w 1 1 1 regl reg2 1 
|o 0 1110 0 w [mod reg r/m | 

I 0 0 1 1 1 0 1 w |mod reg r/m { 

I lOOOOOsw {l1 111 regj immediate data 


0 0 1 1 1 1 0 w immediate data 


lOOOOOsw mod 111 r/m immediate data 


1 00001 Ow 1 1 1 regl reg2| 
lOOOOlOw I mod reg r/m | 

1111011W [ll OOO reg] immediate data 


1 0 1 0 1 0 0 w immediate data 


1 1 1 1 0 1 1 w mod 0 0 0 r/m immediate data 


1 

1 

2 

3 

1 


1 

3 


2 

6/2 U/L 

6/2 U/L 


1 

1 


3 


6/2 


U/L 


1 


3 


6/2 


U/L 


1 

1 

2 

2 

1 

1 


2 


2 


2 2 


1 

2 

1 


1 

2 


2 
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Table 10.1. i 486 'rM Microprocessor Integer Clock Count Summary (Continued) 


INSTRUCTION FORMAT 

Cache Hit 

Penalty If 
Cache Miss 

Notes 

INTEGER OPERATIONS (Continued) 




MUL = Multiply (unsigned) 




acc. with register |l111011w|l1 100reg| 




Multiplier-Byte 

13/18 


MN/MX, 3 

Word 

13/26 


MN/MX, 3 

□word 

13/42 


MN/MX. 3 

acc. with memory | 1 1 1 1 0 1 1 w | mod 10 0 r/m | 




Multiplier-Byte 

13/18 

1 

MN/MX. 3 

Word 

13/26 

1 

MN/MX, 3 

□word 

13/42 

1 

MN/MX. 3 

IMUL = Integer Multiply (signed) 




acc. with register | IIIIOIIw |l1 101 reg | 




Multiplier-Byte , 

13/18 


MN/MX, 3 

Word 

13/26 


MN/MX, 3 

□word 

13/42 


MN/MX, 3 

acc. with memory | 1 1 1 1 0 1 1 w | mod 1 0 1 r/m | 




Multiplier-Byte 

13/18 


MN/MX, 3 

Word 

13/26 


MN/MX, 3 

□word 

13/42 


MN/MX. 3 

r(>(|i vvithron2 | 00001 1 1 1 | 10101111 |l1 regl reg2 1 




Multiplior-FtyU) 

13/18 


MN/MX, 3 

Word 

13/26 


MN/MX, 3 

□word 

13/42 


MN/MX, 3 

register with memory | 00001111 j 10101111 j mod reg r/m] 




Multiplier-Byte 

13/18 

1 

MN/MX, 3 

Word 

13/26 

1 

MN/MX. 3 

□word 

13/42 

1 

MN/MX, 3 

regl with imm. to reg2 | 011010s1 |l1 regl reg2 j immediate data 




Multiplier-Byte 

13/18 


MN/MX, 3 

Word 

13/26 


MN/MX, 3 

□word 

13/42 


MN/MX, 3 

mem. with jmm. to reg. | 0 1 1 0 1 0 s 1 [ mod reg r/m | Immediate data 




Multiplier-Byte ' 

13/18 

2 

MN/MX, 3 

Word 

13/26 

2 

MN/MX, 3 

□word 

13/42 

2 

MN/MX, 3 

DIV = Divide (unsigned) 




acc. by register | 1 1 1 1 0 1 1 w 1 1 1 1 1 0 reg | 




Divisor-Byte 

16 



Word 

24 



□word 

40 



acc. by memory | 1 1 1 1 0 1 1 w | mod 110 r/m \ 




Divisor-Byte ' 

16 



Word 

24 



Dword 

40 



IDIV = Integer Divide (signed) 




acc. by register | 1 1 1 1 0 1 1 w ] 1 1 111 reg | 




Divisor-Byte 

19 



Word 

27 



Dword 

43 
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Table 10.1. i 486 TM Microprocessor Integer Clock Count Summary (Continued) 


INSTRUCTION 

FORMAT 




Cache Hit 

Penally if 
Cache Miss 

Notes 

INTEGER OPERATIONS (Continued) 








acc. by memory [ 

1 1 1 1 0 1 1 w 

1 mod 1 1 1 r/m | 






Divisor-Byte 





20 



Word 





28 



□word 





44 



CBW = Convert Byte to Word [ 

10011000 




3 



CWD = Convert Word to Dword [ 

10011001 




3 



Instruction 

TTT 







ROL = Rotate Left 

000 







ROR = Rotate Right 

001 







RCL = Rotate through Carry Left 

010 







RCR = Rotate through Carry Right 

oil 







SHL/SAL = Shift Logical/Arithmetic Left 100 







SHR = Shift Logical Right 

101 







SAR = Shift Arithmetic Right 

111 







Not Through Carry (ROL, ROR, SAL, SAR, SHL, and SHR) 






reg by 1 [ 

1 1 0 1 0 0 0 w 

|l1 TTT reg| 



3 



memory by 1 [ 

1 1 0 1 OOOw 

1 mod TTT r/m 1 



4 

6 


reg by CL [ 

1 1 0 1 00 1 w 

|l1 TTT reg| 



3 



memory by CL [ 

1 1 0 1 001 w 

1 mod TTT r/m | 



4 

6 


reg by immediate count [ 

1 1 OOOOOw 

1 1 1 TTT reg 1 immediate 8-bit data 

2 



mem by immediate count [ 

1 1 OOOOOw 

1 mod TTT r/m | immediate 8-bit data 

4 

6 


Through Carry (RCL and RCR) 








reg by 1 [ 

1 1 0 1 OOOw 

1 1 1 TTT reg 1 



3 



memory by 1 [ 

1 1 0 1 OOOw 

1 mod TTT r/m| 



4 

6 


reg by CL [ 

1 1 0 1 00 1 w 

|l1 TTT reg| 



8/30 


MN/MX, 4 

memory by CL [ 

1 1 0 1 00 1 w 

j mod TTT r/m | 



9/31 


MN/MX, 5 

reg by immediate count [ 

1 1 OOOOOw 

1 1 1 TTT reg 1 immediate 8-bit data 

, 8/30 


MN/MX, 4 

mem by immediate count [ 

1 1 OOOOOw 

1 mod TTT r/m | immediate 8-bit data 

9/31 


MN/MX, 5 

Instruction 

TTT 







SHLD = Shift Left Double 

100 







SHRD = Shift Right Double 

101 







register with immediate 

00001 1 1 1 

jlOTTTlOO 111 

reg2 regl 

imm 8-bit data 

2 



memory by immediate [ 

00001 1 1 1 

jlOTTTlOO |mod 

reg r/m 

imm 8-bit data 

3 

6 


register by CL [ 

00001 1 1 1 

|l0TTT101 |l1 

reg2 regl 


3 



memory by CL [ 

00001 1 1 1 

1 1 0 T T T 1 0 1 1 mod 

reg r/m 


4 

5 


BSWAP = Byte Swap [ 

0000 1 1 1 1 

1 1 1 0 0 1 reg 1 



1 



XADD = Exchange and Add 








reg1,reg2 [ 

00001 1 1 1 

jllOOOOOw 111 

reg2 regl 


3 



memory, reg 

00001 1 1 1 

i 1 

|l100000w 1 mod 

reg r/m 


4 

6/2 

U/L 

CMPXCHG = Compare and Exchange 








reg1,reg2 

00001 1 1 1 

1 1 01 1 OOOw 1 1 1 

reg2 regl 


6 



memory, reg 

00001 1 1 1 

1 1 0 1 1 0 0 0 w 1 mod 

reg r/m 


7/10 

2 

6 
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Table 10.1. i 486 TM Microprocessor Integer Clock Count Summary (Continued) 


CONTROL TRANSFER (within segment) 
NOTE: Times are jump taken/not taken 
Jccc = Jump on ccc 
8-bit displacement I 


8-bit displacement | 0 1 1 1 1 1 1 n | 8-bit disp. | 

full displacement | 00001 1 1 1 | 1 OOOtttn \ full displacement 

NOTE: Times are jump taken/not taken 
SETcccc = Set Byte on cccc (Times are cccc true/false) 
reg | 00001111 | fOOItttn |l1 000 reg| 

memory I 00001 1 1 1 I 1 001 tttn I mod 0 0 0 r/m I 


Mnemonic 

cccc 

Condition 

tttn 

0 

Overflow 

0000 

NO 

No Overflow 

0001 

B/NAE 

Below/Not Above or Equal 

0010 

NB/AE 

Not Below/Above or Equal 

0011 

E/Z 

Equal/Zero 

0100 

NE/NZ 

Not Equal/Not Zero 

0101 

BE/NA 

Below or Equal/Not Above 

0110 

NBE/A 

Not Below or Equal/Above 

0111 

S 

Sign 

1000 

NS 

Not Sign 

1001 

P/PE 

Parity/ Parity Even 

1010 

NP/PO 

Not Parity/ Parity Odd 

1011 

L/NGE 

Less Than/Not Greater or Equal 

1100 

NL/GE 

Not Less Than/Greater or Equal 

1101 

LE/NG 

Less Than or Equal/Greater Than 

1110 

, NLE/G 

Not Less Than or Equal/Greater Than 

1111 


LOOP = LOOP CX Times 


LOOPZ/LOOPE = Loop with 
Zero/Equal 


LOOPNZ/LOOPNE = Loop while 
Not Zero 


JCXZ = Jump on CX Zero 


1 1 1 0 0 0 1 0 I 8-bit disp. 

1 1 1 0 0 0 0 1 I 8-bit disp. 

1 1 1 0 0 0 0 0 I 8-bit disp. 


11100011 
1 1 1 000 1 1 


JECXZ = Jump on ECX Zero [111 000 

(Address Size Prefix Differentiates JCXZ for JECXZ) 
JMP = Unconditional Jump (within se gment) 

Short I 111010 

Direct 

Register Indirect 

Memory Indirect | 1111 11 

CALL = Call (within segment) 

Direct 

Register Indirect 

Memory Indirect | 1111 vT 



11111111 mod 1 0 0 r/m 



11111111 mod 010 r/m 


RET = Return from CALL (within seg ment) 

I 1 1 00001 1 


Cache Hit 

Cache Hit cacheMIss 


Adding Immediate to SP 


1 1 0000 1 0 I 16-bit disp. 
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Table 10.1. i486TM Microprocessor Integer Clock Count Summary (Continued) 


INSTRUCTION FORMAT 

Cache Hit 

Penalty If 
Cache Miss 

Notes 

CONTROL TRANSFER (within segment) (Continued) 




ENTER = Enter Procedure | 1 1 0 0 1 0 0 0 |l 6-bit disp., 8-bit levej 




Level = 0 

14 



Level = 1 

17 



Level (L) > 1 

17 + 3L 


8 

LEAVE = Leave Procedure | 1 1 0 01 0 01 1 

5 

1 


MULTIPLE-SEGMENT INSTRUCTIONS 




MOV = Move 




reg. to segment reg. | 10001110 |l1 sreg3 reg | 

3/9 

0/3 

RV/P, 9 

memory to segment reg. | 1 0 0 0 1 1 1 0 | mod sreg3 r/m | 

3/9 

2/5 

RV/P, 9 

segment reg. to reg. | 10001100 |l1 sreg3 reg | 

3 



segment reg. to memory | 1 0 0 0 1 1 0 0 | mod sreg3 r/m | 

3 



PUSH = Push 




segment reg. j 0 0 0 sreg2 1 1 0 | 

3 



(ES, CS, SS. or DS) 




segment reg. (FS or GS) ] 00001111 |l0 sreg3 0 0 0 1 

3 



POP = Pop 




segment reg. | 0 0 0 sreg2 1 1 1 | 

3/9 

2/5 

RV/P, 9 

(ES, SS, or DS) 




segment reg. (FS or GS) | 00001111 |l0 sreg3 0 0 1 | 

3/9 

2/5 

RV/P, 9 

LDS = Load Pointer to DS 1 1 1 0 0 0 1 0 1 | mod reg r/m | 

6/12 

7/10 

RV/P, 9 

LES = Load Pointer to ES | 1 1 0 0 0 1 0 0 ] mod reg r/m I 

6/12 

7/10 

RV/P, 9 

LFS = Load Pointer toFS | 00001111 |l011010ol mod reg r/m \ 

6/12 

7/10 

RV/P, 9 

LGS = Load Pointer toGS | 00001111 | lOIIOlOl | mod reg r/m j 

6/12 

7/10 

RV/P, 9 

LSS = Load Pointer to SS | 0 0 0 0 1 1 1 1 | 1 0 1 1 0 0 1 0 | mod reg r/m | 

6/12 

7/10 

RV/P, 9 

CALL = Call 




Direct intersegment | 10 011010 | unsigned full offset, selector 

18 

2 

R. 7, 22 

to same level 

20 

3 

P,9 

thru Gate to same level 

35 

6 

P.9 

to inner level, no parameters 

69 

17 

P.9 

to inner level, x parameter (d) words 

77-f4X 

17-l-n 

P. 11.9 

toTSS 

37 + TS 

3 

P. 10,9 

thru Task Gate 

38 + TS 

3 

P. 10,9 

Indirect intersegment | 11111111 | mod 0 1 1 r/m | 

17 

8 

R.7 

to same level 

20 

10 

P.9 

thru Gate to same level 

35 

13 

P.9 

to Inner level, no parameters 

69 

24 

P.9 

to inner level, x parameter (d) words 

77-I-4X 

24 -fn 

P. 11.9 

to TSS 

37 -MS 

10 

P.10,9 

thru Task Gate 

38-MS 

10 

P. 10,9 

RET = Return from CALL 




intersegment | 110 0 10 11 | 

13 

8 

R.7 

to same level 

17 

9 

P.9 

to outer level 

35 

12 

P.9 

intersegment adding | 11001010 | 16-bit disp. | 




imm. to SP 

14 

8 

R.7 

to same level 

18 

9 

P.9 

to outer level 

36 

12 

P.9 
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Table 10.1. i 486 TM Microprocessor Integer Clock Count Summary (Continued) 


INSTRUCTION 


FORMAT 


Cache Hit 

Penalty If 
Cache Miss 

Notes 

17 

2 

R, 7, 22 

19 

3 

P.9 

32 


P,9 

42 + TS 

3 

P, 10,9 

43-l-TS 

3 

P, 10,9 

13 

9 

R.7,9 

18 

10 

P.9 

31 

13 

P.9 

41+TS 

10 

P.10,9 

42 + TS 

10 

P, 10,9 

3 



3 

1 


3 



8 

2 


6 



8 

2/0 

U/L 

6 



13 

3/1 

U/L 

6/42 


MN/MX, 1i 

7/43 

2 

MN/MX, i; 

6/103 


MN/MX, 1 

7/104 

1 

MN/MX, 1: 

8 

6 

16 

5 

2 


7 

2 

16 

6 

2 


5 



4 

2 



register, immediate 
memory, immediate 
reg1, reg2 
memory, reg 

BSF = Scan Bit Forward 

regl, reg2 

memory, reg 

BSR = Scan Bit Reverse 

reg1, reg2 

memory, reg 

STRiNG iNSTRUCTIONS 
CMPS = Compare Byte Word 

LODS = Load Byte/Word 

toAL/AX/EAX 

MOVS = Move Byte/Word 
SCAS = Scan Byte/Word 

STOS = Store Byte/Word 

from AL/AX/EX 

XLAT = Transiate String 


MULTIPLE-SEGMENT INSTRUCTIONS (Continued) 
JMP = Unconditional Jump 

I 

Direct intersegment 
to same level 

thru Call Gate to same level 
thru TSS 
thru Task Gate 
Indirect intersegment 
to same level 

thru Call Gate to same level 
thru TSS 
thru Task Gate 

BIT MANIPULATION 
BT = Test bit 

register, immediate 

memory, immediate 
reg1,reg2 
memory, reg 


111010 10 I unsigned fuli offset, selector 


11111111 mod 101 r/m 


1 0 1 1 1 0 1 0 1 1 1 10 0 reg I imm. 8-bit data 

10111010 I mod 10 0 r/m I imm. 8-bit data 


00001111 (10100011 |11 reg2 regl | 


00001 111 1010 


0011 I 


mod reg r/m | 


Instruction 

TTT 

BTS = Test Bit and Set 

101 

BTR = Test Bit and Reset 

110 

BTC = Test Bit and Compliment 

111 


00001 111 10111 


010 I 


00001111 10111010 mod TTT r/m 


11 T T T reg I imm. 8-bit data 
imm. 8-bit data 


[00001 1 1 1 I 10TTT011 |11 reg2 regl 


00001 1 1 1 I 10TTT011 [mod reg r/m 


00001111 I 10111100 )11 reg2 regl 


00001111 I 10111100 i mod reg r/m 


00001111 


101 I 


1 1 reg2 regl 


00001 111 101111 


in 


mod reg r/m 


1 0 1 0 1 1 Ow 


1 0 1 0 1 1 1 w 


1010101W 
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Table 10.1. i 486 TM Microprocessor Integer Clock Count Summary (Continued) 


INSTRUCTION 


REPEATED STRING INSTRUCTIONS 


FORMAT 


Cache Hit 


Penalty if 
Cache Miss 


Notes 


Repeated by Count in CX or ECX (C 

REPE CMPS = Compare String 

(Find Non-Match) 

C = 0 
C> 0 

REPNE CMPS = Compare String 

(Find Match) 

C = 0 
C> 0 

REP LODS = Load String 

C = 0 
C> 0 

REP MOVS = Move String 

C = 0 
C = 1 
C > 1 

REPE SCAS = Scan String 

(Find Non-AL/AX/EAX) 

C = 0 
C> 0 

REPNE SCAS = Scan String 

(Find AL/AX/EAX) 

C = 0 
C> 0 

REP STOS = Store String 

C = 0 
C> 0 

FLAG CONTROL 

CLC = Clear Carry Flag 

STC = Set Carry Flag 

CMC = Complement Carry Flag 

CLD = Clear Direction Flag 

STD = Set Direction Flag 

CLI = Clear Interrupt 
Enable Flag 

STI = Set Interrupt 
Enable Flag 

LAHF = Load AH into Flag 
SAHF = Store AH into Flags 
PUSHF = Push Flags 
POPF = Pop Flags 

DECIMAL ARITHMETIC 
AAA = ASCII Adjust for Add 

AAS = ASCII Adjust for 
Subtract 

AAM = ASCII Adjust for 
Multiply 


Count in CX or ECX) 



5 

7-H7C 


16, 17 


5 

7-H7C 


16, 17 


5 

7 + 4c 


16, 18 


5 

13 

12-1- 3c 


16 

16, 19 


5 

7-f 5c 


20 


5 

7-f 5c 

5 

7-f 4c 

2 

2 

2 

2 

2 

5 

5 

3 

2 

4/3 

9/6 

3 

3 

15 


20 


RV/P 

RV/P 
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Table 10.1. i 486 TM Microprocessor Integer Clock Count Summary (Continued) 


INSTRUCTION 

FORMAT 





Cache Hit 

Penalty if 
Cache Miss 

Notes 

DECIMAL ARITHMETIC (Continued) 









AAD = ASCII Adjust for 

11010101 I 

00001010 




14 



Divide 









DAA = Decimal Adjust for Add 

00100111 1 





2 



DAS = Decimal Adjust for Subtract 

00101111 1 





2 



PROCESSOR CONTROL INSTRUCTIONS 








HLT = Halt 

11110100 1 





4 



MOV = Move To and From Control/Debug/Test Registers 




- 



CRO from register 

00001 1 1 1 1 

00100010 

1 1 1 

000 

reg| 

17 

2 


CR2/CR3 from register 

00001111 1 

00100010 

1 1 1 

eee 

reg| 

4 



Reg from CRO-3 

00001111 1 

00100000 

1 1 1 

eee 

regl 

4 



DRO-3 from register 

00001111 1 

001 0001 1 

1 1 1 

eee 

reg| 

10 



DR6-7 from register 

00001111 1 

0010001 1 

1 1 1 

eee 

reg| 

10 



Register from DR6-7 

00001 1 1 11 

00100001 

1 1 1 

eee 

reg| 

9 



Register from DRO-3 

00001 1 1 1 1 

00100001 

1 1 1 

eee 

reg| 

9 



TR3 from register 

00001 1 1 1 1 

00100110 

1 1 1 

01 1 

reg| 

4 



TR4-7 from register . 

00001 1 1 11 

00100110 

1 1 1 

eee 

reg| 

4 



Register from TR3 

00001111 1 

00 1 00100 

1 1 1 

01 1 

reg| 

3 



Register from TR4-7 

00001 1 1 1 1 

00100100 

1 1 1 

eee 

reg| 

4 



CLTS = Clear Task Switched Flag 

00001 1 1 1 1 

000001 1 0 

] 



7 

2 


INVD == Invalidate Data Cache 

00001 1 1 1 1 

00001000 

] 



4 



WBINVD = Write-Back and Invalidate 

00001111 1 

00001 001 

] 



5 



Data Cache 









INVLPG = Invalidate TLB Entry 









INVLPG memory 

00001 1 1 1 1 

00000001 

I mod 

1 1 1 

r/m 1 

12/11 


H/NH 

PREFIX BYTES 









Address Size Prefix 

01100111 1 





1 



LOCK = Bus Lock Prefix 

1 1 1 10000 1 





1 



Operand Size Prefix 

01100110 1 





1 



Segment Override Prefix 









CS: 

00101110 1 





1 



DS: 

00111110 1 





1 



ES: 

00100110 1 





1 



FS: 

01100100 1 





1 



GS; 

01100101 1 





1 



SS; 

00110110 1 





1 
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Table 10.1. i 486 TM Microprocessor Integer Clock Count Summary (Continued) 


INSTRUCTION 


PROTECTION CONTROL 


ARPL = Adjust Requested Privilege Level 


0 1 1 0 0 0 1 1 I 11 reg1 reg2 1 

01 10001 1 I mod reg r/m] 


Cache Miss 


LAR = Load Access Rights 
From register 


00001111 I 00000010 |11 regl reg2 1 
00001111 I 00000010 I mod reg r/m | 


LGDT = Load Global Descriptor 


LIDT = Load Interrupt Descriptor 

Table register 

LLDT = Load Local Descriptor 

Table register from reg. 

Table register from mem. 

LMSW = Load Machine Status Word 


00001111 00000001 mod 010 r/m 


00001111 00000001 mod 011 r/m 


00001111 I 00000000 |11 010 reg I 


00001111 00000000 mod 010 r/m 


00001111 I 00000001 |11 110 reg I 


00001 1 1 1 0 0000 001 mod 110 r/m 


LSL = Load Segment Limit 

Frorn register 


0 0 0 0 1 1 1 1 I 0 0 0 0 0 01 1 I 1 1 regl reg2 [ 
00001111 I 00000011 I mod reg r/m ] 


LTR = Load Task Register 


00001 1 1 1 I 00000000 |11 001 reg I 


00001111 00000000 mod 0 01 r/m 


SGDT = Store Global Descriptor Table 


00001111 00000001 mod 0 0 0 r/m 


SIDT = Store Interrupt Descriptor Table 


SLDT = Store Local Descriptor Table 


SMSW = Store Machine Status Word 


STR = Store Task Register 


00001111 00000001 mod 0 01 r/m 


00001111 I 00000000 |11 000 reg I 


00001111 00000000 mod 0 0 0 r/m 


00001111 I 00000001 |11 100 reg I 


00001111 000 00 001 mod 100 r/m 


00001111 I 00000000 |11 001 reg] 


00001111 00000000 mod 0 01 r/m 


VERR = Verify Read Access 

Register 


00001111 00000000 11 10Q r/m 


00001111 00000000 mod 10 0 r/m 


VERW = Verify Write Access 

To register 


00001111 I 00000000 |11 101 reg I 


00001111 00000000 mod 10 1 r/m 
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Table 10.1. i 486 TM Microprocessor Integer Clock Count Summary (Continued) 


INSTRUCTION FORMAT 

Cache Hit 

Penalty if 
Cache Miss 

Notes 

INTERRUPT INSTRUCTIONS 




INT n = Interrupt Type n | 1100110 1 | type | 

INT +4/0 


RV/P, 21 

INT 3 = Interrupt Type 3 | 1 1 0 0 1 1 0 0 | 

INT+0 


21 

INTO = Interrupt 4 If | 1 1 0 0 1 1 1 0 | 




Overflow Flag Set 




Taken 

INT+2 


21 

Not Taken 

3 


21 

BOUND = Interrupt 5 if Detect j 01 1 000 1 0 | mod reg r/m | 




Value Out Range 




If in range 

7 

7 

21 

If out of range 

INT + 24 

7 

21 

IRET = Interrupt Return | 110 01111 | 




Real Mode/Virtual Mode 

15 

8 


Protected Mode 




To same level 

20 

11 

9 

To outer level 

36 

19 

9 

To nested task (EFLAGS.NT = 1) 

TS + 32 

4 

9, 10 

External Interrupt 

INT+11 


21 

NMI = Non-Maskable Interrupt 

INT +3 


21 

Page Fault 

INT + 24 


21 

VM86 Exceptions 




CLI 

INT+8 


21 

STI 

INT +8 


21 

INTn 

INT+9 



PUSHF 

INT +9 


21 

POPF 

INT+8 


21 

IRET 

INT+9 



IN 




Fixed Port 

INT + 50 


21 

Variable Port 

INT+51 


21 

OUT 




Fixed Port 

INT +50 


21 

Variable Port 

INT + 51 


21 

INS 

INT +50 


21 

OUTS 

INT +50 


21 

REP INS 

INT + 51 


21 

REPOUTS 

INT + 51 


21 


Task Switch Clock Counts Table 

Method 

Value for TS 

Cache Hit 

Miss Penalty 


VM/486 CPU/286 TSS To 486 CPU TSS 

162 

55 

VM/486 CPU/286 TSS To 286 TSS 

143 

31 

VM/486 CPU/286 TSS To VM TSS 

140 

37 
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Interrupt Clock Counts Table 

Method 

Value for INT 

Cache Hit 

Miss Penalty 

Notes 

Real Mode 

26 

2 


Protected Mode 




Interrupt/Trap gate, same level 

44 

6 

9 

Interrupt/Trap gate, different level 

71 

17 

9 

Task Gate 

37 + TS 

3 

9, 10 

Virtual Mode 




Interrupt/Trap gate, different level 

82 

17 


Task gate 

37 + TS 

3 

10 


Abbreviations 

16/32 

U/L 

MN/MX 

L/NL 

RV/P 

R 

P 

T/NT 

H/NH 


Definition 

16/32 bit modes 
unlocked/locked 
minimum/maximum 
loop/no loop 

real and virtual mode/protected mode 

real mode 

protected mode 

taken/ not taken 

hit/no hit 


NOTES: 

1 . Assuming that the operand address and stack address fail in different cache sets. 

2. Always locked, no cache hit case. 

3. Clocks = 10 + max(log 2 (|m|),n) 

m = multiplier value (min clocks for m = 0) 
n = 3/5 for ± m 

4. Clocks = (quotient(count/operand length)|*7 + 9 

= 8 if count ^ operand length (8/16/32) 

5. Clocks = {quotient(count/operand length) 1*7 + 9 

= 9 if count ^ operand length (8/16/32) 

6. Equal/not equal cases (penalty is the same regardless of lock). 

7. Assuming that addresses for memory read (for indirection), stack push/pop, and branch fall in different cache sets. 

8. Penalty for cache miss: add 6 clocks for every 1 6 bytes copied to new stack frame. 

9. Add 1 1 clocks for each unaccessed descriptor load. 

1 0. Refer to task switch clock counts table for value of TS. 

11. Add 4 extra clocks to the cache miss penalty for each 16 bytes. 

For notes 12-13: (b = 0-3, non-zero byte number); 

(i = 0-1, non-zero nibble number); 

(n = 0-3, non bit number in nibble); 

12. Clocks = 8 + 4 (b+1) + 3(i + 1) + 3(n + 1) 

= 6 If second operand = 0 

13. Clocks = 9 + 4(b + 1) + 3(i + 1) + 3(n + 1) 

= 7 If second operand = 0 
For notes 14-15: (n = bit position 0-31) 

14. Clocks = 7 + 3(32 -n) 

6 if second operand = 0 

15. Clocks = 8 + 3(32 -n) 

7 if second operand = 0 

1 6. Assuming that the two string addresses fall in different cache sets. 

17. Cache miss penalty: add 6 clocks for every 16 bytes compared. Entire penalty on first compare. 

18. Cache miss penalty: add 2 clocks for every 16 bytes of data. Entire penalty on first load. 

1 9. Cache miss penalty: add 4 clocks for every 1 6 bytes moved. 

(1 clock for the first operation and 3 for the second) 

20. Cache miss penalty: add 4 clocks for every 1 6 bytes scanned. 

(2 clocks each for first and second operations) 

21. Refer to interrupt clock counts table for value of INT 

22. Clock count includes one clock for using both displacement and Immediate. 

23. Refer to assumption 6 in the case of a cache miss. 
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Table 10.2. i486'rM Microprocessor I/O Instructions Ciock Count Summary 


INSTRUCTION 

FORMAT 


Real 

Mode 

Protected 

Mode 

(CPL^IOPL) 

Protected 

Mode 

(CPL>IOPL) 

Virtual 86 
Mode 

Notes 

I/O INSTRUCTIONS 








IN = Input from: 








Fixed Port 

1 1 1 1 00 1 Ow 1 

port number | 

14 

9 

29 

27 


Variable Port 

1 1 1 1 01 1 Ow 1 


14 

8 

28 

27 


OUT = Output to: 








Fixed Port 

1 1 1 1 001 1 w 1 

port number { 

16 

11 

31 

29 


Variable Port 

1 1 1 1 01 1 1 w 1 


16 

10 

30 

29 


INS = Input Byte/Word 

1 01 1 01 1 Ow 1 


17 

10 

32 

30 


from DX Port 








OUTS = Output Byte/Word 

1 0 1 1 0 1 1 1 w 1 


17 

10 

32 

30 

1 

to DX Port 








REP INS = Input String 

1 1 1 1 1 001 0 1 

01 1 01 1 Ow 1 

16 + 8C 

10 + 8C 

30 + 8C 

29 + 8C 

2 

REP OUTS = Output String 

1 11110010 1 

01 1 01 1 1 w 1 

17 + 5C 

1 1 + 5c 

31+ 5c 

1 

30 + 5c 

3 


NOTES: 

1 . Two clock cache miss penalty in all cases. 

2. c = count in CX or ECX. 

3. Cache miss penalty In all modes: Add 2 clocks for every 16 bytes. Entire penalty on second operation. 
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Table 10.3. i486TM Microprocessor Floating Point Clock Count Summary 


INSTRUCTION 

FORMAT 




Cache Hit 

Penalty if 
Cache Miss 

Concurrent 

Execution 

Notes 

Avg (Lower 
Range . . . 
Upper Range) 

Avg (Lower 
Range . . . 
Upper Range) 

DATA TRANSFER 









FLD = Real Load to ST(0) 









32-bit memory 

1 1 1 0 1 1 

0 0 1 1 mod 0 0 0 

r/ml 

s-i-b/disp. 1 

3 

2 



64-bit memory 

1 1 1 0 1 1 

1 0 1 1 mod 0 0 0 

r/m 1 

s-i-b/disp. 1 

3 

3 



80-bit memory 

1110 11 

0 1 1 1 mod 101 

r/m 1 

s-i-b/disp. 1 

6 

4 



ST(i) 

1110 11 

001 1 1 1 000 

ST(i) 1 


4 




FILD = Integer Load to ST(0) 









16-bit memory 

1 1 1 0 1 1 

1 1 1 1 mod 0 0 0 

r/m 1 

s-i-b/disp. 1 

14.5(13-16) 

2 

4 


32-bit memory 

1 1 1 0 1 1 

0 1 1 1 mod 0 0 0 

r/m 1 

s-i-b/disp. j 

11.5(9-12) 

2 

4(2-4) 


64-bit memory 

1 1 1 0 1 1 

1 1 1 1 mod 101 

r/m 1 

1 

s-i-b/disp. 1 

16.8(10-18) 

3 

7.8(2-8) 


FBLD = BCD Load to ST(0) 

1 1 1 0 1 1 

1 1 1 1 mod 10 0 

r/m 1 

s-i-b/disp. 1 

75(70-103) 

4 

7.7(2-8) 


FST = Store Real from ST(0) 









32-bit memory 

1 1 1 01 1 

0 0 1 1 mod 010 

r/m 1 

s-i-b/disp. 1 

7 



1 

64-bit memory 

1 1 1 0 1 1 

1 0 1 1 mod 010 

r/m 1 

s-i-b/disp. 1 

8 



2 

ST(i) 

1 1 1 0 1 1 

1 01 1 1 1 01 0 

ST(i) 1 


3 




FSTP = Store Real from ST(0) and Pop 








32-bit memory 

1 1 1 0 1 1 

0 1 1 1 mod 0 1 1 

r/m 1 

s-i-b/disp. j 

7 



1 

64-bit memory 

1 1 1 01 1 

1 0 1 1 mod oil 

r/m 1 

s-i-b/disp. 1 

8 



2 

80-bit memory 

1 1 1 01 1 

0 1 1 1 mod 111 

r/m 1 

s-i-b/disp. 1 

6 




ST(i) 

1 1 1 01 1 

1 01 1 1 1 001 

ST(i) 1 


3 




FIST = Store Integer from ST{0) 









16-bit memory 

1 1 1 01 1 

1 1 1 1 mod 010 

r/m 1 

s-i-b/disp. 1 

33.4(29-34) 




32-bit memory 

1 1 1 01 1 

0 1 1 1 mod 010 

r/m| 

s-i-b/disp. 1 

32.4(28-34) 




FISTP = Store Integer from ST(0) and Pop 








16-bit memory 

1 1 1 01 1 

1 1 1 1 mod Oil 

r/m 1 

s-i-b/disp. 1 

33.4(29-34) 




32-bit memory 

1 1 1 01 1 

0 1 1 1 mod oil 

r/m 1 

s-i-b/disp. 1 

33.4(29-34) 




64-bit memory 

1 1 1 01 1 

1 1 1 1 mod 111 

r/m 1 

s-i-b/disp. j 

33.4(29-34) 




FBSTP = Store BCD from 

1 1 1 01 1 

1 1 1 1 mod 110 

r/m 1 

s-i-b/disp. 1 

175(172-176) 




ST(0) and Pop 









FXCH = Exchange ST(0) and ST(i) 

1 1 1 01 1 

001 1 1 1 001 

ST(i) 1 


4 




COMPARISON INSTRUCTIONS 









FCOM = Compare ST(0) with Real 









32-bit memory 

1 1 1 01 1 

000 1 mod 010 

r/m 1 

s-i-b/disp. 1 

4 

2 

1 


64-bit memory 

1 1 1 01 1 

1 0 0 1 mod 010 

r/m 1 

s-i-b/disp. 1 

4 

3 

1 


ST(i) 

1 1 1 01 1 

OOol 1 1010 

ST(i) 1 


4 


1 


FCOMP = Compare ST(0) with Real and Pop 








32-bit memory 

1 1 1 0 1 1 

0 0 0 1 mod oil 

r/m 1 

s-i-b/disp. 1 

4 

2 . 

1 


64-bit memory 

1 1 1 01 1 

1 0 0 1 mod oil 

r/m 1 

s-i-b/disp. 1 

4 

3 

1 


ST(i) 

1 1 1 0 1 1 

000| 11011 

ST(i) 1 


4 


1 
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Table 10.3. i 486 TM Microprocessor Floating Point Clock Count Summary (Continued) 


INSTRUCTION 


Cache Hit 


Avg (Lower 
Range . . . 
Upper Range) 


Penalty if 
Cache Miss 


Concurrent 

Execution 


Avg (Lower 
Range . . . 
Upper Range) 


COMPARISON INSTRUCTIONS (Continued) 


FCOMPP = Compare ST(0) with |1 101 1 1 10|1 101 1001 

ST(1) and Pop Twice 
FICOM = Compare ST(0) with Integer 

16-bit memory 


32-bit memory | 1 1 0 1 1 010 

FICOMP = Compare ST(0) with integer 

16-bit memory fllOII 110 

32-bit memory 1 1 1 0 1 1 0 10 

FTST = Compare ST(0) with 0.0 | 1 1 0 1 1 0 0 1 


FUCOM = Unordered compare 
ST(0) with ST(I) 

FUCOMP = Unordered compare 

ST(0) with ST(i) and Pop 

FUCOMPP = Unordered compare 


ST(0) with ST(i) and Pop Twice 
FXAM = Examine ST(0) 


CONSTANTS 

FLDZ = Load + 0.0 into ST(0) 

FLD1 = Load +1.0 into ST(0) 

FLDPI = Load tt into ST(0) 

FLDL2T = Load Iog2(10) into ST(0) 
FLDL2E = Load log 2 (e) into ST(0) 
FLDLG2 = Load logio(2) into ST(0) 
FLDLN2 = Load loge(2) into ST(0) 

ARITHMETIC 

FADD = Add Real with ST(0) 

ST(0) ST(0) + 32-bit memory 

ST(0) ST(0) + 64-bit memory 

ST(d) ST(0) + ST(i) 

FADDP = Add real with ST(0) and 

Pop (ST(i) ST(0) + ST(i)) 
FSUB = Subtract real from ST(0) 

ST(0) ST(0) - 32-bit memory 

ST(0) <— ST(0) - 64-bit memory 
ST(d) ST(0) - ST(i) 


11011 110 


11011 101 


11011 101 


11011 101 


11011 001 


11011 001 


11011 001 


11011 001 


11011 001 


11011 001 


11011 001 


11011 001 


11011 000 


11011 100 


11011 dOO 


11011 110 


11011 000 


11011 100 


11011 dOO 


mod 010 r/m 


mod 0 1 0 r/m 


mod 0 1 1 r/m 


mod 0 1 1 r/m 


1110 0100 


1110 0 ST(i) 


11101 ST(i) 


11101 1001 


1110 0101 


1110 1110 


1110 1000 


1110 1011 


1110 1001 


1110 1010 


1110 1100 


1110 1101 


mod 0 0 0 r/m 


mod 0 0 0 r/m 


1 1 0 0 0 ST(i) 


1 1 0 0 0 ST(i) 


mod 10 0 r/m 


mod 1 0 0 r/m 


11101 ST(i) 


s-i-b/disp. 


s-i-b/disp. 


>-i-b/disp. 


s-i-b/disp. 


s-i-b/disp. 


s-i-b/disp. 


FSUBP = Subtract real from ST(0) |11011 110|11101 ST(i) | 


and Pop (ST(i) ST(0) - ST(i)) 


] 


s-i-b/disp. I 


□ 


s-i-b/disp. 


18(16-20) 

16.5(15-17) 

18(16-20) 

16.5(15-17) 

4 

4 


10 ( 8 - 20 ) 

10 ( 8 - 20 ) 

10 ( 8 - 20 ) 

10 ( 8 - 20 ) 

10 ( 8 - 20 ) 

10 ( 8 - 20 ) 

10(8-20) 

10 ( 8 - 20 ) 


7(5-17) 

7(5-17) 

7(5-17) 

7(5-17) 

7(5-17) 

7(5-17) 

7(5-17) 

7(5-17) 
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Table 10.3. i 486 TM Microprocessor Floating Point Clock Count Summary (Continued) 


INSTRUCTION 


ARITHMETIC (Continued) 

FSUBR = Subtract real reversed (Sub tract ST(0) from real) 
ST(0) <— 32-bit memory - ST(0) 

ST(0) 64-bit memory - ST(0) 

ST(d) ST(i) - ST(0) 


FSUBRP = Subtract real reversed 1 1 1 0 1 1 110 

and Pop (ST(I) ^ ST(i) - ST(0)) 

FMUL = Multiply real with ST(0) 

ST(0) ST(0) X 32-bit memory 1 1 1 0 1 1 0 0 0 

ST(0) ST(0) X 64-bit memory 1 1 1 0 1 1 10 0 

ST(d) ST(0) X ST(i) 1 1 1 0 1 1 d 0 0 

FMULP = Multiply ST(0) with ST(I) |_M^0 11 110 

and Pop (ST(i) ST(0) x ST(i)) 

FDIV = Divide ST(0) by Real 

ST(0) 4- ST(0)/32-bit memory | 1 1 0 1 1 0 0 0 

ST(0) ST(0)/64-bit memory | 1 1 0 1 1 10 0 

ST(d) ST(0)/ST(i) I 1 1 0 1 1 d 0 0 


FDIVP = Divide ST(0) by ST(i) and | 1 1 0 11 110 

Pop (ST(i) 'e- ST(0)/ST(i)) 

FDIVR = Divide real reversed (Real/ST(0)) 

ST(0) 4- 32-bit memory/ST(0) [77 011 0 0 0 


ST(0) 4— 64-bit memory/ST(0) 

ST(d) 4- ST(i)/ST(0) 

FDIVRP = Divide real reversed and 
Pop (ST(i) 4- ST(l)/ST(0)) 
FIADD = Add Integer to ST(0) 

ST(0) 4— ST(0) + 16-bit memory 

ST(0) 4— ST(0) + 32-bit memory 

FiSUB = Subtract Integer from ST(0) 

ST(0) 4— ST(0) - 16-bit memory 

ST(0) 4— ST(0) - 32-bit memory 

FISUBR = Integer Subtract Reversed 
ST(0) 4- 16-bit memory - ST(0) 

ST(0) 4- 32-bit memory - ST(0) 

FIMUL = Multiply Integer with ST(0) 

ST(0) 4— ST(0) X 16-bit memory 

ST(0) 4— ST(0) X 32-bit memory 

FIDIV = Integer Divide 

ST(0) 4- ST(0)/1 6-bit memory 

ST(0) 4- ST(0)/32-bit memory 


11011 000 


11011 100 


11011 dOO 


11011 100 


11011 dOO 


11011 110 


11011 110 


11011 010 


11011 110 


11011 010 


11011 110 


11011 010 


11011 110 


11011 010 


11011 110 


11011 010 


mod 1 0 1 r/m 


mod 1 0 1 r/m 


1110 0 ST(i) 


1110 0 ST(i) 


mod 0 0 1 r/m 


mod 0 01 r/m 


110 01 ST(i) 


110 01 ST(i) 


mod 1 1 0 r/m 


mod 1 0 0 r/m 


11111 ST(i) 


11111 ST(i) 


mod 111 r/m 


mod 111 r/m 


11110 ST(i) 


11110 ST(i) 


mod 0 0 0 r/m 


mod 0 0 0 r/m 


mod 10 0 r/m 


mod 10 0 r/m 


mod 101 r/m 


mod 1 0 1 r/m 


mod 0 01 r/m 


mod 0 01 r/m 


mod 110 r/m 


mod 110 r/m 


i-b/disp. 


s-i-b/disp. 


s-i-b/disp. 


5-i-b/disp. I 


s-i-b/disp. 


s-i-b/disp. 


s-i-b/disp. 


s-i-b/disp. 


s-i-b/disp. 


s-i-b/disp. 


s-i-b/disp. 


s-i-b/disp. 


s-i-b/disp. 


s-i-b/disp. 


□ 


s-i-b/disp. 


s-i-b/disp. 


s-i-b/disp. 


s-i-b/disp. 


Cache Hit 

Penalty if 
Cache Miss 

Concurrent 

Execution 


Avg (Lower 
Range . . . 
Upper Range) 

Avg (Lower 
Range ... 
Upper Range) 

Notes 

10(8-20) 

2 

7(5-17) 


10(8-20) 

3 

7(5-17) 


10(8-20) 


7(5-17) 


10(8-20) 


7(5-17) 


11 

2 

8 


14 

3 

11 


16 


13 


16 


13 


73 

2 

70 

3 

73 

3 

70 

3 

73 


70 

3 

73 


70 

3 

73 

2 

70 

3 

73 

3 

70 

3 

73 


70 

3 

73 


70 

3 

24(20-35) 

2 

7(5-17) 


22.5(19-32) 

2 

7(5-17) 


24(20-35) 

2 

7(5-17) 


22.5(19-32) 

2 

7(5-17) 


24(20-35) 

2 

7(5-17) 


22.5(19-32) 

2 

7(5-17) 


25(23-27) 

2 

8 


23.5(22-24) 

2 

8, 


87(85-89) 

2 

70 

3 

85.5(84-86) 

2 

70 

3 
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Table 10.3. i 486 'rM Microprocessor Floating Point Clock Count Summary (Continued) 


INSTRUCTION FORMAT 

Cache Hit 

Penalty If 
Cache Miss 

Concurrent 

Execution 

Notes 

Avg (Lower 
Range . . . 
Upper Range) 

Avg (Lower 
Range . . . 
Upper Range) 

ARITHMETIC (Continued) 








FIDIVR = Integer Divide Reversed 








ST(0) <- 16-bit memory/ST(0) 1 1 1 0 1 1 

1101 mod 1 1 1 r/m | 

s-i-b/disp. j 

87(85-89) 

2 

70 

3 

ST(0) ■<- 32-bit memory/ST(0) | 1 1 0 11 

0 1 0 1 mod 1 1 1 r/m | 

s-i-b/disp. 1 

85.5(84-86) 

2 

70 

3 

FSQRT = Square Root 1 1 1 0 1 1 

00 1 1 1 1 1 1 

1 01 o| 


85.5(83-87) 


70 


FSCALE = Scale ST(0) by ST(1) 1 1 1 0 1 1 

001 1 1 1 1 1 

1 1 01 1 


31(30-32) 


2 


EXTRACT = Extract components | 1 1 0 1 1 

001 1 1 1 1 1 

01 oo| 


19(16-20) 


4(2-4) 


of ST(0) 








FPREM = Partial Reminder 1 1 1 0 1 1 

001 1 1 1 1 1 

10001 


84(70-138) 


2(2-8) 


FPREM1 = Partial Reminder (IEEE) 1 1 1 0 1 1 

001 1 1 1 1 1 

01 01 1 


94.5(72-167) 


5.5(2-18) 


FRNDINT = Round ST(0) to integer j 1 1 0 1 1 

001 1 1 1 1 1 

1 1 oo| 


29.1(21-30) 


7.4(2-8) 


FABS = Absolute value of ST(0) 1 1 1 0 1 1 

001 1 1 1 1 0 

0001 1 


3 




FCHS = Change sign of ST(0) . 111011 

001 1 1 1 1 0 

oooo| 


6 




TRANSCENDENTAL 








FCOS = Cosine of ST(0) 1 1 1 0 1 1 

001 1 1 1 1 1 

1 1 1 1 1 


241(193-279) 


2 

6.7 

FPTAN = Partial tangent of ST(0) 1 1 1 0 1 1 

00 1 1 1 1 1 1 

001 o| 


244(200-273) 


70 

6,7 

FPATAN = Partial arctangent 1 1 1 0 1 1 

001 1 1 1 1 1 

001 1 1 


289(218-303) 


5(2-17) 

6 

FSIN = SineofST(O) |l1011 

00 1 1 1 1 1 1 

1 1 1 o| 


241(193-279) 


2 

6.7 

FSINCOS = Sine and cosine of ST(0) | 1 1 0 1 1 

001 1 1 1 1 1 

1 01 1 1 


291(243-329) 


2 

6,7 

F2XM1 = - 1 1 1 1 0 1 1 

001 1 1 1 1 1 

oooo| 


242(140-279) 


2 

6 

FYL2X = ST(1) X log2(ST(0)) | 1 1 0 1 1 

00 1 1 1 1 1 1 

0001 i 


311(196-329) 


13 

6 

FYL2XP1 = ST(1) X log2(ST(0) + 1.0) 1 1 1 0 1 1 

001 1 1 1 1 1 

1 001 1 


313(171-326) 


13 

6 

PROCESSOR CONTROL 








FINIT = Initialize FPU 1 1 1 0 1 1 

0 1 1 1 1 1 1 0 

001 1 1 


17 



4 

FSTSW AX = Store status word | 1 1 0 1 1 

1 1 1 1 1 1 1 0 

ooool 


3 



5 

into AX 








FSTSW = Store status word | 1 1 0 1 1 

1 0 1 1 mod 1 1 1 r/m 1 

s-i-b/disp. 1 

3 



5 

into memory 








FLDCW = Load control word | 1 1 0 1 1 

0 0 1 1 mod 101 r/m 1 

s-i-b/disp. 1 

4 

2 



FSTCW = Store control word 1 1 1 0 1 1 

0 0 1 1 mod 111 r/m 1 

s-i-b/disp. 1 

3 



5 

FCLEX = Clear exceptions 1 1 1 0 1 1 

0 1 1 1 1 1 1 0 

001 o| 


7 



4 

FSTENV = Store environment | 1 1 0 1 1 

0 0 1 1 mod 110 r/m j 

s-i-b/disp. 1 





Real and Virtual modes 16-bit Address 




67 



4 

Real and Virtual modes 32-bit Address 




67 



4 

Protected mode 1 6-bit Address 




56 



4 

Protected mode 32-bit Address 




56 



4 . 

FLDENV = Load environment | 1 1 0 1 1 

0 0 1 1 mod 10 0 r/m j 

s-i-b/disp. 1 





Real and Virtual modes 1 6-bit Address 




44 

2 



Real and Virtual modes 32-bit Address 




44 

2 



Protected mode 16-bit Address 




34 

2 



Protected mode 32-bit Address 




34 

2 
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Table 10.3. i 486 'rM Microprocessor Floating Point Clock Count Summary (Continued) 


INSTRUCTION FORMAT 

Cache Hit 

Penalty if 
Cache Miss 

Concurrent 

Execution 

Notes 

Avg (Lower 
Range . . . 
Upper Range) 

Avg (Lower 
Range . . . 
Upper Range) 

PROCESSOR CONTROL (Continued) 





FSAVE = Save state | 1 1 0 1 1 1 0 1 | mod 110 r/m | s-i-b/disp. I 





Real and Virtual modes 16-bit Address 

154 



4 

Real and Virtual modes 32-bit Address 

154 



4 

Protected mode 16-bit Address 

143 



4 

Protected mode 32-bit Address 

143 



4 

FRSTOR = Restore state | 1 1 0 1 1 1 0 1 | mod 1 0 0 r/m | s-i-b/ | 





Real and Virtual modes 16-bit Address 

131 

23 



Real and Virtual modes 32-bit Address 

131 

27 



Protected mode 16-bit Address 

120 

23 



Protected mode 32-bit Address 

120 

27 



FINCSTP = Increment Stack Pointer |l1011 00l|l111 Olllj 

3 




FDECSTP = Decrement Stack Pointer |l1011 00l|l111 Oliol 

3 




FFREE - Free ST(i) |l1011 lOllllOOO ST(i) 1 

3 




FNOP = No operations |l1011 OOllllOl OOOo| 

3 




WAIT = Wait until FPU ready | 1 0 0 1 1 0 1 1 | 





(Minimum/Maximum) 

1/3 





NOTES: 

1. If operand is 0 clock counts = 27: 

2. If operand is 0 clock counts = 28. 

3. If CW.PC indicates 24 bit precision then subtract 38 clocks. 

If CW.PC indicates 53 bit precision then subtract 1 1 clocks. 

4. If there is a numeric error pending from a previous instruction add 1 7 clocks. 

5. If there is a numeric error pending from a previous instruction add 1 8 clocks. 

6. The INT pin is polled several times while this instruction is executing to assure short interrupt latency. 

7. If ABS(operand) is greater than 7r/4 then add n clocks. Where n = (operand/(7r/4)). 


10.2 Instruction Encoding 
10.2.1 OVERVIEW 

All instruction encodings are subsets of the general 
instruction format shown in Figure 10.1. Instructions 
consist of one or two primary opcode bytes, possibly 
an address specifier consisting of the “mod r/m“ 
byte and “scaled index” byte, a displacement if re- 
quired, and an immediate data field If required. 

Within the primary opcode or opcodes, smaller en- 
coding fields may be defined. These fields vary ac- 
cording to the class of operation. The fields define 
such Information as direction of the operation, size 
of the displacements, register encoding, or sign ex- 
tension. 

Almost all instructions referring to an operand In 
memory have an addressing mode byte following 
the primary opcode byte(s). This byte, the mod r/m 
byte, specifies the address mode to be used. Certain 


encodings of the mod r/m byte indicate a second 
addressing byte, the scale-index-base byte, follows 
the mod r/m byte to fully specify the addressing 
mode. 

Addressing modes can Include a displacement Im- 
mediately following the mod r/m byte, or scaled in- 
dex byte. If a displacement Is present, the possible 
sizes are 8, 16 or 32 bits. 

If the instruction specifies an immediate operand, 
the Immediate operand follows any displacement 
bytes. The immediate operand. If specified, is always 
the last field of the Instruction. 

Figure 10.1 illustrates several of the fields that can 
appear in an instruction, such as the mod field and 
the r/m field, but the Figure does not show all fields. 
Several smaller fields also appear in certain Instruc- 
tions, sometimes within the opcode bytes them- 
selves. Table 10.4 is a complete list of all fields ap- 
pearing in the 486 Microprocessor instruction set. 
Further ahead, following Table 10.4, are detailed ta- 
bles for each field. 
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TTTTTTTT 

TTTTTTTT 

mod TTT r/m 

ss index base 




0 7 


0^ J 6 5 3 2 0^J 6 5 3 2 0^ ^ 


|d32 1 16 I 8 I none data32 |16 | 8 | none 
J \ J 


opcode 

(one or two bytes) 
(T represents an 
opcode bit.) 


“mod r/m“ “s-i-b“ 

byte byte ^ 

V 

register and address 
mode specifier 


address 
displacement 
(4, 2, 1 bytes 
dr none) 


immediate 

data 

(4, 2, 1 bytes 
or none) 


Figure 10.1. General Instruction Format 


Table 10.4. Fields within i 486 TM Microprocessor Instructions 


Field Name 

Description 

Number of Bits 

w 

Specifies If Data is Byte or Full Size (Full Size is either 1 6 or 32 Bits 

1 

d 

Specifies Direction of Data Operation 

1 

s 

Specifies if an Immediate Data Field Must be Sign-Extended 

1 

reg 

General Register Specifier 

3 

mod r/m 

Address Mode Specifier (Effective Address can be a General Register) 

2 for mod; 

3 for r/m 

ss 

Scale Factor for Scaled Index Address Mode 

2 

index 

General Register to be used as Index Register 

3 

base 

General Register to be used as Base Register 

3 

sreg2 

Segment Register Specifier for CS, SS, DS, ES 

2 

sreg3 

Segment Register Specifier for CS, SS, DS, ES, FS, GS 

3 

tttn 

For Conditional Instructions, Specifies a Condition Asserted 



or a Condition Negated 

4 


NOTE: 

Tables 10.1-10.3 show encoding of individual instructions. 

10.2.2 32-BIT EXTENSIONS OF THE 
INSTRUCTION SET 

With the 486 Microprocessor, the 8086/80186/ 
80286 instruction set is extended in two orthogonal 
directions: 32-bit forms of all 16-bit instructions are 
added to support the 32-bit data types, and 32-bit 
addressing modes are made available for all instruc- 
tions referencing memory. This orthogonal instruc- 
tion set extension is accomplished having a Default 
(D) bit in the code segment descriptor, and by hav- 
ing 2 prefixes to the instruction set. 

Whether the instruction defaults to operations of 16 
bits or 32 bits depends on the setting of the D bit in 
the code segment descriptor, which gives the de- 
fault length (either 32 bits or 1 6 bits) for both oper- 
ands and effective addresses when executing that 
code segment. In the Real Address Mode or Virtual 
8086 Mode, no code segment descriptors are used, 
but a D value of 0 is assumed internally by the 486 


Microprocessor when operating in those modes (for 
16-bit default sizes compatible with the 8086/ 
80186/80286). 

Two prefixes, the Operand Size Prefix and the Effec- 
tive Address Size Prefix, allow overriding individually 
the Default selection of operand size and effective 
address size. These prefixes may precede any op- 
code bytes and affect only the Instruction they pre- 
cede. If necessary, one or both of the prefixes may 
be placed before the opcode bytes. The presence of 
the Operand Size Prefix and the Effective Address 
Prefix will toggle the operand size or the effective 
address size, respectively, to the value “opposite” 
from the Default setting. For example, if the default 
operand size Is for 32-bit data operations, then pres- 
ence of the Operand Size Prefix toggles the instruc- 
tion to 16-blt data operation. As another example, if 
the default effective address size is 16 bits, pres- 
ence of the Effective Address Size prefix toggles the 
instruction to use 32-blt effective address computa- 
tions. 
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These 32-bit extensions are available in all 486 Mi- 
croprocessor modes, including the Real Address 
Mode or the Virtual 8086 Mode. In these modes the 
default is always 16 bits, so prefixes are needed to 
specify 32-bit operands or addresses. For instruc- 
tions with more than one prefix, the order of prefixes 
is unimportant. 

Unless specified otherwise, instructions with 8-bit 
and 16-bit operands do not affect the contents of 
the high-order bits of the extended registers. 

10.2.3 ENCODING OF INTEGER 
INSTRUCTION FIELDS 

Within the instruction are several fields indicating 
register selection, addressing mode and so on. The 
exact encodings of these fields are defined immedi- 
ately ahead. 

10.2.3.1 Encoding of Operand Length (w) Field 

For any given instruction performing a data opera- 
tion, the instruction is executing as a 32-bit operation 
or a 16-bit operation. Within the constraints of the 
operation size, the w field encodes the operand size 
as either one byte or the full operation size, as 
shown in the table below. 



Operand Size 

Operand Size 

w Field 

During 16-Bit 

During 32-Bit 


Data Operations 

Data Operations 

0 

8 Bits 

8 Bits 

1 

1 6 Bits 

32 Bits 


10.2.3.2 Encoding of the General 
Register (reg) Field 

The general register is specified by the reg field, 
which may appear in the primary opcode bytes, or as 
the reg field of the “mod r/m“ byte, or as the r/m 
field of the “mod r/m” byte. 


Encoding of reg Field When w Field 
is not Present in Instruction 


reg Field 

Register Selected 
During 16-Bit 
Data Operations 

Register Selected 
During 32-Bit 
Data Operations 

000 

AX 

EAX 

001 

CX 

ECX 

010 

DX 

EDX 

oil 

BX 

EBX 

100 

SP 

ESP 

101 

BP 

EBP 

110 

SI 

ESI 

111 

Dl 

EDI 


Encoding of reg Field When w Field 
is Present in Instruction 


Register Specified by reg Field 

During 16-Bit Data Operations: 

reg 

Function of w Field 

(when w = 0) 

(when w = 1) 

000 

AL 

AX 

001 . 

CL 

CX 

010 

DL 

DX 

oil 

BL 

BX 

100 

AH 

SP 

101 

CH 

BP 

110 

DH 

SI 

111 

BH 

Dl 


Register Specified by reg Field 


During 32-Bit Data Operations 

reg 

Function of w Field 

(when w = 0) 

(when w = 1) 

000 

AL 

EAX 

001 

CL 

ECX 

010 

DL 

EDX 

oil 

BL 

EBX 

100 

AH 

ESP 

101 

CH 

EBP 

110 

DH 

ESI 

111 

BH 

EDI 
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10.2.3.3 Encoding of the Segment 
Register (sreg) Fieid 

The sreg field in certain instructions is a 2-bit field 
allowing one of the four 80286 segment registers to 
be specified. The sreg field in other instructions is a 
3-bit field, allowing the 486 Microprocessor FS and 
GS segment registers to be specified. 


2-Bit sreg2 Fieid 


2-Bit 

sreg2 Field 

Segment 

Register 

Selected 

00 

ES 

01 

CS 

10 

SS 

11 

DS 


3-Bit sreg3 Fieid 


3-Bit 

sreg3 Field 

Segment 

Register 

Selected 

000 

ES 

001 

CS 

010 

Ss 

oil 

DS 

100 

FS 

101 

GS 

110 j 

do not use 

111 

do not use 


10.2.3.4 Encoding of Address Mode 

Except for special Instructions, such as PUSH or 
POP, where the addressing mode is pre-determlned, 
the addressing mode for the current instruction is 
specified by addressing bytes following the primary 
opcode. The primary addressing byte is the “mod 
r/m“ byte, and a second byte of addressing informa- 
tion, the “s-i-b“ (scale-index-base) byte, can be 
specified. 

The s-i-b byte (scale-index-base byte) is specified 
when using 32-bit addressing mode and the “mod 
r/m” byte has r/m = 100 and mod = 00, 01 or 10. 
When the sib byte is present, the 32-blt addressing 
mode is a function of the mod, ss, index, and base 
fields. 

The primary addressing byte, the “mod r/m” byte, 
also contains three bits (shown as TTT In Figure 
10.1) sometimes used as an extension of the pri- 
mary opcode. The three bits, however, may also be 
used as a register field (reg). 

When calculating an effective address, either 1 6-bit 
addressing or 32-bit addressing is used. 16-bit ad- 
dressing uses 1 6-bit address components to calcu- 
late the effective address while 32-bit addressing 
uses 32-bit address components to calculate the ef- 
fective address. When 1 6-bit addressing is used, the 
“mod r/m” byte is interpreted as a 16-bit addressing 
mode specifier. When 32-bit addressing is used, the 
“mod r/m” byte is Interpreted as a 32-bit addressing 
mode specifier. . 

Tables on the following three pages define all en- 
codings of all 16-blt addressing modes and 32-blt 
addressing modes. 
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Encoding of 16-bit Address Mode with “mod r/m” Byte 


mod r/m 

Effective Address 

00 000 

DS:[BX + SI] 

00 001 

DS:(BX + DI] 

00 010 

SS:[BP + SI] 

00 011 

SS:[BP + DI] 

00 100 

DS:[SI] 

00 101 

DS:[DI] 

00 110 

DS:d16 

00111 

DS;[BX] 

01 000 

DS:[BX + SI + d8l 

01 001 

DS;[BX + DI + d8] 

01 010 

SS:[BP + SI + d8] 

01011 

SS:[BP + DI + d8] 

01 100 

DS:[SI + d8] 

01 101 

DS:[DI + d8] 

01 110 

SS:[BP + d8] 

01111 

DS:[BX + d8] 


Register Specified by r/m 

During 16-Bit Data Operations 

mod r/m 

Function of w Field 

(when w = 0) 

(when w = 1) 


11 000 

AL 

AX 

11 001 

CL 

CX 

11 010 

DL 

DX 

11011 

BL 

BX 

11 100 

AH 

SP 

11 101 

CH 

BP 

11 110 

DH 

SI 

11 111 

BH 

Dl 


mod r/m 

Effective Address 

10 000 

DS:[BX+SI + d16] 

10 001 

DS:[BX + DI + d16] 

10010 

SS:[BP+SI + d16] 

10011 

SS:[BP + DI + d16] 

10 100 

DS:[SI + d16] 

10101 

DS:[DI + d16l 

10110 

SS:[BP+d16] 

10111 

DS:[BX + d16] 

11 000 

register — see below 

11 001 

register — see below 

11 010 

register — see below 

11 oil 

register — see below 

11 100 

register — see below 

11 101 

register — see below 

11 110 

register — see below 

11 111 

register — see below 


Register Specified by r/m 

During 32-Bit Data Operations 

mod r/m 

Function of w Field 

(when w = 0) 

(when w = 1) 

11 000 

AL 

EAX 

11 001 

CL 

ECX 

11 010 

DL 

EDX 

11 oil 

BL 

EBX 

11 100 

AH 

ESP 

11 101 

CH 

EBP 

11 110 

DH 

ESI 

11 111 

BH 

EDI 
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Encoding of 32-bit Address Mode with “mod r/m” byte (no “s-i-b” byte present): 


mod r/m 

Effective Address 

00 000 

DS:[EAX] 

00 001 

DS:[ECX1 

00 010 

DS:[EDX1 

00 011 

DS:[EBX] 

00100 

. S-i-b is present 

00 101 

DS:d32 

00 110 

DS:[ESI] 

00111 

DS:[EDI] 

01 000 

DS:[EAX+d8] 

01 001 

DS:tECX+d8l 

01 010 

DS:[EDX + d8] 

01 oil 

DS;[EBX+d8] 

01 100 

s-i-b is present 

01 101 

SS:[EBP-t-d8l 

01 110 

DS:[ESI-l-d8] 

01 111 

DS;[EDi-i-d8] 


mod r/m 

Effective Address 

10 000 

DS:[EAX-l-d32] 

10 001 

DS:[ECX+d32] 

10010 

DS:[EDX-l-d32] 

10011 

DS:[EBX-t-d32] 

10100 

S-i-b is present 

10101 

SS:[EBP+d32] 

10110 

DS:[ESI-l-d32] 

10111 

DS:[EDI + d32] 

11 000 

register — see below 

11001 

register — see below 

11 010 

register — see below 

11 oil 

register — see below 

11 100 

register — see below 

11 101 

register — see below 

11 110 

register — see below 

11 111 

register— see below 


Register Specified by reg or r/m 
during 32-Bit Data Operations: 

mod r/m 

Function of w field 

(whenw = 0) 

(when w= 1) 


11 000 

AL 

EAX 

11 001 

CL 

ECX 

11 010 

DL 

EDX 

11 oil 

BL 

EBX 

11 100 

AH 

ESP 

11 101 

CH 

EBP 

11 110 

DH 

ESI 

' 11 111 

BH 

EDI 


Register Specified by reg or r/m 
during 16-Bit Data Operations: 

mod r/m 

Function of w field 

(when w = 0) 

(when w= 1) 

11 000 

AL 

AX 

11 001 

CL 

CX 

11 010 

DL 

DX 

11 011 

BL 

BX 

11 100 

AH 

SP ' 

11 101 

CH 

BP, 

11 110 

DH 

SI 

11 111 

BH 

Dl 
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Encoding of 32-blt Address Mode (“mod r/m” byte and “s-i-b” byte present): 


mod base 

Effective Address 

00 000 

DS:[EAX + (scaled index)] 

00 001 

DS:[ECX 4- (scaled index)] 

00 010 

DS:[EDX + (scaled index)] 

00 011 

DS:[EBX + (scaled index)] 

00 100 

SS: [ESP + (scaled index)] 

00 101 

DS:[d32 + (scaled index)] 

00110 

DS:[ESI + (scaled index)] 

00111 

DS:[EDI 4- (scaled index)] 

01 000 

DS: [EAX + (scaled Index) + d8] 

01 001 

DS: [ECX + (scaled index) + d8l 

01 010 

DS: [EDX + (scaled index) + d8] 

01 oil 

DS: [EBX + (scaled index) + d8] 

01 100 

SS: [ESP 4- (scaled index) + d8] 

01 101 

SS: [EBP + (scaled index) + d8] 

01 110 

DS: [ESI + (scaled index) 4- d8] 

01 111 

DS: [EDI 4- (scaled Index) + d8] 

10 000 

DS: [EAX 4- (scaled Index) + d32] 

10 001 

DS: [ECX + (scaled index) 4- d32] 

10010 

DS: [EDX 4- (scaled index) 4- d32] 

10011 

DS: [EBX + (scaled index) + d32] 

10 100 

SS: [ESP + (scaled index) 4- d32] 

10101 

SS: [EBP + (scaled index) + d32] 

10110 

DS: [ESI + (scaled index) + d32] 

10111 

DS: [EDI + (scaled index) + d32] 


NOTE: 

Mod field in “mod r/m” byte; ss, index, base fields in 
“s-i-b” byte. 


ss 

Scale Factor 

00 

Xl 

01 

x2 

10 

x4 

11 

x8 


index 

Index Register 

000 

EAX 

001 

ECX 

010 

EDX 

oil 

EBX 

100 

no index reg** 

101 

EBP 

110 

ESI 

111 

EDI 


♦♦IMPORTANT NOTE: 

When index field is 100, indicating “no index register,” then 
ss field MUST equal 00. If index is 100 and ss does not 
equal 00, the effective address is undefined. 
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10.2.3.5 Encoding Of Operation 
Direction (d) Field 

In many two-operand instructions the d field is pres- 
ent to indicate which operand is considered the 
source and which is the destination. 


d 

Direction of Operation 

0 

Register/Memory <- - Register 
“reg” Field Indicates Source Operand; 

“mod r/m” or “mod ss index base” Indicates 
Destination Operand 

1 

Register <- - Register/ Memory 
“reg” Field Indicates Destination Operand; 
“mod r/m” or “mod ss Index base” Indicates 
Source Operand 


10.2.3.6 Encoding of Sign-Extend (s) Field 

The s field occurs primarily to instructions with im- 
mediate data fields. The s field has an effect only if 
the size of the immediate data is 8 bits and is being 
placed In a 1 6-bit or 32-bif destination. 



Effect on 

Effect on 

s 

Immediate 

Immediate 


DataS 

Data 16|32 

0 

None 

None 

1 

SIgn-Extend Data8 to Fill 

1 6-Bit or 32-Bit Destination 

None 


Mnemonic 

Condition 

tttn 

0 

Overflow 

0000 

NO 

No Overflow 

0001 

B/NAE 

Below/ Not Above or Equal 

0010 

NB/AE 

Not Below/ Above or Equal 

0011 

E/Z 

Equal/Zero 

0100 

NE/NZ 

Not Equal/Not Zero 

0101 

BE/NA 

Below or Equal/Not Above 

0110 

NBE/A 

Not Below or Equal/Above 

0111 

S 

Sign 

1000 

NS 

Not Sign 

1001 

P/PE 

Parity/ Parity Even 

1010 

NP/PO 

Not Parity/ Parity Odd 

1011 

L/NGE 

Less Than/Not Greater or Equal 

1100 

NL/GE 

Not Less Than/Greater or Equal 

1101 

LE/NG 

Less Than or Equal/Greater Than 

1110 

NLE/G 

Not Less or Equal/Greater Than 

1111 


10.2.3.8 Encoding of Control or Debug 
or Test Register (eee) Field 

For the loading and storing of the Control, Debug 
and Test registers. 


When Interpreted as Control Register Field 


eee Code 

Reg Name 

000 


CRO 

010 


CR2 

oil 


CR3 

Do not use any other encoding 


10.2.3.7 Encoding of Conditional 
Test (tttn) Field 

For the conditional Instructions (conditional jumps 
and set on condition), tttn is encoded with n Indicat- 
ing to use the condition (n = 0) or its negation (n = 1), 
and ttt giving the condition to test. 


When Interpreted as Debug Register Field 


eee Code 

Reg Name 

000 

DRO 

001 

DR1 

010 

DR2 

oil 

DR3 

110 

DR6 

111 

DR7 

Do not use any other encoding 


When Interpreted as Test Register Field 


eee Code 

Reg Name 

oil 

TR3' 

100 

TR4 

101 

TR5 

110 

TR6 

111 

TR7 

Do not use any other encoding 
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Instruction 

Optional 

Fields 

First Byte 

Second Byte 

1 


OPA 

1 

mod 

■i 





2 


MF 


mod 

OPB 

r/m 



3 


d 

P 


1 

1 

OPB 

mm 



4 


0 

0 

1 

1 

1 

1 

OP 



5 


0 

1 

1 

1 

1 


OP 




15-11 

10 

9 

8 

7 

6 

5 

4 3 2 1 0 




10.2.4 ENCODING OF FLOATING POINT 
INSTRUCTION FIELDS 

Instructions for the FPU assume one of the five 
forms shown in the following table. In all cases, in- 
structions are at least two bytes long and begin with 
the bit pattern 11 01 IB. 

OP = Instruction opcode, possible split into two 
fields OPA and OPB 

MF = Memory Format 

00— 32-bit real 

01— 32-bit integer 

1 0— 64-bit real 

11 — 16-bit integer 

P = Pop 

0 — Do not pop stack 

1 — Pop stack after operation 

d = Destination 

0— Destination is ST(0) 

1 — Destination Is ST(i) 

R XOR d = 0 — Destination (op) Source 
R XOR d = 1 — Source (op) Destination 

ST(i) = Register stack element / 

000 = Stack top 

001 = Second stack element 


111= Eighth stack element 

mod (Mode field) and r/m (Register/Memory specifi- 
er) have the same Interpretation as the correspond- 
ing fields of the integer instructions. 

s-l-b (Scale Index Base) byte and disp (displace- 
ment) are optionally present in instructions that have 
mod and r/m fields. Their presence depends on the 
values of mod and r/m, as for integer instructions. 


11.0 DIFFERENCES BETWEEN THE 
i 486 TM MICROPROCESSOR AND 
THE 386 TM MICROPROCESSOR 
PLUS THE 387 TM MATH 
COPROCESSOR EXTENSION 

The differences between the 486 microprocessor 
and the 386 microprocessor are due to performance 
enhancements. The differences between the micro- 
processors are listed below. 

1. Instruction clock counts have been reduced to 
achieve higher performance. See Section 10. 

2. The 486 microprocessor bus is significantly fast- 
er than the 386 microprocessor bus. Differences 
include a IX clock, parity support, burst cycles, 
cacheable cycles, cache invalidate cycles and 
8-bit bus support. The Hardware Interface and 
Bus Operation Sections (Sections 6 and 7) of 
the data sheet should be carefully read to un- 
derstand the 486 microprocessor bus function- 
ality. 

3. To support the on-chip cache new bits have 
been added to control register 0 (CD and NW) 
(Section 2. 1.2.1), new pins have been added to 
the bus (Section 6) and new bus cycle types 
have been added (Section 7). The on-chip 
cache needs to be enabled after reset by clear- 
ing the CD and NW bit in CRO. 

4. The complete 387 math coprocessor instruction 
set and register set have been added. No I/O 
cycles are performed during Floating Point in- 
structions. The instruction and data pointers are 
set to 0 after FINIT/FSAVE. Interrupt 9 can no 
longer occur, interrupt 13 occurs instead. 

5. The 486 microprocessor supports new floating 
point error reporting modes to guarantee DOS 
compatibility. These new modes required a new 
bit in control register 0 (NE) (Section 2. 1.2.1) 
and new pins (FERR# and IGNNE#) (Section 
6.2.13 and 7.2.14). 
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6. Six new instructions have been added: 

Byte Swap (BSWAP) 

Exchange-and-Add (XADD) 

Compare and Exchange (CMPXCHG) 

Invalidate Data Cache (INVD) 

Write-back and Invalidate Data Cache 
(WBINVD) 

Invalidate TLB Entry (INVLPG) 

7. There are two new bits defined in control regis- 
ter 3, the page table entries and page directory 
entries (PCD and PWT) (Section 4.5.2.5). 

8. A new page protection feature has been added. 
This feature required a new bit in control register 
0 (WP) (Section 2.1. 2.1 and 4.5.3). 

9. A new Alignment Check feature has been add- 
ed. This feature required a new bit in the flags 
register (AC) (Section 2. 1.1. 3) and a new bit in 
control register 0 (AM) (Section 2.1. 2.1). 

10. The replacement algorithm for the translation 
lookaside buffer has been changed to a pseudo 
least recently used algorithm like that used by 
the on-chip cache. See Section 5.5 for a de- 
scription of the algorithm. 

11. Three new testability registers, TR3, TR4 and 
TR5, have been added for testing the on-chip 
cache. TLB testability has been enhanced. See 
Section 8. 

1 2. The prefetch queue has been increased from 1 6 
bytes to 32 bytes. A jump always needs to exe- 
cute after modifying code to guarantee correct 
execution of the new instruction. 

13. After reset, the ID in the upper byte of the DX 
register is 04. The contents of the base regis- 
ters including the floating point registers may be 
different after reset. 


12.0 ELECTRICAL DATA 

The following sections describe recommended elec- 
trical connections for the 486 microprocessor, and 
its electrical specifications. 


12.1 Power and Grounding 

12.1.1 POWER CONNECTIONS 

The 486 microprocessor is implemented in CHMOS 
IV technology and has modest power requirements. 


However, its high clock frequency output buffers can 
cause power surges as multiple output buffers drive 
new signal levels simultaneously. For clean on-chip 
power distribution at high frequency, 24 Vcc and 28 
Vss pins feed the 486 microprocessor. 

Power and ground connections must be made to all 
external Vcc and GND pins of the 486 microproces- 
sor. On the circuit board, all Vcc P'ns must be con- 
nected on a Vcc plane. All Vss pins must be like- 
wise connected on a GND plane. 


12.1.2 POWER DECOUPLING 
RECOMMENDATIONS 

Liberal decoupling capacitance should be placed 
near the 486 microprocessor. The 486 microproces- 
sor driving its 32-bit parallel address and data bus- 
ses at high frequencies can cause transient power 
surges, particularly when driving large capacitive 
loads. 

Low inductance capacitors and Interconnects are 
recommended for best high frequency electrical per- 
formance. Inductance can be reduced by shortening 
circuit board traces between the 486 microproces- 
sor and decoupling capacitors as much as possible. 
Capacitors specifically for PGA packages are also 
commercially available. 

12.1.3 OTHER CONNECTION 
RECOMMENDATIONS 

N.C. pins should always remain unconnected. 

For reliable operation, always connect unused in- 
puts to an appropriate signal level. Active LOW in- 
puts should be connected to Vcc through a pullup 
resistor. Pullups in the range of 20 KH are recom- 
mended. Active HIGH Inputs should be connected to 
GND. 


12.2 Maximum Ratings 

Table 12.1 is a stress rating only, and functional op- 
eration at the maximums is not guaranteed. Function 
operating conditions are given in 12.3 D.C. Specifi- 
cations and 1 2.4 A.C. Specifications. 

Extended exposure to the Maximum Ratings may af- 
fect device reliability. Furthermore, although the 486 
microprocessor contains protective circuitry to resist 
damage from static electric discharge, always take 
precautions to avoid high static voltages or electric 
fields. 
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Table 12.1. Absolute Maximum Ratings 

Case Temperature under Bias . . . -65®C to + 11 0®C 

Storage Temperature -65®C to + 1 50°C 

Voltage on Any Pin with 

Respect to Ground -0.5 to Vcc + 0.5V 

Supply Voltage with 

Respect to Vss -0.5V to + 6.5V 


12.3 D.C. Specifications 

Functional Operating Range: Vcc = 5V ±5%; Tcase = 0°C to +85°C 


Table 12.2. DC Parametric Values 

Symbol 

Parameter 

Min 

Max 

Unit 

Notes 

V|L 

Input Low Voltage 

-0.3 

4 0-8 

V 


V|H 

Input High Voltage 

2.0 

-F0.3 

V 


VoL 

Output Low Voltage 


■ ^.o;45 

V 

(Notel) 

Vqh 

Output High Voltage 



V 

(Note 2) 

Icc 

Power Supply Current (25 MHz) 


' ; 70b 

mA 

(Note 3) 


Power Supply Current (33 MHz) ^ 

. A V''" 

: "900 



Ili 

Input Leakage Current ^ 


^ ±15 

fiA 

(Note 4) 

l|H 

Input Leakage Current : 


200 

jliA 

(Note 5) 

l|L 

1 nput Leakage Current ; ; ; 

■ ^ 

-400 

jllA 

(Note 6) 

Ilo 

Output Leakage Current v 


±15 

jiiA 


C|N 

Input Capacitance , \ 


20 

PF 

Fc = 1 MHz (Note 7) 

Co 

I/O or Output Capacitance 


20 

PF 

Fc = 1 MHz (Note 7) 

CCLK 

CLK Capacitance 


20 

pF 

, Fc = 1 MHz (Note 7) 


NOTES: 

1 . This parameter is measured at: 

Address, Data, BEn 4.0 mA 

Definition, Control 5.0 mA 

2. This parameter is measured at: 

Address, Data, BEn 1 .0 mA 

Definition, Control 0.9 mA 

3. Typical supply current: 

550 mA @ 25 MHz 
700 mA @ 33 MHz 

4. This parameter is for inputs without pullups or pulldowns and 0 ^ V|n ^ Vcc- 

5. This parameter is for inputs with pulldowns and Vm = 2.4V. 

6. This parameter is for inputs with pullups and V||_ = 0.45V. 

7. Not 100% tested. 

12.4 A.C. Specifications measured. 486 microprocessor output de- 

^ lays are specified with minimum and maximum limits, 

The A.C. specifications, given in Table 12.3, consist measured as shown. The minimum 486 microproc- 

of output delays. Input setup requirements and input essor delay times are hold times provided to exter- 

hold requirements. All A.C. specifications are rela- nal circuitry. 486 microprocessor input setup and 

tive to the rising edge of the CLK signal. hold times are specified as minimums, defining the 

smallest acceptable sampling window. Within the 
A.C. specifications measurement is defined by Fig- sampling window, a synchronous input signal must 

ures 12.1-12.3. Inputs must be driven to the voltage be stable for correct 486 microprocessor operation, 

levels indicated by Figure 1 2.3 when A.C. specifica- 
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Table 12.3. 25 MHz i486 Microprocessor A.C. Characteristics 



NOTE: 

1. Not 100% tested. Guaranteed by design characterization. 
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Table 12.3. 33 MHz i486 Microprocessor A.C. Characteristics 



NOTE: 

1. Not 100% tested. Guaranteed by design characterization. 
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12.4.1 Typical Output Valid Delay versus Load 
Capacitance Under Worst Case 
Conditions 



NOTE: 

This graph will not be linear outside of the Cl range shown, 
non = nominal value given in A.C. Characteristics table. 

12.4.2 Typical Output Rise Time versus Load 
Capacitance Under Worst-Case 
Conditions 



This graph will not be linear outside of the Cl range shown. 


12.5 Designing for ICD-486 
(Advance information) 

The lCD-486 (In-Circuit Debugger) is a hardware as- 
sisted debugger for the 486 CPU. To use the ICD- 


486, the 486 CPU component must be removed 
from its socket replaced with the ICD-486 module. 
Because of the high operating frequency of 486 CPU 
systems, there is no buffering of signals between the 
486 CPU in the ICD-486 and the target system. A 
direct result of the non-buffered interconnect is that 
the ICD-486 shares the address and data bus of the 
target system. In order for the ICD-486 to function 
properly (without the Optional Isolation Board in- 
stalled), the design of the target system must meet 
the following restrictions: 

1. The bus controller must only enable data trans- 
ceivers onto the data bus during valid read cycles 
of the 486 CPU, other local devices, or other bus 
masters. 

2. Before another bus master drives the local proc- 
essor address bus, the other bus master must 
gain access to the address bus through the use 
of HOLD-HLDA, AHOLD, or BOFF#. 

In addition to the above restrictions, the ICD-486 has 
several electrical and mechanical characteristics 
that should be taken into consideration when de- 
signing the 486 CPU system. 

Capacitive Loading: ICD-486 adds up to 30 pF to the 
CLK signal, and up to 20 pF to each of the other 486 
CPU signals. 

DC Loading: ICD-486 adds ±15 /xA loading to the 
CLK and data bus signals and ± 5 |llA loading to the 
address and control signals. 

Power Requirements: For noise immunity and 
CMOS latch-up protection the ICD-486 Is powered 
by the target system through the power and ground 
pins of the 486 CPU socket. The circuitry on the 
ICD-486 draws up to 1.3A excluding the 486 CPU 
tc- 

No Connects: Pins specified as N.C. In the 486 CPU 
pin description must be left unconnected. Connec- 
tion of any of these pins to power, ground, or any 
other signal may cause the processor or the ICD- 
486 to malfunction. 

486 CPU Location and Orientation: The ICD-486 
may require lateral clearance. Figure 1 2.4 shows the 
clearance requirements of the ICD-486. 
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Optional Isolation Board (OIB) 

Due to its unbuffered design, the ICD-486 is suscep- 
tible to errors on the target system’s bus. The OIB 
installs between the ICD-486 and 486 CPU socket in 
the target system and allows the ICD-486 to function 
in systems with faults (i.e., shorted signals). After 
electrical verification the OIB may be removed. The 
OIB has the following electrical and mechanical 
characteristics: 

Buffer Characteristics: The OIB buffers the address 
and data busses as well as the byte enables, ADS#, 
W/R#, M/IO#, BLAST#, and HLDA. The buffers 
are advanced CMOS devices and have the following 
DC drive specifications: Iqh “‘•5 mA, Iql = 
64 mA. The propagation delay of each buffer is 5 ns 
max driving a 50 pF load. To guarantee proper oper- 


ation with the OIB, the clock period should be In- 
creased by the round trip buffer delay (10 ns) unless 
the target system design already has enough timing 
margin. 

Unbuffered Signals: Signals not listed above as buff- 
ered are passed through the OIB and will have addi- 
tional capacitive loading due to the connectors and 
circuit board of up to 1 0 pF. 

Power Requirements: The OIB is also powered by 
the target system through the 486 CPU socket and 
requires 0.5A In addition to the ICD-486 and 486 
CPU requirements. 

OIB Clearance Requirements: The OIB requires an 
extra 0.55" of vertical clearance In the target system 
above the 486 CPU socket. 
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Figure 12.4a. ICD-486'rM Probe Dimensions 
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Figure 12.4b. ICD-486'rM Probe Dimensions 
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Figure 12.4c. ICD-486‘rM Probe Dimensions 
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Processor Module Board Dimensions 



Processor Module Assembly Dimensions 
Top View 




Processor Module Assembly Dimensions 
Side View 



Processor Module Assembly Dimensions 
Side View, OIB Installed 


i 486 TM MICROPROCESSOR 







II 1101 


i 486 TM MICROPROCESSOR 


13.0 MECHANICAL DATA 




® ® ® 
® ® ® 
® ® ® 
® ® ® 
® ® ® 
® ® ® 
® ® ® 
® ® ® 
s® ® ® 
®S® ® 
® ^® 


f \ 

V ^ 


® ® ® 
® ® ® 
® ® ® 
® ® ® 
® ® ® 
® ® ® 
@ @ @ 
® ® ® 
® ® ® 
® ® ® 
® ® ® 


0B (ALL PINS) 


® ® El ®®®®®®®®®®® © ® ® 

®®®®®®®®®®®®®® ®No) ® 
®®®®®®®®®®®®®®® 


SWAGGED 

PIN 

(4 PL) 


SWAGGED 

PIN 

DETAIL 



Figure 13.1. 168 Lead Ceramic PGA Package Dimensions 
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Table 13.1 Ceramic PGA Package Dimension Symbols 


Letter or 

Symbol 

Description of Dimensions 

A 

Distance from seating plane to highest point of body 

Ai 

Distance between seating plane and base plane (lid) 

A2 

Distance from base plane to highest point of body 

A3 

Distance from seating plane to bottom of body 

B 

Diameter of terminal lead pin 

D 

Largest overall package dimension of length 

Di 

A body length dimension, outer lead center to outer lead center 

ei 

Linear spacing between true lead position centerlines 

L 

Distance from seating plane to end of lead ■ 

Si 

Other body dimension, outer lead center to edge of body 


NOTES: 

1. Controlling dimension: millimeter. 

2. Dimension “e-i” (“e”) is non-cumulative. 

3. Seating plane (standoff) is defined by P.C. board hole size: 0.0415-0.0430 inch. 

4. Dimensions “B”, “B-)” and “C” are nominal. 

5. Details of Pin 1 identifier are optional. 


13.1 Package Thermal Specifications 

The 486 microprocessor is specified for operation 
when Tc (the case temperature) is within the range 
of 0°C-85°C. Tc may be measured in any environ- 
ment to determine whether the 486 microprocessor 
is within specified operating range. The case tem- 
perature should be measured at the center of the 
top surface opposite the pins. 

Ta (the ambient temperature) can be calculated 
from Oca (thermal resistance from case to ambient) 
with the following equation: 

Ta = Tc - P*0CA 

Typical values for Oca at various airflows are given 
in Table 13.2 for the 1.75 sq. in., 168 pin, ceramic 
PGA. 

Table 13.3 shows the Ta allowable (without exceed- 
ing Tc) at various airflows and operating frequencies 
(fCLK)- 


Note that Ta is greatly improved by attaching "fins” 
or a “heat sink” to the package.. P (the maximum 
power consumption) is calculated by using the maxi- 
mum Icq at 5V as tabulated in the DC Characteris- 
tics of Section 1 2. 

Table 13.2. Thermal Resistance (Oqa) a* Various 
Airflows 


In °C/Watt 



Airflow-ft/min (m/sec) 

0 

(0) 

200 

(1) 

400 

(2) 

600 

(3) 

800 

(4) 

1000 

(5) 

^CA with 

Heat Sink* (°C/W) 

12 

7.5 

5.5 

4.5 

3.5 

3.0 

^CA without 

Heat Sink (°C/W) 

15.5 

13.0 

11.0 

9.5 

8.5 

8.0 


*0.300" high unidirectional heat sink (Al alloy 6061, 50 mil 
fin width, 1 70 mil center-to-center fin spacing). 


Heat Sink Dimensions 



240440-81 
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Table 13.3. Maximum Ta at Various Airflows 

InX 

Airflow-ft/min (m/sec) 



fCLK 

(MHz) 

0 

(0) 

200 

(1.01) 

400 

(2.03) 

600 

(3.04) 

800 

(4.06) 

1000 

(5.07) 

Ta with 

25.0 

43 

59 

66 

69 

73 

75 

Heat Sink 

33.3 

31 

51 

60 

65 

69 

72 

Ta without 

25.0 

31 

40 

47 

52 

55 

57 

Heat Sink 

33.3 

15 

27 

36 

42 

47 

49 


14.0 REVISION HISTORY 

Revision -002 of the i486 CPU data sheet contains 

many updates and improvements to the original ver- 
sion. A revision summary of major changes is listed 

below: 

Section 2.1.2 The polarity and names of the two 
cache control bits in Control Regis- 
ter 0 (CRO) have been modified. 
The Cache Enable (CE) and Writes 
Transparent (WR) have been re- 
named Cache Disable (CD) and Not 
Write Through (NW). The value of 
CRO after RESET has been 
changed to reflect the polarity 
change. 

Section 6.2.15 The discussion of A20M# has been 
clarified. During the falling edge of 
RESET, A20M# should be high, for 
proper operation of the CPU. 

Section 6.5 The value of CRO after RESET has 
been modified. 

Section 6.5.1 Figure 6.3, “Pin State during RE- 
SET” Is added. This Figure is a gen- 
eral reference for Reset issues. Pre- 
vious Figures 8.1, 8.2, and 8.8 have 
been deleted, since Figure 6.3 now 
contains Reset information. 

Section 7.2.10 A discussion of addresses and byte 
enables driven during INTA cycles 
has been added. 

Section 10.1 Clock counts and opcodes have 
been clarified and corrected. 


Section 10.1 The opcode slot for CMPXCHG in- 
struction has been moved from 
0FA6/A7 to 0FB0/B1. 

Section 12.2 Table 12.1 has been enhanced. The 
“Case Temperature under Bias” 
spec was Improved. The “Supply 
Voltage with Respect to Vss” spec 
was added. 

Section 12.3 Maximum Ice values have been im- 
proved to 700 mA at 25 MHz and 
900 mA at 33 MHz. 

Section 12.3 Typical Ice values have been modi- 
fied to 550 mA at 25 MHz and 700 
mA at 33 MHz. 

Section 12.3 Cjn, Cq, and Cclk values have 
been changed to 20 pF. Testing pa- 
rameters and Note 7 were added. 

Section 12.4 The A.C. Specifications have been 
improved. Float delays were im- 
proved at both 25 MHz and 33 MHz. 
Note 1 was added to the float de- 
lays. Maximum valid delays were re- 
duced at 33 MHz. 

Section 12.5 The ICD section was enhanced. 

Section 13.1 Thermal resistance 8cA values of 
the 168-pin ceramic package have 
been corrected. 

Section 13.1 Maximum ambient temperatures 
have been corrected to use the max 
Ice values. 
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386 TM DX MICROPROCESSOR 
HIGH PERFORMANCE 32-BIT CHMOS MICROPROCESSOR 
WITH INTEGRATED MEMORY MANAGEMENT 


Flexible 32-Bit Microprocessor 

— 8, 16, 32-Bit Data Types 

— 8 General Purpose 32-Bit Registers 

Very Large Address Space 

— 4 Gigabyte Physical 

— 64 Terabyte Virtual 

— 4 Gigabyte Maximum Segment Size 

Integrated Memory Management Unit 

— Virtual Memory Support 

— Optional On-Chip Paging 

— 4 Levels of Protection 

— Fully Compatible with 80286 

Object Code Compatible with Ail 8086 
Family Microprocessors 

Virtual 8086 Mode Allows Running of 
8086 Software in a Protected and 
Paged System 

Hardware Debugging Support 


Optimized for System Performance 

— Pipelined Instruction Execution 

— On-Chip Address Translation Caches 

— 20, 25 and 33 MHz Clock 

— 40, 50 and 66 Megabytes/Sec Bus 
Bandwidth 

High Speed Numerics Support via 387 
DXTM Coprocessor 

Complete System Development 
Support 

— Software: C, PL/M, Assembler 
System Generation Tools 

— Debuggers: PSCOPE, ICEtm.386 

High Speed CHMOS ill and CHMOS IV 
Technology 

132 Pin Grid Array Package 

(See Packaging Specification, Order #231369) 


The 386TM DX Microprocessor is an advanced 32-bit microprocessor designed for applications needing very 
high performance and optimized for multitasking operating systems. The 32-bit registers and data paths 
support 32-bit addresses and data types. The processor addresses up to four gigabytes of physical memory 
and 64 terabytes (2**46) of virtual memory. The Integrated memory management and protection architecture 
includes address translation registers, advanced multitasking hardware and a protection mechanism to sup- 
port operating systems. In addition, the 386 DX allows the simultaneous running of multiple operating systems. 
Instruction pipelining, on-chip address translation, and high bus bandwidth ensure short average instruction 
execution times and high system throughput. 

The 386 DX offers new testability and debugging features. Testability features include a self-test and direct 
access to the page translation cache. Four new breakpoint registers provide breakpoint traps on code execu- 
tion or data accesses, for powerful debugging of even ROM-based systems. 

Object-code compatibility with all 8086 family members (8086, 8088, 80186, 80188, 80286) means the 386 DX 
offers Immediate access to the world’s largest microprocessor software base. 


SEGMENTATION UNIT PAGING UNIT BUS CONTROL 



386TM DX Pipelined 32 -Bit Microarchitecture 

386™ DX and 38?™ DX are Trademarks of Intel Corporation. 

Unix™ is a Trademark of AT&T Bell Labs. 

MS-DOS is a Trademark of MICROSOFT Corporation. 
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1. PIN ASSIGNMENT 

The 386 DX pinout as viewed from the top side of 
the component is shown by Figure 1-1. Its pinout as 
viewed from the Pin side of the component is Figure 
1 - 2 . 


Vcc and GND connections must be made to multi- 
ple Vcc and Vss (GND) pins. Each Vcc and Vss 
must be connected to the appropriate voltage level. 
The circuit board should include Vcc and GND 
planes for power distribution and all Vcc and Vss 
pins must be connected to the appropriate plane. 


NOTE: 

Pins identified as “N.C.” should remain completely 
unconnected. 



Figure 1-1. 386TM DX PGA 
Pinout — View from Top Side 


ABCDEFCHJKLMNP 



Figure 1-2. 386 tm DX PGA 
Pinout — View from Pin Side 


Table 1-1. 386 tm DX PGA Pinout— Functional Grouping 


Signai/Pin 

Signal/Pin 

Signal/Pin 

Signal/Pin 

Signal/Pin 

Signal/Pin 

A2 

C4 

A24 

L2 

D6 

LI 4 

D28 

M6 

Vcc 

Cl 2 

Vss 

F2 

A3 

A3 

A25 

K3 

D7 

K12 

D29 

P4 


D12 


F3 

A4 

B3 

A26 

Ml 

D8 

LI 3 

D30 

P3 


G2 


FI 4 

A5 

B2 

A27 

N1 

D9 

N14 

D31 

M5 


G3 


J2 

A6 

C3 

A28 

L3 

DIO 

M12 

D/C# 

All 


G12 


J3 

A7 

C2 

A29 

M2 

Dll 

N13 

ERROR# 

A8 


G14 


J12 

A8 

Cl 

A30 

PI 

D12 

N12 

HLDA 

M14 


L12 


J13 

A9 

D3 

A31 

N2 

D13 

P13 

HOLD 

D14 


M3 


M4 

A10 

D2 

ADS# 

E14 

D14 

PI 2 

INTR 

B7 


M7 


M8 

All 

D1 

BEO# 

E12 

D15 

Mil 

LOCK# 

CIO 


M13 


M10 

A12 

E3 

BE1# 

Cl 3 

D16 

Nil 

M/IO# 

A12 


N4 


N3 

A13 

E2 

BE2# 

B13 

D17 

N10 

NA# 

D13 


N7 


P6 

A14 

El 

BE3# 

A13 

D18 

P11 

NMI 

B8 


P2 


P14 

A15 

FI 

BS16# 

C14 

D19 

P10 

PEREQ 

C8 


P8 

W/R# 

BIO 

A16 

G1 

BUSY# 

B9 

D20 

M9 

READY# 

G13 

Vss 

A2 

N.C. 

A4 

A17 

HI 

CLK2 

F12 

D21 

N9 

RESET 

C9 


A6 


B4 

A18 

H2 

DO 

H12 

D22 

P9 

Vcc 

A1 


A9 


B6 

A19 

H3 

D1 

H13 

D23 

N8 


AS 


B1 


B12 

A20 

J1 

D2 

H14 

D24 

P7 


A7 


B5 


C6 

A21 

K1 

D3 

J14 

D25 

N6 


A10 


B11 


C7 

A22 

K2 

D4 

K14 

D26 

P5 


A14 


B14 


E13 

A23 

LI 

D5 

K13 

D27 

N5 


C5 


C11 


F13 
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1.1 PIN DESCRIPTION TABLE 

The following table lists a brief description of each pin on the 386 DX. The following definitions are used in 
these descriptions: 

# The named signal Is active LOW. 

I Input signal. 

O Output signal. 

I/O Input and Output signal. 

— No electrical connection. 


For a more complete description refer to Section 5.2 Signal Description. 


Symbol 

Type 

Name and Function 

CLK2 

I 

CLK2 provides the fundamental timing for the 386 DX. 

D 31 -D 0 

I/O 

DATA BUS inputs data during memory, I/O and interrupt acknowledge 
read cycles and outputs data during memory and I/O write cycles. 

A 31 - A 2 

0 

ADDRESS BUS outputs physical memory or port I/O addresses. 

BE0#-BE3# 

0 

BYTE ENABLES indicate which data bytes of the data bus take part in 
a bus cycle. 

W/R# 

0 

WRITE/READ is a bus cycle definition pin that distinguishes write 
cycles from read cycles. 

D/C# 

0 

DATA/CONTROL is a bus cycle definition pin that distinguishes data 
cycles, either memory or I/O, from control cycles which are: interrupt 
acknowledge, halt, and instruction fetching. 

M/IO# 

0 

MEMORY I/O is a bus cycle definition pin that distinguishes memory 
cycles from input/output cycles. 

LOCK# 

0 

BUS LOCK Is a bus cycle definition pin that indicates that other 
system bus masters are denied access to the system bus while it Is 
active. 

ADS# 

0 

ADDRESS STATUS indicates that a valid bus cycle definition and 
address (W/R#, D/C#, M/IO#, BED#, BE1#, BE2#, BE3# and 

A 31 -A 2 ) are being driven at the 386 DX pins. 

NA# 

I 

NEXT ADDRESS is used to request address pipelining. 

READY# 

I 

BUS READY terminates the bus cycle. 

BSI 6 # 

I 

BUS SIZE 16 Input allows direct connection of 32-bit and 16-bit data 
buses. 

HOLD 

I 

BUS HOLD REQUEST input allows another bus master to request 
control of the local bus. 
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1.1 PIN DESCRIPTION TABLE (Continued) 


Symbol 

Type 

Name and Function 

HLDA 

0 

BUS HOLD ACKNOWLEDGE output indicates that the 386 DX has 
surrendered control of its local bus to another bus master. 

BUSY# 

I 

BUSY signals a busy condition from a processor extension. 

ERROR# 

I 

ERROR signals an error condition from a processor extension. 

PEREQ 

I 

PROCESSOR EXTENSION REQUEST indicates that the processor 
extension has data to be transferred by the 386 DX. 

INTR 

I 

INTERRUPT REQUEST is a maskable input that signals the 386 DX to 
suspend execution of the current program and execute an interrupt 
acknowledge function. 

NMI 

I 

NON-MASKABLE INTERRUPT REQUEST is a non-maskable input 
that signals the 386 DX to suspend execution of the current program 
and execute an interrupt acknowledge function. 

RESET 

I 

RESET suspends any operation in progress and places the 386 DX in 
a known reset state. See Interrupt Signals for additional information. 

N/C 


NO CONNECT should always remain unconnected. Connection of a 
N/C pin may cause the processor to malfunction or be incompatible 
with future steppings of the 386 DX. 

Vcc 

I 

SYSTEM POWER provides the + 5V nominal D.C. supply Input. 

Vss 

I 

SYSTEM GROUND provides OV connection from which all inputs and 
outputs are measured. 
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2. BASE ARCHITECTURE 


2,1 INTRODUCTION 

The 386 DX consists of a central processing unit, a 
memory management unit and a bus interface. 

The central processing unit consists of the execu- 
tion unit and instruction unit. The execution unit con- 
tains the eight 32-bit general purpose registers 
which are used for both address calculation, data 
operations and a 64-bit barrel shifter used to speed 
shift, rotate, multiply, and divide operations. The 
multiply and divide logic uses a 1-bit per cycle algo- 
rithm. The multiply algorithm stops the iteration 
when the most significant bits of the multiplier are all 
zero. This allows typical 32-bit multiplies to be exe- 
cuted in under one microsecond. The instruction unit 
decodes the instruction opcodes and stores them in 
the decoded instruction queue for Immediate use by 
the execution unit. 

The memory management unit (MMU) consists of a 
segmentation unit and a paging unit. Segmentation 
allows the managing of the logical address space by 
providing an extra addressing component, one that 
allows easy code and data relocatability, and effi- 
cient sharing. The paging mechanism operates be- 
neath and is transparent to the segmentation pro- 
cess, to allow management of the physical address 
space. Each segment is divided into one or more 4K 
byte pages. To implement a virtual memory system, 
the 386 DX supports full restartability for all page 
and segment faults. 

Memory is organized into one or more variable 
length segments, each up to four gigabytes In size. A 
given region of the linear address space, a segment, 
can have attributes associated with It. These attri- 
butes include its location, size, type (i.e. stack, code 
or data), and protection characteristics. Each task 
on an 386 DX can have a maximum of 16,381 seg- 
ments of up to four gigabytes each, thus providing 
64 terabytes (trillion bytes) of virtual memory to each 
task. 

The segmentation unit provides four-levels of pro- 
tection for isolating and protecting applications and 
the operating system from each other. The hardware 
enforced protection allows the design of systems 
with a high degree of integrity. 

The 386 DX has two modes of operation: Real Ad- 
dress Mode (Real Mode), and Protected Virtual Ad- 
dress Mode (Protected Mode). In Real Mode the 


386 DX operates as a very fast 8086, but with 32-bit 
extensions If desired. Real Mode is required primari- 
ly to setup the processor for Protected Mode opera- 
tion. Protected Mode provides access to the sophis- 
ticated memory management, paging and privilege 
capabilities of the processor. 

Within Protected Mode, software can perform a task 
switch to enter Into tasks designated as Virtual 8086 
Mode tasks. Each such task behaves with 8086 se- 
mantics, thus allowing 8086 software (an application 
program, or an entire operating system) to execute. 
The Virtual 8086 tasks can be isolated and protect- 
ed from one another and the host 386 DX operating 
system, by the use of paging, and the I/O Permis- 
sion Bitmap. 

Finally, to facilitate high performance system hard- 
ware designs, the 386 DX bus interface offers ad- 
dress pipelining, dynamic data bus sizing, and direct 
Byte Enable signals for each byte of the data bus. 
These hardware features are described fully begin- 
ning In Section 5. 


2.2 REGISTER OVERVIEW 

The 386 DX has 32 register resources in the follow- 
ing categories: 

• General Purpose Registers 

• Segment Registers 

• Instruction Pointer and Flags 

• Control Registers 

• System Address Registers 

• Debug Registers 

• Test Registers. 

The registers are a superset of the 8086, 80186 and 
80286 registers, so all 16-bit 8086, 80186 and 
80286 registers are contained within the 32-bit 386 
DX. 

Figure 2-1 shows all of 386 DX base architecture 
registers, which include the general address and 
data registers, the instruction pointer, and the flags 
register. The contents of these registers are task- 
specific, so these registers are automatically loaded 
with a new context upon a task switch operation. 

The base architecture also includes six directly ac- 
cessible segments, each up to 4 Gbytes in size. The 
segments are indicated by the selector values 
placed in 386 DX segment registers of Figure 2-1. 
Various selector values can be loaded as a program 
executes, if desired. 
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GENERAL DATA AND ADDRESS REGISTERS 
31 16 15 0 

EAX 
EBX 
ECX 
EDX 
ESI 
EDI 
EBP 
ESP 

SEGMENT SELECTOR REGISTERS 
15 0 



AX 


BX 


CX 


DX 


SI 


Dl 


BP 


SP 


CS 

SS 

DS 

ES 

FS 

GS 


INSTRUCTION POINTER 
AND FLAGS REGISTER 
31 16 15 0 


CODE 

STACK 


[DATA 



IP 


FLAGS 


Figure 2-1. 386tm dX Base 
Architecture Registers 


The selectors are also task-specific, so the segment 
registers are automatically loaded with new context 
upon a task switch operation. 


The other types of registers, Control, System Ad- 
dress, Debug, and Test, are primarily used by sys- 
tem software. 


2.3 REGISTER DESCRIPTIONS 


2.3.1 General Purpose Registers 

General Purpose Registers: The eight general pur- 
pose registers of 32 bits hold data or address quanti- 
ties. The general registers. Figure 2-2, support data 
operands of 1, 8, 16, 32 and 64 bits, and bit fields of 
1 to 32 bits. They support address operands of 16 
and 32 bits. The 32-bit registers are named EAX, 
EBX, ECX, EDX, ESI, EDI, EBP, and ESP. 

The least significant 1 6 bits of the registers can be 
accessed separately. This is done by using the 16- 
bit names of the registers AX, BX, CX, DX, SI, Dl, 


BP, and SP. When accessed as a 16-bit operand, 
the upper 16 bits of the register are neither used nor 
changed. 

Finally 8-bit operations can individually access the 
lowest byte (bits 0-7) and the higher byte (bits 8- 
15) of general purpose registers AX, BX, CX and DX. 
The lowest bytes are named AL, BL, CL and DL, 
respectively. The higher bytes are named AH, BH, 
CH and DH, respectively. The individual byte acces- 
sibility offers additional flexibility for data operations, 
but is not used for effective address calculation. 


31 16 15 8 7 0 



AH A 

X AL 


BH B 

X BL 


CH C 

X CL 


DH D 

X DL 


SI 


Dl 


BP 


SP 


31 16 15 0 


^ , J 

y 

IP 


EAX 

EBX 

ECX 

EDX 

ESI 

EDI 

EBP 

ESP 


EIP 


Figure 2-2. General Registers 
and Instruction Pointer 


2.3.2 Instruction Pointer 

The Instruction pointer. Figure 2-2, is a 32-bit regis- 
ter named EIP. EIP holds the offset of the next in- 
struction to be executed. The offset is always rela- 
tive to the base of the code segment (CS). The low- 
er 16 bits (bits 0-15) of EIP contain the 16-bit in- 
struction pointer named IP, which is used by 16-bit 
addressing. 


2.3.3 Flags Register 

The Flags Register is a 32-bit register named 
EFLAGS. The defined bits and bit fields within 
EFLAGS, shown in Figure 2-3, control certain opera- 
tions and indicate status of the 386 DX. The lower 
16 bits (bit 0-15) of EFLAGS contain the 16-bit flag 
register named FLAGS, which is most useful when 
executing 8086 and 80286 code. 
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iny 


FLAGS 


33222222222211111 1 1111 

10987654321098765432109876543210 


EFLAGS 


. nmmmrmmwL ^ 

V 

M 

R 

F 

1 


lOP 

L 

1 

I 

1 

1 

s 

F 

-n N 1 

0 

A 

F 


P 

F 


C 

F 



T 





T 

T 

T 



▲ 






VIRTUAL MODE- 

RESUME FLAG 

NESTED TASK FUG — 
I/O PRIVILEGE LEVEL - 

OVERFLOW 

DIRECTION FLAG 

INTERRUPT ENABLE — 


CARRY FUG 
PARITY FUG 
AUXILIARY CARRY 
ZERO FLAG 
SIGN FLAG 
TRAP FUG 


231630-50 

NOTE: 

0 indicates Intel reserved: do not define; see section 2.3.10. 


Figure 2-3. Flags Register 


VM (Virtual 8086 Mode, bit 17) 

The VM bit provides Virtual 8086 Mode within 
Protected Mode. If set while the 386 DX is in 
Protected Mode, the 386 DX will switch to Vir- 
tual 8086 operation, handling segment loads 
as the 8086 does, but generating exception 
13 faults on privileged opcodes. The VM bit 
can be set only in Protected Mode, by the 
IRET instruction (if current privilege level = 
0) and by task switches at any privilege level. 
The VM bit is unaffected by POPF. PUSHF 
always pushes a 0 in this bit, even if execut- 
ing in virtual 8086 Mode. The EFLAGS image 
pushed during interrupt processing or saved 
during task switches will contain a 1 in this bit 
if the Interrupted code was executing as a Vir- 
tual 8086 Task. 

RF (Resume Flag, bit 16) 

The RF flag is used in conjunction with the 
debug register breakpoints. It is checked at 
Instruction boundaries before breakpoint pro- 
cessing. When RF is set, It causes any debug 
fault to be ignored on the next Instruction. RF 
is then automatically reset at the successful 
completion of every instruction (no faults are 
signalled) except the IRET instruction, the 
POPF instruction, (and JMP, CALL, and INT 
instructions causing a task switch). These in- 
structions set RF to the value specified by the 
memory image. For example, at the end of 
the breakpoint service routine, the IRET 


instruction can pop an EFLAG image having 
the RF bit set and resume the program’s exe- 
cution at the breakpoint address without gen- 
erating another breakpoint fault on the same 
location. 

NT (Nested Task, bit 14) 

This flag applies to Protected Mode. NT is set 
to Indicate that the execution of this task is 
nested within another task. If set, it indicates 
that the current nested task’s Task State 
Segment (TSS) has a valid back link to the 
previous task’s TSS. This bit is set or reset by 
control transfers to other tasks. The value of 
NT in EFLAGS is tested by the IRET Instruc- 
tion to determine whether to do an Inter-task 
return or an intra-task return. A POPF or an 
IRET instruction will affect the setting of this 
bit according to the image popped, at any 
privilege level. 

lOPL (Input/Output Privilege Level, bits 12-13) 

This two-bit field applies to Protected Mode. 
lOPL indicates the numerically maximum CPL 
(current privilege level) value permitted to ex- 
ecute I/O instructions without generating an 
exception 13 fault or consulting the I/O Per- 
mission Bitmap. It also indicates the maxi- 
mum CPL value allowing alteration of the IF 
(INTR Enable Flag) bit when new values are 
popped into the EFLAG, register. POPF and 
IRET instruction can alter the lOPL field when 
executed at CPL = 0. Task switches can al- 
ways alter the lOPL field, when the new flag 
image is loaded from the incoming task’s 
TSS. 
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OF (Overflow Flag, bit 11) 

OF is set if the operation resulted in a signed 
overflow. Signed overflow occurs when the 
operation resulted in carry/borrow into the 
sign bit (high-order bit) of the result but did 
not result in a carry/ borrow out of the high- 
order bit, or vice-versa. For 8/16/32 bit oper- 
ations, OF is set according to overflow at bit 
7/15/31, respectively. 

DF (Direction Flag, bit 10) 

DF defines whether ESI and/or EDI registers 
postdecrement or postincrement during the 
string instructions. Postincrement occurs If 
DF is reset. Postdecrement occurs If DF is 
set. 

IF (INTR Enable Flag, bit 9) 

The IF flag, when set, allows recognition of 
external interrupts signalled on the INTR pin. 
When IF Is reset, external interrupts signalled 
on the INTR are not recognized. lOPL indi- 
cates the maximum CPL value allowing alter- 
ation of the IF bit when new values are 
popped into EFLAGS or FLAGS. 

TF (Trap Enable Flag, bit 8) 

TF controls the generation of exception 1 
trap when single-stepping through code. 
When TF is set, the 386 DX generates an ex- 
ception 1 trap after the next instruction Is exe- 
cuted. When TF is reset, exception 1 traps 
occur only as a function of the breakpoint ad- 
dresses loaded into debug registers DRO- 
DR3. 

SF (Sign Flag, bit 7) 

SF is set if the high-order bit of the result is 
set, it is reset otherwise. For 8-, 16-, 32-bit 
• operations, SF reflects the state of bit 7, 1 5, 
31 respectively. 


ZF (Zero Flag, bit 6) 

ZF is set if all bits of the result are 0. Other- 
wise It is reset. 

AF (Auxiliary Carry Flag, bit 4) 

The Auxiliary Flag is used to simplify the addi- 
tion and subtraction of packed BCD quanti- 
ties. AF is set if the operation resulted in a 
carry out of bit 3 (addition) or a borrow into bit 
3 (subtraction). Otherwise AF is reset. AF is 
affected by carry out of, or borrow into bit 3 
only, regardless of overall operand lerigth: 8, 
1 6 or 32 bits. 

PF (Parity Flags, bit 2) 

PF Is set if the low-order eight bits of the op- 
eration contains an even number of “1’s” 
(even parity). PF is reset If the low-order eight 
bits have odd parity. PF is a function of only 
the low-order eight bits, regardless of oper- 
and size. 

CF (Carry Flag, bit 0) 

CF is set if the operation resulted in a carry 
out of (addition), or a borrow into (subtraction) 
the high-order bit. Otherwise CF is reset. For 
8-, 1 6- or 32-bit operations, CF is set accord- 
ing to carry/borrow at bit 7 , 15 or 31, respec- 
tively. 

Note in these descriptions, “set” means “set to 1,” 
and “reset” means “reset to 0.” 


2.3.4 Segment Registers 

Six 16-bit segment registers hold segment selector 
values identifying the currently addressable memory 
segments. Segment registers are shown in Figure 2- 
4. In Protected Mode, each segment may range in 
size from one byte up to the entire linear and physi- 
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Figure 2-4. 386tm DX Segment Registers, and Associated Descriptor Registers 
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cal space of the machine, 4 Gbytes ( 2^2 bytes). If a 
maximum sized segment is used (limit = 
FFFFFFFFH) it should be Dword aligned (i.e., the 
least two significant bits of the segment base should 
be zero). This will avoid a segment limit violation (ex- 
ception 13) caused by the wrap around. In Real Ad- 
dress Mode, the maximum segment size is fixed at 
64 Kbytes (216 bytes). 

The six segments addressable at any given moment 
are defined by the segment registers CS, SS, DS, 
ES, FS and GS. The selector In CS Indicates the 
current code segment; the selector in SS indicates 
the current stack segment; the selectors in DS, ES, 
FS and GS Indicate the current data segments. 


2.3.5 Segment Descriptor Registers 

The segment descriptor registers are not program- 
mer visible, yet it is very useful to understand their 
content. Inside the 386 DX, a descriptor register 
(programmer Invisible) Is associated with each pro- 
grammer-visible segment register, as shown by Fig- 
ure 2-4. Each descriptor register holds a 32-bit seg- 
ment base address, a 32-bit segment limit, and the 
other necessary segment attributes. 

When a selector value Is loaded into a segment reg- 
ister, the associated descriptor register is automati- 
cally updated with the correct Information. In Real 
Address Mode, only the base address Is updated 
directly (by shifting the selector value four bits to the 
left), since the segment maximum limit and attributes 
are fixed in Real Mode. In Protected Mode, the base 
address, the limit, and the attributes are all updated 
per the contents of the segment descriptor indexed 
by the selector. 

Whenever a memory reference occurs, the segment 
descriptor register associated with the segment be- 
ing used is automatically involved with the memory 
reference. The 32-blt segment base address be- 
comes a component of the linear address calcula- 


tion, the 32-bit limit is used for the limit-check opera- 
tion, and the attributes are checked against the type 
of memory reference requested. 


2.3.6 Control Registers 

The 386 DX has three control registers of 32 bits, 
CRO, CR2 and CR3, to hold machine state of a glob- 
al nature (not specific to an Individual task). These 
registers, along with System Address Registers de- 
scribed in the next section, hold machine state that 
affects all tasks in the system. To access the Con- 
trol Registers, load and store instructions are de- 
fined. 

CRO: Machine Control Register (includes 80286 
Machine Status Word) 

CRO, shown In Figure 2-5, contains 6 defined bits for 
control and status purposes. The low-order 16 bits 
of CRO are also known as the Machine Status Word, 
MSW, for compatibility with 80286 Protected Mode. 
LMSW and SMSW instructions are taken as special 
aliases of the load and store CRO operations, where 
only the low-order 16 bits of CRO are involved. For 
compatibility with 80286 operating systems the 386 
DX LMSW Instructions work in an identical fashion 
to the LMSW instruction on the 80286. (i.e. It. only 
operates on the low-order 16-bits of CRO and it ig- 
nores the new bits in CRO.) New 386 DX operating 
systems should use the MOV CRO, Reg instruction. 

The defined CRO bits are described below. 

PG (Paging Enable, bit 31) 

the PG bit is set to enable the on-chip paging 
unit. It is reset to disable the on-chip paging 
unit. 

R (reserved, bit 4) 

This bit is reserved by Intel. When loading CRO 
care should be taken to not alter the value of 
this bit. 


31 


24 


23 


16 


15 


CRO 


MSW 


NOTE: 0 indicates Intel reserved: Do not define; SEE SECTION 2.3.1 0 


Figure 2-5. Control Register 0 
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TS (Task Switched, bit 3) 

TS is automatically set whenever a task switch 
operation is performed. If TS is set, a coproces- 
sor Escape opcode will cause a Coprocessor 
Not Available trap (exception 7). The trap han- 
dler typically saves the 387 DX coprocessor 
context belonging to a previous task, loads the 
387 DX coprocessor state belonging to the cur- 
rent task, and clears the TS bit before returning 
to the faulting coprocessor opcode. 

EM (Emulate Coprocessor, bit 2) 

The EMulate coprocessor bit is set to cause all 
coprocessor opcodes to generate a Coproces- 
sor Not Available fault (exception 7). It is reset 
to allow coprocessor opcodes to be executed 
on an actual 387 DX coprocessor (this is the 
default case after reset). Note that the WAIT 
opcode is not affected by the EM bit setting. 

MP (Monitor Coprocessor, bit 1) 

The MP bit is used in conjunction with the TS 
bit to determine if the WAIT opcode will gener- 
ate a Coprocessor Not Available fault (excep- 
tion 7) when TS = 1 . When both MP = 1 and 
TS = 1, the WAIT opcode generates a trap. 
Otherwise, the WAIT opcode does not gener- 
ate a trap. Note that TS is automatically set 
whenever a task switch operation is performed. 

PE (Protection Enable, bit 0) 

The PE bit is set to enable the Protected Mode. 
If PE is reset, the processor operates again in 
Real Mode. PE may be set by loading MSW or 
CRO. PE can be reset only by a load Into CRO. 
Resetting the PE bit is typically part of a longer 
Instruction sequence needed for proper tran- 
sition from Protected Mode to Real Mode. Note 
that for strict 80286 compatibility, PE cannot be 
reset by the LMSW instruction. 

CR1: reserved 

CR1 Is reserved for use In future Intel processors. 

CR2: Page Fault Linear Address 

CR2, shown in Figure 2-6, holds the 32-bit linear ad- 
dress that caused the last page fault detected. The 


error code pushed onto the page fault handler’s 
stack when it is invoked provides additional status 
information on this page fault. 

CR3: Page Directory Base Address 

CR3, shown in Figure 2-6, contains the physical 
base address of the page directory table. The 386 
DX page directory table is always page-aligned 
(4 Kbyte-aligned). Therefore the lowest twelve bits 
of CR3 are ignored when written and they store as 
undefined. 

A task switch through a TSS which changes the 
value in CR3, or an explicit load into CR3 with any 
value, will invalidate all cached page table entries in 
the paging unit cache. Note that if the value in CR3 
does not change during the task switch, the cached 
page table entries are not flushed. 


2.3.7 System Address Registers 

Four special registers are defined to reference the 
tables or segments supported by the 80286 CPU 
and 386 DX protection model. These tables or seg- 
ments are: 

GDT (Global Descriptor Table), 

IDT (Interrupt Descriptor Table), 

LDT (Local Descriptor Table), 

TSS (Task State Segment). 

The addresses of these tables and segments are 
stored in special registers, the System Address and 
System Segment Registers illustrated in Figure 2-7. 
These registers are named GDTR, IDTR, LDTR and 
TR, respectively. Section 4 Protected Mode Archi- 
tecture describes the use of these registers. 

GDTR and IDTR 

These registers hold the 32-bit linear base address 
and 16-bit limit of the GDT and IDT, respectively. 

The GDT and IDT segments, since they are global to 
all tasks in the system, are defined by 32-blt linear 
addresses (subject to page translation if paging is 
enabled) and 16-bit limit values. 


31 24 I 23 16| 15 8j_7 0 


PAGE FAULT LINEAR ADDRESS REGISTER 










PAGE DIRECTORY BASE REGISTER 

0 

» 

0 

0 

0 

0 

0 

0 

0 

0 

0 
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NOTE: 



Indicates Intel reserved: Do not define; SEE SECTION 2.3.10 


Figure 2-6. Control Registers 2 and 3 
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SYSTEM ADDRESS REGISTERS 
47 32-BiT LINEAR BASE ADDRESS 16 15 LIMIT 0 

GDTR 

idtr | 

SYSTEM SEGMENT 

REGISTERS DESCRIPTOR REGISTERS (AUTOMATICALLY LOADED) 

M5 o' ^ 32-BIT LINEAR BASE ADDRESS 32-BIT SEGMENT LIMIT ATTRIBUTES^ 

TR 
LDTR 


SELECTOR 


SELECTOR 


Figure 2-7. System Address and System Segment Registers 


LDTR and TR 

These registers hold the 1 6-bit selector for the LOT 
descriptor and the TSS descriptor, respectively. 

The LOT and TSS segments, since they are task- 
specific segments, are defined by selector values 
stored in the system segment registers. Note that a 
segment descriptor register (programmer-invisible) 
Is associated with each system segment register. 


Test Registers: Two registers are used to control 
the testing of the RAM/CAM (Content Addressable 
Memories) in the Translation Lookaside Buffer por- 
tion of the 386 DX. TR6 is the command test regis- 
ter, and TR7 Is the data register which contains the 
data of the Translation Lookaside buffer test. Their 
use is discussed in section 2.11 Testability. 

Figure 2-8 shows the Debug and Test registers. 


2.3.8 Debug and Test Registers 

Debug Registers: The six programmer accessible 
debug registers provide on-chip support for debug- 
ging. Debug Registers DRO-3 specify the four linear 
breakpoints. The Debug Control Register DR7 is 
used to set the breakpoints and the Debug Status 
Register DR6, displays the current state of the 
breakpoints. The use of the debug registers is de- 
scribed in section 2.12 Debugging support. 


2.3.9 Register Accessibility 

There are a few differences regarding the accessibil- 
ity of the registers in Real and Protected Mode. Ta- 
ble 2-1 summarizes these differences. See Section 
4 Protected Mode Architecture for further details. 


2.3.10 Compatibility 

VERY IMPORTANT NOTE: 

COMPATIBILITY WITH FUTURE PROCESSORS 

In the preceding register descriptions, note cer- 
tain 386 DX register bits are Intel reserved. 
When reserved bits are called out, treat them as 
fully undefined. This is essential for your soft- 
ware compatibility with future processors! Fol- 
low the guidelines below: 

1) Do not depend on the states of any unde- 
fined bits when testing the values of defined 
register bits. Mask them out when testing. 

2) Do not depend on the states of any unde- 
fined bits when storing them to memory or 
another register. 

3) Do not depend on the ability to retain infor- 
mation written into any undefined bits. 

4) When loading registers always load the unde- 
fined bits as zeros. 


DEBUG REGISTERS 

31 0 



LINEAR BREAKPOINT ADDRESS 0 

DRO 


LINEAR BREAKPOINT ADDRESS 1 

DR1 


LINEAR BREAKPOINT ADDRESS 2 

DR2 


LINEAR BREAKPOINT ADDRESS 3 

DR3 


Intel reserved. Do not define. 

DR4 


Intel reserved. Do not define. 

DR5 


BREAKPOINT STATUS 

DR6 


BREAKPOINT CONTROL 

DR7 

TEST REGISTERS (FOR PAGE CACHE) 

31 0 


TEST CONTROL 

TR6 


TEST STATUS 

TR7 

i 



Figure 2-8. Debug and Test Registers 
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Table 2-1. Register Usage 


Register 

Use in 

Real Mode 

Use in 

Protected Mode 

Use in 

Virtual 8086 Mode 

Load 

Store 

Load 

Store 

Load 

Store 

General Registers 

Yes 

Yes 

Yes 

Yes 

Yes 

Yes 

Segment Registers 

Yes 

Yes 

Yes 

Yes 

Yes 

Yes 

Flag Register 

Yes 

Yes 

Yes 

Yes 

lOPL* 

lOPL* 

Control Registers 

Yes 

Yes 

o 

II 

Q. 

PL = 0 

No 

Yes 

GDTR 

Yes 

Yes 

PL = 0 

Yes 

No 

Yes 

IDTR 

Yes 

Yes 

PL = 0 

Yes 

No 

Yes 

LDTR 

No 

No 

PL = 0 

Yes 

No 

No 

TR 

No 

No 

o 

II 

_j 

Q. 

Yes 

No 

No 

Debug Control 

Yes 

Yes 

PL = 0 

PL = ,0 

No 

No 

Test Registers 

Yes 

Yes 

o 

II 

_J 

a. 

PL = 0 

No 

No 


NOTES: 

PL = 0: The registers can be accessed only when the current privilege level is zero. 

*IOPL: The PUSHF and POPF instructions are made I/O Privilege Level sensitive in Virtual 8086 Mode. 


5) However, registers which have been previ- 
ously stored may be reloaded without mask- 
ing. 

Depending upon the values of undefined regis- 
ter bits will make your software dependent upon 
the unspecified 386 DX handling of these bits. 
Depending on undefined vaiues risks making 
your software incompatible with future proces- 
sors that define usages for the 386 DX-unde- 
fined bits. AVOID ANY SOFTWARE DEPEN- 
DENCE UPON THE STATE OF UNDEFINED 386 
DX REGISTER BITS. 

2.4 INSTRUCTION SET 

2.4.1 Instruction Set Overview 

The instruction set is divided into nine categories of 
operations: 

Data Transfer 

Arithmetic 

Shift/ Rotate 

String Manipulation 

Bit Manipulation 

Control Transfer 

High Level Language Support 

Operating System Support 

Processor Control 


These 386 DX instructions are listed in Table 2-2. 

All 386 DX instructions operate on either 0, 1 , 2, or 3 
operands; where an operand resides in a register, in 
the instruction itself, or In memory. Most zero oper- 
and instructions (e.g. CLl, STI) take only one byte. 
One operand instructions generally are two bytes 
long. The average Instruction is 3.2 bytes long. 
Since the 386 DX has a 16-byte instruction queue, 
an average of 5 instructions will be prefetched. The 
use of two operands permits the following types of 
common instructions: 

Register to Register 
Memory to Register 
Immediate to Register 
Register to Memory 
Immediate to Memory. 

The operands can be either 8, 1 6, or 32 bits long. As 
a general rule, when executing code written for the 
386 DX (32-bit code), operands are 8 or 32 bits; 
when executing existing 80286 or 8086 code (16-blt 
code), operands are 8 or 16 bits. Prefixes can be 
added to all instructions which override the default 
length of the operands, (i.e. use 32-bit operands for 
16-bit code, or 16-blt operands for 32-bit code). 

For a more elaborate description of the instruction 
set, refer to the “386 DX Programmer’s Reference 
Manual.’’ 
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2.4.2 386™ DX Instructions 

Table 2-2a. Data Transfer 


GENERAL PURPOSE 

MOV 

Move operand 

PUSH 

Push operand onto stack 

POP 

Pop operand off stack 

PUSHA 

Push all registers on stack 

POPA 

Pop all registers off stack 

XCHG 

Exchange Operand, Register 

XLAT 

Translate 

CONVERSION 

MOVZX 

Move byte or Word, Dword, with zero 
extension 

MOVSX 

Move byte or Word, Dword, sign 
extended 

CBW 

Convert byte to Word, or Word to Dword 

CWD 

Convert Word to DWORD 

CWDE 

Convert Word to DWORD extended 

CDQ 

Convert DWORD to QWORD 

INPUT/OUTPUT 

IN 

Input operand from I/O space 

OUT 

Output operand to I/O space 

I ADDRESS OBJECT | 

LEA 

Load effective address 

LDS 

Load pointer into D segment register 

LES 

Load pointer into E segment register 

LFS 

Load pointer into F segment register 

LGS 

Load pointer into G segment register 

LSS 

Load pointer into S (Stack) segment 
register 

FLAG MANIPULATION 

LAHF 

Load A register from Flags 

SAHF 

Store A register in Flags 

PUSHF 

Push flags onto stack 

POPF 

Pop flags off stack 

PUSHFD 

Push EFIags onto stack 

POPFD 

Pop EFIags off stack 

CLC 

Clear Carry Flag 

OLD 

Clear Direction Flag 

CMC 

Complement Carry Flag 

STC 

Set Carry Flag 

STD 

Set Direction Flag 


Table 2-2b. Arithmetic Instructions 


ADDITION 

ADD 

Add operands 

ADC 

Add with carry 

INC 

Increment operand by 1 

AAA 

ASCII adjust for addition 

DAA 

Decimal adjust for addition 

SUBTRACTION | 

SUB 

Subtract operands 

SBB 

Subtract with borrow 

DEC 

Decrement operand by 1 

NEG 

Negate operand 

CMP 

Compare operands 

DAS 

Decimal adjust for subtraction 

AAS 

ASCII Adjust for subtraction 

MULTIPLICATION 

MUL 

Multiply Double/Single Precision 

IMUL 

Integer multiply 

AAM 

ASCII adjust after multiply 

DIVISION 

DIV 

Divide unsigned 

IDIV 

Integer Divide 

AAD 

ASCII adjust before division 


Table 2-2c. String Instructions 


MOVS 

Move byte or Word, Dword string 

INS 

Input string from I/O space 

OUTS 

Output string to I/O space 

CMPS 

Compare byte or Word, Dword string 

SCAS 

Scan Byte or Word, Dword string 

LODS 

Load byte or Word, Dword string 

STOS 

Store byte or Word, Dword string 

REP 

Repeat 

REPE/ 

REPZ 

Repeat while equal/zero 

RENE/ 

REPNZ 

Repeat while not equal/not zero 


Tabie 2-2d. Logical instructions 


LOGICALS 

NOT 

“NOT” operands 

AND 

“AND” operands 

OR 

“Inclusive OR” operands 

XOR 

“Exclusive OR” operands 

TEST 

“Test” operands 
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Table 2-2d. Logical Instructions (Continued) 


SHIFTS 

SHL/SHR 

Shift logical left or right 

SAL/SAR 

Shift arithmetic left or right 

SHLD/ 

SHRD 

Double shift left or right 

ROTATES 

ROL/ROR 

Rotate left/right 

RCL/RCR 

Rotate through carry left/right 


Table 2-2e. Bit Manipulation Instructions 


SINGLE BIT INSTRUCTIONS 

BT 

Bit Test 

BTS 

Bit Test and Set 

BTR 

Bit Test and Reset 

BTC 

Bit Test and Complement 

BSF 

Bit Scan Forward 

BSR 

Bit Scan Reverse 


Table 2-2f. Program Control Instructions 


CONDITIONAL TRANSFERS 

SETCC 

Set byte equal to condition code 

JA/JNBE 

Jump if above/not below nor equal 

JAE/JNB 

Jump if above or equal/not below 

JB/JNAE 

Jump if below/not above nor equal 

JBE/JNA 

Jump if below or equal/not above 

JC 

Jump if carry 

JE/JZ 

Jump if equal/zero 

JG/JNLE 

Jump if greater/not less nor equal 

JGE/JNL 

Jump if greater or equal/ not less 

JL/JNGE 

Jump if less/not greater nor equal 

JLE/JNG 

Jump if less or equal/not greater 

JNC 

Jump if not carry 

JNE/JNZ 

Jump if not equal/not zero 

JNO 

Jump if not overflow 

JNP/JPO 

Jump if not parity/parity odd 

JNS 

Jump if not sign 

JO 

Jump if overflow 

JP/JPE 

Jump if parity/parity even 

JS 

Jump if Sign 


Table 2-2f. Program Control Instructions 

(Continued) 


UNCONDITIONAL TRANSFERS 

CALL 

Call procedure/task 

RET 

Return from procedure 

JMP 

Jump 

ITERATION CONTROLS 

LOOP 

Loop 

LOOPE/ 

LOOPZ 

Loop if equal/zero 

LOOPNE/ 

LOOPNZ 

Loop if not equal/not zero 

JCXZ 

JUMP if register CX = 0 

INTERRUPTS 

INT 

Interrupt 

INTO 

Interrupt if overflow 

IRET 

Return from Interrupt/Task 

CLI 

Clear interrupt Enable 

STI 

Set Interrupt Enable 


Table 2-2g. High Level Language Instructions 


BOUND 

Check Array Bounds 

ENTER 

Setup Parameter Block for Entering 
Procedure 

LEAVE 

Leave Procedure 


Table 2-2h. Protection Model 


SGDT 

Store Global Descriptor Table 

SIDT 

Store Interrupt Descriptor Table 

STR 

Store Task Register 

SLDT 

Store Local Descriptor Table 

LGDT 

Load Global Descriptor Table 

LIDT 

Load Interrupt Descriptor Table 

LTR 

Load Task Register 

LLDT 

Load Local Descriptor Table 

ARPL 

Adjust Requested Privilege Level 

LAR 

Load Access Rights 

LSL 

Load Segment Limit 

VERR/ 

VERW 

Verify Segment for Reading or Writing 

LMSW 

Load Machine Status Word (lower 

16 bits of CRO) 

SMSW 

Store Machine Status Word 


Table 2-2i. Processor Control Instructions 


HLT 

Halt 

WAIT 

Wait until BUSY# negated 

ESC 

Escape 

LOCK 

Lock Bus 
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2.5 ADDRESSING MODES 


2.5.1 Addressing Modes Overview 

The 386 DX provides a total of 1 1 addressing modes 
for instructions to specify operands. The addressing 
modes are optimized to allow the efficient execution 
of high level languages such as C and FORTRAN, 
and they cover the vast majority of data references 
needed by high-level languages. 


2.5.2 Register and Immediate Modes 

Two of the addressing modes provide for instruc- 
tions that operate on register or immediate oper- 
ands: 

Register Operand Mode: The operand is located 
in one of the 8-, 16- or 32-bit general registers. 

Immediate Operand Mode: The operand is in- 
cluded in the instruction as part of the opcode. 


2.5.3 32-Bit Memory Addressing 
Modes 

The remaining 9 modes provide a mechanism for 
specifying the effective address of an operand. The 
linear address consists of two components: the seg- 
ment base address and an effective address. The 
effective address is calculated by using combina- 
tions of the following four address elements: 

DISPLACEMENT: An 8-, or 32-bit immediate value, 
following the instruction. 

BASE: The contents of any general purpose regis- 
ter. The base registers are generally used by compil- 
ers to point to the start of the local variable area. 

INDEX: The contents of any general purpose regis- 
ter except for ESP. The index registers are used to 
access the elements of an array, or a string of char- 
acters. 

SCALE: The index register’s value can be multiplied 
by a scale factor, either 1, 2, 4 or 8. Scaled Index 
mode Is especially useful for accessing arrays or 
structures. 

Combinations of these 4 components make up the 9 
additional addressing modes. There is no perform- 
ance penalty for using any of these addressing com- 
binations, since the effective address calculation Is 
pipelined with the execution of other instructions. 


The one exception is the simultaneous use of Base 
and Index components which requires one addition- 
al clock. 

As shown in Figure 2-9, the effective address (EA) of 
an operand is calculated according to the following 
formula. 

EA=Base Reg + (Index Reg * Scaling) + Displacement 

Direct Mode: The operand’s offset is contained as 
part of the instruction as an 8-, 16- or 32-blt dis- 
placement. 

EXAMPLE: JNC Word PTR [500] 

Register Indirect Mode: A BASE register contains 
the address of the operand. 

EXAMPLE: MOV [ECX], EDX 

Based Mode: A BASE register’s contents Is added 
to a DISPLACEMENT to form the operands offset. 

EXAMPLE: MOV ECX, [EAX + 24] 

Index Mode: An INDEX register’s contents Is added 
to a DISPLACEMENT to form the operands offset. 

EXAMPLE: ADD EAX, TABLE[ESI] 

Scaled Index Mode: An INDEX register’s contents is 
multiplied by a scaling factor which is added to a 
DISPLACEMENT to form the operands offset. 

EXAMPLE: IMUL EBX, TABLE[ESIM],7 

Based Index Mode: The contents of a BASE register 
is added to the contents of an INDEX register to 
form the effective address of an operand. 

EXAMPLE: MOV EAX, [ESI] [EBX] 

Based Scaled Index Mode: The contents of an IN- 
DEX register is multiplied by a SCALING factor and 
the result is added to the contents of a BASE regis- 
ter to obtain the operands offset. 

EXAMPLE: MOV ECX, [EDX*8] [EAX] 

Based Index Mode with Displacement: The contents 
of an INDEX Register and a BASE register’s con- 
tents and a DISPLACEMENT are all summed to- 
gether to form the operand offset. 

EXAMPLE: ADD EDX, [ESI] [EBP + OOFFFFFOH] 

Based Scaled Index Mode with Displacement: The 
contents of an INDEX register are multiplied by a 
SCALING factor, the result is added to the contents 
of a BASE register and a DISPLACEMENT to form 
the operand’s offset. 

EXAMPLE: MOV EAX, LOCALTABLE[EDr4] 
[EBP + 80] 
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2.5.4 Differences Between 16 and 32 
Bit Addresses 

In order to provide software compatibility with the 
80286 and the 8086, the 386 DX can execute 1 6-bit 
instructions in Real and Protected Modes. The proc- 
essor determines the size of the instructions it is ex- 
ecuting by examining the D bit in the CS segment 
Descriptor. If the D bit is 0 then all operand lengths 
and effective addresses are assumed to be 16 bits 
long. If the D bit is 1 then the default length for oper- 
ands and addresses is 32 bits. In Real Mode the 
default size for operands and addresses is 1 6-bits. 

Regardless of the default precision of the operands 
or addresses, the 386 DX is able to execute either 
16 or 32-bit instructions. This is specified via the use 
of override prefixes. Two prefixes, the Operand Size 
Prefix and the Address Length Prefix, override the 
value of the D bit on an individual Instruction basis, 
These prefixes are automatically added by Intel as- 
semblers. 


Example: The processor is executing in Real Mode 
and the programmer needs to access the EAX regis- 
ters. The assembler code for this might be MOV 
EAX, 32-bit MEMORYOP, ASM386 Macro Assem- 
bler automatically determines that an Operand Size 
Prefix is needed and generates it. 

Example: The D bit is 0, and the programmer wishes 
to use Scaled Index addressing mode to access an 
array. The Address Length Prefix allows the use of 
MOV DX, TABLE[ESr2l. The assembler uses an 
Address Length Prefix since, with D = 0, the default 
addressing mode is 16-blts. 

Example: The D bit is 1 , and the program wants to 
store a 1 6-bit quantity. The Operand Length Prefix is 
used to specify only a 16-bit value; MOV MEM16, 
DX. 
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Table 2-3. BASE and INDEX Registers for 16- and 32-Bit Addresses 



16-Bit Addressing 

32-Bit Addressing 

BASE REGISTER 

BX,BP 

Any 32-bit GP Register 

INDEX REGISTER 

SI,DI 

Any 32-bit GP Register 
Except ESP 

SCALE FACTOR 

none 

1,2, 4,8 

DISPLACEMENT 

0, 8, 16 bits 

0, 8, 32 bits 


The OPERAND LENGTH and Address Length Pre- 
fixes can be applied separately or in combination to 
any instruction. The Address Length Prefix does not 
allow addresses over 64K bytes to be accessed in 
Real Mode. A memory address which exceeds 
FFFFH will result in a General Protection Fault. An 
Address Length Prefix only allows the use of the ad- 
ditional 386 DX addressing modes. 

When executing 32-bit code, the 386 DX uses either 
8-, or 32-bit displacements, and any register can be 
used as base or index registers. When executing 16- 
bit code, the displacements are either 8, or 16 bits, 
and the base and index register conform to the 
80286 model. Table 2-3 illustrates the differences. 


Unsigned Long Integer (Double Word): An un- 
signed 32-bit quantity. 

Signed Quad Word: A signed 64-bit quantity. 

Unsigned Quad Word: An unsigned 64-bit quanti- 
ty- 

Offset: A 16- or 32-bit offset only quantity which 
indirectly references another memory location. 

Pointer: A full pointer which consists of a 16-bit 
segment selector and either a 16- or 32-bit offset. 

Char: A byte representation of an ASCII Alphanu- 
meric or control character. 


2.6 DATA TYPES 

The 386 DX supports all of the data types commonly 
used in high level languages: 

Bit: A single bit quantity. 

Bit Field: A group of up to 32 contiguous bits, 
which spans a maximum of four bytes. 

Bit String: A. set of contiguous bits, on the 386 DX 
bit strings can be up to 4 gigabits long. 

Byte: A signed 8-bit quantity. 


String: A contiguous sequence of bytes, words or 
dwords. A string may contain between 1 byte and 
4 Gbytes. 

BCD: A byte (unpacked) representation of decimal 
digits 0-9. 

Packed BCD: A byte (packed) representation of 
two decimal digits 0-9 storing one digit in each 
nibble. 

When the 386 DX is coupled with a 387 DX Numeri- 
cs Coprocessor then the following common Floating 
Point types are supported. 


Unsigned Byte: An unsigned 8-bit quantity. 

Integer (Word): A signed 1 6-bit quantity. 

Long Integer (Double Word): A signed 32-bit quan- 
tity. All operations assume a 2’s complement rep- 
resentation. 

Unsigned Integer (Word): An unsigned 16-bit 
quantity. 


Floating Point: A signed 32-, 64-, or 80-bit real 
number representation. Floating point numbers 
are supported by the 387 DX numerics coproces- 
sor. 

Figure 2-10 illustrates the data types supported by 
the 386 DX and the 387 DX numerics coprocessor. 
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Figure 2-10. 386 tm DX Supported Data Types 
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2.7 MEMORY ORGANIZATION 

2.7.1 Introduction 

Memory on the 386 DX is divided up into 8-bit quan- 
tities (bytes), 16-bit quantities (words), and 32-bit 
quantities (dwords). Words are stored in two consec- 
utive bytes in memory with the low-order byte at the 
lowest address, the high order byte at the high ad- 
dress. Dwords are stored in four consecutive bytes 
in memory with the low-order byte at the lowest ad- 
dress, the high-order byte at the highest address. 
The address of a word or dword is the byte address 
of the low-order byte. 

In addition to these basic data types, the 386 DX 
supports two larger units of memory: pages and seg- 
ments. Memory can be divided up into one or more 
variable length segments, which can be swapped to 
disk or shared between programs. Memory can also 
be organized into one or more 4K byte pages. Final- 
ly, both segmentation and paging can be combined, 
gaining the advantages of both systems. The 386 
DX supports both pages and segments in order to 
provide maximum flexibility to the system designer. 
Segmentation and paging are complementary. Seg- 
mentation Is useful for organizing memory In logical 
modules, and as such Is a tool for the application 
programmer, while pages are useful for the system 
programmer for managing the physical memory of a 
system. 

2.7.2 Address Spaces 

The 386 DX has three distinct address spaces: 
logical, linear, and physical. A logical address 


(also known as a virtual address) consists of a se- 
lector and an offset. A selector is the contents of a 
segment register. An offset is formed by summing all 
of the addressing components (BASE, INDEX, DIS- 
PLACEMENT) discussed in section 2.5.3 Memory 
Addressing Modes into an effective address. Since 
each task on 386 DX has a maximum of 16K (214 
-1) selectors, and offsets can be 4 gigabytes, (232 
bits) this gives a total of 2 ^^ bits or 64 terabytes of 
logical address space per task. The programmer 
sees this virtual address space. 

The segmentation unit translates the logical ad- 
dress space Into a 32-blt linear address space. If the 
paging unit is not enabled then the 32-bit linear ad- 
dress corresponds to the physical address. The 
paging unit translates the linear address space into 
the physical address space. The physical address 
is what appears on the address pins. 

The primary difference between Real Mode and Pro- 
tected Mode is how the segmentation unit performs 
the translation of the logical address into the linear 
address. In Real Mode, the segmentation unit shifts 
the selector left four bits and adds the result to the 
offset to form the linear address. While in Protected 
Mode every selector has a linear base address as- 
sociated with it. The linear base address is stored in 
one of two operating system tables (i.e. the Local 
Descriptor Table or Global Descriptor Table). The 
selector’s linear base address is added to the offset 
to form the final linear address. 

Figure 2-1 1 shows the relationship between the vari- 
ous address spaces. 



SEGMENT 

REGISTER 


231630-53 


Figure 2-11. Address Translation 
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2.7.3 Segment Register Usage 

The main data structure used to organize memory is 
the segment. On the 386 DX, segments are variable 
sized blocks of linear addresses which have certain 
attributes associated with them. There are two main 
types of segments: code and data, the segments are 
of variable size and can be as small as 1 byte or as 
large as 4 gigabytes (2^2 bytes). 

In order to provide compact instruction encoding, 
and increase processor performance, instructions 
do not need to explicitly specify which segment reg- 
ister is used. A default segment register is automati- 
cally chosen according to the rules of Table 2-4 
(Segment Register Selection Rules). In general, data 
references use the selector contained in the DS reg- 
ister; Stack references use the SS register and In- 
struction fetches use the CS register. The contents 
of the Instruction Pointer provides the offset. Special 
segment override prefixes allow the explicit use of a 
given segment register, and override the implicit 
rules listed in Table 2-4. The override prefixes also 
allow the use of the ES, FS and GS segment regis- 
ters. 


There are no restrictions regarding the overlapping 
of the base addresses of any segments. Thus, all 6 
segments could have the base address set to zero 
and create a system with a four gigabyte linear ad- 
dress space. This creates a system where the virtual 
address space is the same as the linear address 
space. Further details of segmentation are dis- 
cussed in section 4.1. 


2.8 I/O SPACE 

The 386 DX has two distinct physical address 
spaces: Memory and I/O. Generally, peripherals are 
placed in I/O space although the 386 DX also sup- 
ports memory-mapped peripherals. The I/O space 
consists of 64K bytes, it can be divided into 64K 
8-bit ports, 32K 16-bit ports, or 16K 32-bit ports, or 
any combination of ports which add up to less than 
64K bytes. The 64K I/O address space refers to 
physical memory rather than linear address since 1/ 
O instructions do not go through the segmentation 
or paging hardware. The M/IO# pin acts as an addi- 
tional address line thus allowing the system designer 
to easily determine which address space the proces- 
sor is accessing. 


Table 2-4. Segment Register Selection Rules 


Type of 

Memory Reference 

Implied (Default) 
Segment Use 

Segment Override 
Prefixes Possible 

Code Fetch 

CS 

None 

Destination of PUSH, PUSHF, INT, 

SS 

None 

CALL, PUSHA Instructions 



Source of POP, POPA, POPF, 

SS 

None 

IRET, RET instructions 



Destination of STOS, MOVS, REP 

ES 

None 

STOS, REP MOVS Instructions 



(Dl is Base Register) 



other Data References, with 

Effective Address Using Base 
Register of: 



[EAX] 

DS 

DS,CS,SS,ES,FS,GS 

[EBX] 

DS 

DS,CS,SS,ES,FS,GS 

[ECX] 

DS 

DS,CS,SS,ES,FS.GS 

[EDX] 

DS 

DS,CS,SS,ES,FS,GS 

[ESI] 

DS 

DS,CS,SS,ES.FS,GS 

[EDi] 

DS 

DS,CS,SS,ES.FS,GS 

[EBP] 

SS 

DS,CS,SS,ES.FS,GS 

[ESP] 

SS 

DS,CS,SS,ES,FS,GS 
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The I/O ports are accessed via the IN and OUT I/O 
instructions, with the port address supplied as an 
immediate 8-bit constant in the instruction or in the 
DX register. All 8- and 16-bit port addresses are zero 
extended on the upper address lines. The I/O in- 
structions cause the M/IO# pin to be driven low. 

I/O port addresses 00F8H through OOFFH are re- 
served for use by Intel. 


2.9 INTERRUPTS 


2.9.1 Interrupts and Exceptions 

Interrupts and exceptions alter the normal program 
flow, in order to handle external events, to report 
errors or exceptional conditions. The difference be- 
tween interrupts and exceptions is that interrupts are 
used to handle asynchronous external events while 
exceptions handle Instruction faults. Although a pro- 
gram can generate a software interrupt via an INT N 
Instruction, the processor treats software interrupts 
as exceptions. 

Hardware interrupts occur as the result of an exter- 
nal event and are classified into two types: maskable 
or non-maskable. Interrupts are serviced after the 
execution of the current instruction. After the inter- 
rupt handler is finished servicing the Interrupt, exe- 
cution proceeds with the Instruction immediately 
after the interrupted instruction. Sections 2.9.3 and 
2.9.4 discuss the differences between Maskable and 
Non-Maskable Interrupts. 

Exceptions are classified as faults, traps, or aborts 
depending on the way they are reported, and wheth- 
er or not restart of the instruction causing the excep- 
tion is supported. Faults are exceptions that are de- 
tected and serviced before the execution of the 
faulting Instruction. A fault would occur in a virtual 
memory system, when the processor referenced a 
page or a segment which was not present. The oper- 
ating system would fetch the page or segment from 
disk, ?ind then the 386 DX would restart the instruc- 
tion. Traps are exceptions that are reported immedi- 
ately after the execution of the instruction which 
caused the problem. User defined interrupts are ex- 
amples of traps. Aborts are exceptions which do 
not permit the precise location of the instruction 
causing the exception to be determined. Aborts are 
used to report severe errors, such as a hardware 
error, or illegal values In system tables. 

Thus, when an interrupt service routine has been 
completed, execution proceeds from the instruction 


immediately following the interrupted instruction. On 
the other hand, the return address from an excep- 
tion fault routine will always point at the instruction 
causing the exception and include any leading in- 
struction prefixes. Table 2-5 summarizes the possi- 
ble interrupts for the 386 DX and shows where the 
return address points. 

The 386 DX has the ability to handle up to 256 differ- 
ent Interrupts/exceptions. In order to service the in- 
terrupts, a table with up to 256 interrupt vectors 
must be defined. The interrupt vectors are simply 
pointers to the appropriate interrupt service routine. 
In Real Mode (see section 3.1), the vectors are 4 
byte quantities, a Code Segment plus a 1 6-bit offset; 
in Protected Mode, the Interrupt vectors are 8 byte 
quantities, which are put in an Interrupt Descriptor 
Table (see section 4.1). Of the 256 possible Inter- 
rupts, 32 are reserved for use by Intel, the remaining 
224 are free to be used by the system designer. 


2.9.2 Interrupt Processing 

When an interrupt occurs the following actions hap- 
pen. First, the current program address and the 
Flags are saved on the stack to allow resumption of 
the interrupted program. Next, an 8-bit vector is sup- 
plied to the 386 DX which Identifies the appropriate 
entry in the Interrupt table. The table contains the 
starting address of the interrupt service routine. 
Then, the user supplied Interrupt service routine is 
executed. Finally, when an I RET instruction is exe- 
cuted the old processor state is restored and pro- 
gram execution resumes at the appropriate instruc- 
tion. 

The 8-bit interrupt vector l.s supplied to the 386 DX in 
several different ways: exceptions supply the inter- 
rupt vector internally; software INT instructions con- 
tain or Imply the vector; maskable hardware inter- 
rupts supply the 8-bit vector via the interrupt ac- 
knowledge bus sequence. Non-Maskable hardware 
Interrupts are assigned to interrupt vector 2. 


2.9.3 Maskable Interrupt 

Maskable interrupts are the most common way used 
by the 386 DX to respond to asynchronous external 
hardware events. A hardware interrupt occurs when 
the INTR is pulled high and the Interrupt Flag bit (IF) 
is enabled. The processor only responds to inter- 
rupts between Instructions, (REPeat String instruc- 
tions, have an “interrupt window”, between memory 
moves, which allows Interrupts during long 
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Table 2-5. Interrupt Vector Assignments 


Function 

Interrupt 

Number 

Instruction Which 

Can Cause 

Exception 

Return Address 
Points to 
Faulting 
Instruction 

Type 

Divide Error 

0 

DIV, IDIV 

YES 

FAULT 

Debug Exception 

1 

any instruction 

YES 

TRAP* 

NMI Interrupt 

2 

INT 2 or NMI 

NO 

NMI 

One Byte Interrupt 

3 

INT 

NO 

TRAP 

Interrupt on Overflow 

4 

INTO 

NO 

TRAP 

Array Bounds Check 

5 

BOUND 

YES 

FAULT 

Invalid OP-Code 

6 

Any Illegal Instruction 

YES 

FAULT 

Device Not Available 

7 

ESC, WAIT 

YES 

FAULT 

Double Fault 

8 

Any Instruction That Can 

Generate an Exception 


ABORT 

Coprocessor Segment Overrun 

9 

ESC 

NO 

ABORT 

Invalid TSS 

10 

JMP, CALL, IRET, INT 

YES 

FAULT 

Segment Not Present 

11 

Segment Register Instructions 

YES 

FAULT 

Stack Fault 

12 

Stack References 

YES 

FAULT 

General Protection Fault 

13 

Any Memory Reference 

YES 

FAULT 

Intel Reserved 

15 




Page Fault 

14 

Any Memory Access or Code Fetch 

YES 

FAULT 

Coprocessor Error 

16 

ESC, WAIT 

YES 

FAULT 

Intel Reserved 

17-31 




Two Byte Interrupt 

0-255 

INTn 

NO 

TRAP 


* Some debug exceptions may report both traps on the previous instruction, and faults on the next instruction. 


String moves). When an interrupt occurs the proces- 
sor reads an 8-bit vector supplied by the hardware 
which identifies the source of the interrupt, (one of 
224 user defined interrupts). The exact nature of the 
interrupt sequence is discussed in section 5. 

The IF bit in the EFLAG registers is reset when an 
interrupt is being serviced. This effectively disables 
servicing additional interrupts during an interrupt 
service routine. However, the IF may be set explicitly 
by the interrupt handler, to allow the nesting of inter- 
rupts. When an IRET instruction is executed the 
original state of the IF Is restored. 


2.9.4 Non-Maskable Interrupt 

Non-maskable interrupts provide a method of servic- 
ing very high priority interrupts. A common example 
of the use of a non-maskable interrupt (NMI) would 
be to activate a power failure routine. When the NMI 


input is pulled high it causes an interrupt with an 
internally supplied vector value of 2. Unlike a normal 
hardware interrupt, no Interrupt acknowledgment se- 
quence is performed for an ,NMI. 

While executing the NMI servicing procedure, the 
386 DX will not service further NMI requests, until an 
interrupt return (IRET) instruction is executed or the 
processor is reset. If NMI occurs while currently 
servicing an NMI, its presence will be saved for serv- 
icing after executing the first IRET Instruction. The IF 
bit is cleared at the beginning of an NMI interrupt to 
Inhibit further INTR interrupts. 


2.9.5 Software Interrupts 

A third type of interrupt/exception for the 386 DX is 
the software interrupt. An INT n instruction causes 
the processor to execute the Interrupt service rou- 
tine pointed to by the nth vector in the Interrupt ta- 
ble. 
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A special case of the two byte software interrupt I NT 
n is the one byte I NT 3, or breakpoint interrupt. By 
inserting this one byte instruction in a program, the 
user can set breakpoints in his program as a debug- 
ging tool. 

A final type of software Interrupt, is the single step 
interrupt. It is discussed in section 2.12. 


2.9.6 Interrupt and Exception 
Priorities 

Interrupts are externally-generated events. Maska- 
ble Interrupts (on the INTR input) and Non-Maskable 
Interrupts (on the NMI input) are recognized at in- 
struction boundaries. When NMI and maskable 
INTR are both recognized at the same instruction 
boundary, the 386 DX invokes the NMI service rou- 
tine first. If, after the NMI service routine has been 
invoked, maskable interrupts are still enabled, then 
the 386 DX will invoke the appropriate interrupt serv- 
ice routine. 

Table 2-6a. 386tm dX Priority for 
Invoking Service Routines in Case of 
Simultaneous External Interrupts 

1. NMI 

2. INTR 


Exceptions are internally-generated events. Excep- 
tions are detected by the 386 DX if, in the course of 
executing an instruction, the 386 DX detects a prob- 
lematic condition. The 386 DX then immediately In- 
vokes the appropriate exception service routine. The 


ing the exception can be restarted. If the exception 
service routine has taken care of the problematic 
condition, the instruction will execute without caus- 
ing the same exception. 


It Is possible for a single instruction to generate sev- 
eral exceptions (for example, transferring a single 
operand could generate tv/o page faults if the oper- 
and location spans two “not present” pages). How- 
ever, only one exception is generated upon each at- 
tempt to execute the instruction. Each exception 
service routine should correct its corresponding ex- 
ception, and restart the instruction. In this manner, 
exceptions are serviced until the instruction exe- 
cutes successfully. 

As the 386 DX executes instructions, it follows a 
consistent cycle In checking for exceptions, as 
shown, in Table 2-6b. This cycle is repeated 


as each instruction is executed, and occurs In paral- 
lel with instruction decoding and execution. 

Table 2-6b. Sequence of Exception Checking 


Consider the case of the 386 DX having just 
completed an instruction. It then performs the 
following checks before reaching the point where 
the next instruction is completed: 

1. Check for Exception 1 Traps from the instruc- 
tion just completed (single-step via Trap Flag, 
or Data Breakpoints set In the Debug Regis- 
ters). 

2. Check for Exception 1 Faults in the next In- 
struction (Instruction Execution Breakpoint set 
In the Debug Registers for the next instruc- 
tion). 

3. Check for external NMI and INTR. 

4. Check for Segmentation Faults that prevented 
fetching the entire next Instruction (exceptions 
11 or 13). 

5. Check for Page Faults that prevented fetching 
the entire next instruction (exception 14). 

6. Check for Faults decoding the next instruction 
(exception 6 if illegal opcode; exception 6 if in 
Real Mode or in Virtual 8086 Mode and at- 
tempting to execute an Instruction for Protect- 
ed Mode only (see 4.6.4); or exception 13 if 
instruction is longer than 1 5 bytes, or privilege 
violation in Protected Mode (I.e. not at lOPL or 

■ atCPL=0). 

7. If WAIT opcode, check If TS = 1 and MP=1 
(exception 7 if both are 1). 

8. If ESCAPE opcode for numeric coprocessor, 
check if EM = 1 or TS = 1 (exception 7 if either 
are 1). 

9. If WAIT opcode or ESCAPE opcode for nu- 
meric coprocessor, check ERROR# input sig- 
nal (exception 16 if ERROR# input is assert- 
ed). 

10. Check in the following order for each memo- 
ry reference required by the Instruction: 

a. Check for Segmentation Faults that pre- 
vent transferring the entire memory quanti- 
ty (exceptions 11, 12, 13). 

b. Check for Page Faults that prevent trans- 
ferring the entire memory quantity (excep- 
tion 14). 

Note that the order stated supports the concept 
of the paging mechanism being “underneath” 
the segmentation mechanism. Therefore, for any 
given code or data reference in memory, seg- 
mentation exceptions are generated before pag- 
ing exceptions are generated. 
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2.9.7 Instruction Restart 

The 386 DX fully supports restarting all instructions 
after faults. If an exception is detected in the instruc- 
tion to be executed (exception categories 4 through 
10 in Table 2-6b), the 386 DX invokes the appropri- 
ate exception service routine. The 386 DX is in a 
state that permits restart of the instruction, for all 
cases but those in Table 2-6c. Note that all such 
cases are easily avoided by proper design of the 
operating system. 

Table 2-6c. Conditions Preventing 
Instruction Restart 


A. An instruction causes a task switch to a task 
whose Task State Segment is partially “not 
present”, (An entirely “not present” TSS is re- 
startable.) Partially present TSS’s can be 
avoided either by keeping the TSS’s of such 
tasks present in memory, or by aligning TSS 
segments to reside entirely within a single 4K 
page (for TSS segments of 4K bytes or less). 

B. A coprocessor operand wraps around the top 
of a 64K-byte segment or a 4G-byte segment, 
and spans three pages, and the page holding 
the middle portion of the operand is “not pres- 
ent.” This condition can be avoided by starting 
at a page boundary any segments containing 
coprocessor operands if the segments are ap- 
proximately 64K-200 bytes or larger (i.e. large 
enough for wraparound of the coprocessor 
operand to possibly occur). 

Note that these conditions are avoided by using 
the operating system designs mentioned in this 
table. 


2.9.8 Double Fault 

A Double Fault (exception 8) results when the proc- 
essor attempts to invoke an exception service rou- 
tine for the segment exceptions (10, 11, 12 or 13), 
but in the process of doing so, detects an exception 
other than a Page Fault (exception 14). 

A Double Fault (exception 8) will also be generated 
when the processor attempts to invoke the Page 
Fault (exception 14) service routine, and detects an 
exception other than a second Page Fault. In any 
functional system, the entire Page Fault service rou- 
tine must remain “present” in memory. 

Double page faults however do not raise the double 
fault exception. If a second page fault occurs while 
the processor is attempting to enter the service rou- 
tine for the first time, then the processor will invoke 


the page fault (exception 14) handler a second time, 
rather than the double fault (exception 8) handler. A 
subsequent fault, though, will lead to shutdown. 

When a Double Fault occurs, the 386 DX invokes 
the exception service routine for exception 8. 


2.10 RESET AND INITIALIZATION 

When the processor is initialized or Reset the regis- 
ters have the values shown in Table 2-7. The 386 
DX will then start executing instructions near the top 
of physical memory, at location FFFFFFFOH. When 
the first Intersegment Jump or Call Is executed, ad- 
dress lines A20-31 will drop low for CS-relative 
memory cycles, and the 386 DX will only execute 
instructions in the lower one megabyte of physical 
memory. This allows the system designer to use a 
ROM at the top of physical memory to initialize the 
system and take care of Resets. 

RESET forces the 386 DX to terminate all execution 
and local bus activity. No instruction execution or 
bus activity will occur as long as Reset is active. 
Between 350 and 450 CLK2 periods after Reset be- 
comes inactive the 386 DX will start executing in- 
structions at the top of physical memory. 


Table 2-7. Register Values after Reset 


Flag Word 

UUUU0002H Notel 

Machine Status Word (CRO) 

UUUUUUUOH Note 2 

Instruction Pointer 

OOOOFFFOH 

Code Segment 

FOOOH Note 3 

Data Segment 

OOOOH 

Stack Segment 

OOOOH 

Extra Segment (ES) 

OOOOH 

Extra Segment (FS) 

OOOOH 

Extra Segment (GS) 

OOOOH 

DX register 

component and 


stepping ID Note 5 

All other registers 

undefined Note 4 


NOTES: 

1. EFLAG Register. The upper 14 bits of the EFLAGS reg- 
ister are undefined, VM (Bit 17) and RF (BIT) 16 are 0 as 
are all other defined flag bits. 

2. CRO: (Machine Status Word). All of the defined fields in 
the CRO are 0 (PG Bit 31, TS Bit 3, EM Bit 2. MP Bit 1, and 
PE Bit 0). 

3. The Code Segment Register (CS) will have its Base Ad- 
dress set to FFFFOOOOH and Limit set to OFFFFH. 

4. All undefined bits are Intel Resen/ed and should not be 
used. 

5. DX register always holds component and stepping iden- 
tifier (see 5.7). EAX register holds self-test signature if self- 
test was requested (see 5.6). 
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2.11 TESTABILITY 


2.11.1 Self-Test 

The 386 DX has the capability to perform a self-test. 
The self-test checks the function of all of the Control 
ROM and most of the non-random logic of the part. 
Approximately one-half of the 386 DX can be tested 
during self-test. 

Self-Test is initiated on the 386 DX when the RESET 
pin transitions from HIGH to LOW, and the BUSY# 
pin is low. The self-test takes about 2**19 clocks, or 
approximately 26 milliseconds with a 20 MHz 386 
DX. At the completion of self-test the processor per- 
forms reset and begins normal operation. The part 
has successfully passed self-test if the contents of 
the EAX register are zero (0). If the results of EAX 
are not zero then the self-test has detected a flaw in 
the part. 


2.11.2 TLB Testing 

The 386 DX provides a mechanism for testing the 
Translation Lookaside Buffer (TLB) if desired. This 
particular mechanism is unique to the 386 DX and 
may not be continued In the same way in future 
processors^ When testing the TLB paging must be 
turned off (PG = 0 in CRO) to enable the TLB test- 
ing hardware and avoid interference with the test 
data being written to the TLB. 

There are two TLB testing operations: 1) write en- 
tries Into the TLB, and, 2) perform TLB lookups. Two 
Test Registers, shown In Figure 2-12, are provided 
for tho purpose of testing. TR6 is the **test 
register”, and TR7 is the “test data register”. The 
fields within these registers are defined below. 

C: This is the command bit. For a write into TR6 to 
cause an immediate write into the TLB entry, write a 
0 to this bit. For a write into TR6 to cause an Immedi- 
ate TLB lookup, write a 1 to this bit. 

Linear Address: This is the tag field of the TLB. On 
a TLB write, a TLB entry is allocated to this linear 
address and the rest of that TLB entry Is set per the 
value of TR7 and the value just written into TR6. On 
a TLB lookup, the TLB Is interrogated per this value 
and If one and only one TLB entry matches, the rest 
of the fields of TR6 and TR7 are set from the match- 
ing TLB entry. 

Physical Address: This is the data field of the TLB. 
On a write to the TLB, the TLB entry allocated to the 
linear address in TR6 is set to this value. On a TLB 
lookup, the data field (physical address) from the 
TLB is read out to here. 


PL: On a TLB write, PL= 1 causes the REP field of 
TR7 to select which of four associative blocks of the 
TLB is to be written, but PL=0 allows the internal 
pointer In the paging unit to select which TLB block 
Is written. On a TLB lookup, the PL bit indicates 
whether the lookup was a hit (PL gets set to 1) or a 
miss (PL gets reset to 0). 

V: The valid bit for this TLB entry. All valid bits can 
also be cleared by writing to CR3. 

D, D#: The dirty bit for/from the TLB entry. 

U, U#: The user bit for/from the TLB entry. 

W, W#: The writable bit for/from the TLB entry. 

For D, U and W, both the attribute and its comple- 
ment are provided as tag bits, to permit the option of 
a “don’t care” on TLB lookups. The meaning of 
these pairs of bits is given in the following table: 


X 

X# 

Effect During 
TLB Lookup 

Value of Bit 

X after TLB Write 

0 

0 

Miss All 

Bit X Becomes Undefined 

0 

1 

Match if X = 0 

Bit X Becomes 0 

1 

0 

Match if X = 1 

Bit X Becomes 1 

1 

1 

Match ail 

Bit X Becomes Undefined 


For writing a TLB entry: 

1 . Write TR7 for the desired physical address, PL 
and REP values. 

2. Write TR6 with the appropriate linear address, 
etc. (be sure to write C = 0 for “write” com- 
mand). 

For looking up (reading) a TLB entry: 

1 . Write TR6 with the appropriate linear address (be 
sure to write C = 1 for “lookup” command). 

2. Read TR7 and TR6. If the PL bit In TR7 Indicates 
a hit, then the other values reveal the TLB con- 
tents. if PL indiualeS a miss, then the Other values 
in TR7 and TR6 are Indeterminate. 


2.12 DEBUGGING SUPPORT 

The 386 DX provides several features which simplify 
the debugging process. The three categories of on- 
chip debugging aids are: 

1) the code execution breakpoint opcode (OCCH), 

2) the single-step capability provided by the TF bit in 
the flag register, and 

3) the code and data breakpoint capability provided . 
by the Debug Registers DRO-3, DR6, and DR7. 
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iny 


31 


12 11 


LINEAR ADDRESS 

V 

D 

D 

# 

u 

u 

# 

w 

w 

# 

0 

0 

0 

0 

C 

PHYSICAL ADDRESS 

0 

0 

0 

0 

0 

0 

0 

p 

L 

REP 

0 

0 


TR6 

TR7 


NOTE: I 0 I indicates Intel reserved: Do not define; SEE SECTION 2.3.10 


Figure 2-12. Test Registers 


2.12.1 Breakpoint Instruction 

A single-byte-opcode breakpoint instruction is avail- 
able for use by software debuggers. The breakpoint 
opcode is OCCh, and generates an exception 3 trap 
when executed. In typical use, a debugger program 
can “plant” the breakpoint instruction at all desired 
code execution breakpoints. The single-byte break- 
point opcode is an alias for the two-byte general 
software interrupt instruction, INT n, where n = 3. 
The only difference between INT 3 (OCCh) and INT n 
is that INT 3 is never lOPL-sensitIve but INT n is 
lOPL-sensitive in Protected Mode and Virtual 8086 
Mode. 


2.12.2 Single-Step Trap 

If the single-step flag (TF, bit 8) in the EFLAG regis- 
ter Is found to be set at the end of an instruction, a 
single-step exception occurs. The single-step ex- 
ception is auto vectored to exception number 1. Pre- 
cisely, exception 1 occurs as a trap after the Instruc- 
tion following the instruction which set TF. In typical 
practice, a debugger sets the TF bit of a flag register 
image on the debugger’s stack. It then typically 
transfers control to the user program and loads the 
flag image with a signal instruction, the IRET Instruc- 
tion. The single-step trap occurs after executing one 
instruction of the user program. 

Since the exception 1 occurs as a trap (that is, it 
occurs after the instruction has already executed), 
the CS:EIP pushed onto the debugger’s stack points 
to the next unexecuted Instruction of the program 
being debugged. An exception 1 handler, merely by 
ending with an IRET instruction, can therefore effi- 
ciently support single-stepping through a user pro- 
gram. 


2.12.3 Debug Registers 

The Debug Registers are an advanced debugging 
feature of the 386 DX. They allow data access 
breakpoints as well as code execution breakpoints. 
Since the breakpoints are indicated by on-chip regis- 
ters, an instruction execution breakpoint can be 


placed In ROM code or in code shared by several 
tasks, neither of which can be supported by the INT3 
breakpoint opcode. 

The 386 DX contains six Debug Registers, providing 
the ability to specify up to four distinct breakpoints 
addresses, breakpoint control options, and read 
breakpoint status. Initially after reset, breakpoints 
are In the disabled state. Therefore, no breakpoints 
will occur unless the debug registers are pro- 
grammed. Breakpoints set up in the Debug Regis- 
ters are autovectored to exception number 1 . 


2.12.3.1 LINEAR ADDRESS BREAKPOINT 
REGISTERS (DR0-DR3) 

Up to four breakpoint addresses can be specified by 
writing into Debug Registers DR0-DR3, shown in 
Figure 2-13. The breakpoint addresses specified are 
32-bit linear addresses. 386 DX hardware continu- 
ously compares the linear breakpoint addresses in 
DR0-DR3 with the linear addresses generated by 
executing software (a linear address is the result of 
computing the effective address and adding the 
32-blt segment base address). Note that If paging is 
not enabled the linear address equals the physical 
address. If paging Is enabled, the linear address is 
translated to a physical 32-blt address by the on- 
chip paging unit. Regardless of whether paging is 
enabled or not, however, the breakpoint registers 
hold linear addresses. 


2.12.3.2 DEBUG CONTROL REGISTER (DR7) 

A Debug Control Register, DR7 shown in Figure 
2-13, allows several debug control functions such as 
enabling the breakpoints and setting up other con- 
trol options for the breakpoints. The fields within the 
Debug Control Register, DR7, are as follows: 

LENi (breakpoint length specification bits) 

A 2-bit LEN field exists for each of the four break- 
points. LEN specifies the length of the associated 
breakpoint field. The choices for data breakpoints 
are: 1 byte, 2 bytes, and 4 bytes. Instruction execu- 
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31 


31 


16 15 


BREAKPOINT 0 LINEAR ADDRESS 


BREAKPOINT 1 LINEAR ADDRESS 


BREAKPOINT 2 LINEAR ADDRESS 


BREAKPOINT 3 LINEAR ADDRESS 


Intel reserved. Do not define. 


Intel reserved. Do not define. 


LEN 

R 

W 

LEN 

R 

W 

LEN 

R 

W 

LEN 

R 

3 

3 

3 

2 

2 

2 

1 

1 

1 

0 

0 


NOTE: 


16 15 

0 I indicates Intel reserved: Do not define; SEE SECTION 2.3.1 0 


DRO 

DR1 

DR2 

DR3 

DR4 

DR5 

DR6 

DR7 


Figure 2-13. Debug Registers 


tion breakpoints must have a length of 1 (LENi = 
00). Encoding of the LENi field is as follows: 


LENi 

Encoding 

Breakpoint 
Field Width 

Usage of Least 
Significant Bits in 
Breakpoint Address 
Register i, (i = 0-3) 

00 

1 byte 

AH 32-bits used to 
specify a single-byte 
breakpoint field. 

01 

2 bytes 

A1 -A31 used to 
specify a two-byte, 
word-aligned 
breakpoint field. AO in 
Breakpoint Address 

P02jct0r jo riQt iJSSd. 

10 

Undefined — 
do not use 
this encoding 


11 

4 bytes 

A2-A31 used to 
specify a four-byte, 
dword-aligned 
breakpoint field. AO 
and A1 in Breakpoint 
Address Register are 
not used. 


The LENi field controls the size of breakpoint field i 
by controlling whether all low-order linear address 
bits in the breakpoint address register are used to 
detect the breakpoint event. Therefore, all break- 
point fields are aligned; 2-byte breakpoint fields be- 
gin on Word boundaries, and 4-byte breakpoint 
fields begin on Dword boundaries. 


The following is an example of various size break- 
point fields. Assume the breakpoint linear address in 
DR2 is 00000005H. In that situation, the following 
illustration Indicates the region of the breakpoint 
field for lengths of 1, 2, or 4 bytes. 


DR2 = 000 

31 

00005H; 

LEN2 

= OOB 

0 

00000008H 

00000004H 

OOOOOOOOH 







bkpt fld2 








DR2^QQQ 

31 

nnnni;i-i- 

1 PMO 

= Q1B 

0 

00000008H 

00000004H 

OOOOOOOOH 








^ bkptfld2 







DR2 = 000 

31 

00005H; 

LEN2 

= 11B 

0 

00000008H 

00000004H 

OOOOOOOOH 





bkptfld2 
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RWi (memory access qualifier bits) 

A 2-bit RW field exists for each of the four break- 
points. The 2-bit RW field specifies the type of usage 
which must occur in order to activate the associated 
breakpoint. 


RW 

Usage 

Encoding 

Causing Breakpoint 

00 

Instruction execution only 

01 

Data writes only 

10 

Undefined — do not use this encoding 

11 

Data reads and writes only 


RW encoding 00 is used to set up an instruction 
execution breakpoint. RW encodings 01 or 11 are 
used to set up write-only or read/write data break- 
points. 

Note that instruction execution breakpoints are 
taken as faults (i.e. before the instruction exe- 
cutes), but data breakpoints are taken as traps 
(i.e. after the data transfer takes place). 

Using LENi and RWi to Set Data Breakpoint i 

A data breakpoint can be set up by writing the linear 
address into DRi (i = 0-3). For data breakpoints, 
RWi can = 01 (write-only) or 11 (write/read). LEN 
can = 00, 01, or 11. 

If a data access entirely or partly falls within the data 
breakpoint field, the data breakpoint condition has 
occurred, and if the breakpoint is enabled, an excep- 
tion 1 trap will occur. 

Using LENi and RWi to Set Instruction Execution 
Breakpoint i 

An instruction execution breakpoint can be set up by 
writing address of the beginning of the instruction 
(including prefixes if any) into DRi (i = 0-3). RWI 
must = 00 and LEN must = 00 for instruction exe- 
cution breakpoints. 

If the instruction beginning at the breakpoint address 
is about to be executed, the instruction execution 
breakpoint condition has occurred, and if the break- 
point is enabled, an exception 1 fault will occur be- 
fore the instruction is executed. 

Note that an instruction execution breakpoint ad- 
dress must be equal to the beginning byte address 
of an instruction (Including prefixes) in order for the 
instruction execution breakpoint to occur. 

GD (Global Debug Register access detect) 

The Debug Registers can only be accessed In Real 
Mode or at privilege level 0 in Protected Mode. The 


GD bit, when set, provides extra protection against 
any Debug Register access even in Real Mode or at 
privilege level 0 in Protected Mode. This additional 
protection feature is provided to guarantee that a 
software debugger (or ICEtm- 386) can have full con- 
trol over the Debug Register resources when re- 
quired. The GD bit, when set, causes an exception 1 
fault if an instruction attempts to read or write any 
Debug Register. The GD bit is then automatically 
cleared when the exception 1 handler is invoked, 
allowing the exception 1 handler free access to the 
debug registers. 

GE and LE (Exact data breakpoint match, global and 
local) 

If either GE or LE is set, any data breakpoint trap will 
be reported exactly after completion of the instruc- 
tion that caused the operand transfer. Exact report- 
ing is provided by forcing the 386 DX execution unit 
to wait for completion of data operand transfers be- 
fore beginning execution of the next instruction. 

If exact data breakpoint match is not selected, data 
breakpoints may not be reported until several In- 
structions later or may not be reported at all. When 
enabling a data breakpoint, it is therefore recom- 
mended to enable the exact data breakpoint match. 

When the 386 DX performs a task switch, the LE bit 
is cleared. Thus, the LE bit supports fast task switch- 
ing out of tasks, that have enabled the exact data 
breakpoint match for their task-local breakpoints. 
The LE bit is cleared by the processor during a task 
switch, to avoid having exact data breakpoint match 
enabled in the new task. Note that exact data break- 
point match must be re-enabled under software con- 
trol. 

The 386 DX GE bit is unaffected during a task 
switch. The GE bit supports exact data breakpoint 
match that is to remain enabled during all tasks exe- 
cuting in the system. 

Note that instruction execution breakpoints are al- 
ways reported exactly, whether or not exact data 
breakpoint match is selected. 

Gi and Li (breakpoint enable, global and local) 

If either Gi or Li is set then the associated breakpoint 
(as defined by the linear address in DRi, the length 
in LENi and the usage criteria in RWi) is enabled. If 
either Gi or Li is set, and the 386 DX detects the ith 
breakpoint condition, then the exception 1 handler is 
invoked. 

When the 386 DX performs a task switch to a new 
Task State Segment (TSS), all LI bits are cleared. 
Thus, the Li bits support fast task switching out of 
tasks that use some task-local breakpoint 
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registers. The Li bits are cleared by the processor 
during a task switch, to avoid spurious exceptions in 
the new task. Note that the breakpoints must be re- 
enabled under software control. 

All 386 DX Gi bits are unaffected during a task 
switch. The Gi bits support breakpoints that are ac- 
tive in all tasks executing in the system. 

2.12.3.3 DEBUG STATUS REGISTER (DR6) 

A Debug Status Register, DR6 shown in Figure 2-13, 
allows the exception 1 handler to easily determine 
why it was invoked. Note the exception 1 handler 
can be Invoked as a result of one of several events: 

1) DRO Breakpoint fault/trap. 

2) DR1 Breakpoint fault/trap. 

3) DR2 Breakpoint fault/trap. 

4) DR3 Breakpoint fault/trap. 

5) Single-step (TF) trap. 

6) Task switch trap. 

7) Fault due to attempted debug register access 
when GD = 1. 

The Debug Status Register contains single-bit flags 
for each of the possible events invoking exception 1 . 
Note below that some of these events are faults (ex- 
ception taken before the instruction is executed), 
while other events are traps (exception taken after 
the debug events occurred). 

The flags in DR6 are set by the hardware but never 
cleared by hardware. Exception 1 handler software 
should clear DR6 before returning to the user pro- 
gram to avoid future confusion in identifying the 
source of exception 1 . 

The fields within the Debug Status Register, DR6, 
are as follows: 

Bi (debug fault/trap due to breakpoint 0-3) 

Four breakpoint indicator flags, B0-B3, correspond 
one-to-one with the breakpoint registers in DRO- 
DR3. A flag Bi is set when the condition described 
by DRi, LENI, and RWi occurs. 

If Gi or Li is set, and if the ith breakpoint is detected, 
the processor will invoke the exception 1 handler. 
The exception is handled as a fault if an instruction 
execution breakpoint occurred, or as a trap If a data 
breakpoint occurred. 

IMPORTANT NOTE: A flag BI is set whenever the 
hardware detects a match condition on enabled 
breakpoint i. Whenever a match is detected on at 
least one enabled breakpoint i, the hardware imme- 


diately sets all Bi bits corresponding to breakpoint 
conditions matching at that Instant, whether enabled 
or not. Therefore, the exception 1 handler may see 
that multiple Bi bits are set, but only set Bi bits corre- 
sponding to enabled breakpoints (LI or GI set) are 
true Indications of why the exception 1 handler was 
invoked. 

BD (debug fault due to attempted register access 
when GD bit set) 

This bit is set if the exception 1 handler was Invoked 
due to an instruction attempting to read or write to 
the debug registers when GD bit was set. If such an 
event occurs, then the GD bit is automatically 
cleared when the exception 1 handler is invoked, 
allowing handler access to the debug registers. 

BS (debug trap due to single-step) 

This bit is set if the exception 1 handler was invoked 
due to the TF bit in the flag register being set (for 
single-stepping). See section 2.12.2. 

BT (debug trap due to task switch) 

This bit is set if the exception 1 handler was invoked 
due to a task switch occurring to a task having a 386 
DX TSS with the T bit set. (See Figure 4-1 5a). Note 
the task switch into the new task occurs normally, 
but before the first instruction of the task is execut- 
ed, the exception 1 handler is invoked. With respect 
to the task switch operation, the operation is consid- 
ered to be a trap. 

2.12.3.4 USE OF RESUME FLAG (RF) IN FLAG 
REGISTER 

The Resume Flag (RF) In the flag word can sup- 
press an instruction execution breakpoint when the 
exception 1 handler returns to a user program at a 
user address which is also an instruction execution 
breakpoint. See section 2.3.3. 


3. REAL MODE ARCHITECTURE 


3.1 REAL MODE INTRODUCTION 

When the processor is reset or powered up it is ini- 
tialized in Real Mode. Real Mode has the same base 
architecture as the 8086, but allows access to the 
32-bit register set of the 386 DX. The addressing 
mechanism, memory size, interrupt handling, are all 
identical to the Real Mode on the 80286. 
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Figure 3-1. Real Address Mode Addressing 


All of the 386 DX instructions are available in Real 
Mode (except those instructions listed in 4.6.4). The 
default operand size in Real Mode is 16-bits, just like 
the 8086. In order to use the 32-bit registers and 
addressing modes, override prefixes must be used. 
In addition, the segment size on the 386 DX in Real 
Mode is 64K bytes so 32-bit effective addresses 
must have a value less the OOOOFFFFH. The primary 
purpose of Real Mode is to set up the processor for 
Protected Mode Operation. 

The LOCK prefix on the 386 DX, even in Real Mode, 
is more restrictive than on the 80286. This is due to 
the addition of paging on the 386 DX In Protected 
Mode and Virtual 8086 Mode. Paging makes It Im- 
possible to guarantee that repeated string Instruc- 
tions can be LOCKed. The 386 DX can’t require that 
all pages holding the string be physically present in 
memory. Hence, a Page Fault (exception 14) might 
have to be taken during the repeated string instruc- 
tion. Therefore the LOCK prefix can’t be supported 
during repeated string instructions. 


These are the only instruction forms where the 
LOCK prefix Is legal on the 386 DX: 


Opcode 

Operands 
(Dest, Source) 

BIT Test and 

SET/RESET/COMPLEMENT 

XCHG 

XCHG 

ADD, OR, ADC, SBB, 

AND, SUB, XOR 

NOT, NEG, INC, DEC 

Mem, Reg/immed 

Reg, Mem 

Mem, Reg 

Mem, Reg/immed 

Mem 


An exception 6 will be generated if a LOCK prefix is 
placed before any instruction form dr opcode not 
listed above. The LOCK prefix allows indivisible 


read /modify/ write operations on memory operands 
using the instructions above. For example, even the 
ADD Reg, Mem is not LOCKable, because the Mem 
operand is not the destination (and therefore no 
memory read/modify/operation is being performed). 

Since, on the 386 DX, repeated string instructions 
are not LOCKable, it is not possible to LOCK the bus 
for a long period of time. Therefore, the LOCK prefix 
is not lOPL-sensitive on the 386 DX. The LOCK pre- 
fix can be used at any privilege level, but only on the 
instruction forms listed above. 


3.2 MEMORY ADDRESSING 

In Real Mode the maximum memory size is limited to 
1 megabyte. Thus, only address lines A2--A19 are 
active. (Exception, the high address lines A20~A31 
are high during CS-relatIve memory cycles until an 
intersegment jump or call is executed (see section 
2 . 10 )). 

Since paging is not allowed in Real Mode the linear 
addresses are the same as physical addresses. 
Physical addresses are formed in Real Mode by 
adding the contents of the appropriate segment reg- 
ister which is shifted left by four bits to an effective 
address. This addition results In a physical address 
from OOOOOOOOH to 0010FFEFH. This is compatible 
with 80286 Real Mode. Since segment registers are 
shifted left by 4 bits this implies that Real Mode seg- 
ments always start on 16 byte boundaries. 

All segments in Real Mode are exactly 64K bytes 
long, and may be read, written, or executed. The 386 
DX will generate an exception 13 If a data operand 
or instruction fetch occurs past the end of a seg- 
ment. (i.e. if an operand has an offset greater than 
FFFFH, for example a word with a low byte at 
FFFFH and the high byte at OOOOH.) 
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Segments may be overlapped in Real Mode. Thus, if 
a particular segment does not use all 64K bytes an- 
other segment can be overlayed on top of the un- 
used portion of the previous segment. This allows 
the programmer to minimize the amount of physical 
memory needed for a program. 


3.3 RESERVED LOCATIONS 

There are two fixed areas in memory which are re- 
served in Real address mode: system initialization 
area and the interrupt table area. Locations OOOOOH 
through 003FFH are reserved for interrupt vectors. 
Each one of the 256 possible interrupts has a 4-byte 
jump vector reserved for it. Locations FFFFFFFOH 
through FFFFFFFFH are reserved for system initiali- 
zation. 


3.4 INTERRUPTS 

Many of the exceptions shown in Table 2-5 and dis- 
cussed in section 2.9 are not applicable to Real 
Mode operation, in particular exceptions 10, 11, 14, 
will not happen in Real Mode. Other exceptions 
have slightly different meanings in Real Mode; Table 
3-1 identifies these exceptions. 


3.5 SHUTDOWN AND HALT 

The HLT instruction stops program execution and 
prevents the processor from using the local bus until 
restarted. Either NMI, INTR with interrupts enabled 
(IF= 1), or RESET will force the 386 DX out of halt. If 
interrupted, the saved CS:IP will point to the. next 
instruction after the HLT. 

Shutdown will occur when a severe error Is detected 
that prevents further processing. In Real Mode, 
shutdown can occur under two conditions: 

An Interrupt or an exception occur (Exceptions 8 
or 1 3) and the interrupt vector is larger than the 


Interrupt Descriptor Table (i.e. There is not an in- 
terrupt handler for the interrupt). 

A CALL, INT or PUSH instruction attempts to wrap 
around the stack segment when SP Is not even, 
(e.g. pushing a value on the stack when SP = 
0001 resulting In a stack segment greater than 
FFFFH) 

An NMI input can bring the processor out of shut- 
down if the Interrupt Descriptor Table limit is large 
enough to contain the NMI interrupt vector (at least 
001 7H) and the stack has enough room to contain 
the vector and flag Information (i.e. SP is greater 
than 0005H). Otherwise shutdown can only be exit- 
ed via the RESET input. 


4. PROTECTED MODE 
ARCHITECTURE 


4.1 INTRODUCTION 

The complete capabilities of the 386 DX are un- 
locked when the processor operates in Protected 
Virtual Address Mode (Protected Mode). Protected 
Mode vastly Increases the linear address space to 
four gigabytes ( 2^2 bytes) and allows the running of 
virtual memory programs of almost unlimited size 
(64 terabytes or 246 bytes). In addition Protected 
Mode allows the 386 DX to run all of the existing 
8086 and 80286 software, while providing a sophisti- 
cated memory management and a hardware-assist- 
ed protection mechanism. Protected Mode allows 
the use of additional instructions especially opti- 
mized for supporting multitasking operating systems. 
The base a.rchitecture of the 386 DX remains the 
same, the registers, instructions, and addressing 
modes described in the previous sections are re- 
tained. The main difference between Protected 
Mode, and Real Mode from a programmer’s view is 
the increased address space, and a different ad- 
dressing mechanism. 


Table 3-1 


Function 

Interrupt 

Number 

Related 

Instructions 

— 

Return 

Address Location 

Interrupt table limit too small 

8 

INT Vector is not 
within table limit 

Before 

Instruction 

CS, DS, ES, FS, GS 

Segment overrun exception 

13 

Word memory reference 
beyond offset = FFFFH. 

An attempt to execute 
past the end of CS segment. 

Before 

Instruction 

SS Segment overrun exception 

12 

Stack Reference 
beyond offset = FFFFH 

Before 

Instruction 
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4.2 ADDRESSING MECHANISM 

Like Real Mode, Protected Mode uses two compo- 
nents to form the logical address, a 16-bit selector is 
used to determine the linear base address of a seg- 
ment, the base address is added to a 32-bit effective 
address to form a 32-bit linear address. The linear 
address is then either used as the 32-bit physical 
address, or if paging is enabled the paging mecha- 
nism maps the 32-bit linear address into a 32-bit 
physical address. 

The difference between the two modes lies in calcu- 
lating the base address. In Protected Mode the se- 
lector is used to specify an index into an operating 


system defined table (see Figure 4-1). The table 
contains the 32-bit base address of a given seg- 
ment. The physical address is formed by adding the 
base address obtained from the table to the offset. 

Paging provides an additional memory management 
mechanism which operates only in Protected Mode. 
Paging provides a means of managing the very large 
segments of the 386 DX. As such, paging operates 
beneath segmentation. The paging mechanism 
translates the protected linear address which comes 
from the segmentation unit into a physical address. 
Figure 4-2 shows the complete 386 DX addressing 
mechanism with paging enabled. 



DESCRIPTOR 


Figure 4-1. Protected Mode Addressing 


48 BIT POINTER 



4K BYTES 

4K BYTES 

4K BYTES 

PHYSICAL PAGE: 
4K BYTES 

4K BYTES 

4K BYTES 

4K BYTES 

231630-56 


Figure 4-2. Paging and Segmentation 
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4.3 SEGMENTATION 


4.3.3 Descriptor Tables 


4.3.1 Segmentation Introduction 

Segmentation is one method of memory manage- 
ment. Segmentation provides the basis for protec- 
tion. Segments are used to encapsulate regions of 
memory which have common attributes. For exam- 
ple, all of the code of a given program could be con- 
tained in a segment, or an operating system table 
may reside in a segment. All information about a 
segment is stored in an 8 byte data structure called 
a descriptor. All of the descriptors in a system are 
contained in tables recognized by hardware. 


4.3.2 Terminology 

The following terms are used throughout the discus- 
sion of descriptors, privilege levels and protection: 

PL: Privilege Level — One of the four hierarchical 
privilege levels. Level 0 is the most privileged level 
and level 3 is the least privileged. More privileged 
levels are numerically smaller than less privileged 
levels. 

RPL: Requestor Privilege Level — The privilege level 
of the original supplier of the selector. RPL is deter- 
mined by the least two significant bits of a selector. 


4.3.3.1 DESCRIPTOR TABLES INTRODUCTION 

The descriptor tables define all of the segments 
which are used in an 386 DX system. There are 
three types of tables on the 386 DX which hold de- 
scriptors: the Global Descriptor Table, Local De- 
scriptor Table, and the Interrupt Descriptor Table. All 
of the tables are variable length memory arrays. 
They can range in size between 8 bytes and 64K 
bytes. Each table can hold up to 8192 8 byte de- 
scriptors. The upper 1 3 bits of a selector are used as 
an index into the descriptor table. The tables have 
registers associated with them which hold the 32-bit 
linear base address, and the 1 6-bit limit of each ta- 
ble. 

Each of the tables has a register associated with it 
the GDTR, LDTR, and the IDTR (see Figure 4-3). 
The LGDT, LLDT, and LIDT instructions, load the 
base and limit of the Global, Local, and Interrupt De- 
scriptor Tables, respectively, into the appropriate 
register. The SGDT, SLDT, and SIDT Instructions 
store the base and limit values. These tables are 
manipulated by the operating system. Therefore, the 
load descriptor table instructions are privileged in- 
structions. 


4.3.3.2 GLOBAL DESCRIPTOR TABLE 


DPL: Descriptor Privilege Level — ^This is the least 
privileged level at which a task may access that de- 
scriptor (and the segment associated with that de- 
scriptor). Descriptor Privilege Level is determined by 
bits 6:5 in the Access Right Byte of a descriptor. 

CPL: Current Privilege Level — The privilege level at 
which a task is currently executing, which equals the 
privilege level of the code segment being executed. 
CPL can also be determined by examining the low- 
est 2 bits of the CS register, except for conforming 
code segments. 

EPL: Effective Privilege Level — The effective privi- 
lege level is the least privileged of the RPL and DPL. 
Since smaller privilege level values indicate greater 
privilege, EPL is the numerical maximum of RPL and 
DPL. 

Task: One Instance of the execution of a program. 
Tasks are also referred to as processes. 


The Global Descriptor Table (GDT) contains de- 
scriptors which are possibly available to all of the 
tasks in a system. The GDT can contain any type of 
segment descriptor except for descriptors which are 
used for servicing interrupts (I.e. interrupt and trap 
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Figure 4-3. Descriptor Table Registers 
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GDT. Generally the GOT contains code and data 
segments used by the operating systems and task 
state segments, and descriptors for the LDTs in a 
system. 

The first slot of the Global Descriptor Table corre- 
sponds to the null selector and is not used. The null 
selector defines a null pointer value. 

4.3.3.3 LOCAL DESCRIPTOR TABLE 

LDTs contain descriptors which are associated with 
a given task. Generally, operating systems are de- 
signed so that each task has a separate LDT. The 
LDT may contain only code, data, stack, task gate, 
and call gate descriptors. LDTs provide a mecha- 
nism for isolating a given task’s code and data seg- 
ments from the rest of the operating system, while 
the GDT contains descriptors for segments which 
are common to all tasks. A segment cannot be ac- 
cessed by a task if its segment descriptor does not 
exist in either the current LDT or the GDT. This pro- 
vides both isolation and protection for a task’s seg- 
ments, while still allowing global data to be shared 
among tasks. 

Unlike the 6 byte GDT or IDT registers which contain 
a base address and limit, the visible portion of the 
LDT register contains only a 1 6-bit selector. This se- 
lector refers to a Local Descriptor Table descriptor in 
the GDT. 


4.3.3.4 INTERRUPT DESCRIPTOR TABLE 

The third table needed for 386 DX systems Is the 
Interrupt Descriptor Table. (See Figure 4-4.) The IDT 
contains the descriptors which point to the location 
of up to 256 interrupt service routines. The IDT 


may contain only task gates, interrupt gates, and 
trap gates. The IDT should be at least 256 bytes In 
size in order to hold the descriptors for the 32 Intel 
Reserved Interrupts. Every interrupt used by a sys- 
tem must have an entry in the IDT. The IDT entries 
are referenced via I NT instructions, external inter- 
rupt vectors, and exceptions. (See 2.9 Interrupts). 



Table Register Use 

4.3.4 Descriptors 

4.3.4.1 DESCRIPTOR ATTRIBUTE BITS 

The object to which the segment selector points to 
is called a descriptor. Descriptors are eight byte 
quantities which contain attributes about a given re- 
gion of linear address space (i.e. a segment). These 
attributes include the 32-bit base linear address of 
the segment, the 20-bit length and granularity of the 
segment, the protection level, read, write or execute 
privileges, the default size of the operands (16-bit or 


31 0 


SEGMENT BASE 15. 

..0 




SEGMENT LIMIT 15. 

..0 



BASE 31 ... 24 

G 

D 

0 

AVL 

LIMIT 

19. ..16 

P 

DPL 

_L_ 

S 

TYPE 

I I 

A 

BASE 

23... 16 


BASE Base Address of the segment 
LIMIT The length of the segment 
P Present Bit 1= Present 0 = Not Present 

DPL Descriptor Privilege Level 0-3 

S Segment Descriptor 0 = System Descriptor 1 = Code or Data Segment Descriptor 

TYPE Type of Segment 

A Accessed Bit 

G Granularity Bit 1 = Segment length is page granular 0= Segment length is byte granular 

D Default Operation Size (recognized in code segment descriptors only) 1 = 32-bit segment 0= 16-bit segment 

0 Bit must be zero (0) for compatibility with future processors 

AVL Available field for user or OS 


BYTE 

ADDRESS 

0 

+ 4 . 


NOTE: 

In a maximum-size segment (ie. a segment with G = 1 and segment limit 19...0=FFFFFH), the lowest 12 bits of the 
segment base should be zero (ie. segment base 11...000=000H). 


Figure 4-5. Segment Descriptors 
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code and data). The segment S bit in the segment 
descriptor determines if a given segment is a system 
segment or a code or data segment. If the S bit is 1 
then the segment is either a code or data segment, if 
it is 0 then the segment is a system segment. 

4.3.4.2 386 TM DX CODE, DATA DESCRIPTORS 
(S=1) 

Figure 4-6 shows the general format of a code and 
data descriptor and Table 4-1 illustrates how the bits 
in the Access Rights Byte are interpreted. 


31 0 


SEGMENT BASE 15. 

..0 




SEGMENT LIMIT 1 5... 0 






LIMIT 
19... 16 

ACCESS 

BASE 

BASE 31 ... 24 

G 

D/B 

0 

AVL 

RIGHTS 

BYTE 

23... 16 


D/B 1 = Default Instructions Attributes are 32-Bits G Granularity Bit 1 = Segment length is page granular 

0 = Default Instruction Attributes are 16-Bits 0 = Segment length is byte granular 

AVL Available field for user or OS 0 Bit must be zero (0) for compatibility with future processors 

NOTE: 

In a maximum-size segment (ie. a segment with G = 1 and segment limit 19...0 = FFFFFH), the lowest 12 bits of the 
segment base should be zero (ie. segment base 11...000 = 000H). 


Figure 4-6. Segment Descriptors 


32-bit), and the type of segment. All of the attribute 
information about a segment is contained in 12 bits 
in the segment descriptor. Figure 4-5 shows the gen- 
eral format of a descriptor. All segments on the 386 
DX have three attribute fields in common: the P bit, 
the DPL bit, and the S bit. The Present P bit Is 1 if 
the segment is loaded In physical memory, if P = 0 
then any attempt to access this segment causes a 
not present exception (exception 11). The Descrip- 
tor Privilege Level DPL is a two-bit field which speci- 
fies the protection level 0-3 associated with a seg- 
ment. 

The 386 DX has two main categories of segments 
system segments and non-system segments (for 


Table 4-1. Access Rights Byte Definition for Code and Data Descriptions 


Type 

Field 

Definition 


Bit 

Position 

Name 

Function 


7 

Present (P) 

P = 1 Segment Is mapped into physical memory. 

P = 0 No mapping to physical memory exits, base and limit are 
not used. 

6-5 

Descriptor Privilege 
Level (DPL) 

Segment privilege attribute used in privilege tests. 

4 

Segment Descrip- 
tor (S) 

S = 1 Code or Data (includes stacks) segment descriptor 

S = 0 System Segment Descriptor or Gate Descriptor 

3 

Executable (E) 

E = 0 Descriptor type is data segment: 

If 

2 

Expansion Direc- 

ED = 0 Expand up segment, offsets must be ^ limit. 

Data 


tion (ED) 

ED = 1 Expand down segment, offsets must be > limit. 

Segment 

1 

Writeable (W) 

W = 0 Data segment may not be written into. 

W = 1 Data segment may be written into. 

(S = 1, 

E = 0) 

3 

Executable (E) 

E = 1 Descriptor type is code segment: 

If 

2 

Conforming (C) 

C = 1 Code segment may only be executed 
when CPL > DPL and CPL 
remains unchanged. 

Code 
Segment 
^S = 1, 

1 

Readable (R) 

R = 0 Code segment may not be read. 

R = 1 Code segment may be read. > 

E= 1) 

0 

Accessed (A) 

A = 0 Segment has not been accessed. 

A = 1 Segment selector has been loaded into segment register 
or used by selector test instructions. 
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Code and data segments have several descriptor 
fields in common. The accessed A bit is set whenev- 
er the processor accesses a descriptor. The A bit is 
used by operating systems to keep usage statistics 
on a given segment. The G bit, or granularity bit, 
specifies if a segment length Is byte-granular or 
page-granular. 386 DX segments can be one mega- 
byte long with byte granularity (G = 0) or four giga- 
bytes with page granularity (G = 1), (i.e., 220 pages 
each page is 4K bytes in length). The granularity is 
totally unrelated to paging. A 386 DX system can 
consist of segments with byte granularity, and page 
granularity, whether or not paging is enabled. 

The executable E bit tells if a segment is a code or 
data segment. A code segment (E = 1 , S = 1 ) may be 
execute-only or execute/read as determined by the 
Read R bit. Code segments are execute only if 
R = 0, and execute/read if R = 1. Code segments 
may never be written into. 

NOTE: 

Code segments may be modified via aliases. Alias- 
es are writeable data segments which occupy the 
same range of linear address space as the code 
segment. 

The D bit indicates the default length for operands 
and effective addresses. If D=1 then 32-blt oper- 
ands and 32-bit addressing modes are assumed. If 
D = 0 then 16-bit operands and 16-bit addressing 
modes are assumed. Therefore all existing 80286 
code segments will execute on the 386 DX assum- 
ing the D bit is set 0. 

Another attribute of code segments is determined by 
the conforming C bit. Conforming segments, C=1, 
can be executed and shared by programs at differ- 
ent privilege levels. (See section 4.4 Protection.) 


Segments identified as data segments (E = 0, S = 1) 
are used for two types of 386 DX segments: stack 
and data segments. The expansion direction (ED) bit 
specifies if a segment expands downward (stack) or 
upward (data). If a segment is a stack segment all 
offsets must be greater than the segment limit. On a 
data segment all offsets must be less than or equal 
to the limit. In other words, stack segments start at 
the base linear address plus the maximum segment 
limit and grow down to the base linear address plus 
the limit. On the other hand, data segments start at 
the base linear address and expand to the base lin- 
ear address plus limit. 

The write W bit controls the ability to write into a 
segment. Data segments are read-only if W = 0. The 
stack segment must have W = 1 . 

The B bit controls the size of the stack pointer regis- 
ter. If B = 1, then PUSHes, POPs, and CALLs all use 
the 32-bit ESP register for stack references and as- 
sume an upper limit of FFFFFFFFH. If B = 0, stack 
instructions all use the 16-bit SP register and as- 
sume an upper limit of FFFFH. 

4.3.4.3 SYSTEM DESCRIPTOR FORMATS 

System segments describe information about oper- 
ating system tables, tasks, and gates. Figure 4-7 
shows the general format of system segment de- 
scriptors, and the various types of system segments. 
386 DX system descriptors contain a 32-bit base lin- 
ear address and a 20-bit segment limit. 80286 sys- 
tem descriptors have a 24-bit base address and a 
16-bit segment limit. 80286 system descriptors are 
identified by the upper 16 bits being all zero. 


31-16 0 


SEGMENT BASE15...0 

SEGMENT LIMIT 1 5... 0 

BASE 31 ... 24 

G 

0 

0 

0 

LIMIT 
19... 16 

P 

DPL 

1 

0 

TYPE 

^ \ 1 

BASE 
23... 16 


Type 

Defines 

Type 

Defines 

0 

Invalid 

8 

Invalid 

1 

Available 80286 TSS 

9 

Available 386tm dX TSS 

2 

LOT 

A 

Undefined (Intel Reserved) 

3 

Busy 80286 TSS 

B 

Busy 386TM DX TSS 

4 

80286 Call Gate 

C 

386TM DX Call Gate 

5 

Task Gate (for 80286 or 386tm dX Task) 

D 

Undefined (Intel Reserved) 

6 

80286 Interrupt Gate 

E 

386TM DX Interrupt Gate 

7 

80286 Trap Gate 

F 

386TM DX Trap Gate 


NOTE: 

In a maximum-size segment (ie. a segment with G = 1 and segment limit 19...0 = FFFFFH), the lowest 12 bits of the 
segment base should be zero (ie. segment base 11...000 = 000H). 


Figure 4-7. System Segments Descriptors 
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4.3.4.4 LOT DESCRIPTORS (S = 0, TYPE = 2) 

LDT descriptors (S = 0 TYPE = 2) contain informa- 
tion about Local Descriptor Tables. LDTs contain a 
table of segment descriptors, unique to a particular 
task. Since the instruction to load the LDTR is only 
available at privilege level 0, the DPL field is ignored. 
LDT descriptors are only allowed in the Global De- 
scriptor Table (GDT). 

4.3.4.5 TSS DESCRIPTORS (S = 0, 

TYPE=1, 3, 9, B) 

A Task State Segment (TSS) descriptor contains in- 
formation about the locatipn, size, and privilege level 
of a Task State Segment (TSS). A TSS In turn is a 
special fixed format segment which contains all the 
state information for a task and a linkage field to 
permit nesting tasks. The TYPE field is used to Indi- 
cate whether the task is currently BUSY (i.e. on a 
chain of active tasks) or the TSS Is available. The 
TYPE field also Indicates if the segment contains a 
80286 or a 386 DX TSS. The Task Register (TR) 
contains the selector which points to the current 
Task State Segment. 

4.3.4.6 GATE DESCRIPTORS (S = 0, 

TYPE = 4-7, C, F) 

Gates are used to control access to entry points 
within the target code segment. The various types of 


gate descriptors are call gates, task gates, 
interrupt gates, and trap gates. Gates provide a 
level of Indirection between the source and destina- 
tion of the control transfer. This indirection allows 
the processor to automatically perform protection 
checks. It also allows system designers to control 
entry points to the operating system. Call gates are 
used to change privilege levels (see section 4.4 
Protection), task gates are used to perform a task 
switch, and Interrupt and trap gates are used to 
specify Interrupt service routines. 

Figure 4-8 shows the format of the four types of gate 
descriptors. Call gates are primarily used to transfer 
program control to a more privileged level. The call 
gate descriptor consists of three fields: the access 
byte, a long pointer (selector and offset) which 
points to the start of a routine and a word count 
which specifies how many parameters are to be cop- 
ied from the caller’s stack to the stack of the called 
routine. The word count field is, only used by call 
gates when there Is a change in the privilege level, 
other types of gates ignore the word count field. 

Interrupt and trap gates use the destination selector 
and destination offset fields of the gate descriptor as 
a pointer to the start of the interrupt or trap handler 
routines. The difference between interrupt gates ahd 
trap gates is that the Interrupt gate disables inter- 
rupts (resets the IF bit) while the trap gate does not. 


31 24 16 8 5 0 


SELECTOR 

OFFSET 15.. 

0 





OFFSET 31 ...16 

n 1 

P DPL 

1 1 

0 

TYPE 

L 1 1 

0 

0 

0 

WORD 

COUNT 

4...0 


Name 

Value 

Gate Descriptor Fields 

Description 

Type 

4 

80286 call gate 


5 

Task gate (for 80286 or 386 tm d: 


6 

80286 interrupt gate 


7 

80286 trap gate 


C 

386TM DX call gate 


E 

386TM DX interrupt gate 


F 

386 TM DX trap gate 

P 

0 

Descriptor contents are not valid 


1 

Descriptor contents are valid 


DPL— least privileged level at which a task may access the gate. WORD COUNT 0-31— the number of parameters to copy from caller’s stack 
to the called procedure’s stack. The parameters are 32-bit quantities for 386 tm DX gates, and 16-bit quantities for 80286 gates. 


DESTINATION 

SELECTOR 


DESTINATION 

OFFSET 


16-bit 

selector 


offset 

16-bit 80286 
32-bit 386TM DX 


Selector to the target code segment 
or 

Selector to the target task state segment for task gate 
Entry point within the target code segment 


Figure 4-8. Gate Descriptor Formats 
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Task gates are used to switch tasks. Task gates 
may only refer to a task state segment (see section 
4.4.6 Task Switching) therefore only the destination 
selector portion of a task gate descriptor is used, 
and the destination offset is ignored. 

Exception 1 3 is generated when a destination selec- 
tor does not refer to a correct descriptor type, i.e., a 
code segment for an interrupt, trap or call gate, a 
TSS for a task gate. 

The access byte format is the same for all gate de- 
scriptors. P = 1 indicates that the gate contents are 
valid. P = 0 indicates the contents are not valid and 
causes exception 1 1 if referenced. DPL is the de- 
scriptor privilege level and specifies when this de- 
scriptor may be used by a task (see section 4.4 
Protection). The S field, bit 4 of the access rights 
byte, must be 0 to indicate a system control descrip- 
tor. The type field specifies the descriptor type as 
indicated in Figure 4-8. 

4.3.4.7 DIFFERENCES BETWEEN 386 tm DX AND 
80286 DESCRIPTORS 

In order to provide operating system compatibility 
between the 80286 and 386 DX, the 386 DX sup- 
ports all of the 80286 segment descriptors. Figure 
4-9 shows the general format of an 80286 system 
segment descriptor. The only differences between 
80286 and 386 DX descriptor formats are that the 
values of the type fields, and the limit and base ad- 
dress fields have been expanded for the 386 DX. 
The 80286 system segment descriptors contained a 
24-bit base address and 16-bit limit, while the 386 
DX system segment descriptors have a 32-bit base 
address, a 20-bit limit field, and a granularity bit. 

By supporting 80286 system segments the 386 DX 
is able to execute 80286 application programs on a 
386 DX operating system. This is possible because 
the processor automatically understands which de- 
scriptors are 80286-style descriptors and which de- 


scriptors are 386 DX-style descriptors. In particular. 
If the upper word of a descriptor is zero, then that 
descriptor is a 80286-style descriptor. 

The only other differences between 80286-style de- 
scriptors and 386 DX descriptors is the interpretation 
of the word count field of call gates and the B bit. 
The word count field specifies the number of 16-bit 
quantities to copy for 80286 call gates and 32-bit 
quantities for 386 DX call gates. The B bit controls 
the size of PUSHes when using a call gate; if B = 0 
PUSHes are 16 bits, if B = 1 PUSHes are 32 bits. 

4.3.4.8 SELECTOR FIELDS 

A selector in Protected Mode has three fields; Local 
or Global Descriptor Table Indicator (Tl), Descriptor 
Entny Index (Index), and Requestor (the selector’s) 
Privilege Level (RPL) as shown In Figure 4-10. The 
Tl bits select one of . two memory-based tables of 
descriptors (the Global Descriptor Table or the Local 
Descriptor Table). The Index selects one of 8K de- 
scriptors in the appropriate descriptor table. The 
RPL bits allow high speed testing of the selector’s 
privilege attributes. 

4.3.4.9 SEGMENT DESCRIPTOR CACHE 

In addition to the selector value, every segment reg- 
ister has a segment descriptor cache register asso- 
ciated with it. Whenever a segment register’s con- 
tents are changed, the 8-byte descriptor associated 
with that selector is automatically loaded (cached) 
on the chip. Once loaded, all references to that seg- 
ment use the cached descriptor information instead 
of reaccessing the descriptor. The contents of the 
descriptor cache are not visible to the programmer. 
Since descriptor caches only change when a seg- 
ment register is changed, programs which modify 
the descriptor tables must reload the appropriate 
segment registers after changing a descriptor’s 
value. 


31 





0 

SEGMENT BASE15...0 

SEGMENT LIMIT 1 5... 0 

Intel Reserved 

Set too 

P 

DPL 

1 

S 

TYPE 

\ 1 1 

BASE 
23... 16 


BASE Base Address of the segment DPL Descriptor Privilege Level 0-3 

LIMIT The length of the segment S System Descriptor 0 = System 1 = User 

P Present Bit 1= Present 0 = Not Present TYPE Type of Segment 


Figure 4-9. 80286 Code and Data Segment Descriptors 
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SELECTOR 


SEGMENT 

REGISTER 


15 43210 



LOCAL 

DESCRIPTOR 

TABLE 


GLOBAL 

DESCRIPTOR 

TABLE 


231630-59 


Figure 4-10. Example Descriptor Selection 
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4,3.4.10 SEGMENT DESCRIPTOR REGISTER 
SETTINGS 

The contents of the segment descriptor cache vary 
depending on the mode the 386 DX is operating in. 
When operating in Real Address Mode, the segment 
base, limit, and other attributes within the segment 
cache registers are defined as shown in Figure 4-1 1 . 


For compatiblity with the 8086 architecture, the base 
is set to sixteen times the current selector value, the 
limit is fixed at OOOOFFFFH, and the attributes are 
fixed so as to indicate the segment is present and 
fully usable. In Real Address Mode, the internal 
“privilege level” is always fixed to the highest level, 
level 0, so I/O and other privileged opcodes may be 
executed. 


SEGMENT DESCRIPTOR CACHE REGISTER CONTENTS 

32 - BIT BASE 32 - BIT LIMIT . OTHER AHRIBUTES 

(UPDATED DURING SELECTOR (FIXED) (FIXED) 

LOAD INTO SEGMENT REGISTER) 

CONFORMING PRIVILEGE 

STACK 

EXECUTABLE 

WRITEABLE 

READABLE 

EXPANSION DIRECTION 

GRANULARITY 

ACCESSED 

PRIVILEGE LEVEL 

PRESENT 


CS 

16X CURRENT CS SELECTOR* 

OOOOFFFFH 

Y 

0 

Y 

B 

U 

Y 

Y 

Y 

- 

N 

ss 

1 6X CURRENT SS SELECTOR 

OOOOFFFFH 

Y 

0 

Y 

B 

U 

Y 

Y 

N 

W 

- 

DS 

1 6X CURRENT DS SELECTOR 

OOOOFFFFH 

Y 

0 

Y 

B 

U 

Y 

Y 

N 

- 

- 

ES 

16X CURRENT ES SELECTOR 

OOOOFFFFH 

Y 

0 

Y 

B 

U 

Y 

Y 

N 

- 

- 

FS 

16X CURRENT FS SELECTOR 

OOOOFFFFH 

Y 

0 

Y 

B 

U 

Y 

Y 

N 

- 

- 

GS 

1 6X CURRENT GS SELECTOR 

OOOOFFFFH 

Y 

0 

Y 

B 

U 

Y 

Y 

N 

- 

- 


231630-60 



*Except the 32-bit CS base is initialized to FFFFFOOOH after reset 
intersegment JMP, or INT). (See Figure 4-13 Example.) 

Key; Y = yes 

N = no 

0 = privilege level 0 

1 = privilege level 1 

2 = privilege level 2 

3 = privilege level 3 

U = expand up 


until first intersegment control transfer (e.g. intersegment CALL, or 

D = expand down 
B = byte granularity 
P = page granularity 
W = push/pop 16-bit words 
F = push/pop 32-bit dwords 
- = does not apply to that segment cache register 


Figure 4-11. Segment Descriptor Caches for Real Address Mode 
(Segment Limit and Attributes are Fixed) 
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When operating in Protected Mode, the segment 
base, limit, and other attributes within the segment 
cache registers are defined as shown in Figure 4-12. 
In Protected Mode, each of these fields are defined 


according to the contents of the segment descriptor 
Indexed by the selector value loaded into the seg- 
ment register. 


SEGMENT DESCRIPTOR CACHE REGISTER CONTENTS 


32 - BIT BASE 

(UPDATED DURING 
SELECTOR LOAD INTO 
SEGMENT REGISTER) 

CONFORMING PRIVILEGE - 

STACK SIZE 

EXECUTABLE 

WRITEABLE — - 

READABLE 

EXPANSION DIRECTION 

GRANULARITY 

ACCESSED 

PRIVILEGE LEVEL 

PRESENT 

BASE 


32 -BIT LIMIT 

(UPDATED DURING 
SELECTOR LOAD INTO 
SEGMENT REGISTER) 


OTHER AHRIBUTES 

(UPDATED DURING 
SELECTOR LOAD INTO 
SEGMENT REGISTER) 



cs 

BASE PER SEG DESCR 

LIMIT PER SEG DESCR 

P 

d 

d 

d 

d 

d 

N 

Y 

- 

d 

SS 

BASE PER SEG DESCR 

LIMIT PER SEG DESCR 

P 

d 

d 

d 

d 

r 

w 

N 

d 

- 

DS 

BASE PER SEG DESCR 

LIMIT PER SEG DESCR 

P 

d 

d 

d 

d 

d 

d 

N 

- 

- 

ES 

BASE PER SEG DESCR 

LIMIT PER SEG DESCR 

_P_ 

d 

d 

d 

d 

d 

d 

N 

- 

- 

FS 

BASE PER SEG DESCR 

LIMIT PER SEG DESCR 


d 

d 

d 

d 

d 

T 

N 

- 

- 

GS 

BASE PER SEG DESCR 

LIMIT PER SEG DESCR 

P 

T 

T 

T 

T 

"d" 

"d" 

n” 


- 


231630-61 


Key; Y = fixed yes 

N = fixed no 

d = per segment descriptor 

p = per segment descriptor; descriptor must indicate “present” to avoid exception 1 1 
(exception 12 in case of.SS) 

r = per segment descriptor, but descriptor must indicate “readable” to avoid exception 13 
(special case for SS) 

w = per segment descriptor, but descriptor must indicate “writable” to avoid exception 13 
(special case for SS) 

- = does noi apply io ihai segment cache register 


Figure 4-12. Segment Descriptor Caches for Protected Mode (Loaded per Descriptor) 
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When operating in a Virtual 8086 Mode within the 
Protected Mode, the segment base, limit, and other 
attributes within the segment cache registers are de- 
fined as shown in Figure 4-13. For compatibility with 
the 8086 architecture, the base is set to sixteen 
times the current selector value, the limit is fixed at 


OOOOFFFFH, and the attributes are fixed so as to 
indicate the segment is present and fully usable. The 
virtual program executes at lowest privilege level, 
level 3, to allow trapping of all lOPL-sensitive in- 
structions and level-O-only instructions. 


SEGMENT DESCRIPTOR CACHE REGISTER CONTENTS 


32 - BIT BASE 

(UPDATED DURING SELECTOR 
LOAD INTO SEGMENT REGISTER) 

CONFORMING PRIVILEGE 

STACK SIZE 

EXECUTABLE 

WRITEABLE 

READABLE 

EXPANSION DIRECTION 

GRANULARITY 

ACCESSED ; 

PRIVILEGE LEVEL 

PRESENT 

BASE 


32 - BIT LIMIT OTHER AHRIBUTES 

(FIXED) (FIXED) 


LIMIT 




cs 

1 6X CURRENT CS SELECTOR 

OOOOFFFFH 

Y 

3 

Y 

B 

U 

Y 

Y 

Y 

- 

N 

ss 

1 6X CURRENT SS SELECTOR 

OOOOFFFFH 

T 

T 

T 

T 

TT 

T 

T 

TT 

w 


DS 

1 6X CURRENT DS SELECTOR 

OOOOFFFFH 

Y 

T 

Y 

B 

U 

T 

Y 

N 

- 

- 

ES 

16X CURRENT ES SELECTOR 

OOOOFFFFH 

X 

T 

X 


X 

X 

X 

_N_ 

- 

- 

FS 

1 6X CURRENT FS SELECTOR 

OOOOFFFFH 

X 

_3. 

X 


u_ 

X 

X 

_N_ 

- 

- 

GS 

16X CURRENT GS SELECTOR 

OOOOFFFFH 

Y 

3 

Y 

B 

u 

Y 

Y 

N 

- 

- 
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Key; Y = yes 
N = no 

0 = privilege level 0 

1 = privilege level 1 

2 = privilege level 2 

3 = privilege level 3 

U = expand up 


D = expand down 
B = byte granularity 
P = page granularity 
W = push/pop 16-bit words 
F = push/pop 32-bit dwords 
- = does not apply to that segment cache register 


Figure 4-13. Segment Descriptor Caches for Virtual 8086 Mode within Protected Mode 
(Segment Limit and Attributes are Fixed) 
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4.4 PROTECTION 


4.4.1 Protection Concepts 



Figure 4-14. Four-Level Hierachical Protection 


The 386 DX has four levels of protection which are 
optimized to support the needs of a multi-tasking op- 
erating system to isolate and protect user programs 
from each other and the operating system. The privi- 
lege levels control the use of privileged instructions, 
I/O instructions, and access to segments and seg- 
ment descriptors. Unlike traditional microprocessor- 
based systems where this protection is achieved 
only through the use of complex external hardware 
and software the 386 DX provides the protection as 
part of its integrated Memory Management Unit. The 
386 DX offers an additional type of protection on a 
page basis, when paging is enabled (See section 

H.u.o rayc I.OVOI I'l 

The four-level hierarchical privilege system is Illus- 
trated in Figure 4-14. It is an extension of the user/ 
supervisor privilege mode commonly used by mini- 
computers and, in fact, the user/supervisor mode is 
fully supported by the 386 DX paging mechanism. 
The privilege levels (PL) are numbered 0 through 3. 
Level 0 is the most privileged or trusted level. 

4.4.2 Rules of Privilege 

The 386 DX controls access to both data and proce- 
dures between levels of a task, according to the fol- 
lowing rules. 

• Data stored in a segment with privilege level p can 
be accessed orily by code executing at a privilege 
level at least as privileged as p. 

• A code segment/procedure with privilege level p 
can only be called by a task executing at the same 
or a lesser privilege level than p. 


4.4.3 Priviiege Leveis 

4.4.3.1 TASK PRIVILEGE 

At any point in time, a task on the 386 DX always 
executes at one of the four privilege levels. The Cur- 
rent Privilege Level (CPL) specifies the task’s privi- 
lege level. A task’s CPL may only be changed by 
control transfers through gate descriptors to a code 
segment with a different privilege level. (See section 

4.4.4 Priviiege Level Transfers) Thus, an applica- 
tion program running at PL = 3 may call an operat- 
ing system routine at PL = 1 (via a gate) which 
would cause the task’s CPL to be set to 1 until the 
operating system routine was finished. 


4.4.3.2 SELECTOR PRIVILEGE (RPL) 

The privilege level of a selector is specified by the 
RPL field. The RPL is the two least significant bits of 
the selector. The selector’s RPL is only used to es- 
tablish a less trusted privilege level than the current 
privilege level for the use of a segment. This level is 
called the task’s effective privilege level (EPL). The 
EPL is defined as being the least privileged (i.e. nu- 
merically larger) level of a task’s CPL and a, selec- 
tor’s RPL. Thus, If selector’s RPL = 0 then the CPL 
always specifies the privilege level for making an ac- 
cess using the selector. On the pther hand if RPL = 
3 then a selector can only access segments at level 
3 regardless of the task’s CPL. The RPL is most 
commonly used to verify that pointers passed to an 
operating system procedure do not access data that 
is of higher privilege than the procedure that origi- 
nated the pointer. Since the originator of a selector 
can specify any RPL value, the Adjust RPL (ARPL) 
instruction is provided to force the RPL bits to the 
originator’s CPL. 

4.4.3.3 I/O PRIVILEGE AND I/O PERMISSION 
BITMAP 

The I/O privilege level (lOPL, a 2-bit field in the 
EFLAG register) defines the least privileged level at 
which I/O instructions can be unconditionally per- 
formed. I/O instructions can be unconditionally per- 
formed when CPL ^ lOPL. (The I/O instructions are 
IN. OUT, INS, OUTS, REP INS. and REP OUTS.) 
When CPL > lOPL, and the current task is associat- 
ed with a 286 TSS, attempted I/O instructions cause 
an exception 13 fault. When CPL > lOPL, and the 
current task is associated with a 386 DX TSS, the 
I/O Permission Bitmap (part of a 386 DX TSS) is 
consulted on whether I/O to the port is allowed, or 
an exception 13 fault is to be generated Instead. For 
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diagrams of the I/O Permission Bitmap, refer to Fig- 
ures 4-1 5a and 4-1 5b. For further information on 
how the I/O Permission Bitmap is used in Protected 
Mode or in Virtual 8086 Mode, refer to section 4.6.4 
Protection and I/O Permission Bitmap. 

The I/O privilege level (lOPL) also affects whether 
several other instructions can be executed or cause 
an exception 13 fault instead. These Instructions are 
called “lOPL-sensItive” instructions and they are 
CLI and STI. (Note that the LOCK prefix is not lOPL- 
sensitive on the 386 DX.) 

The lOPL also affects whether the IF (interrupts en- 
able flag) bit can be changed by loading a value into 
the EFLAGS register. When CPL ^ lOPL, then the 
IF bit can be changed by loading a new value into 
the EFLAGS register. When CPL > lOPL, the IF bit 
cannot be changed by a new value POP’ed into (or 
otherwise loaded info) the EFLAGS register; the IF 
bit merely remains unchanged and no exception is 
generated. 


Table 4-2. Pointer Test Instructions 


Instruction 

Operands 

Function 

ARPL 

Selector, 

Register 

Adjust Requested Privi- 
lege Level: adjusts the 

RPL of the selector to the 
numeric maximum of 
current selector RPL value 
and the RPL value in the 
register. Set zero flag If 
selector RPL was 
changed. 

VERR 

Selector 

VERify for Read; sets the 
zero flag if the segment 
referred to by the selector 
can be read. 

VERW 

Selector 

VERify for Write: sets the 
zero flag if the segment 
referred to by the selector 
can be written. 

LSL 

Register, 

Selector 

Load Segment Limit: reads 
the segment limit into the 
register if privilege rules 
and descriptor type allow. 
Set zero flag if successful. 

LAR 

Register, 

Selector 

Load Access Rights: reads 
the descriptor access 
rights byte into the register 
if privilege rules allow. Set 
zero flag if successful. 


4.4.3.4 PRIVILEGE VALIDATION 

The 386 DX provides several instructions to speed 
pointer testing and help maintain system integrity by 
verifying that the selector value refers to an appro- 
priate segment. Table 4-2 summarizes the selector 
validation procedures available for the 386 DX. 

This pointer verification prevents the common prob- 
lem of an application at PL = 3 calling a operating 
systems routine at PL = 0 and passing the operat- 
ing system routine a “bad” pointer which corrupts a 
data structure belonging to the operating system. If 
the operating system routine uses the ARPL Instruc- 
tion to ensure that the RPL of the selector has no 
greater privilege than that of the caller, then this 
problem can be avoided. 

4.4.3.5 DESCRIPTOR ACCESS 

There are basically two types of segment accesses; 
those involving code segments such as control 
transfers, and those involving data accesses. Deter- 
mining the ability of a task to access a segment in- 
volves the type of segment to be accessed, the in- 
struction used, the type of descriptor used and CPL, 
RPL, and DPL as described above. 

Any time an Instruction loads data segment registers 
(DS, ES, FS, GS) the 386 DX makes protection vali- 
dation checks. Selectors loaded in the DS, ES, FS, 
GS registers must refer only to data segments or 
readable code segments. The data access rules are 
specified In section 4.2.2 Rules of Privilege. The 
only exception to those rules is readable conforming 
code segments which can be accessed at any privi-. 
lege level. 

Finally the privilege validation checks are performed. 
The CPL is compared to the EPL and if the EPL is 
more privileged than the CPL an exception 1 3 (gen- 
eral protectionflault) is generated. 

The rules regarding the stack segment are slightly 
different than those involving data segments. In- 
structions that load selectors Into SS must refer to 
data segment descriptors for writeable data seg- 
ments. The DPL and RPL must equal the CPL. All 
other descriptor types or a privilege level violation 
will cause exception 13. A stack not present fault 
causes exception 1 2. Note that an exception 1 1 is 
used for a not-present code or data segment. 


4.4.4 Privilege Level Transfers 

Inter-segment control transfers occur when a selec- 
tor is loaded in the CS register. For a typical system 
most of these transfers are simply the result of a call 
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Table 4-3. Descriptor Types Used for Control Transfer 


Control Transfer Types 

Operation Types 

Descriptor 

Referenced 

Descriptor 

Table 

Intersegment within the same privilege level 

JMP, CALL, RET, IRET”* 

Code Segment 

GDT/LDT 

Intersegment to the same or higher privilege level 
Interrupt within task may change CPL 

CALL 

Call Gate 

GDT/LDT 

Interrupt Instruction, 
Exception, External 
Interrupt 

Trap or 

Interrupt 

Gate 

IDT 

Intersegment to a lower privilege level 
(changes task CPL) 

RET, IRET* 

Code Segment 

GDT/LDT 


CALL, JMP 

Task State 
Segment 

GDT 

Task Switch 

CALL, JMP 

Task Gate 

GDT/LDT 

IRET** 

Interrupt Instruction, 
Exception, External 
Interrupt 

Task Gate 

IDT 


* NT (Nested Task bit of flag register) = 0 
**NT (Nested Task bit of flag register) = 1 


or a jump to another routine. There are five types of 
control transfers which are summarized in Table 4-3. 
Many of these transfers result in a privilege level 
transfer. Changing privilege levels Is done only via 
control transfers, by using gates, task switches, and 
interrupt or trap gates. 

Control transfers can only occur if the operation 
which loaded the selector references the correct de- 
scriptor type. Any violation of these descriptor usage 
rules will cause an exception 13 (e.g. JMP through a 
call gate, or IRET from a normal subroutine call). 

In order to provide further system security, all control 
transfers are also subject to the privilege rules. 

The privilege rules require that: 

— Privilege level transitions can only occur via 
gates. 

— JMPs can be made to a non-conforming code 
segment with the same privilege or to a conform- 
ing code segment with greater or equal privilege. 

— CALLS can be made to a non-conforming code 
segment with the same privilege or via a gate to a 
more privileged level. 

— Interrupts handled within the task obey the same 
privilege rules as CALLs. 

— Conforming Code segments are accessible by 
privilege levels which are the same or less privi- 
leged than the conforming-code segment’s DPL. 

— Both the requested privilege level (RPL) in the 
selector pointing to the gate and the task’s CPL 


must be of equal or greater privilege than the 
gate’s DPL. 

— The code segment selected in the gate must be 
the same or more privileged than the task’s CPL. 

— Return instructions that do not switch tasks can 
only return control to a code segment with same 
or less privilege. 

— Task switches can be performed by a CALL, 
JMP, or I NT which references either a task gate 
or task state segment who’s DPL is less privi- 
leged or the same privilege as the old task’s CPL. 

Any control transfer that changes CPL within a task 
causes a change of stacks as a result of the privi- 
lege level change. The initial values of SS:ESP for 
privilege levels 0, 1, and 2 are retained In the task 
state segment (see section 4.4.6 Task Switching). 
During a JMP or CALL control transfer, the new 
stack pointer Is loaded into the SS and ESP regis- 
ters and the previous stack pointer Is pushed onto 
the new stack. 

When RETurning to the original privilege level, use 
of the lower-privileged stack is restored as part of 
the RET or IRET instruction operation. For subrou- 
tine calls that pass parameters on the stack and 
cross privilege levels, a fixed number of words (as 
specified In the gate’s word count field) are copied 
from the previous stack to the current stack. The 
inter-segment RET instruction with a stack adjust- 
ment value will correctly restore the previous stack 
pointer upon return. 
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Figure 4-15a. 386tm dX TSS and TSS Registers 
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Figure 4-1 5b. Sample I/O Permission Bit Map 


4.4.5 Call Gates 

Gates provide protected, indirect CALLs. One of the 
major uses of gates is to provide a secure method of 
privilege transfers within a task. Since the operating 
system defines ail of the gates in a system, it can 
ensure that all gates only allow entry into a few trust- 
ed procedures (such as those which allocate memo- 
ry, or perform I/O). 

Gate descriptors follow the data access rules of priv- 
ilege; that is, gates can be accessed by a task if the 
EPL, is equal to or more privileged than the gate 
descriptor’s DPI. Gates follow the control transfer 
rules of privilege and therefore may only transfer 
control to a more privileged level. 

Call Gates are accessed via a CALL Instruction and 
are syntactically identical to calling a normal subrou- 
tine. When an inter-level 386 DX call gate is activat- 
ed, the following actions occur. 

1. Load CS:EIP from gate check for validity 

2. SS is pushed zero-extended to 32 bits 

3. ESP is pushed 

4. Copy Word Count 32-bit parameters from the 

5. Push Return address on stack 

The procedure is identical for 80286 Call gates, ex- 
cept that 16-bit parameters are copied and 16-blt 
registers are pushed. 

Interrupt Gates and Trap gates work in a similar 
fashion as the call gates, except there Is no copying 
of parameters. The only difference between Trap 
and Interrupt gates is that control transfers through 
an Interrupt gate disable further interrupts (I.e. the IF 
bit is set to 0), and Trap gates leave the interrupt 
status unchanged. 

4.4.6 Task Switching 

A very Important attribute of any multi-tasking/multl- 
user operating systems is its ability to rapidly switch 
between tasks or processes. The 386 DX directly 
supports this operation by providing a task switch 
instruction in hardware. The 386 DX task switch op- 


eration saves the entire state of the machine (all of 
the registers, address space, and a link to the previ- 
ous task), loads a new execution state, performs 
protection checks, and commences execution in the 
new task, in about 1 7 microseconds. Like transfer of 
control via gates, the task switch operation is In- 
voked by executing an Inter-segment JMP or CALL 
Instruction which refers to a Task State Segment 
(TSS), or a task gate descriptor in the GDT or LDT. 
An INT n instruction, exception, trap, or external in- 
terrupt may also Invoke the task switch operation if 
there is a task gate descriptor in the associated IDT 
descriptor slot. 

The TSS descriptor points to a segment (see Figure 
4-15) containing the entire 386 DX execution state 
while a task gate descriptor contains a TSS selector. 
The 386 DX supports both 80286 and 386 DX style 
TSSs. Figure 4-16 shows a 80286 TSS. The limit of 
a 386 DX TSS must be greater than 0064H (002BH 
for a 80286 TSS), and can be as large as 4 Giga- 
bytes. In the additional TSS space, the operating 
system is free to store additional information such as 
the reason the task is inactive, time the task has 
spent running, and open files belong to the task. 

Each task must have a TSS associated with it. The 
current TSS is identified by a special register in the 
386 DX called the Task State Segment Register 
(TR). This register contains a selector referring to 
the task state segment descriptor that defines the 
current TSS. A hidden base and limit register associ- 
ated with TR are loaded whenever TR Is loaded with 
a new selector. Returning from a task is accom- 
plished by the IRET instruction. When IRET is exe- 
cuted, control Is returned to the task which was In- 
terrupted. The current executing task’s state is 
saved in the TSS and the old task state is restored 
from its TSS. 

Several bits in the flag register and machine status 
word (CRO) give information about the state of a 
task v/hich are useful to the operating system. The 
Nested Task (NT) (bit 14 In EFLAGS) controls the 
function of the IRET instruction. If NT = 0, the IRET 
instruction performs the regular return; when NT = 
1, IRET performs a task switch operation back to the 
previous task. The NT bit is set or reset in the follow- 
ing fashion: 
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Figure 4-16. 80286 TSS 

When a CALL or I NT instruction initiates a task 
switch, the new TSS will be marked busy and the 
back link field of the new TSS set to the old TSS 
selector. The NT bit of the new task is set by CALL 
or INT initiated task switches. An interrupt that does 
not cause a task switch will clear NT. (The NT bit will 
be restored after execution of the interrupt handler) 
NT may also be set or cleared by POPF or IRET 
instructions. 

The 386 DX task state segment is marked busy by 
changing the descriptor type field from TYPE 9H to 
TYPE BH. An 80286 TSS is marked busy by chang- 
ing the descriptor type field from TYPE 1 to TYPE 3. 
Use of a selector that references a busy task state 
segment causes an exception 1 3. 

The Virtual Mode (VM) bit 1 7 is used to indicate if a 
task, is a virtual 8086 task. If VM = 1 , then the tasks 
will use the Real Mode addressing mechanism. The 
virtual 8086 environment is only entered and exited 
via a task switch (see section 4.6 Virtual Mode). 

The coprocessor’s state is not automatically saved 
when a task switch occurs, because the incoming 
task may not use the coprocessor. The Task 
Switched (TS) Bit (bit 3 in the CRO) helps deal with 
the coprocessor’s state in a multi-tasking environ- 


INITIAL 

STACKS 

FOR CPL 0,1,2 


CURRENT 

TASK 

STATE 


ment. Whenever the 386 DX switches tasks, it sets 
the TS bit. The 386 DX detects the first use of a 
processor extension instruction after a task switch 
and causes the processor extension not available 
exception 7. The exception handler for exception 7 
may then decide whether to save the state of the 
coprocessor. A processor extension not present ex- 
ception (7) will occur when attempting to execute an 
ESC or WAIT instruction if the Task Switched and 
Monitor coprocessor extension bits are both set (i.e. 
TS = 1 and MP = 1). 

The T bit In the 386 DX TSS indicates that the proc- 
essor should generate a debug exception when 
switching to a task. If T = 1 then upon entry to a 
new task a debug exception 1 will be generated. 

4.4.7 Sriitialization and Transition to 

Protected Mode 

Since the 386 DX begins executing in Real Mode 
immediately after RESET it is necessary to initialize 
the system tables and registers with the appropriate 
values. 

The GDT and IDT registers must refer to a valid GDT 
and IDT. The IDT should be at least 256 bytes long, 
and GDT must contain descriptors for the initial 
code, and data segments. Figure 4-17 shows the 
tables and Figure 4-18 the descriptors needed for a 
simple Protected Mode 386 DX system. It has a sin- 
gle code and single data/stack segment each four 
gigabytes long and a single privilege level PL = 0. 

The actual method of enabling Protected Mode is to 
load CRO with the PE bit set, via the MOV CRO, R/M 
Instruction. This puts the 386 DX in Protected Mode. 

After enabling Protected Mode, the next instruction 
should execute an intersegment JMP to load the CS 
register and flush the instruction decode queue. The 
final step is to load all of the data segment registers 
with the initial selector values. 

An alternate approach to entering Protected Mode 
which is especially appropriate for multi-tasking op- 
erating systems, Is to use the built in task-switch to 
load all of the registers. In this case the GDT would 
contain two TSS descriptors in addition to the code 
and data descriptors needed for the first task. The 
first JMP instruction in Protected Mode would jump 
to the TSS causing a task switch and loading all of 
the registers with the values stored in the TSS. The 
Task State Segment Register should be initialized to 
point to a valid TSS descriptor since a task switch 
saves the state of the current task in a task state 
segment. 
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Figure 4-17. Simple Protected System 
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Figure 4-18. GDT Descriptors for Simple System 


4.4.8 Tools for Building Protected 
Systems 

In order to simplify the design of a protected multi- 
tasking system, Intel provides a tool which allows 
the system designer an easy method of constructing 
the data structures needed for a Protected Mode 
386 DX system. This tool Is the builder BLD-386tm. 
BLD-386 lets the operating system writer specify all 
of the segment descriptors discussed In the previous 
sections (LDTs, IDTs, GDTs, Gates, and TSSs) in a 
high-level language. 


4.5 PAGING 


4.5.1 Paging Concepts 

Paging is another type of memory management use- 
ful for virtual memory multitasking operating sys- 
tems. Unlike segmentation which modularizes pro- 
grams and data Into variable length segments, 
paging divides programs into multiple uniform size 
pages. Pages bear no direct relation to the logical 
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structure of a program. While segment selectors can 
be considered the logical “name” of a program 
module or data structure, a page most likely corre- 
sponds to only a portion of a module or data struc- 
ture. 

By taking advantage of the locality of reference dis- 
played by most programs, only a small number of 
pages from each active task need be in memory at 
any one moment. 


4.5.2 Paging Organization 

4.5.2.1 PAGE MECHANISM 

The 386 DX uses two levels of tables to translate 
the linear address (from the segmentation unit) into 
a physical address. There are three components to 
the paging mechanism of the 386 DX: the page di- 
rectory, the page tables, and the page itself (page 
frame). All memory-resident elements of the 386 DX 
paging mechanism are the same size, namely, 4K 
bytes. A uniform size for all of the elements simpli- 
fies memory allocation and reallocation schemes, 
since there is no problem with memory fragmenta- 
tion. Figure 4-19 shows how the paging mechanism 
works. 


4.5.2.2 PAGE DESCRIPTOR BASE REGISTER 

CR2 is the Page Fault Linear Address register. It 
holds the 32-bit linear address which caused the last 
page fault detected. 

CR3 is the Page Directory Physical Base Address 
Register. It contains the physical starting address of 
the Page Directory. The lower 12 bits of CR3 are 
always zero to ensure that the Page Directory is al- 
ways page aligned. Loading it via a MOV CR3, reg 
instruction causes the Page Table Entry cache to be 
flushed, as will a task switch through a TSS which 
changes the value of CRO. (See 4.5.4 Translation 
Lookaside Buffer). 

4.5.2.3 PAGE DIRECTORY 

The Page Directory is 4K bytes long and allows up to 
1024 Page Directory Entries. Each Page Directory 
Entry contains the address of the next level of ta- 
bles, the Page Tables and information about the 
page table. The contents of a Page Directory Entry 
are shown in Figure 4-20. The upper 10 bits of the 
linear address (A22-A31) are used as an index to 
select the correct Page Directory Entry. 


TWO LEVEL PAGING SCHEME 



231630-67 

Figure 4-19. Paging Mechanism 
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Figure 4-20. Page Directory Entry (Points to Page Table) 
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Figure 4-21. Page Table Entry (Points to Page) 


4.5.2.4 PAGE TABLES 

Each Page Table is 4K bytes and holds up to 1024 
Page Table Entries. Page Table Entries contain the 
starting address of the page frame and statistical 
information about the page (see Figure 4-21). Ad- 
dress bits A12-A21 are used as an index to select 
one of the 1024 Page Table Entries. The 20 upper- 
bit page frame address is concatenated with the 
lower 1 2 bits of the linear address to form the physi- 
cal address. Page tables can be shared between 
tasks and swapped to disks. 

4.5.2.5 PAGE DIRECTORY/TABLE ENTRIES 

The lower 12 bits of the Page Table Entries and 
Page Directory Entries contain statistical information 
about pages and page tables respectively. The P 
(Present) bit 0 indicates if a Page Directory or Page 
Table entry can be used in address translation. If 
P = 1 the entry can be used for address translation; 
if P = 0 the entry can not be used for translation. 
Note that the present bit of the page table entry that 
points to the page where code is currently being ex- 
ecuted should always be set. Code that marks Its 
own page not present should not be written. All of 
the other bits are available for use by the software. 
For example the remaining 31 bits could be used to 
indicate where on the disk the page is stored. 

The A (Accessed) bit 5, is set by the 386 DX for both 
types of entries before a read or write access occurs 
to an address covered by the entry. The D (Dirty) bit 
6 is set to 1 before a write to an address covered by 
that page table entry occurs. The D bit is undefined 
for Page Directory Entries. When the P, A and D bits 
are updated by the 386 DX, the processor generates 
a Read-Modify-Write cycle which locks the bus and 
prevents conflicts with other processors or perpheri- 
als. Software which modifies these bits should use 
the LOCK prefix to ensure the integrity of the page 
tables In multi-master systems, 

The 3 bits marked OS Reserved In Figure 4-20 and 
Figure 4-21 (bits 9-11) are software definable. OSs 
are free to use these bits for whatever purpose they 
wish. An example use of the OS Reserved bits 
would be to store information about page aging. By 
keeping track of how long a page has been in mem- 
ory since being accessed, an operating system can 
implement a page replacement algorithm like Least 
Recently Used. 


The (User/Supervisor) U/S bit 2 and the (Read/ 
Write) R/W bit 1 are used to provide protection attri- 
butes for individual pages. 


4.5.3 Page Level Protection 
(R/W, U/S Bits) 

The 386 DX provides a set of protection attributes 
for paging systems. The paging mechanism distin- 
guishes between two levels of protection: User 
which corresponds to level 3 of the segmentation 
based protection, and supervisor which encompass- 
es all of the other protection levels (0, 1, 2). Pro- 
grams executing at Level 0, 1 or 2 bypass the page 
protection, although segmentation based protection 
is still enforced by the hardware. 

The U/S and R/W bits are used to provide Us- 
er/Supervisor and Read/Write protection for individ- 
ual pages or for all pages covered by a Page Table 
Directory Entry. The U/S and R/W bits in the first 
level Page Directory Table apply to all pages de- 
scribed by the page table pointed to by that directory 
entry. The U/S and R/W bits in the second level 
Page Table Entry apply only to the page described 
by that entry. The U/S and R/W bits for a given 
page are obtained by taking the most restrictive of 
the U/S and R/W from the Page Directory Table 
EnlrifcJb and Iha Page Table Enlries and using Ihese 
bits to address the page. 

Example: If the U/S and R/W bits for the Page Di- 
rectory entry were 10 and the U/S and R/W bits for 
the Page Table Entry were 01, the access rights for 
the page would be 01 , the numerically smaller of the 
two. Table 4-4 shows the affect of the U/S and R/W 
bits on accessing memory. 


Table 4-4. Protection Provided by R/W and U/S 


U/S 

R/W 

Permitted 
Level 3 

Permitted Access 
Levels 0, 1, or 2 

0 

0 

None 

Read/Write 

0 

1 

None 

Read/Write 

1 

0 

Read-Only 

Read/Write 

1 

1 

Read/Write 

Read/Write 


However a given segment can be easily made read- 
only for level 0, 1, or 2 via the use of segmented 
protection mechanisms. (Section 4.4 Protection). 
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4.5.4 Translation Lookaside Buffer 

The 386 DX paging hardware is designed to support 
demand paged virtual memory systems. However, 
performance would degrade substantially if the proc- 
essor was required to access two levels of tables for 
every memory reference. To solve this problem, the 
386 DX keeps a cache of the most recently ac- 
cessed pages, this cache is called the Translation 
Lookaside Buffer (TLB). The TLB is a four-way set 
associative 32-entry page table cache. It automati- 
cally keeps the most commonly used Page Table 
Entries in the processor. The 32-entry TLB coupled 
with a 4K page size, results In coverage of 128K 
bytes of memory addresses. For many common mul- 
ti-tasking systems, the TLB will have a hit rate of 
about 98%. This means that the processor will only 
have to access the two-level page structure on 2% 
of all memory references. Figure 4-22 illustrates how 
the TLB complements the 386 DX’s paging mecha- 
nism. 


4.5.5 Paging Operation 



Figure 4-22. Translation Lookaside Buffer 


The paging hardware operates in the following fash- 
ion. The paging unit hardware receives a 32-bit lin- 
ear address from the segmentation unit. The upper 
20 linear address bits are compared with all 32 en- 
tries in the TLB to determine if there is a match. If 
there is a match (i.e. a TLB hit), then the 32-bit phys- 
ical address Is calculated and will be placed on the 
address bus. 

However, if the page table entry is not in the TLB, 
the 386 DX will read the appropriate Page Directory 
Entry. If P = 1 on the Page Directory Entry indicat- 
ing that the page table is in memory, then the 386 
DX will read the appropriate Page Table Entry 


and set the Access bit. If P = 1 on the Page Table 
Entry indicating that the page is in memory, the 386 
DX will update the Access and Dirty bits as needed 
and fetch the operand. The upper 20 bits of the lin- 
ear address, read from the page table, will be stored 
in the TLB for future accesses. However, If P = 0 for 
either the Page Directory Entry or the Page Table 
Entry, then the processor will generate a page fault, 
an Exception 14. 

The processor will also generate an exception 14, 
page fault, if the memory reference violated the 
page protection attributes (I.e. U/S or R/W) (e.g. try- 
ing to write to a read-only page). CR2 will hold the 
linear address which caused the page fault. If a sec- 
ond page fault occurs, while the processor is at- 
tempting to enter the service routine for the first, 
then the processor will invoke the page fault (excep- 
tion 14) handler a second time, rather than the dou- 
ble fault (exception 8) handler. Since Exception 1 4 is 
classified as a fault, CS: EIP will point to the instruc- 
tion causing the page fault. The 16-bit error code 
pushed as part of the page fault handler will contain 
status bits which indicate the cause of the page 
fault. 

The 16-bit error code is used by the operating sys- 
tem to determine how to handle the page fault Fig- 
ure 4-23A shows the format of the page-fault error 
code and the interpretation of the bits. 

NOTE: 

Even though the bits in the error code (U/S, W/R, 
and P) have similar names as the bits in the Page 
Directory/Table Entries, the Interpretation of the er- 
ror code bits is different. Figure 4-23B indicates 
what type of access caused the page fault. 
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Figure 4-23A. Page Fault Error Code Format 


U/S: The U/S bit indicates whether the access 
causing the fault occurred when the processor was 
executing in User Mode (U/S = 1) or In Supervisor 
mode (U/S = 0) 

W/R: The W/R bit indicates whether the access 
causing the fault was a Read (W/R = 0) or a Write 
(W/R = 1) 

P: The P bit indicates whether a page fault was 
caused by a not-present page (P = 0), or by a page 
level protection violation (P = 1) 

U: UNDEFINED 
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U/S 

W/R 

Access Type 

0 

0 

Supervisor* Read 

0 

1 

Supervisor Write 

1 

0 

User Read 

1 

1 

User Write 


*Descriptor table access will fault with U/S == O. even if the program 
is executing at level 3. 


Figure 4-23B. Type of Access 
Causing Page Fault 


cations. Thus, in a multi-user 386 DX computer, one 
person could be running an MS-DOS spreadsheet, 
another person using MS-DOS, and a third person 
could be running multiple Unix utilities and applica- 
tions. Each person in this scenario would believe 
that he had the computer completely to himself. Fig- 
ure 4-24 illustrates this concept. 


4.6.2 Virtual 8086 Mode Addressing 
Mechanism 


4.5.6 Operating System 
Responsibilities 

The 386 DX takes care of the page address transla- 
tion process, relieving the burden from an operating 
system in a demand-paged system. The operating 
system is responsible for setting up the initial page 
tables, and handling any page faults. The operating 
system also Is required to invalidate (i.e. flush) the 
TLB when any changes are made to any of the page 
table entries. The operating system must reload 
CR3 to cause the TLB to be flushed. 

Setting up the tables is simply a matter of loading 
CR3 with the address of the Page Directory, and 
allocating space for the Page Directory and the 
Page Tables. The primary responsibility of the oper- 
ating system is to implement a swapping policy and 
handle all of the page faults. 

A final concern of the operating system is to ensure 
that the TLB cache matches the information in the 
paging tables. In particular, any time the operating 
system sets the P present bit of page table entry to 
zero, the TLB must be flushed. Operating systems 
may want to take advantage of the fact that CR3 Is 
stored as part of a TSS, to give every task or group 
of tasks its own set of page tables. 


4.6 VIRTUAL 8086 ENVIRONMENT 


4.6.1 Executing 8086 Programs 

The 386 DX allows the execution of 8086 application 
programs in both Real Mode and in the Virtual 8086 
Mode (Virtual Mode). Of the two methods. Virtual 
8086 Mode offers the system designer the most 
flexibility. The Virtual 8086 Mode allows the execu- 
tion of 8086 applications, while still allowing the sys- 
tem designer to take full advantage of the 386 DX 
protection mechanism. In particular, the 386 DX al- 
lows the simultaneous execution of 8086 operating 
systems and Its applications, and a 386 DX operat- 
ing system and both 80286 and 386 DX appli- 


One of the major differences between 386 DX Real 
and Protected modes Is how the segment selectors 
are interpreted. When the processor is executing In 
Virtual 8086 Mode the segment registers are used in 
an identical fashion to Real Mode. The contents of 
the segment register is shifted left 4 bits and added 
to the offset to form the segment base linear ad- 
dress. 

The 386 DX allows the operating system to specify 
which programs use the 8086 style address mecha- 
nism, and which programs use Protected Mode ad- 
dressing, on a per task basis. Through the use of 
paging, the one megabyte address space of the Vir- 
tual Mode task- can be mapped to anywhere in the 4 
gigabyte linear address space of the 386 DX. Like 
Real Mode, Virtual Mode effective addresses (I.e., 
segment offsets) that exceed 64K byte will cause an 
exception 13. However, these restrictions should not 
prove to be Important, because most tasks running 
in Virtual 8086 Mode will simply be existing 8086 
application programs. 


4.6.3 Paging In Virtual Mode 

The paging hardware allows the concurrent running 
of multiple Virtual Mode tasks, and provides protec- 
tion and operating system Isolation. Although it is 
not strictly necessary to have the paging hardware 
enabled to run Virtual Mode tasks, it is needed in 
order to run multiple Virtual Mode tasks or to relo- 
cate the address space of a Virtual Mode task to 
physical address space greater than one megabyte. 

The paging hardware allows the 20-bit linear ad- 
dress produced by a Virtual Mode program to be 
divided Into up to 256 pages. Each one of the pages 
can be located anywhere within the maximum 4 giga- 
byte physical address space of the 386 DX. In addi- 
tion, since CR3 (the Page Directory Base Register) 
is loaded by a task switch, each Virtual Mode task 
can use a different mapping scheme to map pages 
to different physical locations. Finally, the paging 
hardware allows the sharing of the 8086 operating 
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Figure 4-24. Virtual 8086 Environment Memory Management 


system code between multiple 8086 applications. 
Figure 4-24 shows how the 386 DX paging hardware 
enables multiple 8086 programs to run under a virtu- 
al memory demand paged system. 


4.6.4 Protection and I/O Permission 
Bitmap 

All Virtual 8086 Mode programs execute at privilege 
level 3, the level of least privilege. As such, Virtual 
8086 Mode programs are subject to all of the protec- 
tion checks defined in Protected Mode. (This is dif- 
ferent from Real Mode which implicitly is executing 
at privilege level 0, the level of greatest privilege.) 
Thus, an attempt to execute a privileged instruction 
when in Virtual 8086 Mode will cause an exception 
13 fault. 

The following are privileged instructions, which may 
be executed only at Privilege Level 0. Therefore, at- 
tempting to execute these instructions in Virtual 
8086 Mode (or anytime CPL > 0) causes an excep- 
tion 13 fault: 

LIDT; MOV DRn,reg; MOV reg,DRn; 

LGDT; MOV TRn,reg; MOV reg,TRn; 


LMSW; MOV CRn,reg; MOV reg,CRn. 
CLTS ; 

HLT ; 

Several instructions, particularly those applying to 
the multitasking model and protection model, are 
available only in Protected Mode. Therefore, at- 
tempting to execute the following Instructions In 
Real Mode or in Virtual 8086 Mode generates an 


exception 6 fault: 

LTR; 

STR; 

LLDT; 

SLDT ; 

LAR; 

VERR; 

LSL; 

VERW; 

ARPL, 



The instructions which are lOPL-sensitive in Protect- 
ed Mode are: 

IN; STI; 

OUT ; CLI 

INS; 

OUTS; 

REP , INS ; 

REP OUTS; 
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In Virtual 8086 Mode, a slightly different set of in- 
structions are made lOPL-sensitive. The following in- 
structions are lOPL-sensitive in Virtual 8086 Mode: 

INT n; STI ; 

PUSHF ; CLI ; 

POPF ; IRET 

The PUSHF, POPF, and IRET Instructions are lOPL- 
sensitlve in Virtual 8086 Mode only. This provision 
allows the IF flag (interrupt enable flag) to be virtual- 
ized to the Virtual 8086 Mode program. The INT n 
software Interrupt instruction is also lOPL-sensItIve 
in Virtual 8086 Mode. Note, however, that the INT 3 
(opcode OCCH), INTO, and BOUND instructions are 
not lOPL-sensItive in Virtual 8086 mode (they aren’t 
lOPL sensitive in Protected Mode either). 

Note that the I/O instructions (IN, OUT, INS, OUTS, 
REP INS, and REP OUTS) are not lOPL-sensitive in 
Virtual 8086 mode. Rather, the I/O instructions be- 
come automatically sensitive to the I/O Permission 
Bitmap contained in the 386 DX Task State Seg- 
ment. The I/O Permission Bitmap, automatically 
used by the 386 DX in Virtual 8086 Mode, is illustrat- 
ed by Figures 4.15a and 4-1 5b. 

The I/O Permission Bitmap can be viewed as a 0- 
64 Kbit bit string, which begins In memory at offset 

Bit_Map__Offset in the current TSS. Bit_Map 

Offset must be ^ DFFFH so the entire bit map and 
the byte FFH which follows the bit rnap are all at 
offsets ^ FFFFH from the TSS base. The 16-bit 

pointer Bit Map Offset (1 5:0) is found in the word 

beginning at offset 66H (102 decimal) from the TSS 
base, as shown in Figure 4-1 5a. 

Each bit In the I/O Permission Bitmap corresponds 
to a single hyte-wide I/O port, as illustrated in Figure 
4-1, 5a. If a bit is 0, I/O to the corresponding byte- 
wide port can occur without generating an excep- 
tion. Otherwise the I/O instruction causes an excep- 
tion 13 fault. Since every byte-wide I/O port must be 
protectable, all bits corresponding to a word-wide or 
dword-wide port must be 0 for the word-wide or 
dword-wlde I/O to be permitted. If all the referenced 
bits are 0, the I/O will be allowed. If any referenced 
bits are 1 , the attempted I/O will cause an exception 
1 3 fault. 

Due to the use of a pointer to the base of the I/O 
Permission Bitmap, the bitmap may be located any- 
where within the TSS, or may be ignored completely 

by pointing the Bit Map Offset (15:0) beyond the 

limit of the TSS segment. In the same manner, only 
a small portion of the 64K I/O space need have an 
associated map bit, by adjusting the TSS limit to 
truncate the bitmap. This eliminates the commitment 
of 8K of memory when a complete bitmap is not 
required, while allowing the fully general case if 
desired. 


EXAMPLE OF BITMAP FOR I/O PORTS 0-255: 

Setting the TSS limit to (bit Map Offset + 31 

+ 1**1 [** see note below] will allow a 32-byte bit- 
map for the I/O ports #0-255, plus a terminator 
byte of all 1’s [** see note below]. This allows the 
I/O bitmap to control I/O Permission to I/O port 0- 
255 while causing an exception 1 3 fault on attempt- 
ed I/O to any I/O port 80256 through 65,565. 

**IMPORTANT IMPLEMENTATION NOTE: Beyond 
the last byte of I/O mapping Information in the I/O 
Permission Bitmap must be a byte containing all 1 ’s. 
The byte of all 1 ’s must be within the limit of the 386 
DX TSS segment (see Figure 4-1 5a). 


4.6.5 Interrupt Handling 

In order to fully support the emulation of an 8086 
machine, interrupts in Virtual 8086 Mode are han- 
dled in a unique fashion. When running in Virtual 
Mode all interrupts and exceptions involve a privi- 
lege change back to the host 386 DX operating sys- 
tem. The 386 DX operating system determines if the 
interrupt comes from a Protected Mode application 
or from a Virtual Mode program by examining the 
VM bit in the EFLAGS image stored on the stack. 

When a Virtual Mode program is Interrupted and ex- 
ecution passes to the interrupt routine at level 0, the 
VM bit is cleared. However, the VM bit is still set in 
the EFLAG image on the stack. 

The 386 DX operating system in turn handles the 
exception or Interrupt and then returns control to the 
8086 program. The 386, DX operating system may 
choose to let the 8086 operating system handle the 
interrupt or it may emulate the function of the inter- 
rupt handler. For example, many 8086 operating 
system calls are accessed by PUSHing parameters 
on the stack, and then executing an INT n instruc- 
tion. If the lOPL is set to 0 then all INT n Instructions 
will be intercepted by the 386 DX Microprocessor 
operating system. The 386 DX operating system 
could emulate the 8086 operating system’s call. Fig- 
ure 4-25 shows how the 386 DX operating system 
could Intercept an 8086 operating system’s call to 
“Open a File”. 

A 386 DX operating system can provide a Virtual 
8086 Environment which Is totally transparent to the 
application software via intercepting and then emu- 
lating 8086 operating system’s calls, and Intercept- 
ing IN and OUT instructions. 
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4.6.6 Entering and Leaving Virtuai 
8086 Mode 

Virtual 8086 mode is entered by executing an IRET 
instruction (at CPL = 0), or Task Switch (at any GPL) 
to a 386 DX task whose 386 DX TSS has a FLAGS 
image containing a 1 in the VM bit position while the 
processor is executing in Protected Mode. That is, 
one way to enter Virtual 8086 mode is to switch to a 
task with a 386 DX TSS that has a 1 in the VM bit in 
the EFLAGS image. The other way is to execute a 
32-bit IRET instruction at privilege level 0, where the 
stack has a 1 in the VM bit in the EFLAGS image. 
POPF does not affect the VM bit, even if the proces- 
sor is in Protected Mode or level 0, and so cannot be 
used to enter Virtual 8086 Mode. PUSHF always 
pushes a 0 in the VM bit, even if the processor is In 
Virtual 8086 Mode, so that a program cannot tell if it 
is executing in REAL mode, or in Virtual 8086 mode. 

The VM bit can be set by executing an IRET instruc- 
tion only at privilege level 0, or by any instruction or 
Interrupt which causes a task switch in Protected 
Mode (with VM = 1 in the new FLAGS image), and 
can be cleared only by an interrupt or exception in 
Virtual 8086 Mode. IRET and POPF instructions exe- 
cuted in REAL mode or Virtual 8086 mode will not 
change the value in the VM bit. 

The transition out of virtual 8086 mode to 386 DX 
protected mode occurs only on receipt of an inter- 
rupt or exception (such as due to a sensitive instruc- 
tion). In Virtual 8086 mode, all Interrupts and excep- 
tions vector through the protected mode IDT, and 
enter an interrupt handler in protected 386 DX 
mode. That is, as part of interrupt processing, the 
VM bit is cleared. 

Because the matching IRET must occur from level 0, 
If an Interrupt or Trap Gate Is used to field an inter- 
rupt or exception out of Virtual 8086 mode, the Gate 
must perform an inter-level interrupt only to level 0. 
Interrupt or Trap Gates through conforming seg- 
ments, or through segments with DPL>0, will raise a 
GP fault with the CS selector as the error code. 


4.6.6.1 TASK SWITCHES TO/FROM VIRTUAL 
8086 MODE 

Tasks which can execute in virtual 8086 mode must 
be described by a TSS with the new 386 DX format 
(TYPE 9 or 11 descriptor). 

A task switch out of virtual 8086 mode will operate 
exactly the same as any other task switch out of a 
task with a 386 DX TSS. All of the programmer visi- 
ble state, including the FLAGS register with the VM 
bit set to 1, is stored in the TSS. The segment 


registers in the TSS will contain 8086 segment base 
values rather than selectors. 

A task switch into a task described by a 386 DX TSS 
will have an additional check to determine if the in- 
coming task should be resumed in virtual 8086 
mode. Tasks described by 80286 format TSSs can- 
not be resumed in virtual 8086 mode, so no check is 
required there (the FLAGS image in 80286 format 
TSS has only the low order 16 FLAGS bits). Before 
loading the segment register images from a 386 DX 
TSS, the FLAGS image is loaded, so that the seg- 
ment registers are loaded from the TSS image as 
8086 segment base values. The task is now ready to 
resume in virtual 8086 execution mode. 

4.6.6.2 TRANSITIONS THROUGH TRAP AND 
INTERRUPT GATES, AND IRET 

A task switch is one way to enter or exit virtual 8086 
mode. The other method is to exit through a Trap or 
Interrupt gate, as part of handling an interrupt, and 
to enter as part of executing an IRET Instruction. 
The transition out must use a 386 DX Trap Gate 
(Type 14), or 386 DX Interrupt Gate (Type 15), which 
must point to a non-conforming level 0 segment 
(DPL = 0) in order to permit the trap handler to IRET 
back to the Virtual 8086 program. The Gate must 
point to a non-conforming level 0 segment to per- 
form a level switch to level 0 so that the matching 
IRET can change the VM bit. 386 DX gates must be 
used, since 80286 gates save only the low 1 6 bits of 
the FLAGS register, so that the VM bit will not be 
saved on transitions through the 80286 gates. Also, 
the 16-bit IRET (presumably) used to terminate the 
80286 interrupt handler will pop only the lower 16 
bits from FLAGS, and will not affect the VM bit. The 
action taken for a 386 DX Trap or Interrupt gate If an 
interrupt occurs while the task is executing in virtual 
8086 mode is given by the following sequence. 

(1) Save the FLAGS register in a temp to push later. 
Turn off the VM and TF bits, and If the Interrupt is 
serviced by an Interrupt Gate, turn off IF also. 

(2) Interrupt and Trap gates must perform a level 
switch from 3 (where the VM86 program exe- 
cutes) to level 0 (so IRET can return). This pro- 
cess involves a stack switch to the stack given in 
the TSS for privilege level 0. Save the Virtual 
8086 Mode SS and ESP registers to push In a 
later step. The segment register load of SS will 
be done as a Protected Mode segment load, 
since the VM bit was turned off above. 

(3) Push the 8086 segment register values onto the 
new stack. In the order: GS, FS, DS, ES. These 
are pushed as 32-bit quantities, with undefined 
values in the upper 16 bits. Then load these 4 
registers with null selectors (0). 
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Figure 4-25. Virtual 8086 Environment interrupt and Call Handling 


(4) Push the old 8086 stack pointer onto the new 
stack by pushing the SS register (as 32-bits, high 
bits undefined), then pushing the 32-bit ESP reg- 
ister saved above. 

(5) Push the 32-bit FLAGS register saved in step 1 . 

(6) Push the old 8086 instruction pointer onto the 
new stack by pushing the CS register (as 32-bits, 
high bits undefined), then pushing the 32-bit EIP 
register. 

(7) Load up the new CS:EIP value from the interrupt 
gate, and begin execution of the Interrupt routine 
in protected 386 DX mode. 

The transition out of virtual 8086 mode performs a 
level change and stack switch, in addition to chang- 
ing back to protected mode. In addition, ail of the 
8086 segment register images are stored on the 
stack (behind the SS:ESP image), and then loaded 
with null (0) selectors before entering the interrupt 
handler. This will permit the handler to safely save 
and restore the DS, ES, FS, and GS registers as 
80286 selectors. This is needed so that interrupt 
handlers which don’t care about the mode of the 
interrupted program can use the same prolog and 
epilog code for state saving (i.e. push all registers in 
prolog, pop all in epilog) regardless of whether or not 
a “native” mode or Virtual 8086 mode program was 
interrupted. Restoring null selectors to these regis- 
ters before executing the IRET will not cause a trap 
in the interrupt handler. Interrupt routines which ex- 
pect values In the segment registers, or return val- 
ues in segment registers will have to obtain/return 
values from the 8086 register images pushed onto 


the new stack. They will need to know the mode of 
the interrupted program in order to know where to 
find/return segment registers, and also to know how 
to interpret segment register values. 

The IRET instruction will perform the inverse of the 
above sequence. Only the extended 386 DXs IRET 
instruction (operand size = 32) can be used, and 
must be executed at level 0 to change the VM bit to 
1 . 

(1) If the NT bit In the FLAGs register Is on, an Inter- 
task return is performed. The current state is 
stored In the current TSS, and the link field in the 
current TSS is used to locate the TSS for the 
interrupted task which Is to be resumed. 

Othenvise, continue with the following sequence. 

(2) Read the FLAGS image from SS:8[ESP] into the 
FLAGS register. This will set VM to the value ac- 
tive in the interrupted routine. 

(3) Pop off the instruction pointer CS:EIP. EIP is 
popped first, then a 32-bit word Is popped which 
contains the CS value in the lower 16 bits. If 
VM = 0, this CS load is done as a protected 
mode segment load. If VM = 1 , this will be done 
as an 8086 segment load. 

(4) Increment the ESP register by 4 to bypass the 
FLAGS Image which was “popped” in step 1. 

(5) If VM = 1 , load segment registers ES, DS, FS, 

and GS from memory locations SS:[ESP + 8], 
SS:[ESP+12], SS:[ESP+16], and 

SS:[ESP + 20], respectively, where the new val- 
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ue of ESP stored in step 4 is used. Since VM = 1, 
these are done as 8086 segment register loads. 

Else if VM = 0, check that the selectors In ES, 
DS, FS, and GS are valid in the interrupted rou- 
tine. Null out invalid selectors to trap if an at- 
tempt is made to access through them. 

(6) If (RPL(CS) > GPL), pop the stack pointer 
SS:ESP from the stack. The ESP register is 
popped first, followed by 32-bits containing SS In 
the lower 1 6 bits. If VM = 0, SS is loaded as a 
protected mode segment register load. If VM = 1 , 
an 8086 segment register load is used. 

(7) Resume execution of the interrupted routine. The 
VM bit in the FLAGS register (restored from the 
interrupt routine’s stack image in step 1) deter- 
mines whether the processor resumes the inter- 
rupted routine in Protected mode of Virtual 8086 
mode. 

5. FUNCTIONAL DATA 

5.1 INTRODUCTION 

The 386 DX features a straightforward functional in- 
terface to the external hardware. The 386 DX has 
separate, parallel buses for data and address. The 
data bus is 32-blts In width, and bidirectional. The 
address bus outputs 32-bit address values In the 
most directly usable form for the high-speed local 
bus: 4 Individual byte enable signals, and the 30 up- 
per-order bits as a binary value. The data and ad- 
dress buses are interpreted and controlled with their 
associated control signals. 

A dynamic data bus sizing feature allows the proc- 
essor to handle a mix of 32- and 1 6-bit external bus- 
es on a cycle-by-cycle basis (see 5.3.4 Data Bus 
Sizing). If 16-bit bus size is selected, the 386 DX 
automatically makes any adjustment needed, even 
performing another 16-bit bus cycle to complete the 
transfer If that is necessary. 8-bit peripheral devices 
may be connected to 32-blt or 16-bit buses with no 
loss of performance. A new address pipelining op- 
tion is provided and applies to 32-bit and 16-bit bus- 
es for substantially Improved memory utilization, es- 
pecially for the most heavily used memory resourc- 
es. 

The address pipelining option, when selected, typ- 
ically allows a given memory interface to operate 
with one less wait state than would othen^lse be 
required (see 5.4.2 Address Pipelining). The pipe- 
lined bus is also well suited to interleaved memory 
designs. When address pipelining is requested by 
the external hardware, the 386 DX will output the 
address and bus cycle definition of the next bus cy- 
cle (if it is Internally available) even while waiting for 
the current cycle to be acknowledged. 


Non-pipelined address timing, however, is Ideal for 
external cache designs, since the cache memory will 
typically be fast enough to allow non-pipelined cy- 
cles. For maximum design flexibility, the address 
pipelining option is selectable on a cycle-by-cycle 
basis. 

The processor’s bus cycle Is the basic mechanism 
for information transfer, either from system to proc- 
essor, or from processor to system. 386 DX bus cy- 
cles perform data transfer in a minimum of only two 
clock periods. On a 32-bit data bus, the maximum 
386 DX transfer bandwidth at 20 MHz is therefore 
40 MBytes/sec, at 25 MHz bandwidth, is 
50 Mbytes/sec, and at 33 MHz bandwidth, is 
66 Mbytes/sec. Any bus cycle will be extended for 
more than two clock periods, however. If external 
hardware withholds acknowledgement of the cycle. 
At the appropriate time, acknowledgement is sig- 
nalled by asserting the 386 DX READY# Input. 

The 386 DX can relinquish control of its local buses 
to allow mastership by other devices, such as direct 
memory access channels. When relinquished, HLDA 
is the only output pin driven by the 386 DX providing 
near-complete isolation of the processor from Its 
system. The near-complete isolation characteristic Is 
Ideal when driving the system from test equipment, 
and in fault-tolerant applications. 

Functional data covered In this chapter describes 
the processor’s hardware interface. First, the set of 
signals available at the processor pins is described 
(see 5.2 Signal Description). Following that are the 
signal waveforms occurring during bus cycles (see 
5.3 Bus Transfer Mechanism, 5.4 Bus Functional 
Description and 5.5 Other Functional Descrip- 
tions). 

5.2 SIGNAL DESCRIPTION 
5.2.1 Introduction 

Ahead is a brief description of the 386 DX input and 
output signals arranged by functional, groups. Note 
the # symbol at the end of a signal name indicates 
the active, or asserted, state occurs when the signal 
is at a low voltage. When no # is present after the 
signal name, the signal is asserted when at the high 
voltage level. 

Example signal: M/IO# — High voltage indicates 
Memory selected 

— Low voltage indicates 
I/O selected 
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Figure 5-1. Functional Signal Groups 
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Figure 5-2. CLK2 Signal and Internal Processor Clock 


The signal descriptions sometimes refer to AC tim- 

: A 1. i-> A o-^A t: n I 

II ly |jai cii d, duui I ad 125 ricdci ociup iiiiic; aiiu 

“t 26 Reset Hold Time.” The values of these parame- 
ters can be found in Tables 7-4 and 7-5. 


5.2.2 Clock (CLK2) 

CLK2 provides the fundamental timing for the 386 
DX. It is divided by two internally to generate the 
internal processor clock used for instruction execu- 
tion. The internal clock is comprised of two phases, 
“phase one” and “phase two.” Each CLK2 period is 
a phase of the internal clock. Figure 5-2 illustrates 
the relationship. If desired, the phase of the internal 
processor clock can be synchronized to a known 
phase by ensuring the RESET signal falling edge 
meets its applicable setup and hold times, t 25 and 
* 26 - 

5.2.3 Data Bus (DO through D31) 

These three-state bidirectional signals provide the 
general purpose data path between the 386 DX and 


other devices. Data bus inputs and outputs indicate 

LJI^LJ -ru^ U...X ««« 

I VVIIdl I ll^wil I. 111^ UCllCl ^^Cll I IICIIIOIOI V4Cll.a V.'l l 

32- and 1 6-bit buses using a data bus sizing feature 
controlled by the BS16# input. See section 5.2.6 
Bus Contol. Data bus reads- require that read data 
setup and hold times t 2 i and t 22 be met for correct 
operation. In addition, the 386 DX requires that all 
data bus pins be at a valid logic state (high or low) at 
the end of each read cycle, when READY# is as- 
serted. During any write operation (and during halt 
cycles and shutdown cycles), the 386 DX always 
drives all 32 signals of the data bus even if the cur- 
rent bus size is 1 6-bits. 

5.2.4 Address Bus (BED# through 
BE3#, A2 through A31) 

These three-state outputs provide physical memory 
addresses or I/O port addresses. The address bus 
is capable of addressing 4 gigabytes of physical 
memory space (OOOOOOOOH through FFFFFFFFH), 
and 64 kilobytes of I/O address space (OOOOOOOOH 
through OOOOFFFFH) for programmed J/0. I/O 
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transfers automatically generated for 386 DX-to-co- 
processor communication use I/O addresses 
800000F8H through 800000FFH, so A31 HIGH in 
conjunction with M/IO# LOW allows simple genera- 
tion of the coprocessor select signal. 

The Byte Enable outputs, BE0#-BE3#, directly In- 
dicate which bytes of the 32-bit data bus are in- 
volved with the current transfer. This is most conve- 
nient for external hardware. 

BEO# applies to D0-D7 

BE1 # applies to D8-D15 

BE2# applies to D16-D23 

BE3# applies to D24-D31 

The number of Byte Enables asserted indicates the 
physical size of the operand being transferred (1 , 2, 
3, or 4 bytes). Refer to section 5.3.6 Operand Align- 
ment. 

When a memory write cycle or I/O write cycle is in 
progress, and the operand being transferred occu- 
pies only the upper 16 bits of the data bus (D16- 
D31), duplicate data Is simultaneously presented on 
the corresponding lower 16-bits of the data bus 
(D0-D15). This duplication is performed for optimum 
write performance on 16-bit buses. The pattern of 
write data duplication is a function of the Byte En- 
ables asserted during the write cycle. Table 5-1 lists 
the write data present on D0-D31, as a function of 
the asserted Byte Enable outputs BE0#-BE3#. 


Table 5-1. Write Data Duplication as a Function of BE0#-BE3# 


386 TM DX Byte Enables 

386 TM DX Write Data 

Automatic 

Duplication? 

BE3# 

BE2# 

BE1# 

BEO# 

D24-D31 

D16-D23 

D8-D15 

D0-D7 

High 

High 

High 

Low 

undef 

undef 

undef 

A 

No 

High 

High 

Low 

High 

undef 

undef 

B 

undef 

No 

High 

Low 

High 

High 

undef 

C 

undef 

C 

Yes 

Low 

High 

High 

High 

D 

undef 

D 

undef 

Yes 

High 

High 

Low 

Low 

undef 

undef 

B 

A 

No 

High 

Low 

Low 

High 

undef 

C 

B 

undef 

No 

Low 

Low 

High 

High 

D 

C 

D 

C 

Yes 

High 

Low 

Low 

Low 

undef 

C 

B 

A 

No 

Low 

Low 

Low 

High 

D 

C 

B 

undef 

No 

Low 

Low 

Low 

Low 

D 

C 

B 

A 

No 


Key: 

D = logical write data d24-d31 
C = logical write data d16-d23 
B = logical write data d8-d 15 
A = logical write data d0-d7 


5.2.5 Bus Cycle Definition Signais 

(W/R#, D/C#, M/IO#, LOCK#) 

These three-state outputs define the type of bus cy- 
cle being performed. W/R# distinguishes between 
write and read cycles. D/C# distinguishes between 
data and control cycles. M/IO# distinguishes be- 
tween memory and I/O cycles. LOCK# distin- 
guishes between locked and unlocked bus cycles. 

The primary bus cycle definition signals are W/R#, 
D/C# and M/IO#, since these are the signals driv- 
en valid as the ADS# (Address Status output) is 
driven asserted. The LOCK# is driven valid at the 
same time as the first locked bus cycle begins, 
which due to address pipelining, could be later than 
ADS# is driven asserted. See 5.4.3.4 Pipelined Ad- 
dress. The LOCK# is negated when the READY# 
input terminates the last bus cycle which was 
locked. 

Exact bus cycle definitions, as a function of W/R#, 
D/C#, and M/IO#, are given in Table 5-2. Note one 
combination of W/R#, D/C# and M/IO# is never 
given when ADS# is asserted (however, that combi- 
nation, which is listed as “does not occur,” may oc- 
cur during idle bus states when ADS# is not assert- 
ed). If M/IO#, D/C#, and W/R# are qualified by 
ADS# asserted, then a decoding scheme may be 
simplified by using this definition of the “does not 
occur” combination. 
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Table 5-2. Bus Cycle Definition 


M/iO# 

D/C# 

W/R# 

Bus Cycle Type 

Locked? 

Low 

Low ■ 

Low 

INTERRUPT ACKNOWLEDGE 

Yes 

Low 

Low 

High 

does not occur 

•— 

Low 

High 

Low 

I/O DATA READ 

No 

Low 

High 

High 

I/O DATA WRITE 

No 

High 

Low 

Low 

MEMORY CODE READ 

No 

High 

Low 

High 

HALT: SHUTDOWN: 

Address = 2 Address = 0 

(BEO# High (BEO# Low 

BE1# High BE1# High 

BE2# Low BE2# High 

BE3# High BE3# High 

A2-A31 Low) A2-A31 Low) 

No 

High 

High 

Low 

MEMORY DATA READ 

Some Cycles 

High 

High 

High 

MEMORY DATA WRITE 

Some Cycles 


5.2.6 Bus Control Signals (ADS # , 
READY#, NA#,BS16#) 

5.2.6.1 INTRODUCTION 

The following signals allow the processor to indicate 
when a bus cycle has begun, and allow other system 
hardware to control address pipelining, data bus 
width and bus cycle termination. 

5.2.6.2 ADDRESS STATUS (ADS#) 

This three-state output indicates that a valid bus cy- 
cle definition, and address (W/R#, D/C#, M/IO#, 
BR0#-BE3#. and A2-A31) is being driven at the 
386 DX pins. It is asserted during T1 and T2P bus 
states (see 5.4.3.2 Non-pipelined Address and 
5.4.3.4 Pipelined Address for additional information 
on bus states). 

5.2.6.3 TRANSFER ACKNOWLEDGE (READY#) 

This input indicates the current bus cycle is com-' 
plete, and the active bytes indicated by BEO#- 
BE3# and BS16# are accepted or provided. When 
READY# is sampled asserted during a read cycle or 
Interrupt acknowledge cycle, the 386 DX latches the 
Input data and terminates the cycle. When READY# 
is sampled asserted during a write cycle, the proces- 
sor terminates the bus cycle. 

READY# is ignored on the first bus state of all bus 
cycles, and sampled each bus state thereafter until 
asserted. READY# must eventually be asserted to 
acknowledge every bus cycle, including Halt Indica- 
tion and Shutdown Indication bus cycles. When be- 
ing sampled, READY must always meet setup and 


hold times ti 9 and t 2 o for correct operation. See all 
sections of 5.4 Bus Functional Description. 

5.2.6.4 NEXT ADDRESS REQUEST (NA#) 

This is used to request address pipelining. This input 
indicates the system is prepared to accept new val- 
ues of BE0#-BE3#, A2-A31, W/R#, D/C# and 
M/IO# from the 386 DX even if the end of the cur- 
rent cycle is not being acknowledged on READY#. 
If this input Is asserted when sampled, the next ad- 
dress is driven onto the bus, provided the next bus 
request is already pending internally. See 5.4.2 Ad- 
dress Pipelining and 5.4.3 Read and Write 
Cycles. NA# must always meet setup and hold 
iimes, t^is and ti 6 i for correct operation. 

5.2.6.5 BUS SIZE 16 (BS16#) 

The BS16# feature allows the 386 DX to directly 
connect to 32-bit and 16-bit data buses. Asserting 
this input constrains the current bus cycle to use 
only the lower-order half (D0-D15) of the data bus, 
corresponding to BEO# and BE1#. Asserting 
BS16# has no additional effect if only BEO# and/or 
BE1 # are asserted in the current cycle. However, 
during bus cycles asserting BE2# or BE3#, assert- 
ing BS16# will automatically cause the 386 DX to 
make adjustments for correct transfer of the upper 
bytes(s) using only physical data signals D0-D15. 

If the operand spans both halves of the data bus 
and BS16# is asserted, the 386 DX will automatical- 
ly perform another 16-bit bus cycle. BS16# must 
always meet setup and hold times t-iy and X^q for 
correct operation. 
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386 DX I/O cycles are automatically generated for 
coprocessor communication. Since the 386 DX must 
transfer 32-bit quantities between itself and the 387 
DX, BS16# must not be asserted during 387 DX 
communication cycles. 


5.2.7 Bus Arbitration Signals 
(HOLD, HLDA) 

5.2.7.1 INTRODUCTION 

This section describes the mechanism by which the 
processor relinquishes control of its local buses 
when requested by another bus master device. See 

5.5.1 Entering and Exiting Hold Acknowledge for 

additional information. 


5.2.7.2 BUS HOLD REQUEST (HOLD) 

This input indicates some device other than the 386 
DX requires bus mastership. 

HOLD must remain asserted as long as any other 
device is a local bus master. HOLD is not recognized 
while RESET is asserted. If RESET is asserted while 
HOLD is asserted, RESET has priority and places 
the bus into an idle state, rather than the hold ac- 
knowledge (high impedance) state. 

HOLD is level-sensitive and is a synchronous input. 
HOLD signals must always meet setup and hold 
times t 23 and t 24 for correct operation. 

5.2.7.3 BUS HOLD ACKNOWLEDGE (HLDA) 

Assertion of this output indicates the 386 DX has 
relinquished control of Its local bus in response to 
HOLD asserted, and is in the bus Hold Acknowledge 
state. 

The Hold Acknowledge state offers near-complete 
signal isolation. In the Hold Acknowledge state, 
HLDA is the only signal being driven by the 386 DX. 
The other output signals or bidirectional signals 
(D0-D31, BE0#-BE3#, A2-A31, W/R#, D/C#, 
M/IO#, LOCK# and ADS#) are in a high-imped- 
ance state so the requesting bus master may control 
them. Pullup resistors may be desired on several sig- 
nals to avoid spurious activity when no bus master is 
driving them. See 7.2.3 Resistor Recommenda- 
tions. Also, one rising edge occuring on the NMI 
Input during Hold Acknowledge is remembered, for 
processing after the HOLD input is negated. 

In addition to the normal usage of Hold Acknowl- 
edge with DMA controllers or master peripherals, 


the near-complete isolation has particular attractive- 
ness during system test when test equipment drives 
the system, and in hardware-fault-tolerant applica- 
tions. 


5.2.8 Coprocessor Interface Signals 
(PEREQ, BUSY#, ERROR#) 

5.2.8.1 INTRODUCTION 

In the following sections are descriptions of signals 
dedicated to the numeric coprocessor interface. In 
addition to the data bus, address bus, and bus cycle 
definition signals, these following signals control 
communication between the 386 DX and its 387 DX 
processor extension. 

5.2.8.2 COPROCESSOR REQUEST (PEREQ) 

When asserted, this input signal indicates a coproc- 
essor request for a data operand to be transferred 
to/from memory by the 386 DX. In response, the 
386 DX transfers information between the coproces- 
sor and memory. Because the 386 DX has Internally 
stored the coprocessor opcode being executed, it 
performs the requested data transfer with the cor- 
rect direction and memory address. 

PEREQ is level-sensitive and is allowed to be asyn- 
chronous to the CLK2 signal. 

5.2.8.3 COPROCESSOR BUSY (BUSY#) 

When asserted, this input indicates the coprocessor 
is still executing an instruction, and Is not yet able to 
accept another. When the 386 DX encounters any 
coprocessor instruction which operates on the nu- 
meric stack (e.g. load, pop, or arithmetic operation), 
or the WAIT instruction, this input is first automatical- 
ly sampled until it Is seen to be negated. This sam- 
pling of the BUSY# input prevents overrunning the 
execution of a previous coprocessor instruction. 

The FNINIT and FNCLEX coprocessor Instructions 
are allowed to execute even if BUSY# is asserted, 
since these Instructions are used for coprocessor 
initialization and exception-clearing. 

BUSY# Is level-sensitive and is allowed to be asyn- 
chronous to the CLK2 signal. 

BUSY# serves an additional function. If BUSY# is 
sampled LOW at the falling edge of RESET, the 386 
DX performs an internal self-test (see 5.5.3 Bus Ac- 
tivity During and Following Reset). If BUSY# is 
sampled HIGH, no self-test is performed. 
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5.2.8.4 COPROCESSOR ERROR (ERROR#) 

This input signal indicates that the previous coproc- 
essor instruction generated a coprocessor error of a 
type not masked by the coprocessor’s control regis- 
ter. This input is automatically sampled by the 386 
DX when a coprocessor instruction is encountered, 
and if asserted, the 386 DX generates exception 1 6 
to access the error-handling software. 

Several coprocessor instructions, generally those 
which clear the numeric error flags in the coproces- 
sor or save coprocessor state, do execute without 
the 386 DX generating exception 16 even if ER- 
ROR# is asserted. These instructions are FNINIT, 
FNCLEX, FSTSW, FSTSWAX, FSTCW, FSTENV, 
FSAVE, FESTENV and FESAVE. 

ERROR# is level-sensitive and is allowed to be 
asynchronous to the CLK2 signal. 

5.2.9 Interrupt Signals (INTR, NMI, 
RESET) 

5.2.9. 1 INTRODUCTION 

The following descriptions cover inputs that can in- 
terrupt or suspend execution of the processor’s cur- 
rent instruction stream. 

5.2.9.2 MASKABLE INTERRUPT REQUEST (INTR) 

When asserted, this input indicates a request for in- 
terrupt service, which can be masked by the 386 DX 
Flag Register IF bit. When the 386 DX responds to 
the INTR input, it performs two interrupt acknowl- 
edge bus cycles, and at the end of the second, 
latches an 8-blt interrupt vector on D0-D7 to identify 
the source of the interrupt. 

INTR is level-sensitive and is allowed to be asyn- 
chronous to the CLK2 signal. To assure recognition 
of an INTR request, INTR should remain asserted 
until the first interrupt acknowledge bus cycle be- 
gins. 

5.2.9.3 NON-MASKABLE INTERRUPT REQUEST 
(NMI) 

This input indicates a request for Interrupt service, 
which cannot be masked by software. The non- 


maskable interrupt request is always processed ac- 
cording to the pointer or gate in slot 2 of the interrupt 
table. Because of the fixed NMI slot assignment, no 
interrupt acknowledge cycles are perfomed when 
processing NMI. 

NMI Is rising edge-sensitive and is allowed to be 
asynchronous to the CLK2 signal. To assure recog- 
nition of NMI, it must be negated for at least eight 
CLK2 periods, and then be asserted for at least 
eight CLK2 periods. 

Once NMI processing has begun, no additional 
NMI’s are processed until after the next IRET In- 
struction, which Is typically the end of the NMI serv- 
ice routine. If NMI Is re-asserted prior to that time, 
however, one rising edge on NMI will be remem- 
bered for processing after executing the next IRET 
instruction. 

5.2.9.4 RESET (RESET) 

This input signal suspends any operation In prpgress 
and places the 386 DX In a known reset state. The 
386 DX is reset by asserting RESET for 15 or more 
CLK2 periods (80 or more CLK2 periods before re- 
questing self test). When RESET is asserted, all oth- 
er input pins are ignored, and all other bus pins are 
driven to an idle bus state as shown in Table 5-3. If 
RESET and HOLD are both asserted at a point In 
time, RESET takes priority even if the 386 DX was in 
a Hold Acknowledge state prior to RESET asserted. 

RESET is level-sensitive and must be synchronous 
to the CLK2 signal. If desired, the phase of the inter- 
nal processor clock, and the entire 386 DX state can 
be completely synchronized to external circuitry by 
ensuring the RESET signal falling edge meets Its ap- 
plicable setup and hold times, I 25 and t 26 - 


Table 5-3. Pin State (Bus Idle) During Reset 


Pin Name 

Signal Level During Reset 

ADS# 

D0-D31 

BE0#-BE3# 

A2-A31 

W/R# 

D/C# 

M/IO# 

LOCK# 

HLDA 

High 

High Impedance 

Low 

High 

Low 

High 

Low 

High 

Low 
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5.2.10 Signal Summary 

Table 5-4 summarizes the characteristics of all 386 DX signals. 


Table 5-4. 386tm dx Signal Summary 


Signal Name 

Signal Function 

Active 

State 

Input/ 

Output 

Input 
Synch or 
Asynch 
to CLK2 

Output 

High Impedance 
During HLDA? 

CLK2 

Clock 

— 

I 

— , 

— 

D0-D31 

Data Bus 

High 

I/O 

S 

Yes 

BE0#-BE3# 

Byte Enables 

Low 

0 

— 

Yes 

A2-A31 

Address Bus 

High 

0 

— 

Yes 

W/R# 

Write-Read Indication 

High 

0 

— 

Yes 

D/C# 

Data-Control Indication 

High 

0 

— 

Yes 

M/IO# 

Memory-l/0 Indication 

High 

0 

— 

Yes 

LOCK# 

Bus Lock Indication 

Low 

0 

— 

Yes 

ADS# 

Address Status 

Low 

0 

— 

Yes 

NA# 

Next Address Request 

Low 

I 

s 

— 

BS16# 

Bus Size 16 

Low 

I 

s 

— 

READY# 

Transfer Acknowledge 

Low 

I 

s 

— 

HOLD 

Bus Hold Request 

High 

I 

s 

— 

HLDA 

Bus Hold Acknowledge 

High 

0 

— 

No 

PEREQ 

Coprocessor Request 

High 

I 

A 

— 

BUSY# 

Coprocessor Busy 

Low 

I 

A 

— 

ERROR# 

Coprocessor Error 

Low 

I 

A 

— 

INTR 

Maskable Interrupt Request 

High 

I 

A 

— 

NMI 

Non-Maskable Intrpt Request 

High 

I 

A 

— 

RESET 

Reset 

High 

I 

S 

— 


5.3 BUS TRANSFER MECHANISM 


5.3.1 Introduction 

All data transfers occur as a result of one or more 
bus cycles. Logical data operands of byte, word and 
double-word lengths may be transferred without re- 
strictions on physical address alignment. Any byte 
boundary may be used, although two or even three 
physical bus cycles are performed as required for 
unaligned operand transfers. See 5.3.4 Dynamic 
Data Bus Sizing and 5.3.6 Operand Alignment. 


The 386 DX address signals are designed to simplify 
external system hardware. Higher-order address bits 
are provided by A2-A31 . Lower-order address in the 
form of BE0#-BE3# directly provides linear selects 
for the four bytes of the 32-blt data bus. Physical 
operand size information is thereby implicitly provid- 
ed each bus cycle In the most usable form. 

Byte Enable outputs BE0#-BE3# are asserted 
when their associated data bus bytes are involved 
with the present bus cycle, as listed in Table 5-5. 
During a bus cycle, any possible pattern of contigu- 
ous, asserted Byte Enable outputs can occur, but 
never patterns having a negated Byte Enable sepa- 
rating two or three asserted Enables. 
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Address bits AO and A1 of the physical operand’s 
base address can be created when necessary (for 
instance, for MULTIBUS® I or MULTIBUS® II inter- 
face), as a function of the lowest-order asserted 
Byte Enable. This is shown by Table 5-6. Logic to 
generate AO and A1 is given by Figure 5-3. 


Table 5-5. Byte Enables and Associated 
Data and Operand Bytes 


Byte Enable Signal 

Associated Data Bus Signals 

BEO# 

D0-D7 (byte 0— least significant) 

BE1# 

D8-D15 (bytel) 

BE2# 

D16-D23 (byte 2) 

BE3# 

D24-D31 (byte 3 — most significant) 


Table 5-6. Generating A0-A31 from 
BE0#-BE3# and A2-A31 


386 TM DX Ad 

A31 A2 

dress S 

BE3# 

ignals 

BE2# 

BE1# 

BEO# 

A31 

Physical Base 
Address 






A2 

A1 

AO 

A31 


A2 

0 

0 

X 

X 

X 

Low 

0 ^ 


A2 

0 

1 

X 

X 

Low 

High 

A31 


A2 

1 

0 

X 

Low 

High 

High 

A31 


A2 

1 

1 

Low 

High 

High 

High 


BE2# 


BEO# 



K - Map for A1 Signal 


231630-3 


BEO# 



BE1# 


K - Map for AO Signal 


231630-4 


Figure 5-3. Logic to Generate AO, A1 from BE0#~BE3# 


Each bus cycle is composed of at least two bus 
states. Each bus 9 tate requires one processor clock 
period. Additional bus states added to a single bus 
cycle are called wait states. See 5.4 Bus Functional 
Description. 

Since a bus cycle requires a minimum of two bus 
states (equal to two processor clock periods), data 
can be transferred between external devices and 
the 386 DX at a maximum rate of one 4-byte Dword 
every two processor clock periods, for a maximum 
bus bandwidth of 66 megabytes/second (386 DX 
operating at 33 MHz processor clock rate). 


5.3.2 Memory and I/O Spaces 

Bus cycles may access physical memory space or 
I/O space. Peripheral devices In the system may ei- 
ther be memory-mapped, or I/O-mapped, or both. 
As shown In Figure 5-4, physical memory addresses 
range from OOOOOOOOH to FFFFFFFFH (4 gigabytes) 
and I/O addresses from OOOOOOOOH to OOOOFFFFH 
(64 kilobytes) for programmed I/O. Note the I/O ad- 
dresses used by the automatic I/O cycles for co- 
processor communication are 800000F8H to 
800000FFH, beyond the address range of pro- 
grammed I/O, to allow easy generation of a coproc- 
essor chip select signal using the A31 and M/IO# 
signals. 
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5.3.3 Memory and I/O Organization 

The 386 DX datapath to memory and I/O spaces 
can be 32 bits wide or 16 bits wide. When 32-bits 
wide, memory and I/O spaces are organized natural- 
ly as arrays of physical 32-blt Dwords. Each memory 
or I/O Dword has four individually addressable bytes 
at consecutive byte addresses. The lowest-ad- 
dressed byte is associated with data signals D0-D7; 
the highest-addressed byte with D24-D31. 

The 386 DX includes a bus control Input, BS16#, 
that also allows direct connection to 1 6-bit memory 
or I/O spaces organized as a sequence of 16-blt 
words. Cycles to 32-bit and 16-bit memory or I/O 
devices may occur in any sequence, since the 
BS16# control is sampled during each bus cycle. 
See 5.3.4 Dynamic Data Bus Sizing. The Byte En- 
able signals, BE0#-BE3#, allow byte granularity 
when addressing any memory or I/O structure, 
whether 32 or 16 bits wide. 


5.3.4 Dynamic Data Bus Sizing 

Dynamic data bus sizing is a feature allowing direct 
processor connection to 32-blt or 1 6-bit data buses 
for memory or I/O. A single processor may connect 
to both size buses. Transfers to or from 32- or 16-bit 
ports are supported by dynamically determining the 
bus width during each bus cycle. During each bus 
cycle an address decoding circuit or the slave de- 


vice itself may assert BS16# for 16-bit ports, or ne- 
gate BS16# for 32-blt ports. 

With BS16# asserted, the processor automatically 
converts operand transfers larger than 16 bits, or 
misaligned 16-bit transfers, into two or three trans- 
fers as required. All operand transfers physically oc- 
cur on D0-D15 when BS16# is asserted. There- 
fore, 16-bit memories or I/O devices only connect 
on data signals D0-D15. No extra transceivers are 
required. 

Asserting BS16# only affects the processor when 
BE2# and/or BE3# are asserted during the current 
cycle. If only D0-D15 are involved with the transfer, 
asserting BS16# has no affect since the transfer 
can proceed normally over a 16-blt bus whether 
BS16# is asserted or not. In other words, asserting 
BS16# has no effect when only the lower half of the 
bus Is Involved with the current cycle. 

There are two types of situations where the proces- 
sor is affected by asserting BS16#, depending on 
which Byte Enables are asserted during the current 
bus cycle: 

Upper Half Only: 

Only BE2# and/or BE3# asserted. 

Upper and Lower Half: 

At least BE1#, BE2# asserted (and perhaps 
also BEO# and/or BE3#). 
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Effect of asserting BS16# during “upper half only” 
read cycles: 

Asserting BS16# during “upper half only” reads 
causes the 386 DX to read data on the lower 16 
bits of the data bus and ignore data on the upper 
16 bits of the data bus. Data that would have been 
read from D16-D31 (as indicated by BE2# and 
BE3#) will instead be read from D0-D15 respec- 
tively. 

Effect of asserting BS16# during “upper half only” 
write cycles: 

Asserting BS16# during “upper half only” writes 
does not affect the 386 DX. When only BE2# 
and/or BE3# are asserted during a write cycle 
the 386 DX always duplicates data signals 
D16-D31 onto D0-D15 (see Table 5-1). There- 
fore, no further 386 DX action is required to per- 
form these writes on 32-blt or 1 6-bit buses. 

Effect of asserting BS16# during “upper and lower 
half” read cycles: 

Asserting BS16# during “upper and lower half” 
reads causes the processor to perform two 1 6-bit 
read cycles for complete physical operand trans- 
fer. B^es 0 and 1 (as indicated by BEO# and 
BE1 #) are read on the first cycle using D0--D15. 
Bytes 2 and 3 (as indicated by BE2# and BE3#) 
are read during the second cycle, again using 
D0-D15. D16-D31 are ignored during both 16-bit 
cycles. BEO# and BE1 # are always negated dur- 
ing the second 16-bit cycle (See Figure 5-14, cy- 
cles 2 and 2a). 


Effect of asserting BS16# during “upper and lower 
half” write cycles: 

Asserting BS16# during “upper and lower half” 
writes causes the 386 DX to perform two 16-bit 
write cycles for complete physical operand trans- 
fer. All bytes are available the first write cycle al- 
lowing external hardware to receive Bytes 0 and 1 
(as indicated by BEO# and BE1 #) using D0-D15. 
On the second cycle the 386 DX duplicates Bytes 
2 and 3 on D0~D15 and Bytes 2 and 3 (as indicat- 
ed by BE2# and BE3#) are written using DO- 
D15. BEO# and BE1 # are always negated during 
the second 16-blt cycle. BS16# must be asserted 
during the second 16-blt cycle. See Figure 5-14, 
cycles 1 and la. 


5.3.5 Interfacing with 32- and 16-Bit 
Memories 

In 32-blt-wide physical memories such as Figure 5-5, 
each physical Dword begins at a byte address that is 
a multiple of 4. A2-A31 are directly used as a Dword 
select and BE0#-BE3# as byte selects. BS16# is 
negated for all bus cycles involving the 32-blt array. 

When 1 6-bit-wide physical arrays are included in the 
system, as in Figure 5-6, each 16-blt physical word 
begins at a address that is a multiple of 2. Note the 
address Is decoded, to assert BS16# only during 
bus cycles Involving the 16-bit array. (If desiring to 


I .™,— J 32 gyg (D0-D31) 

386 ^^ DX r ^ 

j CPU 


AUUKtSS bus ^bLU#-bL.5#,AZ-ASi;J memory I 


^BS 16 # 
’’HIGH" 


-BIT I 
I MEMORY I 


Figure 5-5. 386 tm DX with 32-Bit Memory 



Figure 5-6. 386 tm dx with 32-Bit and 16-Bit Memory 
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use pipelined address with 16-bit memories then 
BE0#-BE3# and W/R# are also decoded to de- 
termine when BS16# should be asserted. See 

5.4.3.6 Pipelined Address with Dynamic Data Bus 
Sizing.) 

A2-A31 are directly usable for addressing 32-bit 
and 16-bit devices. To address 16-bit devices, A1 
and two byte enable signals are also needed. 

To generate an A1 signal and two Byte Enable sig- 
nals for 16-bit access, BE0#-BE3# should be de- 
coded as in Table 5-7. Note certain combinations of 
BE0#-BE3# are never generated by the 386 DX, 
leading to “don’t care’’ conditions in the decoder. 
Any BE0#-BE3# decoder, such as Figure 5-7, may 
use the non-occurring BE0#-BE3# combinations 
to its best advantage. 


5.3.6 Operand Alignment 

With the flexibility of memory addressing on the 386 
DX, it is possible to transfer a logical operand that 
spans more than one physical Dword or word of 
memory or I/O. Examples are 32-bit Dwordoperands 


beginning at addresses not evenly divisible by 4, or a 
16-bit word operand split between two physical 
Dwords of the memory array. 

Operand alignment and data bus size dictate when 
multiple bus cycles are required. Table 5-8 describes 
the transfer cycles generated for all combinations of 
logical operand lengths, alignment, and data bus siz- 
ing. When multiple bus cycles are required to trans- 
fer a multi-byte logical operand, the highest-order 
bytes are transferred first (but if BS16# asserted 
requires two 16-bit cycles be performed, that part of 
the transfer is low-order first). 


5.4 BUS FUNCTIONAL DESCRIPTION 

5.4.1 Introduction 

The 386 DX has separate, parallel buses for data 
and address. The data bus is 32-bits in width, and 
bidirectional. The address bus provides a 32-bit val- 
ue using 30 signals for the 30 upper-order address 
bits and 4 Byte Enable signals to directly Indicate the 
active bytes. These buses are interpreted and con- 
trolled via several associated definition or contiol 
signals. 


Table 5-7. Generating A1, BHE# and BLE# for Addressing 16-Bit Devices 


386 TM DX Signals 

16-Bit Bus Signals 

Comments 

BE3# 

BE2# 

BE1# 

BEO# 

A1 

BHE# 

BLE# (AO) 

H" 

H* 

H* 

H" 

X 

X 

X 

X — no active bytes 

H 

H 

H 

L 

L 

H 

L 


H 

H 

L 

H 

L 

L 

H 


H 

H 

L 

L 

L 

L 

L 


H 

L 

H 

H 

H 

H 

L 


H* 

L* 

H" 

L* 

X 

X 

X 

X — not contiguous bytes 

H 

L 

L 

■ H 

L 

L 

H 


H 

L 

L 

L 

L 

L 

L 


L 

H 

H 

H 

H 

L 

H 


L* 

H* 

H* 

L* 

X 

X 

X 

X — not contiguous bytes 

L* 

H* 

L* 

H* 

X 

X 

X 

X — not contiguous bytes 

L* 

H* 

L* 

L" 

X 

X 

X 

X — not contiguous bytes 

L 

L 

H 

H 

H 

L 

L 


L* 

L* 

H* 


X 

X 

X 

X — not continguous bytes 

L 

L 

L 

H 

L 

L 

H 


L 

L 

L 

L 

L 

L 

L 



BLE# asserted when D0-D7 of 16-bit bus is active. 
BHE# asserted when D8-D15 of 16-bit bus is active. 
A1 low for all even words; A1 high for all odd words. 


Key: 

X = don’t care 
H = high voltage level 
L = low voltage level 

* = a non-occurring pattern of Byte Enables; either none are asserted, 
or the pattern has Byte Enables asserted for non-contiguous bytes 
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Figure 5-7. Logic to Generate A1, BHE# and BLE# for 16-Bit Buses 


Table 5-8. Transfer Bus Cycies for Bytes, Words and Dwords 



Byte-Length of Logical Operand 


1 

2 

4 

Physical Byte Address 
in Memory (low-order bits) 

XX 

00 

01 



00 

01 


m 

Transfer Cycles over 

b 

w 

w 

w 

hb/ 

d 

hb 

hw. 

h3. 

32-Blt Data Bus 





lb 


13 

Iw 

lb 

Transfer Cycles over 

b 

w 

to, 

w 

hb. 

Iw, 

hb, 

hw. 

mw. 

1 6-Bit Data Bus 



W ,i 


lb 

hw 

. lb, 

Iw 

hb, 








mw 


lb 


Key: b = byte transfer 3 = 3-byte transfer 

w = word transfer d = Dword transfer 

I = low-order portion h = high-order portion 

m = mid-order portion 
X = don’t care 

= BS16# asserted causes second bus cycle 
*For this case, 8086, 8088, 801 86, 801 88, 80286 transfer lb first, then hb. 
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The definition of each bus oycle is given by three 
definition signals: M/IO#, W/R# and D/C#. At the 
same time, a valid address is present on the byte 
enable signals BE0#-BE3# and other address sig- 
nals A2-A31. A status signal, ADS#, indicates 
when the 386 DX issues a new bus cycle definition 
and address. 

Collectively, the address bus, data bus and all asso- 
ciated control signals are referred to simply as “the 
bus”. 

When active, the bus performs one of the bus cycles 
below: 

1) read from memory space 

2) locked read from memory space 

3) write to memory space 

4) locked write to memory space 

5) read from I/O space (or coprocessor) 

6) write to I/O space (or coprocessor) 

7) interrupt acknowledge 

8) indicate halt, or indicate shutdown 


Table 5-2 shows the encoding of the bus cycle defi- 
nition signals for each bus cycle. See section 5.2.5 
Bus Cycle Definition. 

The data bus has a dynamic sizing feature support- 
ing 32- and 16-bit bus size. Data bus size is indicated 
to the 386 DX using its Bus Size 16 (BS16#) input. 
All bus functions can be performed with either data 
bus size. 

When the 386 DX bus is not performing one of the 
activities listed above, it is either Idle or in the Hold 
Acknowledge state, which may be detected by ex- 
ternal circuitry. The Idle state can be identified by the 
386 DX giving no further assertions on its address 
strobe output (ADS#) since the beginning of its 
most recent bus cycle, and the most recent bus cy- 
cle has been terminated. The hold acknowledge 
state is identified by the 386 DX asserting Its hold 
acknowledge (HLDA) output. 

The shortest time unit of bus activity is a bus state. A 
bus state is one processor clock period (two CLK2 
periods) in duration. A complete data transfer occurs 
during a bus cycle, composed of two or more bus 
states. 



Figure 5-8. Fastest Read Cycles with Non-Pipelined Address Timing 
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When address pipelining is not selected, the current 
address and bus cycle definition remain stable 
throughout the bus cycle. 

When address pipelining is selected, the address 
(BE0#-BE3#, A2-A31) and definition (W/R#, 
D/C# and M/IO#) of the next cycle are available 
before the end of the current cycle. To signal their 
availability, the 386 DX address status output 
(ADS#) is also asserted. Figure 5-9 illustrates the 
fastest read cycles with pipelined address timing. 

Note from Figure 5-9 the fastest bus cycles using 
pipelined address require only two bus states, 
named T1P and T2P. Therefore cycles with pipe- 
lined address timing allow the same data bandwidth 
as non-pipelined cycles, but address-to-data access 
time is Increased compared to that of a non-pipe- 
lined cycle. 

By increasing the address-to-data access time, pipe- 
lined address timing reduces wait state require- 
ments. For example, if one wait state is required with 
non-pipelined address timing, no wait states would 
be required with pipelined address. 



Figure 5-9. Fastest Read Cycles with Pipelined Address Timing 


The fastest 386 DX bus cycle requires only two bus 
states. For example, three consecutive bus read cy- 
cles, each consisting of two bus states, are shown 
by Figure 5-8. The bus states In each cycle are 
named T1 and T2. Any memory or I/O address may 
be accessed by such a two-state bus cycle, if the 
external hardware is fast enough. The high-band- 
width, two-clock bus cycle realizes the full potential 
of fast main memory, or cache memory. 

Every bus cycle continues until it is acknowledged 
by the external system hardware, using the 386 DX 
READY# input. Acknowledging the bus cycle at the 
end of the first T2 results in the shortest bus cycle, 
requiring only T1 and T2. If READY# is not Immedi- 
ately asserted, however, T2 states are repeated in- 
definitely until the READY# input is sampled assert- 
ed. 


5.4.2 Address Pipelining 

The address pipelining option provides a choice of 
bus cycle timings. Pipelined or non-pipelined ad- 
dress timing Is selectable on a cycle-by-cycle basis 
with the Next Address (NA#) input. 
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Pipelined address timing is useful In typical systems 
having address latches. In those systems, once an 
address has been latched, pipelined availability of 
the next address allows decoding circuitry to gener- 
ate chip selects (and other necessary select signals) 
in advance, so selected devices are accessed Im- 
mediately when the next cycle begins. In other 
words, the decode time for the next cycle can be 
overlapped with the end of the current cycle. 

If a system contains a memory structure of two or 
more interleaved memory banks, pipelined address 
timing potentially allows even more overlap of activi- 
ty. This Is true when the interleaved memory control- 
ler Is designed to allow the next memory operation 


TWO-BANK INTERLEAVED MEMORY 

a) Address signal A2 selects bank 

b) 32-bit datapath to each bank 



231630-13 

FOUR-BANK INTERLEAVED MEMORY 

a) Address signals A3 and A2 select bank 

b) 32-bit datapath to each bank 



231630-14 

Figure 5-10. 2-Bank and 4-Bank Interleaved Memory Structure 


to begin in one memory bank while the current bus 
cycle is still activating another memory bank. Figure 
5-10 shows the general structure of the 386 DX with 
2-bank and 4-bank interleaved memory. Note each 
memory bank of the Interleaved memory has full 
data bus width (32-bit data width typically, unless 16- 
bit bus size is selected). 

Further details of pipelined address timing are given 

in 5.4.3.4 Pipelined Address, 5.4.3.5 Initiating and 
Maintaining Pipelined Address, 5.4.3.6 Pipelined 
Address with Dynamic Bus Sizing, and 5.4.3.7 
Maximum Pipelined Address Usage with 16-Bit 
Bus Size. 
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5.4.3 Read and Write Cycles 

5.4.3.1 INTRODUCTION 

Data transfers occur as a result of bus cycles, classi- 
fied as read or write cycles. During read cycles, data 
is transferred from an external device to the proces- 
sor. During write cycles data is transferred in the oth- 
er direction, from the processor to an external de- 
vice. 

Two choices of address timing are dynamically se- 
lectable: non-pipelined, or pipelined. After a bus Idle 
state, the processor always uses non-pipelined ad- 
dress timing. However, the NA# (Next Address) in- 
put may be asserted to select pipelined address 
timing for the next bus cycle. When pipelining is se- 
lected and the 386 DX has a bus request pending 
Internally, the address and definition of the next cy- 
cle Is made available even before the current bus 
cycle is acknowledged by READY#. Generally, the 
NA# input Is sampled each bus cycle to select the 
desired address timing for the next bus cycle. 


Two choices of physical data bus width are dynami- 
cally selectable: 32 bits, or 16 bits. Generally, the 
BS16# (Bus Size 16) input Is sampled near the end 
of the bus cycle to confirm the physical data bus size 
applicable to the current cycle. Negation of BS16# 
indicates a 32-bit size, and assertion indicates a 16- 
bit bus size. 

If 16-bit bus size is Indicated, the 386 DX automati- 
cally responds as required to complete the transfer 
on a 16-bit data bus. Depending on the size and 
alignment of the operand, another 16-bit bus cycle 
may be required. Table 5-7 provides all details. 
When necessary, the 386 DX performs an additional 
16-blt bus cycle, using D0-D15 in place of D16- 
D31. 

Terminating a read cycle or write cycle, like any bus 
cycle, requires acknowledging the cycle by asserting 
the READY# input. Until acknowledged, the proces- 
sor inserts wait states Into the bus cycle, to allow 
adjustment for the speed of any external device. Ex- 
ternal hardware, which has decoded the address 
and bus cycle type asserts the READY# input at the 
appropriate time. 


CYCLE 1 
NON-PIPELINED 
(WRITE) 


CYCLE 2 
NON-PIPELINED 
(READ) 


CYCLE 3 
NON-PIPELINED 
(WRITE) 




BE0#-BE3# p 
A2-A31. 
M/IO#.D/C# 


W/R# [ 
ADS# [ 


Eras 




DO- D31 




READY# [ 


T1 


T2 






32-BIT 
BUS SIZE 




T1 


T2 


N. 


K. 






32-BIT 
BUS SIZE 

A 


T1 


T2 


CYCLE 4 
NON-PIPELINED 
(READ) 


T1 




T2 




32- BIT 
BUS SIZE 

7^ 








32-BIT 
BUS SIZE 


mm. 


LOCK# VALID 1 |X VALID 2 |X VALID 3 

[ 


--C 


OUT 




mim 


END CYCLE 2 


>- 






mm 


m 


END CYCLE 4 


VALID 4 


OUT 


>- 




— 
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Idle states are shown here for diagram variety only. Write cycles are not always followed by an idle state. An active bus cycle can immediately 
follow the write cycle. 


Figure 5-11. Various Bus Cycles and Idle States with Non-Pipelined Address (zero wait states) 
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At the end of the second bus state within the bus 
cycle, READY# is sampled. At that time, if external 
hardware acknowledges the bus cycle by asserting 
READY#, the bus cycle terminates as shown in Fig- 
ure 5-11. If READY# is negated as in Figure 5-12, 
the cycle continues another bus state (a wait state) 
and READY# is sampled again at the end of that 
state. This continues indefinitely until the cycle is ac- 
knowledged by READY# asserted. 

When the current cycle is acknowledged, the 386 
DX terminates it. When a read cycle is acknowl- 
edged, the 386 DX latches the information present 
at its data pins. When a write cycle is acknowledged, 
the 386 DX write data remains valid throughout 
phase one of the next bus state, to provide write 
data hold time. 


5.4.3.2 NON-PIPELINED ADDRESS 

Any bus cycle may be performed with non-pipelined 
address timing. For example, Figure 5-1 1 shows a 
mixture of read and write cycles with non-pipelined 
address timing. Figure 5-1 1 shows the fastest possi- 


ble cycles with non-pipelined address have two bus 
states per bus cycle. The states are named T 1 and 
T2. In phase one of the T1, the address signals and 
bus cycle definition signals are driven valid, and to 
signal their availability, address status (ADS#) is 
simultaneously asserted. 

During read or write cycles, the data bus behaves as 
follows. If the cycle Is a read, the 386 DX floats its 
data signals to allow driving by the external device 
being addressed. The 386 DX requires that all 
data bus pins be at a valid logic state (high or 
low) at the end of each read cycle, when 
READY # is asserted, even if all byte enables are 
not asserted. The system MUST be designed to 
meet this requirement. If the cycle is a write, data 
signals are driven by the 386 DX beginning In phase 
two of T1 until phase one of the bus state following 
cycle acknowledgment. 

Figure 5-12 Illustrates non-pipelined bus cycles with 
one wait added to cycles 2 and 3. READY# Is sam- 
pled negated at the end of the first T2 in cycles 2 
and 3. Therefore cycles 2 and 3 have T2 repeated. 
At the end of the second T2, READY# is sampled 
asserted. 




W/R# [ 
ADS# [ 


CYCLE 1 
NON-PIPELINED 
(READ) 


(CLK) [ 


myM 


6 #[ 




32-BIT 
BUS SIZE 


CYCLE 2 
NON-PIPELINED 
(WRITE) 






CYCLE 3 
NON-PIPELINED 
(READ) 










32-BIT 32-BIT 

I BUS SIZE I I I BUS SIZE I 


0 ^ 


READY# [[ 


LOCK# [[ MaaX)^ 






h-<?>< 






END CYCLE 2 


mi 










END CYCLE 3 

to 
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Idle states are shown here for diagram variety only. Write cycles are not always followed by an idle state. An active bus cycle can immediately 
follow the write cycle. 

Figure 5-12. Various Bus Cycles and Idle States with Non-Pipelined Address 
(various number of wait states) 
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HOLD ASSERTED 



Bus States: 

T1 — first clock of a non-pipelined bus cycle (386 tm DX drives new address and asserts ADS#) 

T2— subsequent cipcks of a bus cycle when NA# has not been sampled asserted in the current bus cycle 
Ti — idle state 


READY# NEGATED • 
NA# NEGATED 

231630-17 


Th — hold acknowledge state (386 tm dX asserts HLDA) 

The fastest bus cycle consists of two states; T 1 and T2. 

Four basic bus states describe bus operation when not using pipelined address. These states do include BS16# usage for 32-bit and 16-bit 
bus size. If asserting BS16# requires a second 16-bit bus cycle to be performed, it is performed before HOLD asserted is acknowledged. 


Figure 5-13. 386tm dX Bus States (not using pipelined address) 


When address pipelining is not used, the address 
and bus cycle definition remain valid during all wait 
states. When wait states are added and you desire 
to maintain non-pipelined address timing, it is neces- 
sary to negate NA# during each T2 state except the 
last one, as shown in Figure 5-12 cycles 2 and 3. If 
NA# is sampled asserted during a T2 other than the 
last one, the next state would be T2I (for pipelined 
address) or T2P (for pipelined address) instead of 
another T2 (for non-pipelined address). 

When address pipelining is not used, the bus states 
and transitions are completely illustrated by Figure 
5-13. The bus transitions between four possible 
states: TI, T2, Ti, and Th. Bus cycles consist of TI 
and T2, with T2 being repeated for wait states. Oth- 
erwise, the bus may be idle, in the Ti state, or in hold 
acknowledge, the Th state. 

When address pipelining Is not used, the bus state 
diagram is as shown In Figure 5-13. When the bus is 


idle it Is In state TI. Bus cycles always begin with T 1 . 
TI always leads to T2. If a bus cycle Is not acknowl- 
edged during T2 and NA# is negated, T2 Is repeat- 
ed. When a cycle Is acknowledged during T2, the 
following state will be TI of the next bus cycle if a 
bus request Is pending Internally, or Ti if there Is no 
bus request pending, or Th If the HOLD input is be- 
ing asserted. 

The bus state diagram in Figure 5-13 also applies to 
the use of BS16#. If the 386 DX makes Internal ad- 
justments for 1 6-bit bus size, the adjustments do not 
affect the external bus states. If an additional 1 6-bit 
bus cycle is required to complete a transfer on a 
16-bit bus, It also follows the state transitions shown 
in Figure 5-13. 

Use of pipelined address allows the 386 DX to enter 
three additional bus states not shown in Figure 5-13. 
Figure 5-20 in 5.4.3.4 Pipelined Address is the 
complete bus state diagram, including pipelined ad- 
dress cycles. 
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5.4.3.3 NON-PIPELINED ADDRESS WITH 
DYNAMIC DATA BUS SIZING 

The physical data bus width for any non-pipelined 
bus cycle can be either 32-bits or 16-bits. At the 
beginning of the bus cycle, the processor behaves 
as if the data bus is 32-bits wide. When the bus cy- 
cle is acknowledged, by asserting READY# at the 
end of a T2 state, the most recent sampling of 
BS16# determines the data bus size for the cycle 
being acknowledged. If BS16# was most recently 
negated, the physical data bus size is defined as 


32 bits. If BS16# was most recently asserted, the 
size is defined as 16 bits. 

When BS16# is asserted and two 16-bit bus cycles 
are required to complete the transfer, BS16# must 
be asserted during the second cycle; 1 6-bit bus size 
Is not assumed. Like any bus cycle, the second 16- 
bit cycle must be acknowledged by asserting 
READY#. 

When a second 16-bit bus cycle is required to com- 
plete the transfer over a 16-bit bus, the addresses 


A TRANSFER REQUIRING TWO 
CYCLES ON 1 6-BIT DATA BUS 


A TRANSFER REQUIRING TWO 
CYCLES ON 1 6-BIT DATA BUS 
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Key: Dn, = physical data pin n 
dn = logical data bit n 


Figure 5-14. Asserting BS16# (zero wait states, non-pipelined address) 
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A TRANSFER REQUIRING TWO 
CYCLES ON 1 6-BIT DATA BUS 



Key: Dn = physical data pin n 231630-19 

dn = logical data bit n 


Figure 5-15. Asserting BS16# (one wait state, non-pipelined address) 


generated for the two 1 6-bit bus cycles are closely 
related to each other. The addresses are the same 
except BEO# and BE1 # are always negated for the 
second cycle. This is because data on D0-D15 was 
already transferred during the first 1 6-bit cycle. 

Figures 5-14 and 5-15 show cases where assertion 
of BS16# requires a second 16-bit cycle for com- 
plete operand transfer. Figure 5-1 4 illustrates cycles 


without wait states. Figure 5-15 Illustrates cycles 
with one wait state. In Figure 5-15 cycle 1, the bus 
cycle during which BS16# is asserted, note that 
NA# must be negated In the T2 state(s) prior to the 
last T2 state. This Is to allow the recognition of 
BS16# asserted In the final T2 state. The relation of 
NA# and BS16# Is given fully In 5.4.3.4 Pipelined 
Address, but Figure 5-15 Illustrates this only pre- 
caution you need to know when using BS16# with 
non-pipelined address. 
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5.4.3.4 PIPELINED ADDRESS 

Address pipelining is the option of requesting the 
address and the bus cycle definition of the next, In- 
ternally pending bus cycle before the current bus 
cycle is acknowledged with READY# asserted. 
ADS# is asserted by the 386 DX when the next ad- 
dress is issued. The address pipelining option Is con- 
trolled on a cycle-by-cycle basis with the NA# input 
signal. 

Once a bus cycle is in progress and the current ad- 
dress has been valid for at least one entire bus 
state, the NA# input is sampled at the end of every 
phase one until the bus cycle Is acknowledged. Dur- 
ing non-pipelined bus cycles, therefore, NA# is 
sampled at the end of phase one in every T2. An 
example is Cycle 2 in Figure 5-16, during which NA# 
is sampled at the end of phase one of every T2 (it 
was asserted once during the first T2 and has no 
further effect during that bus cycle). 


If NA# is sampled asserted, the 386 DX Is free to 
drive the address and bus cycle definition of the next 
bus cycle, and assert ADS#, as soon as it has a bus 
request internally pending. It may drive the next ad- 
dress as early as the next bus state, whether the 
current bus cycle is acknowledged at that time or 
not. 

Regarding the details of address pipelining, the 386 
DX has the following characteristics; 

1) For NA# to be sampled asserted, BS16# must 
be negated at that sampling window (see Figure 
5-16 Cycles 2 through 4, and Figure 5-17 Cycles 1 
through 4). If NA# and BS16# are both sampled 
asserted during the last T2 period of a bus cycle, 
BS16# asserted has priority. Therefore, if both 
are asserted, the current bus size is taken to be 
16 bits and the next address is not pipelined. 
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Following any idle bus state (Ti) the address is always non-pipelined and NA#iis only sampled during wait states. To start address pipelining 
after an idle state requires a non-pipelined cycle with at least one wait state (cycle 1 above). 

The pipelined cycles (2, 3, 4 above) are shown with various numbers of wait states. 


Figure 5-17. Fastest Transition to Pipelined Address Following Idle Bus State 


2) The next address may appear as early as the bus 
state after NA# was sampled asserted (see Fig- 
ures 5-16 or 5-17). In that case, state T2P is en- 
tered immediately. However, when there is not an 
internal bus request already pending, the next ad- 
dress will not be available immediately after NA# 
is asserted and T2I is entered instead of T2P (see 
Figure 5-19 Cycle 3). Provided the current bus cy- 
cle isn’t yet acknowledged by READY# asserted, 
T2P will be entered as soon as the 386 DX does 
drive the next address. External hardware should 
therefore observe the ADS# output as confirma- 
tion the next address is actually being driven on 
the bus. 

3) Once NA# is sampled asserted, the 386 DX com- 
mits itself to the highest priority bus request that 
is pending internally. It can no longer perform an- 
other 1 6-bit transfer to the same address should 
BS16# be asserted externally, so thereafter 


must assume the current bus size is 32 bits. 
Therefore if NA# is sampled asserted within a 
bus cycle, BS16# must be negated thereafter in 
that bus cycle (see Figures 5-16, 5-17, 5-19). 
Consequently, do not assert NA# during bus cy- 
cles which must have BS16# driven asserted. 
See 5.4.3.6 Dynamic Bus Sizing with Pipelined 
Address. 

4) Any address which is validated by a pulse on the 
386 DX ADS# output will remain stable on the 
address pins for at least two processor clock peri- 
ods. The 386 DX cannot produce a new address 
more frequently than every two processor clock 
periods (see Figures 5-16, 5-17, 5-19). 

5) Only the address and bus cycle definition of the 
very next bus cycle Is available. The pipelining ca- 
pability cannot look further than one bus cycle 
ahead (see Figure 5-19 Cycle 1). 
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The complete bus state transition diagram, including 
operation with pipelined address is given by 5-20. 
Note it is a superset of the diagram for non-pipelined 
address only, and the three additional bus states for 
pipelined address are drawn in bold. 

The fastest bus cycle with pipelined address con- 
sists of just two bus states, T1P and T2P (recall for 
non-pipelined address it is T1 and T2). T1P is the 
first bus state of a pipelined cycle. 


5.4.3.5 INITIATING AND MAINTAINING 
PIPELINED ADDRESS 

Using the state diagram Figure 5-20, observe the 
transitions from an idle state, Ti, to the beginning of 
a pipelined bus cycle, T1 P. From an idle state TI, the 
first bus cycle must begin with T 1 , and is therefore a 
non-pipelined bus cycle. The next bus cycle will be 
pipelined, however, provided NA# is asserted and 
the first bus cycle ends in a T2P state (the address 
for the next bus cycle is driven during T2P). The fast- 
est path from an Idle state to a bus cycle with pipe- 
lined address is shown In bold below: 

Ji, Ti, Ti^ J1 -T2-T2P.^ J1P- T2P,^ 

idle non-pipelined pipelined 

states cycle cycle 

T1-T2-T2P are the states of the bus cycle that es- 
tablishes address pipelining for the next bus cycle, 
which begins with T1P. The same is true after a bus 
hold state, shown below: 

Jh, Th, Th,^ J1 - T2 - T2P,^ J1 P - T2P,^ 

V ^ V 

hold non-pipelined pipelined 

acknowledge cycle cycle 

states 

The transition to pipelined address is shown func- 
tionally by Figure 5-17 Cycle 1. Note that Cycle 1 is 
used to transition into pipelined address timing for 
the subsequent Cycles 2, 3 and 4, which are pipe- 
lined. The NA# input is asserted at the appropriate 
time to select address pipelining for Cycles 2, 3 
and 4. 


Once a bus cycle is in progress and the current ad- 
dress has become valid, the NA# input is sampled 
at the end of every phase one, beginning with the 
next bus state, until the bus cycle is acknowledged. 
During Figure 5-17 Cycle 1 therefore, sampling be- 
gins in T2. Once NA# is sampled asserted during 
the current cycle, the 386 DX is free to drive a new 
address and bus cycle definition on the bus as early 
as the next bus state. In Figure 5-16 Cycle 1 for 
example, the next address is driven during state 
T2P. Thus Cycle 1 makes the transition to pipelined 
address timing, since it begins with TI but ends with 
T2P. Because the address for Cycle 2 is available 
before Cycle 2 begins, Cycle 2 is called a pipelined 
bus cycle, and it begins with TIP. Cycle 2 begins as 
soon as READY# asserted terminates Cycle 1. 

Example transition bus cycles are Figure 5-1 7 Cycle 
1 and Figure 5-16 Cycle 2. Figure 5-17 shows tran- 
sition during the very first cycle after an idle bus 
state, which is the fastest possible transition into ad- 
dress pipelining. Figure 5-16 Cycle 2 shows a tran- 
sition cycle occurring during a burst of bus cycles. In 
any case, a transition cycle is the same whenever it 
occurs: it consists at least of TI, T2 (you assert 
NA# at that time), and T2P (provided the 386 DX 
has an internal bus request already pending, which it 
almost always has). T2P states are repeated if wait 
states are added to the cycle. 

Note three states (TI, T2 and T2P) are only required 
in a bus cycle performing a transition from non- 
pipelined address into pipelined address timing, for 
example Figure 5-17 Cycle 1. Figure 5-17 Cycles 2, 
3 and 4 show that address pipelining can be main- 
tained with two-state bus cycles consisting only of 
TIP and T2P. 

Once a pipelined bus cycle Is in progress, pipelined 
timing Is maintained for the next cycle by asserting 
NA# and detecting that the 386 DX enters T2P dur- 
ing the current bus cycle. The current bus cycle must 
end in state T2P for pipelining to be maintained in 
the next cycle. T2P is identified by the assertion of 
ADS#. Figures 5-16 and 5-17 however, each show 
pipelining ending after Cycle 4 because Cycle 4 
ends in T2I. This indicates the 386 DX didn’t have an 
internal bus request prior to the acknowledgement 
of Cycle 4. If a cycle ends with a T2 or T2I, the next 
cycle will not be pipelined. 
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231630-23 


Figure 5-19. Details of Address Pipelining During Cycles with Wait States 
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HOLD ASSERTED 



Bus States: 

T1 — first clock of a non-pipelined bus cycle (386tm dX drives new address 
and asserts ADS#). 

T2— subsequent clocks of a bus cycle when NA# has not been sampled 
asserted in the current bus cycle. 

T2I— subsequent clocks of a bus cycle when NA# has been sampled as- 
serted in the current bus cycle but there is not yet an internal bus request 
pending (386 DX will not drive new address or assert ADS#). 

T2P — subsequent clocks of a bus cycle when NA# has been sampled 
asserted in the current bus cycle and there is an internal bus request pend- 
ing (386 DX drives nevy address and asserts ADS#). 

T 1 P — first clock of a pipelined bus cycle. 

Ti — idle state. 

Th— hold acknowledge state (386 DX asserts HLDA). 

Asserting NA# for pipelined address gives access to three more bus 
states: T2I, T2P and T1P. 

Using pipelined address, the fastest bus cycle consists of T1P and T2P. 


READY# NEGATED 


231630-24 


Figure 5-20. 386™ DX Complete Bus States (including pipelined address) 


Realistically, address pipelining is almost always 
maintained as long as NA# is sampled asserted. 
This is so because in the absence of any other re- 
quest, a code prefetch request is always internally 
pending until the instruction decoder and code pre- 
fetch queue are completely full. Therefore address 
pipelining is maintained for long bursts of bus cycles, 
if the bus is available (i.e., HOLD negated) and NA# 
is sampled asserted in each of the bus cycles. 


5.4.3.6 PIPELINED ADDRESS WITH DYNAMIC 
DATA BUS SIZING 

The BS16# feature allows easy Interface to 16-bit 
data buses. When asserted, the 386 DX bus 


Interface hardware performs appropriate action to 
make the transfer using a 16-blt data bus connected 
onD0-D15. 

There is a degree of interaction, however, between 
the use of Address Pipelining and the use of Bus 
Size 16. The interaction results from the multiple bus 
cycles required when transferring 32-bit operands 
over a 16-bit bus. If the operand requires both 16-bit 
halves of the 32-bit bus, the appropriate 386 DX ac- 
tion is a second bus cycle to complete the operand’s 
transfer. It is this necessity that conflicts with NA# 
usage. 

When NA# is sampled, asserted, the 386 DX 
commits itself to perform the next inter- 


4-251 




386 TM DX MICROPROCESSOR 



nally pending bus request, and is allowed to drive 
the next internally pending address onto the bus. As- 
serting NA# therefore makes it impossible for the 
next bus cycle to again access the current address 
on A2-A31, such as may be required when BS16# 
is asserted by the external hardware. 

To avoid conflict, the 386 DX is designed with follow- 
ing two provisions: 

1) To avoid conflict, BS16# must be negated in the 
current bus cycle if NA# has already been 


sampled asserted in the current cycle. If NA# is 
sampled asserted, the current data bus size is as- 
sumed to be 32 bits. 

2) To also avoid conflict, if NA# and BS16# are 
both asserted during the same sampling window, 
BS16# asserted has priority and the 386 DX acts 
as if NA# was negated at that time. Internal 386 
DX circuitry, shown conceptually in Figure 5-18, 
assures that BS16# is sampled asserted and 
NA# is sampled negated if both inputs are exter- 
nally asserted at the same sampling window. 


A TRANSFER REQUIRING TWO 
CYCLES ON 16-BIT BUS 



Key: Dn = physical data pin n 231630-25 

dn = logical data bit n 

Cycle 1 is pipelined. Cycle 1a cannot be pipelined, but its address can be inferred from that of Cycle 1 , to externally simulate address pipelining 
during Cycle 1a. 


Figure 5-21. Using NA# and BS16# 
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Certain types of 16-bit or 8-bit operands require no forms two interrupt acknowledge cycles. These bus 

adjustment for correct transfer on a 16-blt bus. cycles are similar to read cycles in that bus definition 

Those are read or write operands using only the low- signals define the type of bus activity taking place, 

er half of the data bus, and write operands using and each cycle continues until acknowledged by 

only the upper half of the bus since the 386 DX READY# sampled asserted, 
simultaneously duplicates the write data on the low- 
er half of the data bus. For these patterns of Byte The state of A2 distinguishes the first and second 

Enables and the R/W# signals, BS1 6# need not be interrupt acknowledge cycles. The byte address 

asserted at the 386 DX allowing NA# to be asserted driven during the first interrupt acknowledge cycle is 

during the bus cycle if desired. 4 (A31-A3 low, A2 high, BE3#-BE1# high, and 

BED# low). The address driven during the second 
interrupt acknowledge cycle is 0 (A31~A2 low, 
5.4.4 Interrupt Acknowledge (INTA) bE3#-bei # high, bed# low). 

Cycles 

In response to an interrupt request on the INTR In- 
put when interrupts are enabled, the 386 DX per- 



Interrupt Vector (0-255) is read on D0-D7 at end of second Interrupt Acknowledge bus cycle. 

Because each Interrupt Acknowledge bus cycle is followed by idle bus states, asserting NA# has no practical effect. Choose the approach 
which is simplest for your system hardware design. 


Figure 5-22. Interrupt Acknowledge Cycles 
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Figure 5-23. Halt Indication Cycie 


The LOCK# output is asserted from the beginning 
of the first interrupt acknowledge cycle until the end 
of the second interrupt acknowledge cycle. Four idle 
bus states, Ti, are inserted by the 386 DX between 
the two interrupt acknowledge cycles, allowing for 
compatibility with spec TRHRL of the 8259A Inter- 
rupt Controller. 

During both interrupt acknowledge cycles, D0-D31 
float. No data is read at the end of the first interrupt 
acknowledge cycle. At the end of the second inter- 
rupt acknowledge cycle, the 386 DX will read an ex- 
ternal interrupt vector from D0-D7 of the data bus. 
The vector indicates the specific interrupt number 
(from 0-255) requiring service. 


5.4.5 Halt Indication Cycle 

The 386 DX halts as a result of executing a HALT 
instruction. Signaling its entrance into the halt state, 
a halt indication cycle is performed. The halt Indica- 
tion cycle is identified by the state of the bus defini- 
tion signals shown in 5.2.5 Bus Cycle Definition 
and a byte address of 2. BEO# and BE2# are the 
only signals distinguishing halt indication from shut- 
down indication, which drives an address of 0. Dur- 
ing the halt cycle undefined data is driven on 
D0-D31. The halt indication cycle must be acknowl- 
edged by READY# asserted. 

A halted 386 DX resumes execution when INTR (if 
interrupts are enabled) or NMI or RESET Is assert- 
ed. 
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5.4.6 Shutdown Indication Cvcie ^'Qnals distinguishing shutdown indica- 

^ tion from halt indication, which drives an address of 

The 386 DX shuts down as a result of a protection 2. During the shutdown cycle undefined data is driv- 

fault while attempting to process a double fault. Sig- an on D0-D31. The shutdown indication cycle must 

naling its entrance into the shutdown state, a shut- be acknowledged by READY # asserted, 

down indication cycle is performed. The shutdown 

indication cycle is identified by the state of the bus A shutdown 386 DX resumes execution when NMI 

definition signals shown In 5.2.5 Bus Cycle Deflni- or RESET is asserted, 

tion and a byte address of 0. BEO# and BE2# 



Figure 5-24. Shutdown Indication Cycle 


int^ 
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5.5 OTHER FUNCTIONAL 
DESCRIPTIONS 


5.5.1 Entering and Exiting Hold 
Acknowledge 

The bus hold acknowledge state, Th, is entered in 
response to the HOLD input being asserted. In the 
bus hold acknowledge state, the 386 DX floats all 
output or bidirectional signals, except for HLDA. 
HLDA is asserted as long as the 386 DX remains In 
the bus hold acknowledge state. In the bus hold ac- 
knowledge state, all inputs except HOLD, RESET, 
BUSY#, ERROR#, and PEREQ are ignored (also 
up to one rising edge on NMI is remembered for 
processing when HOLD is no longer asserted). 
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NOTE: 

For maximum design flexibility the 386 tm dx has no in- 
ternal pullup resistors on its outputs. Your design may 
require an external pullup on ADS# and other 386 DX 
outputs to keep them negated during float periods. 


Figure 5-25. Requesting Hold from Idle Bus 


Th may be entered from a bus idle state as in Figure 
5-25 or after the acknowledgement of the current 
physical bus cycle if the LOCK# signal is not assert- 
ed, as in Figures 5-26 and 5-27. If HOLD is asserted 
during a locked bus cycle, the 386 DX may execute 
one unlocked bus cycle before acknowledging 
HOLD. If asserting BS16# requires a second 16-bit 


bus cycle to complete a physical operand transfer. It 
is performed before HOLD Is acknowledged, al- 
though the bus state diagrams in Figures 5-13 and 
5-20 do not indicate that detail. 

Th is exited In response to the HdLD input being 
negated. The following state will be Ti as in Figure 
5-25 if no bus request is pending. The following bus 
state will be TI if a bus request Is internally pending, 
as in Figures 5-26 and 5-27. 

Th is also exited in response to RESET being assert- 
ed. 

If a rising edge occurs on the edge-triggered NMI 
input while in Th, the event is remembered as a non- 
maskable interrupt 2 and is serviced when Th is exit- 
ed, unless of course, the 386 DX is reset before Th 
is exited. 


5.5.2 Reset During Hold Acknowledge 

RESET being asserted takes priority over HOLD be- 
ing asserted. Therefore, Th is exited In reponse to 
the RESET input being asserted. If RESET is assert- 
ed while HOLD remains asserted, the 386 DX drives 
its pins to defined states during reset, as in Table 
5-3 Pin State During Reset, and performs internal 
reset activity as usual. 

If HOLD remains asserted when RESET is negated, 
the 386 DX enters the hold acknowledge state be- 
fore performing its first bus cycle, provided HOLD is 
still asserted when the 386 DX would otherwise per- 
form its first bus cycle. If HOLD remains asserted 
wheii RESET Is negated, the BUSY# input is still 
sampled as usual to determine whether a self test is 
being requested, and ERROR# is still sampled as 
usual to determine whether a 387 DX coprocessor 
vs. an 80287 (or none) is present. 


5.5.3 Bus Activity During and 
Foilowing Reset 

RESET is the highest priority input signal, capable of 
interrupting any processor activity when it Is assert- 
ed. A bus cycle in progress can be aborted at any 
stage, or idle states or bus hold acknowledge states 
discontinued so that the reset state Is established. 

RESET should remain asserted for at least 15 CLK2 
periods to ensure it is recognized throughout the 386 
DX, and at least 80 CLK2 periods If 386 DX self-test 
is going to be requested at the falling edge. RESET 
asserted pulses less than 1 5 CLK2 periods may not 
be recognized. RESET pulses less than 80 CLK2 
periods followed by a self-test may cause the self- 
test to report a failure when no true failure exists. 
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NOTE: 

HOLD is a synchronous input and can be asserted at any CLK2 edge, provided setup and hold {X 23 and X 2 a) require- 
ments are met. This waveform is useful for determining Hold Acknowledge latency. 

Figure 5-26. Requesting Hold from Active Bus (NA# negated) 

The additional RESET pulse width is required to After the RESET falling edge (and after the self-test 

clear additional state prior to a valid self-test. if it was requested) the 386 DX performs an internal 

Initialization sequence for approximately 350 to 450 
Provided the RESET falling edge meets setup and CLK2 periods, 
hold times \2S and t 26 , the internal processor clock 

phase is defined at that time, as illustrated by Figure The 386 DX samples its ERROR# input some time 

5-28 and Figure 7-7. after the falling edge of RESET and before execut- 

ing the first ESC Instruction. During this sampling pe- 
A 386 DX self-test may be requested at the time riod BUSY# must be HIGH. If ERROR# was sam- 

RESET Is negated by having the BUSY# input at a pled active, the 386 DX employs the 32-bit protocol 

LOW level, as shown in Figure 5-28. The self-test of the 387 DX. Even though this protocol was select- 

requlres ( 220 ) + approximately 60 CLK2 periods to ed, it is still necessary to use a software recognition 

complete. The self-test duration is not affected by test to determine the presence or identity of the co- 

the test results. Even if the self-test indicates a prob- processor and to assure compatibility with future 

lem, the 386 DX attempts to proceed with the reset processors. (See Chapter 1 1 of the 386 tm dX Pro- 
sequence afterwards. grammar’s Reference Manual, Order #230985- 

002 ). 
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NOTE: 

HOLD is a synchronous input and can be asserted at any CLK 2 edge, provided setup and hold (t23 and t24) require- 
ments are met. This waveform is useful for determining Hold Acknowledge latency. 


Figure 5-27. Requesting Hold from Active Bus (NA# asserted) 


5.6 SELF-TEST SIGNATURE 

Upon completion of self-test, (if self-test was re- 
quested by holding BUSY# LOW at least eight 
CLK2 periods before and after the falling edge of 
RESET), the EAX register will contain a signature of 
OOOOOOOOh indicating the 386 DX passed its self- 
test of microcode and major PLA contents with no 
problems detected. The passing signature in EAX, 
OOOOOOOOh, applies to all 386 DX revision levels. 
Any non-zero signature Indicates the 386 DX unit is 
faulty. 


5.7 COMPONENT AND REVISION 
IDENTIFIERS 

To assist 386 DX users, the 386 DX after reset holds 
a component identifier and a revision identifier 


in its DX register. The upper 8 bits of DX hold 03h as 
identification of the 386 DX component. The lower 8 
bits of DX hold an 8-bit unsigned binary number re- 
lated to the component revision level. The revision 
identifier begins chronologically with a value zero 
and is subject to change (typically it will be incre- 
mented) with component steppings intended to have 
certain Improvements or distinctions from previous 
steppings. 

These features are intended to assist 386 DX users 
to a practical extent. However, the revision identifier 
value Is not guaranteed to change with every step- 
ping revision, or to follow a completely uniform nu- 
merical sequence, depending on the type or Inten- 
tion of revision, or manufacturing materials required 
to be changed. Intel has sole discretion over these 
characteristics of the component. 
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ERROR# cEmmm 


nrn._nr,. UP TO 30 CLK2 — 

: c TTOXm 
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ABS.C 
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KXXXX 7 \y] 


387'“ DX MATH COPROCESSOR PROTOCOL 
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SENSING OF THE 387^^ DX MATH COPROCESSOR 


ms SXH 


SSS VALID 


ms 
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ms 




SSSffi 


sms 


SSSffi 


231630-32 


NOTES: 

1. BUSY# should be held stable for 8 CLK2 periods before and after the CLK2 period in which RESET falling edge 
occurs. 

2. If self-test is requested, the 386 tm dX outputs remain in their reset state as shown here and in Table 5-3. 


Figure 5-28. Bus Activity from Reset Until First Code Fetch 


Table 5-10. Component and Revision Identifier History 


386 TM DX 
Stepping 
Name 

Component 

Revision 

386 TM DX 
Stepping 
Name 

Component 

Revision 

identifier 

Identifier 

Identifier 

identifier 

BO 

03 

03 

DO 

03 

05 

B1 

03 

03 

D1 

03 

08 
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5.8 COPROCESSOR INTERFACING 

The 386 DX provides an automatic interface for the 
Intel 387 DX numeric floating-point coprocessor. 
The 387 DX coprocessor uses an I/O-mapped inter- 
face driven automatically by the 386 DX and assist- 
ed by three dedicated signals: BUSY#, ERROR#, 
and PEREQ. 

As the 386 DX begins supporting a coprocessor in- 
struction, it tests the BUSY# and ERROR# signals 
to determine if the coprocessor can accept its next 
instruction. Thus, the BUSY# and ERROR# inputs 
eliminate the need for any “preamble” bus cycles 
for communication between processor and coproc- 
essor. The 387 DX can be given its command op- 
code immediately. The dedicated signals provide in- 
struction synchronization, and eliminate the need of 
using' the 386 DX WAIT opcode (9Bh) for 387 DX 
coprocessor Instruction synchronization (the WAIT 
opcode was required when 8086 or 8088 was used 
with the 8087 coprocessor). 

Custom coprocessors can be Included In 386 DX- 
based systems, via memory-mapped or I/O-mapped 
interfaces. Such coprocessor interfaces allow a 
completely custom protocol, and are not limited to a 
set of coprocessor protocol “primitives”. Instead, 
memory-mapped or I/O-mapped Interfaces may use 
all applicable 386 DX instructions for high-speed co- 
processor communication. The BUSY# and 
ERROR # inputs of the 386 DX may also be used for 
the custom coprocessor interface, if such hardware 
assist is desired. These signals can be tested by the 
386 DX WAIT opcode (9Bh). The WAIT instruction 
will wait until the BUSY# input Is negated (interrupt- 
able by an NMI or enabled INTR input), but gener- 
ates an exception 16 fauil if liie ERROR# pin is in 
the asserted state when the BUSY# goes (or is) 
negated. If the custom coprocessor interface Is 
memory-mapped, protection of the addresses used 
for the interface can be provided with the 386 DX 


on-chip paging or segmentation mechanisms. If the 
custom Interface is I/O-mapped, protection of the 
interface can be provided with the 386 DX lOPL (I/O 
Privilege Level) mechanism. 

The 387 DX numeric coprocessor interface is I/O 
mapped as shown In Table 5-11. Note that the 
387 DX coprocessor interface addresses are be- 
yond the Oh-FFFFh range for programmed I/O. 
When the 386 DX supports the 387 DX coprocessor, 
the 386 DX automatically generates bus cycles to 
the coprocessor interface addresses. 


Table 5-11. Numeric Coprocessor 
Port Addresses 


Address in 
386TM DX 

I/O Space 

387TMDX 

Coprocessor 

Register 

800000F8h 

Opcode Register 
(32-bit port) 

SOOOOOFCh 

Operand Register 
(32-bit port) 


To correctly map the 387 DX coprocessor registers 
to the appropriate I/O addresses, connect the 
387 DX coprocessor CMDO# pin directly to the A2 
output of the 386 DX. 


5.8. 1 Software T esting for 
Coprocessor Presence 

When software is used to test for coprocessor 
(387 DX) presence. It should use only the following 
coprocessor opcodes: F!N!T, FNINIT, FSTCW mem, 
FSTSW mem, FSTSW AX. To use other coproces- 
sor opcodes when a coprocessor is known to be not 
present, first set EM = 1 in 386 DX CRO. 


4-260 




386 TM DX MICROPROCESSOR 



6. INSTRUCTION SET 

This section describes the 386 DX instruction set. A 
table lists all Instructions along with instruction en- 
coding diagrams and clock counts. Further details of 
the Instruction encoding are then provided in the fol- 
lowing sections, which completely describe the en- 
coding structure and the definition of all fields occur- 
ring within 386 DX instructions. 


6.1 386™ DX INSTRUCTION 

ENCODING AND CLOCK COUNT 
SUMMARY 

To calculate elapsed time for an instruction, multiply 
the instruction clock count, as listed In Table 6-1 
below, by the processor clock period (e.g. 50 ns for 
a 20 MHz 386 DX. 40 ns for a 25 MHz 386 DX, and 
30 ns for a 33 MHz 386 DX). 

For more detailed information on the encodings of 
instructions refer to section 6.2 Instruction Encod- 
ings. Section 6.2 explains the general structure of 
instruction encodings, and defines exactly the en- 
codings of all fields contained within the instruction. 


Instruction Clock Count Assumptions 

1. The instruction has been prefetched, decoded, 
and is ready for execution. 

2. Bus cycles do not require wait states. 

3. There are no local bus HOLD requests delaying 
processor access to the bus. 

4. No exceptions are detected during instruction ex- 
ecution. 

5. If an effective address is calculated, it does not 
use two general register components. One regis- 
ter, scaling and displacement can be used within 
the clock counts shown. However, if the effective 
address calculation uses two general register 
components, add 1 clock to the clock count 
shown. 

Instruction Clock Count Notation 

1 . If two clock counts are given, the smaller refers to 
a register operand and the larger refers to a mem- 
ory operand. 

2. n = number of times repeated. 

3. m = number of components in the next Instruc- 
tion executed, where the entire displacement (If 
any) counts as one component, the entire imme- 
diate data (if any) counts as one component, and 
each of the other bytes of the Instruction and pre- 
fix(es) each count as one component. 
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Table 6-1. 386 tm dx Instruction Set Clock Count Summary 


INSTRUCTION 

FORMAT 



CLOCK COUNT 

NOTES 1 

Real 
Address 
Mode or 
Virtual 
8086 
Mode 

Protected 

Virtual 

Address 

Mode 

Real 
Address 
Mode or 
Virtual 
8086 
Mode 

Protected 

Virtual 

Address 

Mode 

GENERAL DATA TRANSFER 








MOV = Move: 








Register to Register/Memory 

I 1000100W 

1 mod reg r/m 


2/2 

2/2 

b 

h 

Register/Memory to Register 

I 1 0001 01 w 

1 mod reg r/m 


2/4 

2/4 

b 

h 

Immediate to Register/Memory 

1 1 1 0001 1 w 

1 mod 0 0 0 r/m 

immediate data 

2/2 

2/2 

b 

h 

Immediate to Register (short form) 

1 1 0 1 1 w reg 

] immediate data 


2 

2 



Memory to Accumulator (short form) 

1 lOIOOOOw 

J full displacement 


4 

4 

b 

h 

Accumulator to Memory (short form) 

1 1 0 1 000 1 w 

J . full displacement 


2 

2 

b 

h 

Register Memory to Segment Register 

1 1 0001 1 1 0 

1 mod sreg3 r/m 


2/5 

18/19 

b 

h, i.j 

Segment Register to Register/ Memory 

1 10001100 

1 mod sreg3 r/m 


2/2 

2/2 

b 

h 

MOVSX = Move With Sign Extension 








Register From Register/Memory 

1 00001111 

1 1 01 1 1 1 1 w 

mod reg r/m | 

3/6 

3/6 

b 

h 

MOVZX = Move With Zero Extension 








Register From Register/Memory 

1 00001 1 1 1 

1 1 01 1 01 1 w 

mod reg r/m | 

3/6 

3/6 

b 

h 

PUSH = Push: 








Register/Memory 

1 11111111 

1 mod 110 r/m 


5 

5 

b 

h 

Register (short form) 

101010 reg 

■ 



2 

b 

h 

Segment Register (ES, CS, SS or DS) 

1 0 0 0 sreg2 110 



2 

2 

b 

h 

Segment Register (FS or GS) 

1 00001 1 1 1 

1 1 0 sreg3 0 0 0 | 


2 

2 

b 

h 

Immediate 

1 01101 OsO 

] immediate data 


2 

2 

b 

h 

PUSHA = Push All 

' 1 0 1 1 00000 

] 


18 

18 

b 

h 

POP = Pop 








Register/ Memory 

1 1 0001 1 1 1 

1 mod 0 0 0 r/m | 


5 

5 

b 

h 

Register (short form) 

1 0 1 0 1 1 reg 

] 


4 

4 

b 

h 

Segment Register (ES, SS or DS) 

10 0 0 sreg 2 111 

] 


7 

21 

b 

h. U 

Segment Register (FS or GS) 

1 00001 1 1 1 

1 1 0 sreg 3 0 01 | 


7 

21 

b 

h. i.j 

POPA = Pop All 

1 01 100001 

] 


24 

24 

b 

h 

XCHG = Exchange 








Register/Memory With Register 

1 1 00001 1 w 

1 mod reg r/m | 


3/5 

3/5 

b.f 

f.h 

Register With Accumulator (short form) 

1 1 0 0 1 0 reg 

] 

Clk Count 

3 

3 






Virtual 





IN = Input from: 



8086 Mode 





Fixed Port 

1 1 1 1 001 Ow 

1 port number 

t26 

12 

6V26** 


m 

Variable Port 

1 1 1 1 01 1 Ow 

] 

t27 

13 

7V27** 


m 

OUT = Output to: 








Fixed Port 

1 1 1 1 001 1 w 

1 port number 

t24 

10 

4V24** 


m 

Variable Port 

1 1 1 1 01 1 1 w 

] 

t25 

11 

5V25** 


m 

LEA = Load EA to Register 

1 1 0001 1 01 

1 mod reg r/m 


2 

2 




* If CPL ^ lOPL If CPL > lOPL 
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Table 6-1. 386 tm DX Instruction Set Clock Count Summary (Continued) 


INSTRUCTION 

FORMAT 



CLOCK COUNT 

NOTES 

Real 
Address 
Mode or 
Virtual 
8086 
Mode 

Protected 

Virtual 

Address 

Mode 

Real 
Address 
Mode or 
Virtual 
8086 
Mode 

Protected 

Virtual 

Address 

Mode 

SEGMENT CONTROL 








LDS = Load Pointer to DS 

I 11000101 

1 mod reg r/m | 


7 

22 

b 

h. i.j 

LES = Load Pointer to ES 

I 1 1 0001 00 

1 mod reg r/m | 


7 

22 

b 

h, i,j 

LFS = Load Pointer to FS 

|‘ 0000 1 1 1 1 

1 1011010 0 1 mod reg 

r/m 1 

7 

25 

b 

h. i.j 

LGS = Load Pointer to GS 

1 00001111 

1 10110101 1 mod reg 

r/m 1 

7 

25 

b 

h.i, j 

LSS = Load Pointer to SS 

1 0000 1 1 1 1 

1 10110 0 10 1 mod reg 

r/m 1 

7 

22 

b 

h. i.j 

FLAG CONTROL 








CLC == Clear Carry Flag 

1 11111000 



2 

2 



CLD = Clear Direction Flag 

1 11111100 



2 

2 



CLI = Clear Interrupt Enable Flag 

1 11111010 



8 

8 


m 

CLTS = Clear Task Switched Flag 

1 0000 1 1 1 1 

1 000001 1 0 1 


6 

6 

c 

1 

CMC = Complement Carry Flag 

1 11110101 



2 

2 



LAHF = Load AH into Flag 

I 10011111 



2 

2 



POPF = Pop Flags 

1 10011101 



5 

5 

b 

h, n 

PUSHF = Push Flags 

1 10011100 



4 

4 

b 

h 

SAHF = Store AH into Flags 

1 10011110 



3 

3 



STC = Set Carry Flag 

I 11111001 



2 

2 



STD = Set Direction Flag 

1 11111101 

] 


2 

2 



STI = Set Interrupt Enable Flag 

1 11111011 

] 


8 

8 


m 

ARITHMETIC 








ADD = Add 








Register to Register 

1 OOOOOOdw 

1 mod reg r/m j 


2 

2 



Register to Memory 

1 OOOOOOOw 

1 mod reg r/m | 


7 

7 

b 

h 

Memory to Register 

1 0000001 w 

1 mod reg r/m | 


6 

6 

b 

h 

Immediate to Register/Memory 

1 lOOOOOsw 

1 mod 0 0 0 r/m | immediate data 

2/7 

2/7 

b 

h 

Immediate to Accumulator (short form) 

1 000001 Ow 

J immediate data 


2 

2 



ADC = Add With Carry 








Register to Register 

1 0001 OOdw 

1 mod reg r/m [ 


2 

2 



Register to Memory 

1 0001 OOOw 

1 mod reg r/m | 


7 

7 

b 

h 

Memory to Register 

1 0001 001 w 

1 mod reg r/m | 


6 

6 

b 

h 

Immediate to Register/ Memory 

1 lOOOOOsw 

1 mod 0 1 0 r/m | immediate data 

2/7 

2/7 

b 

h 

Immediate to Accumulator (short form) 

1 0001 01 Ow 

] immediate data 


2 

2 



INC = Increment 








Register/Memory 

1 1 1 1 1 1 1 1 w 

1 mod 0 0 0 r/m | 


2/6 

2/6 

b 

h 

Register (short form) 

1 0 1 0 0 0 reg 



2 

2 



SUB = Subtract 








Register from Register 

1 00 1 0 1 Odw 

1 mod reg r/m | 


2 

2 
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Table 6-1. SSGtm dx Instruction Set Clock Count Summary (Continued) 


CLOCK COUNT | 

NOTES 1 

Real 


Real 


Address 

Protected 

Address 

Protected 

Mode or 

Virtual 

Mode or 

Virtual 

Virtual 

Address 

Virtual 

Address 

8086 

Mode 

8086 

Mode 

Mode 


Mode 


7 

7 

b 

h 

6 

6 ^ 

b 

h 

2/7 

2/7 

b 

h 

2 

2 



2 

2 



7 

7 

b 

h 

6 

6 

b 

h 

2/7 

2/7 

b 

h 

2 

2 



2/6 

2/6 

b 

h 

2 

2 



2 

2 



5 

5 

b 

h 

6 

6 

b 

h 

2/5 

2/5 

b 

h 

2 

2 



2/6 

2/6 

b 

h 

4 

4 



4 

■ 4 



4 

4 



12-17/15-20 

12-17/15-20 

b,d 

d. h 

12-25/15-28 

12-25/15-28 

b.d 

d.h 

12-41/15-44 

12-41/15-44 

b.d 

d.h 

12-17/15-20 

12-17/15-20 

b,d 

d.h 

12-25/15-28 

12-25/15-28 

b.d 

d.h 

12-41/15-44 

12-41/15-44 

b.d 

d.h 

12-17/15-20 

12-17/15-20 

b.d 

d.h 

12-25/15-28 

12-25/15-28 

b.d 

d.h 

12-41/15-44 

12-41/15-44 

b.d 

d, h 

13-26/14-27 

13-26/14-27 

b, d 

d.h 

13-42/14-43 

13-42/14-43 

b.d 

d.h 


INSTRUCTION 


|ARITHMETIC (Continued) 

Register from Memory 

Memory from Register 

Immediate from Register/Memory 

Immediate from Accumulator (short form) 

|SBB = Subtract with Borrow 

Register from Register 

Register from Memory 

Memory from Register 

Immediate from Register/Memory 

Immediate from Accumulator (short form) 

DEC = Decrement 

Register/Memory 

Register (short form) 

CMP = Compare 

Register with Register 

Memory with Register 

Register with Memory 

Immediate with Register/Memory 

Immediate with Accumulator (short form) 

NEG = Change Sign 

AAA — ASCii AujiiSl lOi Auu 

!aAS = ASCII Adjust for Subtract 

DAA = Decimal Adjust for Add 

DAS = Decimal Adjust for Subtract 

MUL = Multiply (unsigned) 

[Accumulator with Register/Memory 
Multiplier-Byte 
-Word 

-Doubleword 

IIMUL = Integer Multiply (signed) 

[Accumulator with Register/Memory 
Multiplier-Byte 
-Word 

-Doubleword 

[Register with Register/Memory 
Multiplier-Byte 
-Word 

-Doubleword 


001 01 OOw 


OOlOIOIw 


001 01 1 Ow 


0001 1 Odw 


0001 1 OOw 


0001 1 01 w 


000 1 1 1 Ow 


modreg r/m| 


modreg r/m| 


mod 1 0 1 r/m immediate data 


immediate data 


modreg r/m| 


mod reg r/m| 


mod reg r/m| 


mod 0 1 1 r/m immediate data 


immediate data 


reg 001 r/m| 


00111 Odw 


0011 1 OOw 


001 1 1 01 w 


00 1 1 1 1 Ow 


1 1 1 1 01 1 w 


rm 


I 001 


mod reg r/mj 


mod reg r/mj 


mod reg r/m| 


mod 1 1 1 r/m immediate data 


immediate data 


modO 1 1 r/mj 


1 1 1 1 01 1 w modi 00 r/m 


1 1 1 1 0 1 1 w mod 1 0 1 r/m 


00001111 I 10101111 [modreg r/m| 


Register/Memory with Immediate to Register | 01 101 Os 1 [modreg r/m| immediate data 
-Word 

-Doubleword 


4-264 




iny 


386 TM DX MICROPROCESSOR 


Table 6-1. 386 tm dX Instruction Set Clock Count Summary (Continued) 


1 1 1 1 0 1 1 w mod 1 1 0 r/m 


1 1 1 1 0 1 1 w mod 1 1 1 r/m 


INSTRUCTION 


ARITHMETIC (Continued) 

DIV = Divide (Unsigned) 

Accumulator by Register/Memory 

Divisor — Byte 
—Word 
— Doubleword 

IDIV = Integer Divide (Signed) 

Accumulator By Register/Memory 

Divisor — Byte 
—Word 
— Doubleword 


AAD = ASCII Adjust for Divide | 11010101 | 00001010 | 

AAM = ASCII Adjust for Multiply 
CBW = Convert Byte to Word 
CWD = Convert Word to Double Word 
LOGIC 

Shift Rotate Instructions 

Not Through Carry (ROL, ROR, SAL, SAR , SHL, and SHR) 

Register/Memory by 1 | 1 1 0 1 000 w |modTTT r/m| 

Register/Memory by CL | 1 1 0 1 0 0 1 w [mod TTT r/^ 

Register/Memory by Immediate Count | 1 1 0 0 0 0 0 w [mod TTT r/^ immed 8-bit data 

Through Carry (RCL and RCR) 

Register/Memory by 1 | 1 1 0 1 0 0 0 w [mod TTT r/^ 

Register/Memory by CL | 1 1 0 1 0 0 1 w |mod TTT r/^ 

Register/Memory by Immediate Count | 1 1 OOOOOw [mod TTT r/m| immed 8-bit data 

TTT Instruction 

000 ROL 

001 ROR 

0 1 0 RCL 

0 1 1 RCR 

1 0 0 SHL/SAL 

1 0 1 SHR 

1 1 1 SAR 



SHLD = Shift Left Double 

Register/Memory by Immediate 

Register/Memory by CL 

SHRD = Shift Right Double 

Register/ Memory by Immediate 

Register/Memory' by CL 

AND = And 

Register to Register 


00001111 I 10100100 [mod reg r/m| immed 8-bit data 

00001111 I 10100101 [mod reg r/m| 


00001111 I 10101100 [mod reg r/m| immed 8-bit data 
00001111 I 10101101 [mod reg r/m| 


0 0 1 0 0 0 d w [mod reg r/m| 


CLOCK COUNT 

NOTES 

Real 


Real 


Address 

Protected 

Address 

Protected 

Mode or 

Virtual 

Mode or 

Virtual 

Virtual 

Address 

Virtual 

Address 

8086 

Mode 

8086 

Mode 

Mode 


Mode 


14/17 

14/17 

b.e 

e,h 

22/25 

22/25 

b,e 

e.h 

38/41 

38/41 

b.e 

e.h 

19/22 

19/22 

b,e 

e,h 

27/30 

27/30 

b.e 

e.h 

43/46 

43/46 

b.e 

e,h 

19 

19 



17 

17 



3 

3 



2 

2 



3/7 

3/7 

b 

h 

3/7 

3/7 

b 

h 

3/7 

3/7 

b 

h 

9/10 

9/10 

b 

h 

9/10 

9/10 

b 

h 

9/10 

9/10 

b 

h 

3/7 

3/7 



3/7 

3/7 



3/7 

3/7 



3/7 

3/7 



2 

2 
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Table 6-1. 386 tm dx Instruction Set Clock Count Summary (Continued) 


CLOCK COUNT 

NOTES 1 

Real 
Address 
Mode or 
Virtual 
8086 
Mode 

Protected 

Virtual 

Address 

Mode 

Real 
Address 
Mode or 
Virtual 
8086 
Mode 

Protected 

Virtual 

Address 

Mode 

7 

7 

b 

h 

6 

6 

b 

h 

2/7 

2/7 

b 

h 

2 

2 



2/5 

2/5 

b 

h 

2/5 

2/5 

b 

h 

2 

2 



2 

2 



7 

7 

b 

h 

6 

6 

b 

h 

2/7 

2/7 

b 

h 

2 

2 



2 

2 



7 

7 

b 

h 

6 

6 

b 

h 

2/7 

2/7 

b 

h 

2 

2 

t 


2/6 

2/6 

b 

h 

10 

10 

b 

h 

15 

9*/29** 

b 

h, m 

5 

5 

b 

h 

8 

8 

b 

h 

14 

8V28** 

b 

h, m 

8 

8 

b 

h 

5 

5 

b 

h 

5 

5 


h 

5 + 9n 

5-f 9n 

b 

h 


INSTRUCTION 


LOGIC (Continued) 

Register to Memory 
Memory to Register 
Immediate to Register/Memory 
Immediate to Accumulator (Short Form) 

[TEST = And Function to Flags, No Result 

Register/Memory and Register 

Immediate Data and Register/Memory 

Immediate Data and Accumulator 
(Short Form) 

OR = Or 

Register to Register 
Register to Memory 
Memory to Register 
Immediate to Register/Memory 

Immediate to Accumulator (Short Form) 

XOR = Exclusive Or 
Register to Register 

Register to Memory 
Memory to Register 
Immediate to Register/Memory 
Immediate to Accumulator (Short Form) 

NOT = Invert Reaister /Memory 
- 

STRING MANIPULATION 

CMPS = Compare Byte Word 

INS = Input Byte/Word from DX Port 

LODS = Load Byte/Word to AL/AX/EAX 

MOVS = Move Byte Word 

OUTS = Output Byte/Word to DX Port 

SCAS = Scan Byte Word 

STOS = Store Byte/Word from 
AL/AX/EX 

XLAT = Translate String 

REPEATED STRING MANIPULATION 

Repeated by Count in CX or ECX 

REPE CMPS = Compare String 

(Find Non-Match) 


00 1 OOOOw [modreg r/mj 


001 0001 w 


[modreg r/m| 


1 0 0 0 0 0 0 w mod 1 0 0 r/m immediate data 


0 0 1 0 0 1 0 w immediate data 


1 0 0 0 0 1 0 w I mod reg r/m| 

jmodOOO r/m| immediate data 


1 1 1 1 01 1 w 


1 0 1 0 1 0 0 w immediate data 


00 00 1 Odw |mod reg r/m{ 


00001 OOw 


3 


00001 01 w 


[modreg r/mj 


1 0 0 0 0 0 0 w mod 0 01 r/m immediate data 


0000110W immediate data 


OOllOOdw I mod reg r/m | 


0 0 1 1 0 0 0 w I mod reg r/m | 


OOllOOIw I mod reg r/m [ 


1 0 0 0 0 0 0 w mod 1 1 0 r/m immediate data 


OOllOlOw I immediate data 


1 1 1 1 0 1 1 w I mod 010 r/m I 


1 01 001 1 w 


Clk 

Count 

Virtual 

8086 

Mode 


01 1 01 1 Ow 


t29 


1 01 001 Ow 


01 1 01 1 1 w 


1 01 01 1 1 w 


1 01 01 01 w 


11010111 


11110011 1 01 001 1 w 


' If CPL ^ lOPL 


^ If CPL > lOPL 
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Table 6-1. 386tm DX Instruction Set Clock Count Summary (Continued) 


INSTRUCTION 

FORMAT 





CLOCK COUNT 

NOTES i 

Real 
Address 
Mode or 
Virtual 
8086 
Mode 

Protected 

Virtual 

Address 

Mode 

Real 
Address 
Mode or 
Virtual 
8086 
Mode 

Protected 

Virtual 

Address 

Mode 

REPEATED STRING MANIPULATION (Continued) 









REPNE CMPS = Compare String 




Clk Count 





(Find Match) 

I 11110010 

1 1 0 1 00 1 1 w 



Virtual 

8086 Mode 

5-f 9n 

5-f 9n 

b 

h 

REP INS = Input String 

I 11110010 

1 01 101 lOw 


[ 

t28 + 6n 

14 + 6n 

8-f 6n*/28-f 6n** 

b 

h, m 

REP LODS = Load String 

1 11110010 

1 1 0 1 01 1 Ow 




5-f6n 

5-f 6n 

b 

h 

REP MOVS = Move String 

1 11110010 

1 lOIOOlOw 




8 + 4h 

8-f 4n 

b 

h 

REP OUTS = Output String 

1 11110010 

1 01 1 01 1 1 w 


c 

126-1- 5n 

12-f5n 

6-f 5n*/26-f 5n** 

b 

h, m 

REPE SCAS = Scan String 










(Find Non-AL/AX/EAX) 

1 11110011 

I 1 0 1 01 1 1 w 




5-1- 8n 

5-f 8n 

b 

h 

REPNE SCAS = Scan String 










(Find AL/AX/EAX) 

1 11110010 

1 1 01 01 1 1 w 




5 -H 8n 

5-f8n 

b 

h 

REP STOS = Store String 

1 11110010 

1 1 01 01 01 w 




5-1- 5n 

5-f5n 

b 

h 

BIT MANIPULATION 










BSF = Scan Bit Forv/ard 

1 00001 1 1 1 

1 10111100 

[mod reg 

r/mj 


11-f3n 

11-f3n 

b 

h 

BSR = Scan Bit Reverse 

1 00001 1 1 1 

1 10111101 

|mod reg 

r/mj 


9-f3n 

9-f3n 

b 

h 

BT = Test Bit 










Register/Memory, Immediate 

1 00001 1 1 1 

1 10111010 

{mod 10 0 

r/m|immed 8-bit dataj 

3/6 

3/6 

b 

h 

Register/Memory, Register 

1 00001 1 1 1 

1 1010001 1 

{mod reg 

r/mj 


3/12 

3/12 

b 

h 

BTC == Test Bit and Complement 









Register/Memory, Immediate 

1 00001 1 1 1 

1 10111010 

{mod 1 1 1 

r/mjimmed 8-bit data] 

6/8 

6/8 

b 

h 

Register/Memory, Register 

1 00001 1 1 1 

1 10111011 

{mod reg 

r/mj 


6/13 

6/13 

b 

h 

BTR = Test Bit and Reset 










Register/Memory, Immediate 

1 00001 1 1 1 

1 10111010 

{mod 110 

r/mjimmed 8-bit dataj 

6/8 

6/8 

b 

h 

Register/Memory, Register 

1 00001 1 1 1 

1 10110011 

{mod reg 

r/mj 


6/13 

6/13 

b 

h 

BTS = Test Bit and Set 










Register/Memory, Immediate 

1 00001 1 1 1 

1 10111010 

{mod 1 0 1 

r/mjimmed 8-bit dataj 

6/8 

6/8 

b 

h 

Register/Memory, Register 

1 00001 1 1 1 

1 10101011 

{mod reg 

r/mj 


6/13 

6/13 

b 

h 

CONTROL TRANSFER 










CALL = Call 










Direct Within Segment 

1 1 1 101000 

J full displacement 




7 + m 

7-fm 

b 

r 

Register/Memory 










Indirect Within Segment 

1 11111111 

Imod 010 r/mj 



7-1- m/ 
lO-fm 

7 + m/ 

10-f m 

b 

h, r 

Direct Intersegment 

1 10011010 

^unsigned full offset, selector 



17 + m 

34 -fm 

b 

i.k.r 


NOTES: 

t Clock count shown applies if I/O permission allows I/O to the port in virtual 8086 mode. If I/O bit map denies permission 
exception 13 fault occurs; refer to clock counts for INT 3 instruction. 

* If CPL ^ lOPL ** If CPL > lOPL 
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Table 6-1. 386 tm dx Instruction Set Clock Count Summary (Continued) 




CLOCK COUNT 

NOTES 



Real 


Real 


INSTRUCTION FORMAT 


Address 

Protected 

Address 

Protected 



Mode or 

Virtual 

Mode or 

Virtual 



Virtual 

Address 

Virtual 

Address 



8086 

Mode 

8086 

Mode 



Mode 


Mode 


CONTROL TRANSFER (Continued) 

Protected Mode Only (Direct Intersegment) 






Via Call Gate to Same Privilege Level 

Via Call Gate to Different Privilege Level, 



52 + m 


h,i,k,r 

(No Parameters) 

Via Call Gate to Different Privilege Level, 



86-1- m 


h,j,k,r 

(x Parameters) 



94 + 4x -t- m 


h,j.k,r 

From 80286 Task to 80286 TSS 



273 


h.j,k,r 

From 80286 Task to 386 Tm dX TSS 



298 


h.j.k.r 

From 80286 Task to Virtual 8086 Task ( 386 tm dX TSS) 



218 


h,j,k,r 

From 386TM DX Task to 80286 TSS 



273 


h,j,k,r 

From 386™ DX Task to 386™ DX TSS 



300 


h,j,k,r 

From 386™ DX Task to Virtual 8086 Task (386™ DX TSS) 



218 


h,j,k,r 

Indirect Intersegment | 11111111 jmodO 1 1 

r/mj 

22 + m 

38 -fm 

b 

h,i,k,r 

Protected Mode Only (Indirect Intersegment) 






Via Call Gate to Same Privilege Level 

Via Call Gate to Different Privilege Level, 



56 -fm 


h,j,k,r 

(No Parameters) 

Via Call Gate to Different Privilege Level, 



90 -Hm 


h,j,k,r 

(x Parameters) 



98-f 4x-hm 


h,j,k,r 

From 80286 Task to 80286 TSS 



278 


h,j,k,r 

From 80286 Task to 386 tm dX TSS 



303 


h,j,k,r 

From 80286 Task to Virtual 8086 Task ( 386 tm dX TSS) 



222 


h,j,k,r 

From 386™ DX Task to 80286 TSS 



278 


h,j,k,r 

From 386TM DX Task to 386 tm DX TSS 



305 


h,j,k,r 

From 386™ DX Task to Virtual 8086 Task ( 386 tm DX TSS) 

JMP = Unconditional Jump 



222 


h,j,k,r 

Short j 11101011 1 8-bit displacement! 

7 + m 

7 + m 


r 

Direct within Segment , jlllOIOOlj full displacement 

7 + m 

7 + m 


r 

Register/Memory Indirect within Segment! 11111111 !mod 1 0 0 

r/m! 

7-f m/ 

10 + m 

12 + m 

7 + m/ 

10 + m 

27 + m 

b 

h,r 

Direct Intersegment ! 11101010 ! unsigned full 

offset, selector 


j.k.r 

Protected Mode Only (Direct Intersegment) 






Via Call Gate to Same Privilege Level 



45 + m 


h,j,k,r 

From 80286 Task to 80286 TSS 



274 


h,j,k,r 

From 80286 Task to 386™ DX TSS 



301 


h,j,k,r 

From 80286 Task to Virtual 8086 Task (386™ DX TSS) 



219 


h,j,k,r 

From 386™ DX Task to 80286 TSS 



270 


h,j,k,r 

From 386TM DX Task to 386™ DX TSS 



303 


h,j,k,r 

From 386™ DX Task to Virtual 8086 Task (386™ DX TSS) 



221 


h,j,k,r 

Indirect Intersegment ! 11111 1 1 1 !mod 1 0 1 

r/m! 

17 + m 

31 +m 

b 

h,i,k,r 

Protected Mode Only (Indirect Intersegment) 






Via Call Gate to Same Privilege Level 



49 + m 


h.j,k,r 

From 80286 Task to 80286 TSS 



279 


h,j,k,r 

From 80286 Task to 386 tm px TSS 



306 


h,j,k,r 

From 80286 Task to Virtual 8086 Task (386™ DX TSS) 



223 


h,j,k,r 

From 386™ DX Task to 80286 TSS 



275 


h,j,k,r 

From 386TM DX Task to 386™ DX TSS 



308 


h,j,k,r 

From 386TM DX Task to Virtual 8086 Task ( 386 tm dX TSS) 



225 


h,),k,r 
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Table 6-1. 386 tm dX Instruction Set Clock Count Summary (Continued) 


CLOCK COUNT 

NOTES 1 

Real 


Real 


Address 

Protected 

Address 

Protected 

Mode or 

Virtual 

Mode or 

Virtual 

Virtual 

Address 

Virtual 

Address 

8086 

Mode 

8086 

Mode 

Mode 


Mode 


10 + m 

10 + m 

b 

g, h, r 

10 + m 

10 + m 

b 

g. h, r 

18 + m 

32+ m 

b 

g. h, j, k, r 

18 + m 

32 + m 

b 

g, h, i, k, r 


69 


h, j, k, r 


69 


h, j. k, r 

7 + m or 3 

7 + mor3 


r 

7 + m or 3 

7 + mor3 


r 

7 + m or 3 

7 + m or 3 


r 

7 + m or 3 

7 + m or 3 


r 

7 + m or 3 

7 + m or 3 


r 

7 + m or 3 

7 + mor3 


r 

7 + m or 3 

7 + m or 3 


r 

7 + m or 3 

7 + m or 3 


r 

7 + m or 3 

7 + m or 3 


r 

7 + mor3 

7 + m or 3 


r 

7 + m or 3 

7 + m or 3 


r 

7 + m or 3 

7 + m or 3 


r 

7 + m or 3 

7 + m or 3 


r 

7 + m or 3 

7 + m or 3 


r 

7 + m or 3 

7 + m or 3 


r 

7 + m or3 

7 + m or 3 


r 

7 + m or 3 

7 + m or 3 


r 

7 -f m or 3 

7 + m or 3 


r 


INSTRUCTION 


CONTROL TRANSFER (Continued) 
RET = Return from CALL: 

Within Segment 

Within Segment Adding Immediate to SP 
Intersegment 

Intersegment Adding Immediate to SP 


16-bit dispi 


1 6-bit dispi I 


Protected Mode Only (RET): 
to Different Privilege Level 
Intersegment 

Intersegment Adding Immediate to SP 

CONDITIONAL JUMPS 

NOTE: Times Are Jump “Taken or Not Taken” 

JO = Jump on Overflow 

8-Bit Displacement | 0 


8-bit dispi 


Full Displacement 

JNO = Jump on Not Overflow - 

8-Bit Displacement | 0111 

Full Displacement | 000( 

JB/JNAE == Jump on Below/Not Above or Equal 

( 

8-Bit Displacement 
Full Displacement 


00001 111 10000000 


8-bit dispi 


01110010 


8-bit dispi 


10000010 


JNB/JAE = Jump on Not Below/ Above or Equal 

8-Bit Displacement | 0 1 1 1 ( 

Full Displacement | 0000 ' 

JE/JZ = Jump on Equal/Zero 

8-Bit Displacement | 0 1 1 1 ( 

Full Displacement | 0000 ' 

JNE/JNZ = Jump on Not Equal/Not Zero 

8-Bit Displacement j 0 1 1 1 ( 

Full Displacement | 0000 ' 

JBE/JNA = Jump on Below or Equal/N ot Above 

8-Bit Displacement 

Full Displacement 


01110110 


JNBE/JA = Jump on Not Below or Equal/Above 

( 

8-Bit Displacement 

Full Displacement 
JS = Jump on Sign 
8-Bit Displacement 

Full Displacement 


01110111 


8-bit dispi 


3-bit dispi 


8-bit dispi 


8-bit dispi 


1 00001 1 0 


8-bit dispi 


8-bit dispi 


full displacement 


full displacement 


full displacement 


full displacement 


full displacement 


full displacement 


full displacement 


full displacement 


full displacement 
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Table 6-1. 386 tm dX Instruction Set Clock Count Summary (Continued) 


INSTRUCTION 

FORMAT 



CLOCK COUNT 

NOTES 1 

Real 
Address 
Mode or 
Virtual 
8086 
Mode 

Protected 

Virtual 

Address 

Mode 

Real 
Address 
Mode or 
Virtual 
8086 
Mode 

Protected 

Virtual 

Address 

Mode 

CONDITIONAL JUMPS (Continued) 








JNS = Jump on Not Sign 








8-Bit Displacement 

01111001 

I 

8-bit dispi 1 

7 + m or 3 

7 + m or 3 


r 

Full Displacement 

00001 1 1 1 

I 

1 0 0 01 0 01 1 full displacement 

7 + m or 3 

7 + mor3 


r 

JP/JPE = Jump on Parity/Parity Even 








8-Bit Displacement 

01111010 

I 

8-bit dispi 1 

7 + m or 3 

7 + mor3 


r 

Full Displacement 

00001 1 1 1 

I 

1 0 0 01 01 0 1 full displacement 

7 -1- m or 3 

7 + m or 3 


r 

JNP/JPO = Jump on Not Parity/Parity Odd 







8-Bit Displacement 

01111011 

I 

8-bit dispi 1 

7 + m or 3 

7 + m or 3 


r 

Full Displacement 

00001 1 1 1 

I 

1 0 0 0 1 01 1 1 full displacement 

7 -1- m or 3 

7 + m or 3 


r 

JL/JNGE = Jump on Less/Not Greater or Equal 


' 





8-Bit Displacement 

01111100 

I 

8-bit dispi 1 

7 + m or 3 

7 + m or 3 


r 

Full Displacement 

00001 1 1 1 

I 

10001100 1 full displacement 

7 + hn or 3 

7 + m or 3 


r 

JNL/JGE = Jump on Not Less/Greater or Equal 







8-Bit Displacement 

01111101 

I 

8-bit dispi 1 

7 + mor3 

7 + m or 3 


r 

Full Displacement 

00001111 

I 

1 0 0 01 101 I full displacement 

7 -f m or 3 

7 + m or 3 


r 

JLE/JNG = Jump on Less or Equal/Not Greater 







8-Bit Displacement 

01111110 

I 

8-bit dispi 1 

7 -f mor3 

7 + m or 3 


r 

Full Displacement 

00001 1 1 1 

I 

1 0 0 01 1 10 I full displacement 

7 -1- m or 3 

7 + m or 3 


r 

JNLE/JG = Jump on Not Less or Equal/Greater 







8-Bit Displacement 

01111111 

I 

8-bit dispi I 

7 + m or 3 

7 + mor3 


r 

Full Displacement 

00001111 

I 

1 0 0 01 1 1 1 1 full displacement 

7 + m or 3 

7 + m or 3 


r 

JCXZ = Jump on CX Zero 

1 1 1 000 1 1 

1 

8-bit dispi . 1 

9 + m or 5 

9 + m or 5 


r 

JECXZ = Jump on ECX Zero 

1 1 1 000 1 1 

I 

1 

8-bit dispi 1 

9 -f m or 5 

9 + m or 5 


r 

(Address Size Prefix Differentiates JCXZ from JECXZ) 







LOOP = Loop CX Times 

1 1 1 000 1 0 

I 

8-bit dispi 1 

11 + m 

11 + m 


r 

LOOPZ/LOOPE = Loop with 


T" 

1 





Zero/Equal 

1 1 1 00001 

I 

8-bit dispi 1 

11 + m 

11 + m 


r 

LOOPNZ/LOOPNE = Loop While 


T" 

1 





Not Zero 

1 1 1 00000 

I 

8-bit dispi 1 

11 + m 

11 + m 


r 

CONDITIONAL BYTE SET 








NOTE: Times Are Register/Memory 








SETO = Set Byte on Overflow 








To Register/Memory 

00001 1 1 1 

I 

1 0 01 0 0 0 0 1 mod 0 0 0 r/m j 

4/5 

4/5 


h 

SETNO = Set Byte on Not Overflow 








To Register/Memory 

00001 1 1 1 

I 

1 0 010 0 01 1 mod 0 0 0 r/m 1 

4/5 

4/5 


h 

SETB/SETNAE = Set Byte on Below/Not Above or Equal 






To Register/Memory 

00001 1 1 1 

1 

1 0 0 10 010 1 mod 0 0 0 r/m | 

4/5 

4/5 


h 
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Table 6-1. SSStm dX Instruction Set Clock Count Summary (Continued) 


INSTRUCTION 

FORMAT 

CLOCK COUNT 

NOTES 

Real 
Address 
Mode or 
Virtual 
8086 
Mode 

Protected 

Virtual 

Address 

Mode 

Real 
Address 
Mode or 
Virtual 
8086 
Mode 

Protected 

Virtual 

Address 

Mode 

CONDITIONAL BYTE SET (Continued) 






SETNB = Set Byte on Not Below/ Above or Equal 





To Register/Memory 

00001111 1 10010011 1 mod 0 0 0 r/m | 

4/5 

4/5 


h 

SETE/SETZ = Set Byte on Equal/Zero 






To Register/ Memory 

00001 1 1 1 1 10010100 ImodOOO r/m | 

4/5 

4/5 


h 

SETNE/SETNZ = Set Byte on Not Equal/Not Zero 





To Register/Memory 

00001 1 1 1 1 1 001 0101 ImodOOO r/m | 

4/5 

4/5 


h 

SETBE/SETNA = Set Byte on Below or Equal/Not Above 





To Register/Memory 

00001111 1 10010110 1 mod 0 0 0 r/m 1 

4/5 

4/5 


h 

SETNBE/SETA = Set Byte on Not Below or Equal/Above 





To Register/Memory 

00001111 1 10010111 1 mod 0 0 0 r/m | 

4/5 

4/5 


h 

SETS = Set Byte on Sign 





' 

To Register/ Memory 

00001 1 1 1 1 1 001 1000 ImodOOO r/m | 

4/5 

4/5 


h 

SETNS = Set Byte on Not Sign 






To Register/Memory 

00001111 1 10011001 1 mod 0 0 0 r/m | 

4/5 

4/5 


h 

SETP/SETPE = Set Byte on Parity/Parity Even 





To Register/Memory 

00001111 1 10011010 1 mod 0 0 0 r/m 1 

4/5 

4/5 


h 

SETNP/SETPO = Set Byte on Not Parity/Parity Odd 





To Register/ Memory 

00001111 1 10011011 1 mod 0 0 0 r/m | 

4/5 

4/5 


h 

SETL/SETNGE = Set Byte on Less/Not Greater or Equal 





To Register/ Memory 

00001111 1 10011100 1 mod 0 0 0 r/m | 

4/5 

4/5 


h 

SETNL/SETGE = Set Byte on Not Less/Greater or Equal 





To Register/Memory 

00001111 1 01111101 1 mod 0 0 0 r/m | 

4/5 

4/5 


h 

SETLE/SETNG = Set Byte on Less or Equal/Not Greater 





To Register/ Memory 

00001111 1 10011110 1 mod 0 0 0 r/m | 

4/5 

4/5 


h 

SETNLE/SETG = Set Byte on Not Less or Equal/Greater 





To Register/ Memory 

00001111 1 10011111 1 mod 0 0 0 r/m | 

4/5 

4/5 


h 

ENTER = Enter Procedure 

1 1 0 01 0 0 0 1 16-bit displacement, 8-bit level | 





o 

II 

_i 


10 

10 

b 

h 

L = 1 


12 

12 

b 

h 

L > 1 


15 -h 

15 + 

b 

h 



4(n - 1) 

4(n - 1) 



LEAVE = Leave Procedure 

11001001 1 

4 

4 

b 

h 
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CLOCK COUNT 

NOTES 


Real 


Real 


INSTRUCTION FORMAT 

Address 

Protected 

Address 

Protected 


Mode or 

Virtual 

Mode or 

Virtual 


Virtual 

Address 

Virtual 

Address 


8086 

Mode 

8086 

Mode 


Mode 


Mode 


INTERRUPT INSTRUCTIONS 





INT = Interrupt: 





Type Specified | 110 01101 [ type | 

37 


b 


Type 3 | 1 1 0 0 1 1 0 0 | 

33 


b 


INTO = Interrupt 4 If Overflow Flag Set | 1 1 0 0 1 1 1 0 | 





If OF = 1 

35 


b, e 


If OF = 0 

3 

3 

b, e 


Bound = Interrupt 5 if Detect Value | 01 1 0 0 01 0 | mod reg r/m j 

Out of Range 





If Out of Range 

44 


b, e 

e, g. h, i, k, r 

If In Range 

10 

10 

b, e 

e, g, h, j, k, r 

Protected Mode Only (INT) 





INT: Type Specified 





Via Interrupt or Trap Gate 
to Same Privilege Level 

Via Interrupt or Trap Gate 


59 


g.j. k.r 

to Different Privilege Level 


99 


g. j. k, r 

From 80286 Task to 80286 TSS via Task Gate 


282 


g, i. k, r 

From 80286 Task to 386tm DX TSS via Task Gate 


309 


g, i, k. r 

From 80286 Task to virt 8086 md via Task Gate 


226 


g. j, k, r 

From 386 TM DX Task to 80286 TSS via Task Gate 


284 


g, j. k, r 

From 386 TM DX Task to 386tm DX TSS via Task Gate 


311 


g. j. k, r 

From 386 TM DX Task to virt 8086 md via Task Gate 


228 


g. j. k, r 

From virt 8086 md to 80286 TSS via Task Gate 


289 


g, j. k. r 

From virt 8086 md to 386 ™ DX TSS via T ask Gate 


316 


g.j,k,r 

From virt 8086 md to priv level 0 via Trap Gate or Interrupt Gate 


119 



INT: TYPE 3 





Via Interrupt or Trap Gate 





to Same Privilege Level 


59 


g. ji k. •' 

Via Interrupt or Trap Gate 





to Different Privilege Level 


99 


g. j. k, r 

From 80286 Task to 80286 TSS via Task Gate 


278 


g.j. k,r 

From 80286 Task to 386TM dX TSS via Task Gate 


305 


g. j. k. r 

From 80286 Task to Virt 8086 md via Task Gate 


222 


g.j. k.r 

From 386™ DX Task to 80286 TSS via Task Gate 


280 


g.j. k.r 

From 386™ DX Task to 386™ DX TSS via Task Gate 


307 


g. j. k, r 

From 386 TM DX Task to Virt 8086 md via Task Gate 


224 


g. j. k. r 

From virt 8086 md to 80286 TSS via Task Gate 


285 


g. j. k, r 

From virt 8086 md to 386™ DX TSS via Task Gate 


312 


g.j. k,r 

From virt 8086 md to priv level 0 via Trap Gate or Interrupt Gate 


119 



INTO: 





Via Interrupt or Trap Grate 
to Same Privilege Level 

Via Interrupt or Trap Gate 


59 


g. j. k, r 

to Different Privilege Level 


99 


g.j. k.r 

From 80286 Task to 80286 TSS via Task Gate 


280 


g.j. k,r 

From 80286 Task to 386™ DX TSS via Task Gate 


307 


g.j.k.r 

From 80286 Task to virt 8086 md via Task Gate 


224 j 


g. j. k, r 

From 386TM DX Task to 80286 TSS via Task Gate 


282 


g. j. k, r 

From 386™ DX Task to 386™ DX TSS via Task Gate 


309 


g. j. k, r 

From 386 TM DX Gate 


225 


g. j. k, r 

From virt 8086 md to 80286 TSS via Task Gate 


287 


g. j. k, r 

From virt 8086 md to 386 tm DX TSS via T ask Gate 


314 


g. j. k, r 

From virt 8086 md to priv level 0 via Trap Gate or Interrupt Gate 


119 
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Table 6-1. 386tm DX Instruction Set Clock Count Summary (Continued) 


INSTRUCTION FORMAT 

CLOCK COUNT 

NOTES 

Real 
Address 
Mode or 
Virtual 
8086 
Mode 

Protected 

Virtual 

Address 

Mode 

Real 
Address 
Mode or 
Virtual 
8086 
Mode 

Protected 

Virtual 

Address 

Mode 

INTERRUPT INSTRUCTIONS (Continued) 





BOUND: 





Via Interrupt or Trap Gate 





to Same Privilege Level 


59 


g.j, k.r 

Via Interrupt or Trap Gate 





to Different Privilege Level 


99 


g. j. k. r 

From 80286 Task to 80286 TSS via Task Gate 


254 


g, i. k. r 

From 80286 Task to 386 tm DX TSS via Task Gate 


284 


g. j. k. r 

From 80268 Task to virt 8086 Mode via Task Gate 


231 


g. j. k. r 

From 386 TM DX Task to 80286 TSS via Task Gate 


264 


g.j. k.r 

From 386 TM DX Task to 386 tm dX TSS via Task Gate 


294 


g. j. k, r 

From 80368 Task to virt 8086 Mode via Task Gate 


243 


g. j. k, r, 

From virt 8086 Mode to 80286 TSS via Task Gate 


264 


g. j. k, r 

From virt 8086 Mode to 386 tm dX TSS via Task Gate 


294 


g. j. k, r 

From virt 8086 md to priv level 0 via Trap Gate or Interrupt Gate 


119 



INTERRUPT RETURN 





IRET = Interrupt Return | 110 01111 | 

22 



g. h, j, k, r 

Protected Mode Only (IRET) 





To the Same Privilege Level (within task) 


38 


g. h. j, k, r 

To Different Privilege Level (within task) 


82 


g. h, j, k, r 

From 80286 Task to 80286 TSS 


232 


h, j, k, r 

From 80286 Task to 386 tm dX TSS 


265 


h, j, k, r 

From 80286 Task to Virtual 8086 Task 


213 


h, j, k, r 

From 80286 Task to Virtual 8086 Mode (within task) 


60 



From 386 TM DX Task to 80286 TSS 


271 


h, j, k, r 

From 386 TM DX Task to 386 tm DX TSS 


275 


h, j, k, r 

From 386 TM DX Task to Virtual 8086 Task 


223 


h, j, k, r 

From 386 TM DX Task to Virtual 8086 Mode (within task) 


60 



PROCESSOR CONTROL 





HLT = HALT | 11110 10 0 | 

5 

5 


1 

MOV = Move to and From Control/Debug/Test Registers 





CR0/CR2/CR3 from register 1 0 0 0 01 1 1 1 | 0 01 0 0 010 | 1 1 eee reg 1 

11/4/5 

11/4/5 


1 

Register From CRO-3 | 00001111 | 00100000 | 11 eee reg | 

6 

6 


1 

DRO-3 From Register | 00001111 | 00100011 | 11 eee reg | 

22 

22 


1 

DR6-7 From Register j 00001111 | 00100011 | 11 eee reg | 

16 

16 


1 

Register from DR6-7 | 00001111 1 00100001 | 11 eee reg | 

14 

14 


1 

Register from DRO-3 | 00001111 | 00100001 | 11 eee reg J 

22 

22 


1 

TR6-7. from Register | 00 001 1 1 1 | 001001 10 j 11 eee reg | 

12 

12 


1 

Register from TR6-7 | 00001 1 1 1 | 00100100 [ lleeereg | 

12 

12 


1 

NOP = No Operation | 10 010 0 0 0 | 

3 

3 



WAIT = Wait untii BUSY# pin is negated | 10 011011 | 

7 

7 
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Table 6-1. 386 tm DX Instruction Set Clock Count Summary (Continued) 


inter 


INSTRUCTION 


PROCESSOR EXTENSION INSTRUCTIONS 

Processor Extension Escape | 1 1 0 1 1 T T T | mod L L L r/m | 

TTT and LLL bits are opcode 
information for coprocessor. 


PREFIX BYTES 
Address Size Prefix 
LOCK = Bus Lock Prefix 
Operand Size Prefix 
Segment Override Prefix 
CS: 



PROTECTION CONTROL 

ARPL = Adjust Requested Privile ge Level 

From Register/Memory | 01 1 0 0 01 1 | mod reg r/m | 

LAR = Load Access Rights 

From Register/ Memory | 00001111 | 00000010 | mod reg r/m | 

LGDT = Load Global Descriptor 

Table Register | 00001111 | 00000001 | mod 0 1 0 r/m] 

LIDT = Load Interrupt Descriptor 


Table Register 

LLDT = Load Local Descriptor 


Table Register to 

Register/Memory | 00001111 | 00000000 { mod 010 r/m j 

LMSW = Load Machine Status Word 

From Register/Memory } 00001111 | 00000001 | mod 110 r/iril 

LSL = Load Segment Limit 

From Register/Memory | 00001111 | 00000011 | mod reg r/m | 

Byte-Granular Limit 
Page-Granular Limit 

LTR = Load Task Register 

From Register/Memory | 00001111 | 00000000 | mod 0 0 1 r/m | 

SGDT = Store Global Descriptor 

Table Register | 00001111 | 00000001 | mod 0 0 0 r/m] 

SIDT = Store Interrupt Descriptor 

Table Register | 00001111 | 00000001 | mod 0 0 1 r/riTl 

SLDT = Store Local Descriptor T able Register 

To Register/Memory \ 00001111 | 00000000 | mod 00 0 r/f^ 


CLOCK COUNT | 

NOTES 1 

Real 


Real 


Address 

Protected 

Address 

Protected 

Mode or 

Virtual 

Mode or 

Virtual 

Virtual 

Address 

Virtual 

Address 

8086 

Mode 

8086 

Mode 

Mode 


Mode 


See 

80287/80387 

data sheets for 

clock counts 



h 

0 

0 



0 

0 


m 

0 

0 



0 

0 



0 

0 



0 

0 



0 

0 



0 

0 



0 

0 



N/A 

20/21 

a 

h 

N/A 

15/16 

a 

g. h. i- P 

11 

11 

b, c 

h,l 

11 

11 

u, c 

h, i 

N/A 

20/24 

a 

g.h.j.i 

11/14 

11/14 

b, c 

h.l 

N/A 

21/22 

a 

g, h, i, p 

N/A 

25/26 

a 

g. h. i. p 

N/A 

23/27 

a 

g. h, 1. 1 

9 

9 

b, c 

h 

9 

9 

b, c 

h 

N/A 

2/2 

a 

h 
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Table 6-1. dX Instruction Set Clock Count Summary (Continued) 








CLOCK COUNT 

NOTES 

INSTRUCTION 

FORMAT 




Reai 
Address 
Mode or 
Virtual 
8086 
Mode 

Protected 

Virtual 

Address 

Mode 

Real 
Address 
Mode or 
Virtual 
8086 
Mode 

Protected 

Virtual 

Address 

Mode 

SMSW 

= Store Machine 

Status Word 

1 00001 1 1 1 

00000001 

I mod 10 0 

r/m 1 

2/2 

2/2 

b, c 

h.l 

STR 

= Store Task Register 

To Register/Memory 

I 00001 1 1 1 

I 00000000 

I mod 0 0 1 

r/m 1 

N/A 

2/2 

a 

h 

VERR 

= Verify Read Accesss 

Register/Memory 

1 00001111 

I 00000000 

1 mod 10 0 

r/m 1 

N/A 

10/11 

a 

g. h. i, P 

VERW 

= Verify Write Accesss 

I 00001 1 1 1 

I 00000000 

1 mod 1 0 1 

r/m 1 

N/A 

15/16 

a 

g. h.j.p 


INSTRUCTION NOTES FOR TABLE 6-1 

Notes a through c apply to 386 DX Real Address Mode only: 

a. This is a Protected Mode instruction. Attempted execution in Real Mode will result in exception 6 (invalid opcode). 

b. Exception 13 fault (general protection) will occur in Real Mode if an operand reference is made that partially or fully 
extends beyond the maximum CS, DS, ES, FS or GS limit, FFFFH. Exception 1 2 fault (stack segment limit violation or not 
present) will occur in Real Mode if an operand reference is made that partially or fully extends beyond the maximum SS limit. 

c. This instruction may be executed in Real Mode. In Real Mode, its purpose is primarily to initialize the CPU for Protected 
Mode. 

Notes d through g apply to 386 DX Real Address Mode and 386 DX Protected Virtual Address Mode: 

d. The 386 DX uses an early-out multiply algorithm. The actual number of clocks depends on the position of the most 
significant bit in the operand (multiplier). 

Clock counts given are minimum to maximum. To calculate actual clocks use the following formula; 

Actual Clock = if m < >0 then max ([log 2 |m|], 3) + b clocks: 

if m = 0 then 3 + b clocks 
In this formula, m is the multiplier, and 
b = 9 for register to register, 
b = 1 2 for memory to register, 
b = 1 0 for register with immediate to register, 
b = 1 1 for memory with immediate to register. 

e. An exception may occur, depending on the value of the operand. 

f. LOCK# is automatically asserted, regardless of the presence or absence of the LOCK# prefix. 

g. LOCK# is asserted during descriptor table accesses. 

Notes h through r apply to 386 DX Protected Virtual Address Mode only: 

h. Exception 13 fault (general protection violation) will occur if the memory operand in CS, DS, ES, FS or GS cannot be used 
due to either a segment limit violation or access rights violation. If a stack limit is violated, an exception 1 2 (stack segment 
limit violation or not present) occurs. 

i. For segment load operations, the CPL, RPL, and DPL must agree with the privilege rules to avoid an exception 1 3 fault 
(general protection violation). The segment’s descriptor must indicate “present” or exception 1 1 (CS, DS, ES, FS, GS not 
present). If the SS register is loaded and a stack segment not present Is detected, an exception 12 (stack segment limit 
violation or not present) occurs. 

j. All segment descriptor accesses in the GDT or LDT made by this instruction will automatically assert LOCK# to maintain 
descriptor integrity in multiprocessor systems. 

k. JMP, CALL, INT, RET and IRET instructions referring to another code segment will cause an exception 13 (general 
protection violation) if an applicable privilege rule is violated. 

l. An exception 1 3 fault occurs if CPL is greater than 0 (0 is the most privileged level). 

m. An exception 1 3 fault occurs If CPL is greater than lOPL. 

n. The IF bit of the flag register is not updated if CPL is greater than lOPL. The lOPL and VM fields of the flag register are 
updated only if CPL = 0. 

o. The PE bit of the MSW (CRO) cannot be reset by this Instruction. Use MOV into CRO if desiring to reset the PE bit. 

p. Any violation of privilege rules as applied to the selector operand does not cause a protection exception; rather, the zero 
flag is cleared. 

q. If the coprocessor’s memory operand violates a segment limit or segment access rights, an exception 13 fault (general 
protection exception) will occur before the ESC instruction is executed. An exception 1 2 fault (stack segment limit violation 
or not present) will occur if the stack limit is violated by the operand’s starting address. 

r. The destination of a JMP, CALL, INT, RET or IRET must be in the defined limit of a code segment or an exception 13 fault 
(general protection violation) will occur. 
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int^ 


6.2 INSTRUCTION ENCODING 
6.2.1 Overview 

All instruction encodings are subsets of the general 
instruction format shown in Figure 6-1. Instructions 
consist of one or two primary opcode bytes, possibly 
an address specifier consisting of the “mod r/m” 
byte and “scaled index” byte, a displacement if re- 
quired, and an immediate data field If required. 

Within the primary opcode or opcodes, smaller en- 
coding fields may be defined. These fields vary ac- 
cording to the class of operation. The fields define 
such information as direction of the operation, size 
of the displacements, register encoding, or sign ex- 
tension. 

Almost all instructions referring to an operand in 
memory have an addressing mode byte following 
the primary opcode byte(s). This byte, the mod r/m 
byte, specifies the address mode to be used. Certain 


encodings of the mod r/m byte indicate a second 
addressing byte, the scale-index-base byte, follows 
the mod r/m byte to fully specify the addressing 
mode. 

Addressing modes can Include a displacement im- 
mediately following the mod r/m byte, or scaled in- 
dex byte. If a displacement is present, the possible 
sizes are 8, 1 6 or 32 bits. 

If the Instruction specifies an immediate operand, 
the Immediate operand follows any displacement 
bytes. The Immediate operand. If specified, is always 
the last field of the instruction. 

Figure 6-1 illustrates several of the fields that can 
appear in an Instruction, such as the mod field and 
the r/m field, but the Figure does not show all fields. 
Several smaller fields also appear in certain Instruc- 
tions, sometimes within the opcode bytes them- 
selves. Table 6-2 is a complete list of all fields ap- 
pearing In the 386 DX instruction set. Further ahead, 
following Table 6-2, are detailed tables for each 
field. 


TTTTTTTT 

TTTTTTTT 

modTTT r/m 

ss index base 


d32 16 8 none data32 16 8 none 




0 7 


3kL 


6 5 3 


33 ^ 


6 5 3 2 0 






opcode 

(one or two bytes) 
(T represents an 
opcode bit.) 


“mod r/m” “s-i-b” 

byte byte ^ 

' ' '"V' 

register and address 
mode specifier 


address 
displacement 
(4, 2, 1 bytes 
or none) 


immediate 

data 

(4, 2, 1 bytes 
or none) 


Figure 6-1. Genercti iiis»tiUCtlOii rCfiiiat 


Table 6-2. Fields within SSStm dx Instructions 


Field Name 

Description 

Number of Bits 

w 

Specifies if Data Is Byte or Full Size (Full Size is either 1 6 or 32 Bits 

1 

d 

Specifies Direction of Data Operation 

1 

s 

Specifies if an Immediate Data Field Must be Sign-Extended 

1 

reg 

General Register Specifier 

3 

mod r/m 

Address Mode Specifier (Effective Address can be a General Register) 

2 for mod; 

3 for r/m 

ss 

Scale Factor for Scaled Index Address Mode 

2 

index 

General Register to be used as Index Register 

3 

base 

General Register to be used as Base Register 

3 

sreg2 

Segment Register Specifier for CS, SS, DS, ES 

2 

sreg3 

Segment Register Specifier for CS, SS, DS, ES, FS, GS 

3 

tttn 

For Conditional Instructions, Specifies a Condition Asserted 



or a Condition Negated 

4 


Note: Table 6-1 shows encoding of individual instructions. 
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6.2.2 32-Bit Extensions of the 
instruction Set 

With the 386 DX, the 8086/80186/80286 instruction 
set is extended in two orthogonal directions: 32-bit 
forms of all 16-bit instructions are added to support 
the 32-bit data types, and 32-bit addressing modes 
are made available for all instructions referencing 
memory. This orthogonal instruction set extension is 
accomplished having a Default (D) bit in the code 
segment descriptor, and by having 2 prefixes to the 
instruction set. 

Whether the instruction defaults to operations of 16 
bits or 32 bits depends on the setting of the D bit in 
the code segment descriptor, which gives the de- 
fault length (either 32 bits or 1 6 bits) for both oper- 
ands and effective addresses when executing that 
code segment. In the Real Address Mode or Virtual 
8086 Mode, no code segment descriptors are used, 
but a D value of 0 is assumed internally by the 386 
DX when operating in those modes (for 16-bit de- 
fault sizes compatible with the 8086/80186/80286). 

Two prefixes, the Operand Size Prefix and the Effec- 
tive Address Size Prefix, allow overriding individually 
the Default selection of operand size and effective 
address size. These prefixes may precede any op- 
code bytes and affect only the instruction they pre- 
cede. If necessary, one or both of the prefixes may 
be placed before the opcode bytes. The presence of 
the Operand Size Prefix and the Effective Address 
Prefix will toggle the operand size or the effective 
address size, respectively, to the value “opposite” 
from the Default setting. For example, if the default 
operand size is for 32-bit data operations, then pres- 
ence of the Operand Size Prefix toggles the instruc- 
tion to 16-bit data operation. As another example, if 
the default effective address size is 16 bits, pres- 
ence of the Effective Address Size prefix toggles the 
instruction to use 32-bit effective address computa- 
tions. 

These 32-bit extensions are available in all 386 DX 
modes, including the Real Address Mode or the Vir- 
tual 8086 Mode. In these modes the default is al- 
ways 16 bits, so prefixes are needed to specify 32- 
bit operands or addresses. For instructions with 
more than one prefix, the order of prefixes Is unim- 
portant. 

Unless specified otherwise, instructions with 8-bit 
and 16-bit operands do not affect the contents of 
the high-order bits of the extended registers. 

6.2.3 Encoding of Instruction Fields 

Within the instruction are several fields indicating 
register selection, addressing mode and so on. The 
exact encodings of these fields are defined immedi- 
ately ahead. 


6.2.3.1 ENCODING OF OPERAND LENGTH (w) 
FIELD 

For any given instruction performing a data opera- 
tion, the instruction is executing as a 32-bit operation 
or a 16-bit operation. Within the constraints of the 
operation size, the w field encodes the operand size 
as either one byte or the full operation size, as 
shown in the table below. 



Operand Size 

Operand Size 

w Field 

During 16-Bit 

During 32-Bit 


Data Operations 

Data Operations 

0 

8 Bits 

8 Bits 

1 

1 6 Bits 

32 Bits 


6.2.3.2 ENCODING OF THE GENERAL 
REGISTER (reg) FIELD 

The general register is specified by the reg field, 
which may appear In the primary opcode bytes, or as 
the reg field of the “mod r/m” byte, or as the r/m 
field of the “mod r/m” byte. 


Encoding of reg Field When w Field 
is not Present in Instruction 


reg Field 

Register Selected 
During 16-Bit 
Data Operations 

Register Selected 
During 32-Bit 
Data Operations 

000 

AX 

EAX 

001 

CX 

ECX 

010 

DX 

EDX 

oil 

BX 

EBX 

100 

SP 

ESP 

101 

BP 

EBP 

110 

SI 

ESI 

111 

Dl 

EDI 


Encoding of reg Field When w Field 
is Present in Instruction 


Register Specified by reg Field 

During 16-Bit Data Operations: 

reg 

Function of w Field 

(when w = 0) 

(when w = 1) 

000 

AL 

AX 

001 

CL 

CX 

010 

DL 

. DX 

oil 

BL 

BX 

100 

AH 

SP 

101 

CH 

BP 

110 

DH 

SI 

111 

BH 

Dl 
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Register Specified by reg Fieid 

During 32-Bit Data Operations 

reg 

Function of w Fieid 

(when w = 0) 

(when w = 1) 

000 

AL 

EAX 

001 

CL 

ECX 

010 

DL 

EDX 

oil 

BL 

EBX 

100 

AH 

ESP 

101 

CH 

EBP 

110 

DH 

ESI 

111 

BH 

EDI 


6.2.3.3 ENCODING OF THE SEGMENT 
REGISTER (sreg) FIELD 

The sreg field in certain instructions is a 2-bit field 
allowing one of the four 80286 segment registers to 
be specified. The sreg field in other instructions is a 
3-bit field, allowing the 386 DX FS and GS segment 
registers to be specified. 


2-Bit sreg2 Field 


2-Bit 

sreg2 Fieid 

Segment 

Register 

Seiected 

00 

ES 

01 

CS 

10 

SS 

11 

DS 


3-Bit sre<^3 Field 


3-Bii 

sreg3 Fieid 

Segment 

Register 

Seiected 

000 

ES 

001 

CS 

010 

SS 

oil 

DS 

100 

FS 

101 

GS 

110 

do not use 

111 

do not use 


6.2.3.4 ENCODING OF ADDRESS MODE 

Except for special instructions, such as PUSH or 
POP, where the addressing mode is pre-determined, 
the addressing mode for the current Instruction Is 
specified by addressing bytes following the primary 
opcode. The primary addressing byte is the “mod 
r/m” byte, and a second byte of addressing informa- 
tion, the “s-l-b” (scale-index-base) byte, can be 
specified. 

The s-i-b byte (scale-index-base byte) is specified 
when using 32-bit addressing mode and the “mod 
r/m“ byte has r/m = 100 and mod = 00, 01 or 10. 
When the sib byte Is present, the 32-bit addressing 
mode Is a function of the mod, ss, Index, and base 
fields. 

The primary addressing byte, the “mod r/m“ byte, 
also contains three bits (shown as TTT In Figure 6-1) 
sometimes used as an extension of the primary op- 
code. The three bits, however, may also be used as 
a register field (reg). 

When calculating an effective address, either 16-bit 
addressing or 32-bit addressing is used. 16-blt ad- 
dressing uses 16-blt address components to calcu- 
late the effective address while 32-blt addressing 
uses 32-bit address components to calculate the ef- 
fective address. When 1 6-bit addressing Is used, the 
“mod r/m” byte Is Interpreted as a 1 6-bit addressing 
mode specifier. When 32-bit addressing is used, the 
“mod r/m” byte is Interpreted as a 32-bit addressing 
mode specifier. 

Tables on the following three pages define all en- 
codings of all 16-bit addressing modes and 32-bit 
addressina modes. 
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Encoding of 16-bit Address Mode with “mod r/m” Byte 


mod r/m 

Effective Address 

10 000 

DS;[BX + SI + d16] 

10 001 

DS:[BX+DI + d16] 

10010 

SS;[BP+SI + d16] 

10011 

SS;[BP + DI + d16] 

10 100 

DS;[SI + d16] 

10101 

DS:[Dl + d16] 

10110 

SS:[BP+d16] 

10111 

DS:[BX + d16] 

11 000 

register — see below 

11 001 

register— see below 

11 010 

register— see below 

11 oil 

register— see below 

11 100 

register— see below 

11,101 

register — see below 

11110 

register— see below 

11 111 

register — see below 


mod r/m 

Effective Address 

00 000 

DS:[BX + SI] 

00 001 

DS:[BX + DI] 

00010 

SS:[BP + SI] 

00 011 

SS;[BP+D1] 

00 100 

DS:[SI] 

00 101 

DS:[DI] 

00 110 

DS:d16 

00111 

DS:[BX] 

01 000 

DS:[BX + SI + d8] 

01 001 

DS:[BX + DI + d8] 

01 010 

SS:[BP + SI + d8] 

01 oil 

SS:[BP + DI + d8] 

01 100 

DS:[SI + d8] 

01 101 

DS:[DI + d8] 

01 110 

SS:[BP + d8] 

01 111 

DS:[BX + d8] 


Register Specified by r/m 

During 16-Bit Data Operations 

mod r/m 

Function of w Field 

(when w = 0) 

(when w = 1) 

11 000 

AL 

AX 

11 001 

CL 

CX 

11 010 

DL 

DX 

11 oil 

BL 

BX 

11 100 

AH 

SP 

11 101 

CH 

BP 

11 110 

DH 

SI 

11 111 

BH 

Dl 


Register Specified by r/m 

During 32-Bit Data Operations 

mod r/m 

Function of w Field 

(when w = 0) 

(when w = 1) 

11 000 

AL 

EAX 

11 001 

CL 

ECX 

11 010 

DL 

EDX 

11 oil 

BL 

EBX 

11 100 

AH 

ESP 

11 101 

CH 

EBP 

11 110 

DH 

ESI 

11 111 

BH 

EDI 
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Encoding of 32-bit Address Mode with “mod r/m” byte (no “s-i-b” byte present): 


mod r/m 

Effective Address 

00 000 

DS;[EAX1 

00 001 

DS:[ECX] 

00 010 

DS:[EDX] 

00 011 

DS:[EBX] 

00 100 

s-i-b is present 

00 101 

DS:d32 

00 110 

DS:[ESI] , 

00111 

DS:[EDI] 

01 000 

DS:[EAX + d8] 

01 001 

DS;[ECX + d8] 

01 010 

DS:[EDX + d8l 

. 01011 

DS:[EBX+d8] 

01 100 

s-i-b is present 

01 101 

SS;[EBP-fd8] 

01 110 

DS;[ESH-d8l 

01 111 

DS:[EDi-t-d8] 


mod r/m 

Effective Address 

10 000 

DS:[EAX-i-d32] 

10 001 

DS:[ECX-i-d32l 

10010 

DS:[EDX+d32] 

10011 

DS:[EBX-l-d32] 

10 100 

S-i-b is present 

10101 

SS:[EBP + d32l 

10110 

DS:[ESi-t-d32] 

10111 

DS:[EDH-d32] 

11 000 

register — see below 

11 001 

register — see below 

11 010 

register — see below 

11 oil 

register — see below 

11100 

register — see below 

11 101 

register— see below 

11 110 

register — see below 

11 111 

register — see below 


Register Specified by reg or r/m 
during 16-Bit Data Operations: 

mod r/m 

function of w field 

(when w = 0) 

(when w= 1) 


11 000 

AL 

AX 

11 001 

CL 

CX 

11 010 

DL 

DX 

11 oil 

BL 

BX 

11 100 

AH 

SP 

11 101 

CH 

BP 

11 110 

DH 

SI 

11 111 

BH 

Dl 


Register Specified by reg or r/m 

during 32-Bit Data Operations: 

mod r/m 

function of w field 

(when w==0) 

(when w= 1) 

11 000 

AL 

EAX 

11 001 

CL 

ECX 

11 010 

DL 

EDX 

11 oil 

BL 

EBX 

11 100 

AH 

ESP 

11 101 

CH 

EBP 

11 110 

DH 

ESI 

11 111 

BH 

EDI 
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Encoding of 32-bit Address Mode (“mod r/m” byte and “s-i-b” byte present): 


mod base 

Effective Address 

00 000 

DS:[EAX + (scaled index)] 

00 001 

DS;[ECX + (scaled index)] 

00 010 

DS:[EDX + (scaled index)] 

00 011 

DS:[EBX + (scaled index)] 

00 100 

SS:[ESP + (scaled index)] 

00101 

DS:[d32 + (scaled index)] 

00 110 

DS:[ESI + (scaled index)] 

00111 

DS:[EDI + (scaled index)] 

01 000 

DS:[EAX + (scaled index) + d8] 

01 001 

DS:[ECX + (scaled index) + d8] 

01 010 

DS:[EDX + (scaled index) + d8] 

01 oil 

DS:[EBX + (scaled index) + d8] 

01 100 

SS:[ESP + (scaled index) + d8] 

01 101 

SS:[EBP + (scaled index) + d8] 

01 110 

DS:[ESI + (scaled index) + d8] 

01 111 

DS:[EDI + (scaled index) + d8] 

10 000 

DS:[EAX + (scaled index) + d32] 

10 001 

DS:[ECX + (scaled index) + d32] 

10 010 

DS:[EDX + (scaled index) + d32] 

10011 

DS:[EBX + (scaled index) + d32] 

10 100 

SS:[ESP + (scaled index) + d32] 

10 101 

SS:[EBP + (scaled index) + d32] 

10110 

DS:[ESI + (scaled index) + d32] 

10111 

DS:[EDI + (scaled index) + d32] 


NOTE: 

Mod field in “mod r/m” byte; ss, index, base fields In 
“s-i-b” byte. 


ss 

Scale Factor 

00 

Xl 

01 

x2 

10 

x4 

11 

x8 


index 

Index Register 

000 

EAX 

001 

ECX 

010 

EDX 

oil 

EBX 

100 

no index reg** 

101 

EBP 

110 

ESI 

111 

EDI 


♦^IMPORTANT NOTE: 

When index field is 100, indicating “no index register,” then 
ss field MUST equal 00. If index is 100 and ss does not 
equal 00, the effective address is undefined. 
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6.2.3.5 ENCODING OF OPERATION DIRECTION 
(d) FIELD 


In many two-operand instructions the d field is pres- 
ent to indicate which operand is considered the 
source and which is the destination. 


d 

Direction of Operation 

0 

Register/Memory <- - Register 
“reg” Field Indicates Source Operand; 

“mod r/m“ or “mod ss Index base” Indicates 
Destination Operand 

1 

Register <- - Register/ Memory 
“reg” Field Indicates Destination Operand; 
“mod r/m” or “mod ss Index base” Indicates 
Source Operand 


6.2.3.6 ENCODING OF SIGN-EXTEND (s) FIELD 

The s field occurs primarily to Instructions with Im- 
mediate data fields. The s field has an effect only if 
the size of the immediate data Is 8 bits and is being 
placed in a 1 6-blt or 32-bit destination. 



Effect on 

Effect on 

s 

immediate DataS 

Immediate Data 16|32 

0 

None 

None 

1 

Sign-Extend Data8 to Fill 

1 6-Bit or 32-Bit Destination 

None 


6.2.3.7 ENCODING OF CONDITIONAL TEST 
(tttn) FIELD 

For the conditional instructions (conditional jumps 
and set on condition), tttn is encoded with n indicat- 
ing to use the condition (n = 0) or its negation (n = 1), 
and ttt giving the condition to test. 


Mnemonic 

Condition 

tttn 

0 

Overflow 

0000 

NO 

No Overflow 

0001 

B/NAE 

Below/ Not Above or Equal 

0010 

NB/AE 

Not Below/Above or Equal 

0011 

E/Z 

Equal/Zero 

0100 

NE/NZ 

Not Equal/Not Zero 

0101 

BE/NA 

Below or Equal/ Not Above 

0110 

NBE/A 

Not Below or Equal/Above 

0111 

S 

Sign 

1000 

NS 

Not Sign 

1001 

P/PE 

Parity/ Parity Even 

1010 

NP/PO 

Not Parity/ Parity Odd 

1011 

L/NGE 

Less Than/Not Greater or Equal 

1100 

NL/GE 

Not Less Than/Greater or Equal 

1101 

LE/NG 

Less Than or Equal/Greater Than 

1110 

NLE/G 

Not Less or Equal/Greater Than 

1111 


6.2.3.8 ENCODING OF CONTROL OR DEBUG 
OR TEST REGISTER (eee) FIELD 

For the loading and storing of the Control, Debug 
and Test registers. 


When Interpreted as Control Register Field 


eee Code 

Reg Name 

000 


CRO 

010 


CR2 

oil 


CR3 

Do not use any other encoding 


When Interpreted as Debug Register Field 


eee Code 

Reg Name 

rvnrk 

r\Dr\ 

u/| l\J 

001 

DR1 

010 

DR2 

oil 

DR3 

110 

DR6 

111 

DR7 

Do not use any other encoding 


When Interpreted as Test Register Field 


eee Code 

Reg Name 

110 


TR6 

111 


TR7 

Do not use any other encoding 
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Figure 7-1. Processor Module Dimensions 


7. DESIGNING FOR ICETM-386 DX 
EMULATOR USE 

The 386 DX in-circuit emulator products are ICE-386 
DX 25 MHz or 33 MHz (both referred to as ICE-386 
DX emulator). The ICE-386 DX emulator probe mod- 
ule has several electrical and mechanical character- 
istics that should be taken into consideration when 
designing the hardware. 

Capacitive loading: The ICE-386 DX emulator adds 
up to 25 pF to each line. 

Drive requirement; The ICE-386 DX emulator adds 
one standard TTL load on the CLK2 line, up to one 
advanced low-power Schottky TTL load per control 
signal line, and one advanced low-power Schottky 
TTL load per address, byte enable, and data line. 
These loads are within the probe module and are 
driven by the probe’s 386 DX component, which has 
standard drive and loading capability listed in the 
A.C. and D.C. Specification Tables in Sections 9.4 
and 9.5. 

Power requirement: For noise immunity the ICE- 
386 DX emulator probe is powered by the user sys- 
tem. This high-speed probe circuitry draws up to 
1 .5A plus the maximum Ice ^rom the user 386 DX 
component socket. 


386 DX location and orientation: The ICE-386 DX 
processor module, target-adaptor cable (which does 
not exist for the ICE-386 DX 33 MHz emulator), and 
the isolation board used for extra electrical buffering 
of the emulator initially, require clearance as illustrat- 
ed in Figures 7-1 and 7-2. 

Interface Board and CLK2 speed reduction: 

When the ICE-386 DX emulator probe is first at- 
tached to an unverified user system, the interface 
board helps the ICE-386 DX emulator function in 
user systems with bus faults (shorted signals, etc.). 
After electrical verification it may be removed. Only 
when the Interface board Is installed, the user sys- 
tem must have a reduced CLK2 frequency of 25 
MHz maximum. 

Cache coherence: The ICE-386 DX emulator loads 
user memory by performing 386 DX component 
write cycles. Note that if the user system is not de- 
signed to update or invalidate its cache (If it has a 
cache) upon processor writes to memory, the cache 
could contain stale Instruction code and/or data. For 
best use of the ICE-386 DX emulator, the user 
should consider designing the. cache (if any) to up- 
date itself automatically when processor writes oc- 
cur, or find another method of maintaining cache 
data coherence with main user memory. 
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Figure 7-2. Processor Module, Target- Adapter Cable, and Isolation Board Dimensions 
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8. MECHANICAL DATA 
8.1 INTRODUCTION 

In this section, the physical packaging and its con- 
nections are described in detail. 


8.2 PACKAGE DIMENSIONS AND 
MOUNTING 

The initial 386 DX package is a 132-pin ceramic pin 
grid array (PGA). Pins of this package are arranged 
0.100 inch (2.54mm) center-to-center, in a 14 x 14 
matrix, three rows around. 

A wide variety of available sockets allow low inser- 
tion force or zero insertion force mountings, and a 
choice of terminals such as soldertail, surface 
mount, or wire wrap. Several applicable sockets are 
listed in Table 8.1. 


CS) 00 K? 


o> ^ 


K> u> 


K) to 00 ^ -r- 


E 


PIN #1 POSITION 


Ttf® 




I in in 


in in in CN| 


®0 

0® 


0:0 0 


4 ) 0 0 0 0 0 
0 0 0 0 0 0 
0 0 (§) 0 0 0 
0 0 0*^ 

0 0 0 
000 
0 0 0 
000 
0 0 0 
0 0 0 
0 0 0 
0 0 0 0 0 0 0l0 0 
0 0 0 0 0 0 
0 0 0 0 0 0 




000 
000 
0 0 
000 
0 0 0 
0 0 0 
000 
00 0 
000 
0 0 0 
000 
€ 1 .0 0 
000 
000 


.725 (18.401) 

.650 (16.497) 

.550 (13.959) 

.450 (11.421) 

.350 (8.883) 

.250 (6.345) 

50 (3.807) 

.050 (1.269) 
— 0 


G H 


C D E F 
'-.020(0.508) 

MIN TYP 

- .070(1,777) DIA 
TYP BRAZE PAD 
1 .450 (36.802) - 


K L 


MNP 
.020 -< 
(0.508) 


.057(1.269) 
MAX TYP 


SWEDGE PIN 
STANDOFF 
(4) PLACES 


.001 (0.025) R 
MIN TYP 


.018(0.47) -| 
DIA TYP i 



.165(4.189) - 


.110(2.792) ■ 


Figure 8.1. 132-Pin Ceramic PGA Package Dimensions 
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Table 8.1, Several Socket Options for 132-Pin PGA 


* Low insertion force (LIF) soldertail 
55274-1 

* Amp tests indicate 50% reduction in insertion 
force compared to machined sockets 

Other socket options 

* Zero insertion force (ZIF) soldertail 
55583-1 

* Zero insertion force (ZIF) Burn-in version 
55573-2 

Amp Incorporated 

(Harrisburg, PA 17105 U.S.A. 

Phone 717-564-0100) 



231630-45 

Cam handle locks in low profile position when substrate is installed (handle UP for 
open and DOWN for closed positions) 

courtesy Amp Incorporated 


Peel-A-WayTM Mylar and Kapton 

Socket Terminal Carriers 

* Low insertion force surface 
mount CS132-37TG 

* Low insertion force soldertail 
CS132-01TG 

* Low insertion force wire-wrap 
CS132-02TG (two level) 
CS132-03TG (three-level) 

* Low insertion force press-fit 
CS132-05TG 


Advanced Interconnections 

(5 Division Street 
Warwick, Rl 02818 U.S.A. 


Peel-A-Way Carrier No. 132; 
Kapton Carrier is KS132 
Mylar Carrier is MSI 32 

Molded Plastic Body KS132 
is shown below: 


FOOT PRINT NO. 132 


1.400 SO ^ 



H h .100 TYP 
14 X 14 X 3 ROWS 


231630-46 



231630-47 

courtesy Advanced Interconnections 
(Peel-A-Way Terminal Carriers 
U.S. Patent No. 4442938) 
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Table 8.1. Several Socket Options for 132-Pin PGA (Continued) 


PIN GRID ARRAY 

DECOUPLING SOCKETS 

* Low insertion force soldertail 
0.125 length PGD-005-1A1 
Finish: Term/Contact Tin- 
Lead/Gold 

* Low insertion force soldertail 
0.180 length PGD-005-1B1 
Finish: Term/Contact: Tin- 
Lead/Gold 

* Low insertion 3 level Wire/ 
Wrap PGD-005-1C1 Finish: 
Term/Contact Tin-Lead/Gold 


VisinPak Kapton Carrier 

PKC Series 

Pin Grid Array 

PGM (Plastic) or PPS 
(Glass Epoxy) Series 


Includes 0.10 }if & 1.0 fxF 
Decoupling Capacitors 


A: Soldertail B: Soldertail 


0.166 


1 ^ 1 ;=^ 


0.166 


0.125 


0.180 


- 0.020 


- 0.020 


AUGAT INC. 

33 Perry Ave., P.O. Box 779 Attleboro. MA 02703 
TECHNICAL INFORMATION: (508) 222-2202 
CUSTOMER SERVICE: (508) 699-9800 


C: Soldertail 


0.193 


0.510 


qV..: 


.25 SO. 


_1 .450 ±0.020 
(SQUARE) 


oooooooooooooo 

888 88 ®' 

ooo oc _ 

ooo ooo 

888®'nc. 888 

OOO ooo 

ooo ooo 

oooooooooooooo 

OOOOOOOOOOOOQ* 

O ooooooooooooo 

-Ik 0.100TYP. 

231630-86 


* Low insertion force socket soldertail 
(for production use) 
2XX-6576-00-3308 (new style) 
2XX-6003-00-3302 (older style) 

* Zero insertion force soldertail 
(for test and burn-in use) 
2XX-6568-00-3302 

Textool Products 

Electronic Products Division/3M 
(1410 West Pioneer Drive 
Irving, Texas 75601 U.S.A. 

Phone 214-259-2676) 


• • 

TT 

I i 
i i 


u I I > I 

-M — ‘ 

t 

courtesy Textool Products/oL 231630-48 


•• o 
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8.3 PACKAGE THERMAL 
SPECIFICATION 

The 386 DX is specified for operation when case 
temperature is within the range of 0°C-85°C. The 
case temperature may be measured in any environ- 
ment, to determine whether the 386 DX is within 
specified operating range. 


The PGA case temperature should be measured at 
the center of the top surface opposite the pins, as in 
Figure 8.2. 



Table 8.2. 386 tm dx PGA Package Thermal Characteristics 


Thermal Resistance — X/Watt | 

Parameter 

Airflow — ft./min (m/sec) | 

0 

(0) 

50 

(0.25) 

100 

(0.50) 

200 

(1.01) 

400 

(2.03) 

600 

(3.04) 

800 

(4.06) 

0 Junction-to-Case 
(case measured 
as Fig. 6-4) 

2 

2 

2 

2 

2 


■ 

0 Case-to-Ambient 
(no heatsink) 

19 

18 

17 

15 

12 


H 

0 Case-to-Ambient 
(with omnidirectional 
heatsink) 

16 

15 

14 

12 

9 

7 

6 

0 Case-to-Ambient 
(with unidirectional 
heatsink) 

15 

14 

13 

11 

8 

6 

5 


NOTES: 

1. Table 8.2 applies to 386tm dX PGA 
plugged into socket or soldered directly 
into board. 

2. ^JA = ^JC + ^CA- 


3- ^J-CAP = 4'’C/w (approx.) 

^J-PIN = 4®C/w (inner pins) (approx.) 
^J-PIN = S^C/w (outer pins) (approx.) 


t ^Ja 


■HI 

m 

1 

muiai 

1 I 



231630-72 
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9. ELECTRICAL DATA 


9.1 INTRODUCTION 

The following sections describe recommended elec- 
trical connections for the 386 DX, and its electrical 
specifications. 


9.2 POWER AND GROUNDING 


9.2.1 Power Connections 

The 386 DX is implemented in CHMOS III and 
CHMOS IV technology and has modest power re- 
quirements. However, its high clock frequency and 
72 output buffers (address, data, control, and HLDA) 
can cause power surges as multiple output buffers 
drive new signal levels simultaneously. For clean on- 
chip power distribution at high frequency, 20 Vcc 
and 21 Vss P*ns separately feed functional units of 
the 386 DX. 

Power and ground connections must be made to all 
external Vcc and GND pins of the 386 DX. On the 
circuit board, all Vcc pins must be connected on a 
Vcc plane. All Vss pins must be likewise connected 
on a GND plane. 


9.2.2 Power Decoupling 
Recommendations 

Liberal decoupling capacitance should be placed 
near the 386 DX. The 386 DX driving its 32-bit paral- 
lel address and data buses at high frequencies can 
cause transient power surges, particularly when driv- 
ing large capacitive loads. 

Low Inductance capacitors and interconnects are 
recommended for best high frequency electrical per- 
formance. Inductance can be reduced by shortening 
circuit board traces between the 386 DX and 


decoupling capacitors as much as possible. Capaci- 
tors specifically for PGA packages are also commer- 
cially available, for the lowest possible inductance. 


9.2.3 Resistor Recommendations 

The ERROR# and BUSY# Inputs have resistor pull- 
ups of approximately 20 Kfi built-in to the 386 DX to 
keep these signals negated when no 387 DX co- 
processor is present in the system (or temporarily 
removed from its socket). The BS16# input also has 
an internal pullup resistor of approximately 20 KH, 
and the PEREQ input has an internal pulldown resis- 
tor of approximately 20 KH. 

In typical designs, the external pullup resistors 
shown in Table 9-1 are recommended. However, a 
particular design may have reason to adjust the re- 
sistor values recommended here, or alter the use of 
pullup resistors in other ways. 


9.2.4 Other Connection 
Recommendations 

For reliable operation, always connect unused in- 
puts to an appropriate signal level. N.C. pins should 
always remain unconnected. 

Particularly when not using interrupts or bus hold, 
(as when first prototyping, perhaps) prevent any 
chance of spurious activity by connecting these as- 
sociated inputs to GND: 


Pin 

Signal 

B7 

INTR 

B8 

NMI 

D14 

HOLD 


If not using address pipelining, pullup D13 NA# to 
Vcc- 

If not using 16-bit bus size, pullup Cl 4 BS16# to 
Vcc- 

Pullups in the range of 20 KH are recommended. 


Table 9-1. Recommended Resistor Pullups to Vcc 


Pin and Signal 

Pullup Value 

Purpose 

E14 ADS# 

20 Kft ±10% 

Lightly Pull ADS# Negated 

During 386 tm dX Hold 

Acknowledge States 

CIO LOCK# 

20 Kn ±10% 

Lightly Pull LOCK# Negated 

During 386 tm dX Hold 

Acknowledge States 
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Table 9-2 is a stress rating only, and functional oper- 
ation at the maximums is not guaranteed. Functional 
operating conditions are given in 9.4 D.C. Specifica- 
tions and 9.5 A.C. Specifications. 

Extended exposure to the Maximum Ratings may af- 
fect device reliability. Furthermore, although the 386 
DX contains protective circuitry to resist damage 
from static electric discharge, always take precau- 
tions to avoid high static voltages or electric fields. 


== 0“C to 85'’C 


Table 9-3. 386 tm dX D.C. Characteristics 




386TM DX 



Symbol 

Parameter 

20 MHz, 25 MHz, 

33 MHz 

Unit 

Test 

Conditions 



Min 

Max 



VlL 

Input Low Voltage 

-0.3 

0.8 

V 

(Note 1) 

V|H 

Input High Voltage 

2.0 

Vcc + 0.3 

V 


V|LC 

CLK2 Input Low Voltage 

-0.3 

0.8 

V 

(Note 1) 

V|HC 

CLK2 Input High Voltage 






20 MHz 

Vcc - 0.8 

Vcc + 0.3 

V 



25 MHz and 33 MHz 

3.7 

Vcc + 0.3 

V 


VoL 

Output Low Voltage 






lOL = 4 mA: A2-A31, D0-D31 


0.45 

V 



IOL = 5 mA: BE0#-BE3#, W/R#, 


0.45 

V 



D/C#, M/IO#, LOCK#, ADS#, HLDA 





Vqh 

Output High Voltage 






lOH = 1 mA:A2-A31,D0-D31 

2.4 


V 



lOH = 0.9 mA; BE0#-BE3#, W/R#, 

2.4 


V 



D/C#, M/IO#, LOCK#, ADS#, HLDA 





Ili 

Input Leakage Current 

(For All Pins except BS16#, PEREQ, 

BUSY#, and ERROR#) 


±15 

julA 

OV ^ V,N ^ Vcc 

l|H 

Input Leakage Current 
(PEREQ Pin) 


200 

jmA 

V|H = 2.4V (Note 2) 

l|L 

Input Leakage Current 

(BS16#, BUSY#, and ERROR# Pins) 


-400 

jllA 

V|L = 0.45 (Note 3) 

•lo 

Output Leakage Current 


±15 




Supply Current 






CLK2 = 40 MHz; with 20 MHz 386 TM DX 



mA 

Ice Typ. = 460 mA 


CLK2 = 50 MHz; with 25 MHz 386 TM dX 



mA 

Icc Typ. = 500 mA 

ilHH 

CLK2 = 66 MHz: with 33 MHz 386 tm DX 



mA 

Icc Typ. = 400 mA 

EHB 

Input or I/O Capacitance 


10 

PF 

Fc = 1 MHz (Note 4) 

COUT 

Output Capacitance 


12 

PF 

Fc = 1 MHz (Note 4) 

CCLK 

CLK2 Capacitance 


20 

pF 

Fc = 1 MHz (Note 4) 


NOTES: 

1. The min value, -0.3, is not 100% .tested. 

2. PEREQ input has an internal pulldown resistor. 

3. BS16#, BUSY# and ERROR# inputs each have an internal pullup resistor. 

4. Not 100% tested. 


9.3 MAXIMUM RATINGS 

Table 9-2. Maximum Ratings 


Parameter 

386 TM DX 

20, 25, 33 MHz 
Maximum Rating 

Storage Temperature 

Case Temperature Under Bias 
Supply Voltage with Respect to Vss 
Voltage on Other Pins 

-65°Cto ±150“C 

-65°Cto ±110'’C 

-0.5 V to +6.5V 
-0.5V to Vcc + 0.5V 


9.4 D.C. SPECIFICATIONS 

Functional Operating Range; Vcc 5V ±5%; Tcase 
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9.5 A.C. SPECIFICATIONS 


9.5.1 A.C. Spec Definitions 

The A.C. specifications, given in Tables 9-4, 9-5, and 
9-6, consist of output delays, input setup require- 
ments and input hold requirements. All A.C. specifi- 
cations are relative to the CLK2 rising edge crossing 
the 2.0V level. 

A.C. spec measurement is defined by Figure 9-1 . In- 
puts must be driven to the voltage levels indicated 
by Figure 9-1 when A.C. specifications are mea- 
sured. 386 DX output delays are specified with mini- 
mum and maximum limits, measured as shown. The 
minimum 386 DX delay times are hold times 


provided to' external circuitry. 386 DX input setup 
and hold times are specified as mlnimums, defining 
the smallest acceptable sampling window. Within 
the sampling window, a synchronous input signal 
must be stable for correct 386 DX operation. 

Outputs NA#, W/R#, D/C#, M/IO#, LOCK#, 
BE0#-BE3#, A2-A31 and HLDA only change at 
the beginning of phase one. D0-D31 (write cycles) 
only change at the beginning of phase two. The 
READY#, HOLD, BUSY#, ERROR#, PEREQ and 
D0-D31 (read cycles) inputs are sampled at the be- 
ginning of phase one. The NA#, BS16#, INTR and 
NMI Inputs are sampled at the beginning of phase 
two. 


Tx 



(D- MINIMUM OUTPUT DELAY SPEC. 

©- MINIMUM INPUT SETUP SPEC. 

©-MINIMUM INPUT HOLD SPEC. 

231630-37 

NOTES: 

1. Input waveforms have tr ^ 2.0 ns from 0.8V to 2.0V. 

2. See section 9.5.8 for typical output rise time versus load capacitance. 


Figure 9-1. Drive Leveis and Measurement Points for A.C. Specifications 
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9.5.2 A.C. Specification Tabies 

Functional Operating Range; Vcc = 5V ±5%; Tcase = to +85°C 


Table 9-4. 33 MHz 386 ™ DX A.C. Characteristics 


Symbol 

Parameter 

33 MHz 
386 TM DX 

Unit 

Ref. 

Fig. 

Notes 

Min 

Max 


Operating Frequency 

8 

33.3 

MHz 


Half of CLK2 Frequency 

t1 

CLK2 Period 






t2a 

CLK2 High Time 

6.25 


ns 

9-3 

at2V 

t2b 

CLK2 High Time 

4.5 


ns 

9-3 

at 3.7V 

t3a 

CLK2 Low Time 

6.25 


ns 

9-3 

at 2V 

t3b 

CLK2 Low Time 

4.5 


ns 

9-3 

at 0.8V 

t4 

CLK2 Fall Time 


4 

ns 

9-3 

3.7V to 0.8V (Note 3) 

t5 

CLK2 Rise Time 


4 

ns 

9-3 

0.8V to 3.7V (Note 3) 

t6 

A2-A31 Valid Delay 

4 

15 

ns 

9-5 

Cl = 50 pF 

t7 

A2-A31 Float Delay 

4 

20 

ns 

9-6 

(Notel) 

t8 

BE0#-BE3#. LOCK# Valid Delay 

4 

15 

ns 

9-5 

Cl = 50 pF 

t9 

BE0#-BE3#, LOCK# Float Delay 

4 

20 

ns 

9-6 

(Note 1) 

t10 

W/R#, M/IO#, D/C#, Valid Delay 

4 

15 

ns 

9-5 

Cl = 50 pF 

t10a 

ADS# Valid Delay 

4 

14.5 

ns 

9-5 

Cl = 50 pF 

t11 

W/R#, M/IO#, D/C#, ADS# Float Delay 

4 

20 

ns 

9-6 

(Note 1) 

t12 

D0-D31 Write Data Valid Delay 

7 

24 

ns 

9-5a 

Cl = 50 pF, (Note 4) 

t12a 

D0-D31 Write Data Hold Time 

2 



9-5b 

Cl = 50 pF 

t13 

D0-D31 Float Delay 

4 

17 

ns 

9-6 

(Note 1) 

t14 

HLDA Valid Delay 

4 

20 

ns 

9-6 

Cl = 60 pF 

t15 

NA# Setup Time 

5 


ns 

n A 


t16 

NA# Hold Time 

2 


ns 

9-4 


t17 

BS1 6# Setup Time 

5 


ns 

9-4 


t18 

BS16# Hold Time 

2 


ns 

9-4 


t19 

READY# Setup Time 

7 


ns 

9-4 


t20 

READY# Hold Time 

4 


ns 

9-4 
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9.5.2 A.C. Specification Tables (Continued) 

Functional Operating Range: Vcc = 5V ±5%; Tcase = 0*"^ to +85°C 


Table 9-4. 33 MHz 386 tm dX A.C. Characteristics (Continued) 


Symbol 

Parameter 

33 MHz 

386 TM DX 

Unit 

Ref. 

Fig. 

Notes 

Min 

Max 

t21 

D0-D31 Read Setup Time 

5 


ns 

9-4 


t22 

D0--D31 Read Hold Time 

3 


ns 

9-4 


t23 

HOLD Setup Time 

11 


ns 

9-4 


t24 

HOLD Hold Time 

2 


ns 

9-4 


t25 

RESET Setup Time 

5 


ns 

9-7 


t26 

RESET Hold Time 

2 


ns 

9-7 


t27 

NMI, INTR Setup Time 

5 


ns 

9-4 


t28 

NMI, INTR Hold Time 

5 


ns 

9-4 

(Note 2) 

t29 

PEREQ, ERROR#, BUSY# Setup Time 

5 


ns 

9-4 

(Note 2f 

t30 

PEREQ, ERROR#, BUSY# Hold Time 

4 


ns 

9-4 

(Note 2) 


NOTES: 

1. Float condition occurs when maximum output current becomes less than Ilo in magnitude. Float delay Is not 100% 
tested. 

2. These inputs are allowed to be asynchronous to CLK2. The setup and hold specifications are given for testing purposes, 
to assure recognition within a specific CLK2 period. 

3. Rise and fall times are not tested. 

4. Min. time not 100% tested. 
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9.5.2 A.C. Specification Tabies (Continued) 

Functional Operating Range: Vcc = 5V ±5%; Tcase to +85°C 


Table 9-5. 25 MHz 386tm DX A.C. Characteristics 


Symbol 

Parameter 

25 MHz 
386TM DX 

Unit 

Ref. 

Fig. 

Notes 

Min 

Max 


Operating Frequency 

4 

25 

MHz 


Half of CLK2 Frequency 

t1 

CLK2 Period 

20 

125 

ns 

9-3 


t2a 

CLK2 High Time 

7 


ns 

9-3 

at2V 

t2b 

CLK2 High Time 

4 


ns 

9-3 

at 3.7V 

t3a 

CLK2 Low Time 

7 


ns 

9-3 

at2V 

t3b 

CLK2 Low Time 

5 


ns 

9-3 

at 0.8V 

t4 

CLK2 Fall Time 


7 

ns 

9-3 

3.7V to 0.8V 

t5 

CLK2 Rise Time 


7 

ns 

9-3 

0.8V to 3.7V 

t6 

A2-A31 Valid Delay 

4 

21 

ns 

9-5 

Cl = 50 pF 

t7 

A2-A31 Float Delay 

4 

30 

ns 

9-6 

(Notel) 

t8 

BE0#-BE3# Valid Delay 

4 

24 

ns 

9-5 

Cl = 50 pF 


LOCK# Valid Delay 

4 

21 

ns 

9-5 

Cl = 50 pF 

t9 


4 

30 

ns 

9-6 

(Note 1 ) 

t10 

W/R#, M/IO#, D/C#, ADS# Valid Delay 

4 

21 

ns 

9-5 

Cl = 50 pF 

t11 

W/R#, M/IO#, D/C#, ADS# Float Delay 

4 

30 

ns 

9-6 

(Note 1) 

t12 

D0--D31 Write Data Valid Delay 

7 

27 

ns 

9-5a 

Cl = 50 pF 

t12a 

D0-D31 Write Data Hold Time 

2 



9-5b 

Cl = 50 pF 

t13 

D0-D31 Float Delay 

4 

22 

ns 

9-6 

(Notel) 

t14 

HLDA Valid Delay 

4 

22 

ns 

9-6 

Cl = 50 pF 

t15 

NA# Setup Time 

7 


ns 

9-4 


t16 

NA# Hold Time 

3 


ns 

9-4 


t17 

BS16# Setup Time 

7 


ns 

9-4 


t18 

BS1 6# Hold Time 

3 


ns 

9-4 


t19 

READY# Setup Time 

9 


ns 

9-4 


t20 • 

READY# Hold Time 

4 


ns 

9-4 
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9.5.2 A.C. Specification Tables (Continued) 

Functional Operating Range: Vcc == 5V ±5%; Tcase = to +85°C 


Table 9-5. 25 MHz SSStm dX A.C. Characteristics (Continued) 


Symbol 

Parameter 

25 MHz 

386 TM DX 

Unit 

Ref. 

Fig. 

Notes 

Min 

Max 

. t21 

D0-D31 Read Setup Time 

7 


ns 

9-4 


t22 

D0-D31 Read Hold Time 

5 


ns 

9-4 


t23 

HOLD Setup Time 

15 


ns 

9-4 


t24 

HOLD Hold Time 

3 


ns 

9-4 


t25 

RESET Setup Time 

10 


ns 

9-7 


t26 

RESET Hold Time 

3 


ns 

9-7 


t27 

NMI, INTR Setup Time 

6 


ns 

9-4 

(Note 2) 

t28 

NMI, INTR Hold Time 

6 


ns 

9-4 

(Note 2) 

t29 

PEREQ, ERROR#, BUSY# Setup Time 

6 


ns 

9-4 

(Note 2) 

t30 

PEREQ, ERROR#, BUSY# Hold Time 

5 


ns 

9-4 

(Notes 2, 3) 


NOTES: 

1. Float condition occurs when maximum output current becomes less than Ilq in magnitude. Float delay is not 100% 
tested. 

2. These inputs are allowed to be asynchronous to CLK2. The setup and hold specifications are given for testing purposes, 
to assure recognition within a specific CLK2 period. 

3. Symbol Parameter Min 

Tc = 0°C t30 PEREQ, ERROR#, BUSY# Hold Time 4 

Tc = +85°C t30 PEREQ, ERROR#, BUSY# Hold Time 5 
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9.5.2 A.C. Specification Tables (Continued) 

Functional Operating Range: Vcc = 5V ±5%; Tcase = to +85°C 


Table 9.6. 20 MHz 386tm dX A.C. Characteristics 


Symbol 

Parameter 

20 MHz 

386 TM DX 

Unit 

Ref. 

Fig. 

Notes 

Min 

Max 


Operating Frequency 

4 

20 

MHz 


Half of CLK2 

Frequency 

ti 

CLK2 Period 

25 

125 

ns 

9-3 


t2a 

CLK2 High Time 

8 


ns 

9-3 

at2V 

t2b 

CLK2 High Time 

5 


ns 

9-3 

at (Vcc -0.8V) 

t3a 

CLK2 Low Time 

8 


ns 

9-3 

at2V 

tab 

CLK2 Low Time 

6 


ns 

9-3 

at 0.8V 

u 

CLk2 Fall Time 


8 

ns 

9-3 

(Vcc “ 0.8V) to 0.8V 

ts 

CLK2 Rise Time 


8 

ns 

9-3 

0.8V to (Vcc - 0.8V) 

te 

A2-A31 Valid Delay 

4 

30 

ns 

9-5 

Cl = 120 pF 

t? 

A2--A31 Float Delay 

4 

32 

ns 

9-6 

(Note 1) 

ta 

BE0#-BE3#, LOCK# 
Valid Delay 

4 

30 

ns 

9-5 

Cl = 75 pF 

t 9 

BE0#-BE3#, LOCK# 
Float Delay 

4 

32 

ns 

9-6 

(Note 1) 

tio 

W/R#,M/IO#,D/C#, 
ADS# Valid Delay 

6 

28 

ns 

9-5 

Cl = 75 pF 

t11 

W/R#,M/IO#,D/C#, 
ADS# Float Delay 

6 

30 

ns 

9-6 

(Note 1 ) 

tl2 

D0-D31 Write Data 

Valid Delay 

4 

38 

ns 

9-5c 

Cl = 120 pF 

tl3 

D0-D31 Float Delay 

4 

27 

ns 

9-6 

(Note 1 ) 

tl4 

HLDA Valid Delay 

6 

28 

ns 

9-6 

Cl = 75 pF 

tl5 

NA# Setup Time 

9 


ns 

9-4 


tl6 

NA# Hold Time 

14 


ns 

9-4 


- ti7 

BS16# Setup Time 

13 


ns 

9-4 


tl8 

BS16# Hold Time 

21 


ns 

9-4 


tl9 

READY# Setup Time 

12 


ns 

9-4 


t20 

READY# Hold Time 

4 


ns 

9-4 


t21 

D0-D31 Read 

Setup Time 

11 


ns 

9-4 


t22 

D0-D31 Read 

Hold Time 

6 


ns 

9-4 


t23 

HOLD Setup Time 

17 


ns 

9-4 


t24 

HOLD Hold Time 

5 


ns 

9-4 


t25 

RESET Setup Time 

12 


ns 

9-7 
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9.5.2 A.C. Specification Tabies (Continued) 

Functional Operating Range: Vcc = 5V ±5%; Tcase = 0*"^ to +85°C 


Table 9-6. 20 MHz 386 tm dX A.C. Characteristics (Continued) 


Symbol 

Parameter 

20 MHz 

386 TM DX 

Unit 

Ref. 

Fig. 

Notes 



Min 

Max 



t26 

RESET Hold Time 

4 


ns 

9-7 


t27 

NMIJNTR Setup Time 

16 


ns 

9-4 

(Note 2) 

t28 

NMI, INTR Hold Time 

16 


ns 

9-4 

(Note 2) 

t29 

PEREQ, ERROR#, BUSY# 
Setup Time 

14 


ns 

9-4 

(Note 2) 

too 

PEREQ, ERROR#, BUSY# 
Hold Time 

5 


ns 

9-4 

(Note 2) 


NOTES: 

1. Float condition occurs when maximum output current becomes less than Ilo in magnitude. Float delay is not 100% 
tested. 

2. These inputs are allowed to be asynchronous to CLK2. The setup and hold specifications are given for testing purposes, 
to assure recognition within a specific CLK2 period. 
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9.5.3 A.C. Test Loads 


9.5.4 A.C. Timing Waveforms 


38$ DX CPU, 
OUTPUT 


, 231630-38 

Cl = 120 pF on A2-A31, D0-D31 

Cl == 75 pF on BE0#-BE3#, W/R#, M/IO#, D/C#, ADS#, 
LOCK#, HLDA 

Cl includes all parasitic capacitances. 


r Vcc-o.8v , 

CLK2 2.0V J — 

oTv/ 


Figure 9-2. A.C. Test Load 


Figure 9-3. CLK2 Timing 



BUSY#, p 
ERROR# 
PEREQ ^ 




Figure 9-4. input Setup and Hold Timing 





386TM DX MICROPROCESSOR 



BE0#-BE3#. r 
LOCK# L 


W/R#.M/IO#, r 
D/C#.ADS# L 


02 

T 

01 

X 

02 

01 

^ \ 2 


^ V ; 

^ \ > 

© 1 
®| 

^Imin 

“*"1 MAX 



I 


VALID n ] 



o;(«ah 

IT 

VALli 


revJ 



r 

VALII 

El 


MIN MAX 

VALID n+1 


MIN MAX 

KwWVVVv5?VALIDn+1 




Figure 9-5. Output Valid Delay Timing 



Figure 9-5a. Write Data Valid Delay Timing 
(25 MHz, 33 MHz) 


Figure 9-5b. Write Data Hold Timing 
(25 MHz, 33 MHz) 
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9.5.5 Typical Output Valid Delay Versus Load Capacitance 
at Maximum Operating Temperature (Cl =120 pF) 



231630-77 


NOTE: 

This graph will not be linear outside of the Cl range shown. 


9.5.6 Typical Output Valid Delay Versus Load Capacitance 
at Maximum Operating Temperature (C|, = 75 pF) 
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9.5.7 Typical Output Valid Delay Versus Load Capacitance 
at Maximum Operating Temperature (C|. = 50 pF) 



9.5.8 Typical Output Rise Time Versus Load Capacitance 
at Maximum Operating Temperature 
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10.0 Revision History 

This 386 DX data sheet, version -005, contains updates and improvements to previous versions. A revision 
summary is listed here for your convenience. 


The sections significantly revised since version -001 are: 

2.9.6 Sequence of exception checking table added. 

2.9.7 Instruction restart revised. 

2.11.2 TLB testing revised. 

2.12 Debugging support revised. 

3.1 LOCK prefix restricted to certain instructions. 

4.4.3.3 I/O privilege level and I/O permission bitmap added. 

Figures 4-1 5a, 4-1 5b I/O permission bitmap added. 

4.6.4 Protection and I/O permission bitmap revised. 

4.6.6 Entering and leaving virtual 8086 mode through task switches, trap and Interrupt 
gates, and I RET explained. 

5.6 Self-test signature stored in EAX. 

5.8 Coprocessor interface description added. 

5.8.1 Software testing for coprocessor presence added. 

Table 6-3 PGA package thermal characteristics added. 

7. Designing for ICE-386 revised. 

Figures 7-8, 7-9, 7-10 ICE-386 clearance requirements added. 

6.2.3.4 Encoding of 32-bit address mode with no “sib” byte corrected. 


The sections significantly revised since version -002 are: 

Table 2-5 Interrupt vector assignments updated. 

Figure 4-1 5a Bit map offset must be less than or equal to DFFFH. 

Figure 5-28 386 DX outputs remain In their reset state during self-test. 

5.7 Component and revision identifier history updated. 

9.4 20 MHz D.C. specifications added. 

9.5 16 MHz A.C. specifications updated. 20 MHz A.C. specifications added. 

Table 6-1 Clock counts updated. 


The sections significantly revised since version -003 are: 

Table 2-6b Interrupt priorities 2 and 3 interchanged. 

2.9.8 Double page faults do not raise double fault exception. 

Figure 4-5 Maximum-sized segments must have segments Basei i .o = 0- 

5.4.3.4 BS1 6# timing corrected. 

Figures 5-16, 5-17, BS16# timing corrected. BS16# must not be asserted once NA# has been 

5-19, 5-22 sampled asserted in the current bus cycle. 

9.5 16 MHz and 20 MHz A.C. specifications revised. All timing parameters are now 

guaranteed at 1.5V test levels. The timing parameters have been adjusted to 
remain compatible with previous 0.8V/2.0V specifications. 
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The sections significantly revised since version -004 are: 


Chapter 4 
Table 2-4 
5.4.4 

Table 5-10 
Table 9-3 
9.5.2 

Figure 9-5 
Table 6-1 


25 MHz Clock data included. 

Segment Register Selection Rules updated. 

Interrupt Acknowledge Cycles discussion corrected. 

Additional Stepping Information added. 

Ice values updated. 

Table for 25 MHz A.C. Characteristics added. A.C. Characteristics tables reor- 
dered. 

Output Valid Delay Timing Figure reconfigured. Partial data now provided in addi- 
tional Figures 9-5a and 9-5b. 

Clock counts updated and formats corrected. 


The sections significantly 

Table of Contents 
Chapter 1 

2.3.6 
Table 2-4 
Figure 4-6 
Figure 4-7 

5.2.3 
5.2.8.4 

5.5.3 

Figure 5-28 
Chapter 6 
Chapter 7 
Chapter 8 
Table 9-3 
Table 9-3 
Table 9-4 
Figure 9-5 
Figure 9-5c 

9.5.6 

9.5.7 

Figure 9.6 


revised since version -005 are: 

Simplified. 

Pin Assignment. 

Control Register 0. 

Segment override prefixes possible. 
Note added. 

Note added. 

Data bus state at end of cycle. 
Coprocessor error. 

Bus activity during and following reset. 
ERROR#. 

Moved forward in datasheet. 

Moved forward in datasheet. 

Upgraded to chapter. 

25 MHz Ice Typ. value corrected. 

33 MHz D.C. Specifications added. 

33 MHz A.C. Specifications added. 
t8a and tlOa added. 

Added. 

Added derating for Cl = 75 pF. 
Added derating for Cl = 50 pF. 
t8a and tlOa added. 


The sections significantly revised since version -006 are: 


2.3.4 

2.9.8 

5.5.3 

Figure 5-21 
Figure 5-26 
Figure 5-28 
6.2.3.1 
Chapter 7 
9.5.2 
9.5.2 


Alignment of maximum sized segments. 

Double page faults do not raise double fault exception. 
ERROR# and BUSY# sampling after RESET. 

BS16# timing altered. 

READY# timing altered. 

ERROR# timing corrected. 

Corrected Encoding of Register Field Chart. 

Updated ICE-386 DX information. 

Remove preliminary stamp on 25 MHz A.C. Specifications. 
Remove preliminary stamp on 33 MHz A.C. Specifications. 
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■ High Performance 80-Bit Internal 
Architecture 

■ Impiements ANSI/iEEE Standard 754- 
1985 for Binary Floating-Point 
Arithmetic 

■ Six to Eleven Times 8087/80287 
Performance 

■ Expands 386 'rM DX CPU Data Types to 
Include 32-, 64-, 80-Bit Floating Point, 
32-, 64-Bit integers and 18-Digit BCD 
Operands 

■ Directly Extends 386 tm dX CPU 
Instruction Set to include 
Trigonometric, Logarithmic, 

Exponential and Arithmetic instructions 
for All Data Types 


■ Upward Object-Code Compatible from 
8087 and 80287 

■ Full-Range Transcendental Operations 
for SINE, COSINE, TANGENT, 
ARCTANGENT and LOGARITHM 

■ Built-In Exception Handling 

■ Operates Independently of Real, 
Protected and Virtual-8086 Modes of 
the 386 'rM px Microprocessor 

■ Eight 80-Bit Numeric Registers, Usabie 
as Individually Addressable General 
Registers or as a Register Stack 

■ Available in 68-Pin PGA Package 

(See Packaging Spec: Order #231369) 


The Intel 387 tm dX Math Coprocessor is an extension to the Intel 386 'rM microprocessor architecture. The 
combination of the 387 DX with the 386 tm dX Microprocessor dramatically increases the processing speed of 
computer application software which utilize mathmatical operations. This makes an ideal computer workstation 
platform for applications such as financial modeling and spreadsheets, CAD/CAM, or graphics. 


The 387 DX Math Coprocessor adds over seventy mnemonics to the 386 DX Microprocessor instruction set. 
Specific 387 DX math operations include logarithmic, arithmetic, exponentlonal, and triginometric functions. 
The 387 DX supports integer, extended integer, floating point and BCD data formats, and fully conforms to the 
ANSI/IEEE floating point standard. 

The 387 DX Math Coprocessor is object code compatible with the 80387SX, and upward object code compati- 
ble from the 80287 and 8087 math coprocessors. Object code for 386 DX/387 DX is also compatible with the 
Intel 486TM microprocessor. The 387 DX is manufactured on 1 micron, CHMOS IV technology and packaged 
in a 68-pin PGA package. 
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Figure 0 . 1 . 387tm dx Math Coprocessor Block Diagram 
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386TM DX Microprocessor Registers 

GENERAL REGISTERS SEGMENT REGISTERS 

15 0 


31 

15 

0 

EAX 

1 

AX 

AH 1 AL 

EBX 

1 

BX 

BH 1 BL 

ECX 

1 

cx 

CH 1 CL 

EDX 


DX 

DH 1 DL 

ESI 

1 

SI 

EDI 

1 

Dl 

EBP 

1 

BP 

ESP 

_L 

SP 


H 

cs 

— I — 

ss 

— I — 
DS 

— I — 

ES 


FS 

— I — 
GS 

— I — 


31 


EIP 


EFLAGS 

H 1 h- 


387TM DX NPX Data Registers 

Tag 

Field 

79 78 64 63 0 1 0 

RO 
R1 
R2 
R3 
R4 
R5 
R6 
R7 


79 78 64 63 0 


Sign 

Exponent 

Significand 























15 0 47 0 


Control Register 


Instruction Pointer (In 386 tm DX CPU) 

Status Register 


Data Pointer (in 386 tm DX CPU) 

Tag Word 



Figure 1.1. 386 tm DX Microprocessor and 387tm dx Math Coprocessor Register Set 


1.0 FUNCTIONAL DESCRIPTION 

The 387TM DX Math Coprocessor provides arithme- 
tic instructions for a variety of numeric data types in 
386TM DX Microprocessor and 387 DX Math Co- 
processor systems. It also executes numerous built- 
in transcendental functions (e.g. tangent, sine, co- 
sine, and log functions). The 387 DX Math Coproc- 
essor effectively extends the register and Instruction 
set of a 38G DX Microprocessor system for existing 
data types and adds several new data types as well. 
Figure 1.1 shows the model of registers visible to 
386 DX Microprocessor and 387 DX Math Coproc- 
essor programs. Essentially, the 387 DX Math Co- 
processor can be treated as an additional resource 
or an extension to the 386 DX Microprocessor. The 

386 DX Microprocessor together with a 387 DX 
Math Coprocessor can be used as a single unified 
system, the 386 DX Microprocessor and 387 DX 
Math Coprocessor. 

The 387 DX Math Coprocessor works the same 
whether the 386 DX Microprocessor Is executing in 
real-address mode, protected mode, or virtual-8086 
mode. All memory access is handled by the 386 DX 
Microprocessor; the 387 DX Math Coprocessor 
merely operates on instructions and values passed 
to it by the 386 DX Microprocessor. Therefore, the 

387 DX Math Coprocessor Is not sensitive to the 
processing mode of the 386 DX Microprocessor. 


In real-address mode and virtual-8086 mode, the 
386 DX Microprocessor and 387 DX Math Coproc- 
essor are completely upward compatible with soft- 
ware for 8086/8087, 80286/80287 real-address 
mode, and 386 DX Microprocessor and 80287 Co- 
processor real-address mode systems. 


In protected mode, the 386 DX Microprocessor and 
387 DX Math Coprocessor are completely upward 


ed mode, and 386 DX Microprocessor and 80287 
Coprocessor protected mode systems. 


The only differences of operation that may appear 
when 8086/8087 programs are ported to a protect- 
ed-mode 386 DX Microprocessor and 387 DX Math 
Coprocessor system (not using virtual-8086 mode), 
is in the format of operands for the administrative 
instructions FLDENV, FSTENV, FRSTOR and 
FSAVE. These instructions are normally used only 
by exception handlers and operating systems, not by 
applications programs. 

The 387 DX Math Coprocessor contains three func- 
tional units that can operate In parallel to increase 
system performance. The 386 DX Microprocessor 
can be transferring commands and data to the NPX 
bus control logic for the next instruction while the 
NPX floating-point unit is performing the current nu- 
meric instruction. 
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2.0 PROGRAMMING INTERFACE 

The NPX adds to the 386 DX Microprocessor sys- 
tem additional’data types, registers, instructions, and 
interrupts specifically designed to facilitate high- 
speed numerics processing. To use the NPX re- 
quires no special programming tools, because all 
new instructions and data types are directly support- 
ed by the 386 DX CPU assembler and compilers for 
high-level languages. All 8086/8088 development 
tools that support the 8087 can also be used to de- 
velop software for the 386 DX Microprocessor and 
387 DX Math Coprocessor in real-address mode or 
virtual-8086 mode. All 80286 development tools that 
support the 80287 can also be used to develop soft- 
ware for the 386 DX Microprocessor and 387 DX 
Math Coprocessor. 

All communication between the 386 DX Microproc- 
essor and the NPX is transparent to applications 
software. The CPU automatically controls the NPX 
whenever a numerics Instruction is executed. All 
physical memory and virtual memory of the CPU are 
available for storage of the instructions and oper- 
ands of programs that use the NPX. All memory ad- 
dressing modes, Including use of displacement, 
base register, index register, and scaling, are avail- 
able for addressing numerics operands. 

Section 6 at the end of this data sheet lists by class 
the instructions that the NPX adds to the instruction 
set of the 386 DX Microprocessor system. 


2.1 Data Types 

Table 2.1 lists the seven data types that the 387 DX 
NPX supports and presents the format for each type. 
Operands are stored In memory with the least signifi- 
cant digit at the lowest memory address. Programs 
retrieve these values by generating the lowest ad- 
dress. For maximum system performance, all oper- 
ands should start at physical-memory addresses 
evenly divisible by four (doubleword boundaries); op- 
erands may begin at any other addresses, but will 
require extra memory cycles to access the entire op- 
erand. 

Internally, the 387 DX NPX holds all numbers in the 
extended-precision real format. Instructions that 
load operands from memory automatically convert 
operands represented in memory as 1 6-, 32-, or 64- 
bit integers, 32- or 64-bit floating-point numbers, or 
18-dlgit packed BCD numbers into extended-preci- 
sion real format. Instructions that store operands in 
memory perform the inverse type conversion. 


2.2 Numeric Operands 

A typical NPX Instruction accepts one or two oper- 
ands and produces a single result. In two-operand 
instructions, one operand is the contents of an NPX 
register, while the other may be a memory location. 
The operands of some instructions are predefined; 
for example FSQRT always takes the square root of 
the number in the top stack element. 
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Table 2.1. 387tm px NPX Data Type Representation in Memory 



240448-2 


NOTES: 

(1) S = Sign hit (0 = positive. 1 = negative) 

(2) dn = Decimal digit (two per byte) 

(3) .X = Bits have no significance; 387 tm dX NPX ignores when loading, zeros when storing 

(4) A = Position of implicit binary point 

(5) I = Integer bit of significand; stored in temporary real, implicit in single and double precision 

(6) Exponent Bias (normalized values); 

Single; 127 (7FH) 

Double: 1023 (3FFH) 

Extended Real: 16383 (3FFFH) 

(7) Packed BCD: (-I)S (D17...D0) 

(8) Real: (-I)S (2 E-BIAS) (Fq Fi...) 
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15 0 


TAG (7) 

TAG (6) 

TAG (5) 

TAG (4) 

TAG (3) 

TAG (2) 

TAG (1) 

TAG (0) 


NOTE: 

The index i of tag(i) is not top-relative. A program typically uses the “top” field of Status Word to determine which tag(i) 
field refers to logical top of stack. 

TAG VALUES: 

00 = Valid 

01 = Zero 

10 = QNaN, SNaN, Infinity, Denormal and Unsupported Formats 

11 = Empty 


Figure 2.1. 387 tm DX NPX Tag Word 


2.3 Register Set 

Figure 1.1 shows the 387 DX NPX register set. 
When an NPX is present in a system, programmers 
may use these registers in addition to the registers 
normally available on the 386 DX CRU. 

2.3.1 DATA REGISTERS 

387 DX NPX computations use the NPX’s data regis- 
ters. These eight 80-bit registers provide the equiva- 
lent capacity of twenty 32-bit registers. Each of the 
eight data registers in the NPX is 80 bits wide and is 
divided into “fields” corresponding to the NPXs ex- 
tended-precision real data type. 

The 387 DX NPX register set can be accessed either 
as a stack, with instructions operating on the top one 
or two stack elements, or as a fixed register set, with 
instructions operating on explicitly designated regis- 
ters. The TOP field in the status word identifies the 
current top-of-stack register. A “push” operation 
decrements TOP by one and loads a value into the 
new top register. A “pop” operation stores the value 
from the current top register and then increments 


TOP by one. Like the 386 DX Microprocessor stacks 
in memory, the NPX register stack grows “down” 
toward lower-addressed registers. 

Instructions may address the data registers either 
implicitly or explicitly. Many instructions operate on 
the register at the TOP of the stack. These instruc- 
tions implicitly address the register at which TOP 
points. Other instructions allow the programmer to 
explicitly specify which register to user. This explicit 
register addressing is also relative to TOP. 

2.3.2 TAG WORD 

The tag word marks the content of each numeric 
data register, as Figure 2.1 shows. Each two-bit tag 
represents one of the eight numerics registers. The 
principal function of the tag word is to optimize the 
NPXs performance and stack handling by making it 
possible to distinguish between empty and nonemp- 
ty register locations. It also enables exception han- 
dlers to check the contents of a stack location with- 
out the need to perform complex decoding of the 
actual data. 


4-309 




387 TM DX MATH COPROCESSOR 


IPiilLOliiiaOMV 


inter 


NPX BUSY 

TOP OF STACK POINTER 
CONDITION CODE 


0 


I 


ERROR SUMMARY STATUS ' 

STACK FLAG 

EXCEPTION FLAGS: 

PRECISION 

UNDERFLOW 

OVERFLOW 

ZERO DIVIDE ^ 

DENORMALIZED OPERAND — 

INVALID OPERATION 

240448-3 

ES is set if any unmasked exception bit is set; cleared otherwise. 

See Table 2.2 for interpretation of condition code. 

TOP values: 

000 = Register 0 is Top of Stack 

001 = Register 1 is Top of Stack 


111 = Register 7 is Top of Stack 
For definitions of exceptions, refer to the section entitled 
“Exception Handling” 


Figure 2.2. NPX Status Word 


15 7 


C ' „ CCCESPUOZD 

TOP 

3 ,, 210SFEEEEE 


2.3.3 STATUS WORD 

The 1 6-bit status word (in the status register) shown 
in Figure 2.2 reflects the overaii state of the NPX. It 
may be read and inspected by CPU code. 

Bit 1 5, the B-bit (busy bit) is included for 8087 com- 
patibility only. It reflects the contents of the ES bit 
(bit 7 of the status word), not the status of the 
BUSY# output of the 387 DX NPX. 

Bits 13-11 (TOP) point to the 387 DX NPX register 
that is the current top-of-stack. 

The four numeric condition code bits (C3-C0) are 
similar to the flags in a CPU; instructions that per- 
form arithmetic operations update these bits to re- 
flect the outcome. The effects of these Instructions 
on the condition code are summarized in Tables 2.2 
through 2.5. 

Bit 7 is the error summary (ES) status bit. This bit is 
set if any unmasked exception bit is set; It is clear 
otherwise. If this bit Is set, the ERROR# signal is 
asserted. 


Bit 6 is the stack flag (SF). This bit is used to distin- 
guish invalid operations due to stack overflow or un- 
derflow from other kinds of Invalid operations. When 
SF is set, bit 9 (C^) distinguishes beUveen stack 
overflow (Ci = 1 ) and underflow (Ci = 0). 

Figure 2.2 shows the six exception flags in bits 5-0 
of the status word. Bits 5-0 are set to Indicate that 
the NPX has detected an exception while executing 
an Instruction. A later section entitled “Exception 
Handling” explains how they are set and used. 

Note that when a new value Is loaded into the status 
word by the FLDENV or FRSTOR Instruction, the 
value of ES (bit 7) and Its reflection in the B-bit (bit 
15) are not derived from the values loaded from 
memory but rather are dependent upon the values of 
the exception flags (bits 5-0) in the status word and 
their corresponding masks in the control word. If ES 
is set in such a case, the ERROR# output of the 
NPX is activated immediately. 
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Table 2.2. Condition Code interpretation 


Instruction 

CO (S) C3 (Z) 

C1(A) 

C2 (C) 

FPREM, FPREM1 
(see Table 2.3) 

Three least significant bits 
of quotient 

02 QO 

01 

or 0/U# 

Reduction 

0 = complete 

1 = Incomplete 

FCOM, FCOMP, 
FCOMPP, FTST, 
FUCOM, FUCOMP, 
FUCOMPP, FICOM, 
FICOMP 

Result of comparison 
(see Table 2.4) 

Zero 
or 0/U# 

Operand Is not 
comparable 
(Table 2.4) 

FXAM 

Operand class 
(see Table 2.5) 

Sign 

or 0/U# 

Operand class 
(Table 2.5) 

FCHS, FABS, FXCH, 
FINCSTP, FDECSTP, 
Constant loads, 
FXTRACT, FLD, 

FILD, FBLD, 

FSTP (ext real) 

UNDEFINED 

Zero 

or 0/U# 

UNDEFINED 

FIST, FBSTP, 

FRNDINT, FST, 

FSTP, FADD, FMUL, 
FDIV, FDIVR, 

FSUB, FSUBR, 

FSCALE, FSQRT, 
FPATAN, F2XM1, 
FYL2X. FYL2XP1 

UNDEFINED 

Roundup 
or 0/U# 

UNDEFINED 

FPTAN, FSIN 

FCOS, FSINCOS 

UNDEFINED 

Roundup 
or 0/U#, 
undefined 
if C2 = 1 

Reduction 

0 = complete 

1 = incomplete 

FLDENV, FRSTOR 

Each bit loaded from memory 

FLDCW, FSTENV, 
FSTCW, FSTSW, 
FCLEX, FINIT, 

FSAVE 

UNDEFINED 

0/U# When both IE and SF bits of status word are set, indicating a stack exception, this bit 

distinguishes between stack overflow (Cl = 1) and underflow (Cl = 0). 

Reduction If FPREM or FPREM1 produces a remainder that Is less than the modulus, reduction is 

complete. When reduction is incomplete the value at the top of the stack is a partial 
remainder, which can be used as input to further reduction. For FPTAN, FSIN, FCOS, and 
FSINCOS, the reduction bit is set if the operand at the top of the stack is too large. In this 
case the original operand remains at the top of the stack. 

Roundup When the PE bit of the status word is set, this bit indicates whether the last rounding in the 

instruction was upward. 

UNDEFINED Do not rely on finding any specific value in these bits. 
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Table 2.3. Condition Code Interpretation after FPREM and FPREM1 Instructions 



’ Table 2.4. Condition Code Resulting from Comparison 


Order 

C3 

C2 

CO 

TOP > Operand 

0 

0 

0 

TOP < Operand 

0 

0 

1 

TOP = Operand 

1 

0 . 

0 

Unordered 

1 

1 

1 


Table 2.5. Condition Code Defining Operand Class 


C3 

C2 

Cl 

CO 

Value at TOP 

0 

0 

0 

0 

+ Unsupported 

0 

0 

0 

1 

+ NaN 

0 

0 

1 

0 

KJI lOUppWI IWXJ 

0 

0 

1 

1 

- NaN 

0 

1 

0 

0 

+ Normal 

0 

1 

0 

1 

+ Infinity 

0 

1 

1 

0 

- Normal 

0 

1 

1 

1 

- Infinity 

1 

0 

0 

0 

+ 0 

1 

0 

0 

1 

+ Empty 

1 

0 

1 

0 

- 0 

1 

0 

1 

1 

- Empty 

1 

1 

0 

0 

+ Denormal 

1 

1 

1 

0 

- Denormal 
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2.3.4 INSTRUCTION AND DATA POINTERS 

Because the NPX operates in parallel with the CPU, 
any errors detected by the NPX may be reported 
after the CPU has executed the ESC instruction 
which caused it. To allow identification of the failing 
numeric instruction, the 386 DX Microprocessor and 
387 DX Math Coprocessor contains two pointer reg- 
isters that supply the address of the failing numeric 
instruction and the address of its numeric memory 
operand (if appropriate). 

The instruction and data pointers are provided for 
user-written error handlers. These registers are ac- 
tually located in the 386 DX CPU, but appear to be 
located in the NPX because they are accessed by 
the ESC instructions FLDENV, FSTENV, FSAVE, 
and FRSTOR. (In the 8086/8087 and 80286/80287, 
these registers are located in the NPX.) Whenever 


the 386 DX CPU decodes a new ESC Instruction, it 
saves the address of the instruction (including any 
prefixes that may be present), the address of the 
operand (if present), and the opcode. 

The instruction and data pointers appear in one of 
four formats depending on the operating mode of 
the 386 DX Microprocessor (protected mode or real- 
address mode) and depending on the operand-size 
attribute in effect (32-bit operand or 16-bit operand). 
When the 386 DX Microprocessor is in virtual-8086 
mode, the real-address mode formats are used. 
(See Figures 2.3 through 2.6.) The ESC instructions 
FLDENV, FSTENV, FSAVE, and FRSTOR are used 
to transfer these values between the 386 DX Micro- 
processor registers and memory. Note that the value 
of the data pointer is undefined if the prior ESC in- 
struction did not have a memory operand. 


32-BIT PROTECTED MODE FORMAT 

31 23 15 7 0 


^ 

RESERVED 

1 

^ 

CONTROL WORD 

I 

1 

RESERVED 

1 

I 

STATUS WORD 

I 

1 

RESERVED 

1 

I 

TAG WORD 

I 

1 

IP OF 

I 

FSET 

I 

00000 OPCODE 10..0 

I 

CS SELECTOR 

I 

DATA OPER> 

I 

I 

\ND OFFSET 

I 

I 

RESERVED 

1 

I 

OPERAND SELECTOR 

^ 


Figure 2.3. Protected Mode 387 tm dx NPX Instruction and 
Data Pointer Image in Memory, 32-Bit Format 
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32-BIT REAL-ADDRESS MODE FORMAT 

31 23 15 7 0 


1 

RESERVED 

1 

1 ^ 

' CONTROL WORD 

1 

RESERVED 

1 

STATUS WORD 

1 

RESERVED 

1 

TAG WORD 

1 

RESERVED 

1 

INSTRUCTION POINTER 15..0 

1 

0000 

INSTRUCTION POINTER 31. .16 

1 ^ 



0 OPCODE 10..0 

1 

RESERVED 

1 

OPERAND POINTER 15..0 

1 

0 0 0 0 

OPERAND POINTER 31.. 16 
1 ^ 

— 

0000 00000000 
^ 


Figure 2.4. Real Mode 387 ’rM dX NPX Instruction and Data Pointer Image in Memory, 32-Bit Format 



16-BIT PROTECTED MODE FORMAT 
15 7 0 

1 



1 

CONTROL WORD 

1 

0 


1 

STATUS WORD 

1 

2 


1 

TAG WORD 

1 

4 


1 

IP OFFSET 

1 

6 


1 

CS SELECTOR 

1 

8 


1 

OPERAND OFFSET 

1 

A 


1 

OPERAND SELECTOR 

1 

C 


1 



Figure 2.5. Protected Mode 387Tm dX NPX 
Instruction and Data Pointer 
image in Memory, 16-Bit Format 



16-BIT REAL-ADDRESS MODE AND 
VIRTUAL-8086 MODE FORMAT 

15 7 0 

1 



1 

CONTROL WORD 

1 

0 


1 

STATUS WORD 

1 

2 


TAG WORD 

4 


jMOTDUQTIQM POl.NTE.R 1 5..0 

I 

0 


IP19.16 

0 

OPCODE 10..0 

1 

8 


OPERAND POINTER 15..0 

1 

A 


DP 19.16 

0 

0 000000000 0 

C 






Figure 2.6. Real Mode 387tm dX NPX 
Instruction and Data Pointer 
Image in Memory, 16-Bit Format 
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RESERVED 

RESERVED* 

ROUNDING CONTROL 

PRECISION CONTROL 

0 


I 


RESERVED — 

EXCEPTION MASKS 
PRECISION — 
UNDERFLOW — 
OVERFLOW — 
ZERO DIVIDE — 
DENORMALIZED OPERAND — 
INVALID OPERATION — 


♦ "0" AFTER RESET OR FINIT; 
CHANGEABLE UPON LOADING THE 
CONTROL WORD (CW). PROGRAMS 
MUST IGNORE THIS BIT. 


15 7 


“TT” 

XXX 

X 

nr 

RC 

PC 

—r 

X X 

p 

U 

0 

Z 

D 

1 1 



_l_ 


M 

M 

M 

M 

M 


Precision Control 

00 — 24 bits (single precision) 

01 — (reserved) 

1 0— 53 bits (double precision) 

1 1— 64 bits (extended precision) 


240448-4 

Rounding Control 

00 — Round to nearest or even 

01 — Round down (toward - <») 

10 — Round up (toward + «>) 

1 1 — Chop (truncate toward zero) 


Figure 2 . 7 . 387tm dX NPX Control Word 


2.3.5 CONTROL WORD 

The NPX provides several processing options that 
are selected by loading a control word from memory 
into the control register. Figure 2.7 shows the format 
and encoding of fields in the control word. 

The low-order byte of this control word configures 
the NPX error and exception masking. Bits 5-0 of 
the control word contain individual masks for each of 
the six exceptions that the NPX recognizes. 

The high-order byte of the control word configures 
the NPX operating mode, including precision and 
rounding. 

• Bit 12 no longer defines infinity control and is a 
reserved bit. Only affine closure is supported for 
Infinity arithmetic. The bit is initialized to zero after 
RESET or FINIT and is changeable upon loading 
the CW. Programs must ignore this bit. 

• The rounding control (RC) bits (bits 11-10) pro- 
vide for directed rounding and true chop, as well 
as the unbiased round to nearest even mode 
specified in the IEEE standard. Rounding control 


affects only those instructions that perform 
rounding at the end of the operation (and thus 
can generate a precision exception); namely, 
FST, FSTP, FIST, all arithmetic instructions (ex- 
cept FPREM, FPREM1, FXTRACT, FABS, and 
FCHS), and all transcendental Instructions. 

• The precision control (PC) bits (bits 9-8) can be 
used to set the NPX internal operating precision 
of the significand at less than the default of 64 
bits (extended precision). This can be useful in 
providing compatibility with early generation arith- 
metic processors of smaller precision. PC affects 
only the instructions ADD, SUB, DIV, MUL, and 
SORT. For all other instructions, either the preci- 
sion is determined by the opcode or extended 
precision is used. 


2.4 Interrupt Description 

Several interrupts of the 386 DX CPU are used to 
report exceptional conditions while executing nu- 
meric programs in either real or protected mode. Ta- 
ble 2.6 shows these interrupts and their causes. 
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Table 2.6. SSGtm DX Microprocessor Interrupt Vectors Reserved for NPX 


Interrupt 

Number 

Cause of Interrupt 

7 

An ESC instruction was encountered when EM or TS of the 386 tm dX CPU control register 
zero (CRO) was set. EM = 1 indicates that software emulation of the instruction is 
required. When TS is set, either an ESC or WAIT instruction causes interrupt 7. This 
indicates that the current NPX context may not belong to the current task. 

9 

An operand of a coprocessor instruction wrapped around an addressing limit (OFFFFH for 
small segments, OFFFFFFFFH for big segments, zero for expand-down segments) and 
spanned inaccessible addresses^. The failing numerics instruction is not restartable. The 
address of the falling numerics instruction and data operand may be lost; an FSTENV does 
not return reliable addresses. As with the 80286/80287, the segment overrun exception 
should be handled by executing an FNINIT instruction (i.e. an FINIT without a preceding 
WAIT). The return address on the stack does not necessarily point to the failing instruction 
nor to the following instruction. The interrupt can be avoided by never allowing numeric 
data to start within 1 08 bytes of the end of a segment. 

13 

The first word or doubleword of a numeric operand is not entirely within the limit of its 
segment. The return address pushed onto the stack of the exception handler points at the 
ESC instruction that caused the exception, including any prefixes. The 387 tm dX NPX has 
not executed this instruction; the instruction pointer and data pointer register refer to a^ 
previous, correctly executed instruction. 

16 

The previous numerics instruction caused an unmasked exception. The address of the 
faulty instruction and the address of its operand are stored In the instruction pointer and 
data pointer registers. Only ESC and WAIT instructions can cause this interrupt. The 386 tm 
DX CPU return address pushed onto the stack of the exception handler points to a WAIT 
or ESC instruction (including prefixes). This instruction can be restarted after clearing the 
exception condition in the NPX. FNINIT, FNCLEX, FNSTSW, FNSTENV, and FNSAVE 
cannot cause this interrupt. 


a. An operand may wrap around an addressing limit when the segment limit is near an addressing limit and the operand is near the largest valid 
address in the segment. Because of the wrap-around, the beginning and ending addresses of such an operand will be at opposite ends of the 
segment. There are tvyo ways that such an operand may also span inaccessible addresses: 1) if the segment limit is not equal to the, addressing 
limit (e.g. addressing limit is FFFFH and segment limit is FFFDH) the operand will span addresses that are not within the segment (e.g. an 8-byte 
operand that starts at valid offset FFFC will span addresses FFFC-FFFF and 0000-0003; however addresses FFFE and FFFF are not valid, 
because they exceed the limit); 2) if the operand begins and ends in present and accessible pages but intermediate bytes of the operand fall in a 
not-present page or a page to which the procedure does not have access rights. 


2.5 Exception Handling 

The 387 DX NPX detects six different exception con- 
ditions that can occur during instruction execution. 
Table 2.7 lists the exception conditions in order of 
precedence, showing for each the cause and the 
default action taken by the NPX if the exception is 
masked by its corresponding mask bit in the control 
word. 

Any exception that is not masked by the control 
word sets the corresponding exception flag of the 
status word, sets the ES bit of the status word, and 
asserts the ERROR# signal. When the CPU at- 
tempts to execute another ESC instruction or WAIT, 
exception 7 occurs. The exception condition must 
be resolved via an interrupt service routine. The 386 
DX Microprocessor and 387 DX Math Coprocessor 
save the address of the floating-point instruction that 
caused the exception and the address of any memo- 
ry operand required by that instruction. 


2.6 Initialization 

387 DX NPX initialization software must execute an 
FNINIT instruction (i.e. an FINIT without a preceding 
WAIT) to clear ERROR#. After a hardware RESET, 
the ERROR# output is asserted to indicate that a 
387 DX NPX is present. To accomplish this, the IE 
and ES bits of the status word are set, and the IM bit 
in the control word is reset. After FNINIT, the status 
word and the control word have the same values as 
In an 80287 after RESET. 
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Operands for FSCALE and FPATAN are no longer 
restricted in range (except for ±oo); F2XM1 and 
FPTAN accept a wider range of operands. 

The results of transcendental operations may be 
slightly different from those computed by 80287. 

In the case of FPTAN, the 387 DX NPX supplies a 
true tangent result In ST(1), and (always) a floating 
point 1 in ST. 

Rounding control is in effect for FLD constant 

Software cannot change entries of the tag word to 
values (other than empty) that do not reflect the ac- 
tual register contents. 

After reset, FINIT, and incomplete FPREM, the 387 
DX NPX resets to zero the condition code bits C 3 - 
Cq of the status word. 

In conformance with the IEEE standard, the 387 DX 
NPX does not support the special data formats: 
pseudozero, pseudo-NaN, pseudoinfinity, and un- 
normal. 


Table 2.7. Exceptions 


Exception 

Cause 

Default Action 
(if exception is masked) 

Invalid 

Operation 

Operation on a signaling NaN, unsupported format, 
indeterminate form ( 0 *oo, 0 / 0 , (+ «>) + (- °o), etc.), or 
stack overflow/underflow (SF is also set). 

Result is a quiet NaN, integer 
indefinite, or BCD indefinite 

Denormalized 

Operand 

At least one of the operands is denormalized, I.e. it has 
the smallest exponent but a nonzero significand. 

Normal processing 
continues 

Zero Divisor 

The divisor is zero while the dividend is a noninfinite, 
nonzero number. 

Result is oo 

Overflow 

The result is too large in magnitude to fit in the specified 
format. 

Result Is largest finite value 
or oo 

Underflow 

The true result is nonzero but too small to be 
represented in the specified format, and, if underflow 
exception is masked, denormalization causes loss of 
accuracy. 

Result Is denormalized or 

zero 

Inexact 

Result 

(Precision) 

The true result is not exactly representable in the 
specified format (e.g. 1 /3); the result is rounded 
according to the rounding mode. 

Normal processing 
continues 


2.7 8087 and 80287 Compatibility 

This section summarizes the differences between 
the 387 DX NPX and the 80287. Any migration from 
the 8087 directly to the 387 DX NPX must also take 
into account the differences between the 8087 and 
the 80287 as listed in Appendix A. 

Many changes have been designed into the 387 DX 
NPX to directly support the IEEE standard In hard- 
ware. These changes result in increased perform- 
ance by eliminating the need for software that sup- 
ports the standard. 

2.7.1 GENERAL DIFFERENCES 

The 387 DX NPX supports only affine closure for 
Infinity arithmetic, not projective closure. Bit 12 of 
the Control Word (CW) no longer defines infinity 
control. It is a reserved bit; but it is initialized to zero 
after RESET or FINIT and is changeable upon load- 
ing the CW. Programs must ignore this bit. 
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2.7.2 EXCEPTIONS 

A number of differences exist due to changes in the 

IEEE standard and to functional improvements to 

the architecture of the 387 DX NPX; 

1 . When the overflow or underflow exception is 
masked, the 387 DX NPX differs from the 80287 
in rounding when overflow or underflow occurs. 
The 387 DX NPX produces results that are con- 
sistent with the rounding mode. 

2. When the underflow exception is masked, the 
387 DX NPX sets its underflow flag only if there 
is also a loss of accuracy during denormaliza- 
tion. 

3. Fewer invalid-operation exceptions due to de- 
normal operands, because the instructions 
FSQRT, FDIV, FPREM, and conversions to BCD 
or to integer normalize denormal operands be- 
fore proceeding. 

4. The FSQRT, FBSTP, and FPREM instructions 
may cause underflow, because they support de- 
normal operands. 

5. The denormal exception can occur during the 
transcendental instructions and the EXTRACT 
instruction. 

6. The denormal exception no longer takes prece- 
dence over all other exceptions. 

7. When the denormal exception is masked, the 
387 DX NPX automatically normalizes denormal 
operands. The 8087/80287 performs unnormal 
arithmetic, which might produce an unnormal re- 
sult. 

8. When the operand Is zero, the EXTRACT in- 
struction reports a zero-divide exception and 
leaves - oo in ST(1). 

3. The status word has a new bit (3F) that signals 
when invalid-operation exceptions are due to 
stack underflow or overflow. 

10. FLD extended precision no longer reports denor- 
mal exceptions, because the Instruction is not 
numeric. 

1 1 . FLD single/double precision when the operand 
is denormal converts the number to extended 
precision and signals the denormalized operand 
exception. When loading a signaling NaN, FLD 
single/double precision signals an Invalid-oper- 
and exception. 

12. The 387 DX NPX only generates quiet NaNs (as 
on the 80287); however, the 387 DX NPX distin- 
guishes between quiet NaNs and signaling 
NaNs. Signaling NaNs trigger exceptions when 
they are used as operands; quiet NaNs do not 
(except for FCOM, FIST, and FBSTP which also 
raise IE for quiet NaNs). 

13. When stack overflow occurs during FPTAN and 
overflow is masked, both ST(0) and ST(1) con- 
tain quiet NaNs. The 80287/8087 leaves the 
original operand in ST(1) intact. 


14. When the scaling factor is ±oo, the FSCALE 
(ST(0), ST(1)) instruction behaves as follows 
(ST(0) and ST(1) contain the scaled and scaling 
operands respectively): 

• FSCALE(0,oo) generates the invalid operation 
exception. 

• FSCALE(finite, -<») generates zero with the 
same sign as the scaled operand. 

• FSCALE(finlte, + °o) generates oo with the 
same sign as the scaled operand. 

The 8087/80287 returns zero in the first case 
and raises the Invalid-operation exception In the 
other cases. 

15. The 387 DX NPX returns signed Infinity/zero as 
the unmasked response to massive overflow/ 
underflow. The 8087 and 80287 support a limit- 
ed range for the scaling factor; within this range 
either massive overflow/underflow do not occur 
or undefined results are produced. 


3.0 HARDWARE INTERFACE 

In the following description of hardware interface, 
the # symbol at the end of a signal name indicates 
that the active or asserted state occurs when the 
signal is at a low voltage. When no # is present after 
the signal name, the signal is asserted when at the 
high voltage level. 


3.1 Signal Description 

In the following signal descriptions, the 387 DX Math 
Coprocessor pins are grouped by function as fol- 
lows; 

1. Execution control— CPUCLK2, NUMCLK2, CKM, 

DCTOCTIM 

I I II ^ 

2. NPX handshake— PEREQ, BUSY#, ERROR# 

3. Bus interface pins— D31-D0, W/R#, ADS#, 
READY#, READYO# 

4. Chip/Port Select— STEN, NPS1#, NPS2, 

CMDO# 

5. Power supplies— Vcc. Vss 

Table 3.1 lists every pin by its identifier, gives a brief 
description of its function, and lists some of Its char- 
acteristics. All output signals are tristate; they leave 
floating state only when STEN is active. The output 
buffers of the bidirectional data pins D31-D0 are 
also tristate; they leave floating state only in read 
cycles when the NPX Is selected (i.e. when STEN, 
NPS1 #, and NPS2 are all active). 

Figure 3.1 and Table 3.2 together show the location 
of every pin in the pin grid array. 
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Table 3.1. 387tm dX NPX Pin Summary 


Pin 

Function 

Active 

Input/ 

Referenced 

Name 

State 

Output 

To 

. CPUCLK2 

386 TM DX CPU CLOCK 2 


1 


NUMCLK2 

387 TM DX NPX CLOCK 2 


1 


CKM 

387TM DX NPX CLocKing Mode 


1 


RESETIN 

System reset 

High 

1 

CPUCLK2 

PEREQ 

Processor Extension 

High 

0 

CPUCLK2/STEN 


REQuest 




BUSY# 

Busy status 

Low 

0 

CPUCLK2/STEN 

ERROR# 

Error status 

Low 

0 

NUMCLK2/STEN 

D31-D0 

Data pins 

High 

I/O 

CPUCLK2 

W/R# 

Write/Read bus cycle 

Hi/Lo 

1 

CPUCLK2 

ADS# 

ADdress Strobe 

Low 

1 

CPUCLK2 

READY# 

Bus ready input 

Low 

1 

CPUCLK2 

READYO# 

Ready output 

Low 

0 

CPUCLK2/STEN 

STEM 

STatus ENable 

High 

1 

CPUCLK2 

NPS1# 

NPX select #1 

Low 

1 

CPUCLK2 

NPS2 

NPX select #2 

High 

1 

CPUCLK2 

CMDO# 

CoMmanD 

Low 

1 

CPUCLK2 

Vcc 



1 


Vss 



1 



NOTE: 

STEM is referenced to only when getting the output pins into or out of tristate mode. 


Table 3.2. 387tm dX NPX Pin Cross-Reference 


ADS# 



K7 

D18 



A8 

STEN 

— L4 

BUSY# 

— 

K2 

D19 

— 

B9 

W/R# 

— K4 

CKM 

— 

J11 

D20 

— 

BIO 



CPUCLK24 

— 

K10 

D21 

— 

A10 

Vcc 

— A6, A9, B4, 

CMDO# 

— 

L8 

D22 

— 

B11 
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Figure 3.1. 387tm dx NPX Pin Configuration 
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3.1.1 386 TM DX CPU CLOCK 2 (CPUCLK2) 

This input uses the 386 DX CPU CLK2 signal to time 
the bus control logic. Several other NPX signals are 
referenced to the rising edge of this signal. When 
CKM = 1 (synchronous mode) this pin also clocks 
the data interface and control unit and the floating- 
point unit of the NPX. This pin requires MOS-level 
input. The signal on this pin is divided by two to pro- 
duce the internal clock signal CLK. 

3.1.2 387 TM DX NPX CLOCK 2 (NUMCLK2) 

When CKM = 0 (asynchronous mode) this pin pro- 
vides the clock for the data interface and control unit 
and the floating-point unit of the NPX. In this case, 
the ratio of the frequency of NUMCLK2 to the fre- 


quency of CPUCLK2 must lie within the range 10:16 
to 14:10. When CKM = 1 (synchronous mode) this 
pin is ignored; CPUCLK2 is used instead for the data 
Interface and control unit and the floating-point unit. 
This pin requires TTL-level input. 

3.1.3 387 TM DX NPX CLOCKING MODE (CKM) 

This pin is a strapping option. When it is strapped to 
Vcc» NPX operates In synchronous mode; when 
strapped to Vss. the NPX operates in asynchronous 
mode. These modes relate to clocking of the data 
interface and control unit and the floating-point unit 
only; the bus control logic always operates synchro- 
nously with respect to the 386 DX Microprocessor. 



Figure 3.2. Asynchronous Operation 
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3.1.4 SYSTEM RESET (RESETIN) 

A LOW to HIGH transition on this pin causes the 
NPX to terminate its present activity and to enter a 
dormant state. RESETIN must remain HIGH for at 
least 40 NUMCLK2 periods. The HIGH to LOW tran- 
sitions of RESETIN must be synchronous with 
CPUCLK2, so that the phase of the internal clock of 
the bus control logic (which is the CPUCLK2 divided 
by 2) is the same as the phase of the internal clock 
of the 386 DX CPU. After RESETIN goes LOW. at 
least 50 NUMCLK2 periods must pass before the 
first NPX instruction is written Into the 387 DX NPX. 
This pin should be connected to the 386 DX CPU 
RESET pin. Table 3.3 shows the status of other pins 
after a reset. 


Table 3.3. Output Pin Status During Reset 


Pin Value 

Pin Name 

HIGH 

READYO#,BUSY# 

LOW 

PEREQ, ERROR# 

Tri-State OFF 

D31-D0 


3.1.5 PROCESSOR EXTENSION REQUEST 
(PEREQ) 

When active, this pin signals to the 386 DX CPU that 
the NPX is ready for data transfer to/from its data 
FIFO. When all data Is written to or read from the 
data FIFO, PEREQ Is deactivated. This signal al- 
ways goes inactive before BUSY# goes inactive. 
This signal Is referenced to CPUCLK2. It should be 
connected to the 386 DX CPU PEREQ input. Refer 
to Figure 3.8 for the timing relationships between 
this and the BUSY# and ERROR# pins. 


3.1.6 BUSY STATUS (BUSY#) 

When active, this pin signals to the 386 DX CPU that 
the NPX is currently executing an instruction. This 
signal is referenced to CPUCLK2. It should be con- 
nected to the 386 DX CPU BUSY# pin. Refer to 
Figure 3.8 for the timing relationships between this 
and the PEREQ and ERROR# pins. 


3.1.7 ERROR STATUS (ERROR#) 

This pin reflects the ES bits of the status register. 
When active, it indicates that an unmasked excep- 
tion has occurred (except that, immediately after a 
reset, it indicates to the 386 DX Microprocessor that 
a 387 DX NPX is present in the system). This signal 
can be changed to inactive state only by the follow- 
ing instructions (without a preceding WAIT): FNINIT, 
FNCLEX, FNSTENV, and FNSAVE. This signal is 
referenced to NUMCLK2. It should be connected to 
the 386 DX CPU ERROR# pin. Refer to Figure 3.8 
for the timing relationships between this and the 
PEREQ and BUSY# pins. 

3.1.8 DATA PINS (D31-D0) 

These bidirectional pins are used to transfer data 
and opcodes between the 386 DX CPU and 387 DX 
NPX. They are normally connected directly to the 
corresponding 386 DX CPU data pins. HIGH state 
indicates a value of one. DO is the least significant 
data bit. Timings are referenced to CPUCLK2. 

3.1.9 WRITE/READ BUS CYCLE (W/R#) 

This signal indicates to the NPX whether the 386 DX 
CPU bus cycle In progress is a read or a write cycle. 
This pin should be connected directly to the 386 DX 
CPU W/R# pin. HIGH Indicates a write cycle; LOW, 
a read cycle. This input Is ignored if any of the sig- 
nals STEN, NPS1 #, or NPS2 is inactive. Setup and 
hold times are referenced to CPUCLK2. 


3.1.10 ADDRESS STROBE (ADS#) 

This input. In conjunction with the READY# input 
indicates when the NPX bus-control logic may sam- 
ple W/R#" and the chip-select signals. Setup and 
hold times are referenced to CPUCLK2. This pin 
should be connected to the 386 DX CPU ADS# pin. 
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3.1.11 BUS READY INPUT (READY#) 

This input indicates to the NPX when a 386 DX CPU 
bus cycle is to be terminated. It is used by the bus- 
control logic to trace bus activities. Bus cycles can 
be extended indefinitely until terminated by 
READY#. This input should be connected to the 
same signal that drives the 386 DX CPU READY# 
input. Setup and hold times are referenced to 
CPUCLK2. 


3.1.12 READY OUTPUT (READYO#) 

This pin is activated at such a time that write cycles 
are terminated after two clocks (except FLDENV 
and FRSTOR) and read cycles after three. clocks. In 
configurations where no extra wait states are re- 
quired, this pin must directly or indirectly drive the 
386 DX CPU READY# input. Refer to section 3.4 
“Bus Operation” for details. This pin is activated 
only during bus cycles that select the NPX. This sig- 
nal is referenced to CPUCLK2. 


3.1.13 STATUS ENABLE (STEN) 

This pin serves as a chip select for the NPX. When 
inactive, this pin forces BUSY#, PEREQ, ERROR#, 
and READYO# outputs into floating state. D31-D0 
are normally floating and leave floating state only if 
STEN is active and additional conditions are met. 
STEN also causes the chip to recognize its other 
chip-select inputs. STEN makes it easier to do on- 
board testing (using the overdrive method) of other 
chips in systems containing the NPX. STEN should 
be pulled up with a resistor so that it can be pulled 
down when testing. In boards that do not use on- 
board testing, STEN should be connected to Vcc- 
Setup and hold times are relative to CPUCLK2. Note 
that STEN must maintain the same setup and hold 
times as NPS1 #, NPS2, and CMDO# (i.e. If STEN 
changes state during a 387 DX NPX bus cycle, it 
should change state during the same CLK period as 
the NPS1#, NPS2, and CMDO# signals). 

3.1.14 NPX Select #1 (NPS1#) 

When active (along with STEN and NPS2) In the first 
period of a 386 DX CPU bus cycle, this signal indi- 
cates that the purpose of the bus cycle is to commu- 


nicate with the NPX. This pin should be connected 
directly to the 386 DX CPU M/IO# pin, so that the 
NPX is selected only when the 386 DX CPU per- 
forms I/O cycles. Setup and hold times are refer- 
enced to CPUCLK2. 


3.1.15 NPX SELECT #2 (NPS2) 

When active (along with STEN and NPS1 #) in the 
first period of an 386 DX CPU bus cycle, this signal 
indicates that the purpose of the bus cycle is to com- 
municate with the NPX. This pin should be connect- 
ed directly to the 386 DX CPU A31 pin, so that the 
NPX is selected only when the 386 DX CPU uses 
one of the I/O addresses reserved for the NPX 
(800000F8 or 800000FC). Setup and hold times are 
referenced to CPUCLK2. 


3.1.16 COMMAND (CMDO#) 

During a write cycle, this signal indicates whether an 
opcode (CMDO# active) or data (CMDO# inactive) 
is being sent to the NPX. During a read cycle, it indi- 
cates whether the control or status register (CMDO# 
active) or a data register (CMDO# inactive) is being 
read. CMDO# should be connected directly to the 
A2 output of the 386 DX Microprocessor. Setup and 
hold times are referenced to CPUCLK2. 


3.2 Processor Architecture 

As shown by the block diagram on the front page, 
the NPX is internally divided into three sections: the 
bus control logic (BCL), the data interface and con- 
trol unit, and the floating point unit (FPU). The FPU 
(with the support of the control unit which contains 
the sequencer and other support units) executes all 
numerics instructions. The data interface and control 
unit Is responsible for the data flow to and from the 
FPU and the control registers, for receiving the In- 
structions, decoding them, and sequencing the mi- 
croinstructions, and for handling some of the admin- 
istrative instructions. The BCL is responsible for the 
386 DX CPU bus tracking and interface. The BCL is 
the only unit in the 387 DX NPX that must run syn- 
chronously with the 386 DX CPU; the rest of the 
NPX can run asynchronously with respect to the 386 
DX Microprocessor. 
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3.2.1 BUS CONTROL LOGIC 

The BCL communicates solely with the CPU using 
I/O bus cycles. The BCL appears to the CPU as a 
special peripheral device. It is special in two re- 
spects: the CPU initiates I/O automatically when it 
encounters ESC instructions, and the CPU uses re- 
served I/O addresses to communicate with the BCL. 
The BCL does not communicate directly with memo- 
ry. The CPU performs ail memory access, transfer- 
ring input operands from memory to the NPX and 
transferring outputs from the NPX to memory. 

3.2.2 DATA INTERFACE AND CONTROL UNIT 

The data interface and control unit latches the data 
and, subject to BCL control, directs the data to the 
FIFO or the instruction decoder. The instruction de- 
coder decodes the ESC instructions sent to it by the 
CPU and generates controls that direct the data flow 
in the FIFO. It also triggers the microinstruction se- 
quencer that controls execution of each instruction. 
If the ESC instruction is FINIT, FCLEX, FSTSW, 
FSTSW AX, or FSTCW, the control executes it Inde- 


pendently of the FPU and the sequencer. The data 
interface and control unit Is the one that generates 
the BUSY#, PEREQ and ERROR# signals that syn- 
chronize 387 DX NPX activities with the 386 DX 
CPU. It also supports the FPU in all operations that it 
cannot perform alone (e.g. exceptions handling, 
transcendental operations, etc.). 

3.2.3 FLOATING POINT UNIT 

The FPU executes all Instructions that Involve the 
register stack, Including arithmetic, logical, transcen- 
dental, constant, and data transfer Instructions. The 
data path in the FPU is 84 bits wide (68 significant 
bits, 15 exponent bits, and a sign bit) which allows 
internal operand transfers to be performed at very 
high speeds. 


3.3 System Configuration 

As an extension to the 386 DX Microprocessor, the 
387 DX Math Coprocessor can be connected to the 
CPU as shown by Figure 3.3. A dedicated communi- 
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Figure 3.3. 386 ^ 1 ^ dx Microprocessor and 387 tm dX Math Coprocessor System Configuration 
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Table 3.4. Bus Cycles Definition 


STEN 

NPS1# 

NPS2 

CMDO# 

W/R# 

Bus Cycle Type 

0 

X 

X 

X 

X 

NPX not selected and all 






outputs in floating state 

1 

1 

X 

X 

X 

NPX not selected 

1 

X 

0 

X 

X 

NPX not selected 

1 

0 

1 

0 

0 

CW or SW read from NPX 

1 

0 

1 

0 

f 

Opcode write to NPX 

1 

0 

1 

1 

0 

Data read from NPX 

1 

0 

1 

1 

1 

Data write to NPX 


cation protocol makes possible high-speed transfer 
of opcodes and operands between the 386 DX CPU 
and 387 DX NPX. The 387 DX NPX is designed so 
that no additional components are required for inter- 
face with the 386 DX CPU. The 387 DX NPX shares 
the 32-bit wide local bus of the 386 DX CPU and 
most control pins of the 387 DX NPX are connected 
directly to pins of the 386 DX Microprocessor. 

3.3.1 BUS CYCLE TRACKING 

The ADS# and READY# signals allow the NPX to 
track the beginning and end of the 386 DX CPU bus 
cycles, respectively. When ADS# is asserted at the 
same time as the NPX chip-select inputs, the bus 
cycle is intended for the NPX. To signal the end of a 
bus cycle for the NPX, READY# may be asserted 
directly or indirectly by the NPX or by other bus-con- 
trol logic. Refer to Table 3.4 for definition of the 
types of NPX bus cycles. 

3.3.2 NPX ADDRESSING 

The NPS 1 #, NPS2 and STEN signals allow the NPX 
to identify which bus cycles are intended for the 
NPX. The NPX responds only to I/O cycles when bit 
31 of the I/O address is set. In other words, the NPX 
acts as an I/O device in a reserved I/O address 
space. 

Because A 31 is used to select the NPX for data 
transfers, it is not possible for a program running on 
the 386 DX CPU to address the NPX with an I/O 
instruction. Only ESC instructions cause the 386 DX 
Microprocessor to communicate with the NPX. The 
386 DX CPU BS16# input must be inactive during 
I/O cycles when A 31 is active. 

3.3.3 FUNCTION SELECT 

The CMDO# and W/R# signals identify the four 
kinds of bus cycle: control or status register read, 
data read, opcode write, data write. 


3.3.4 CPU/NPX Synchronization 

The pin pairs BUSY#, PEREQ, and ERROR# are 
used for various aspects of synchronization between 
the CPU and the NPX. 

BUSY# is used to synchronize instruction transfer 
from the 386 DX CPU to the NPX. When the NPX 
recognizes an ESC instruction, it asserts BUSY#. 
For most ESC instructions, the 386 DX CPU waits 
for the NPX to deassert BUSY# before sending the 
new opcode. 

The NPX uses the PEREO pin of the 386 DX CPU to 
signal that the NPX is ready for data transfer to or 
from its data FIFO. The NPX does not directly ac- 
cess memory; rather, the 386 DX Microprocessor 
provides memory access services for the NPX. 
Thus, memory access on behalf of the NPX always 
obeys the rules applicable to the mode of the 386 
DX CPU, whether the 386 DX CPU be in real-ad- 
dress mode or protected mode. 

Once the 386 DX CPU initiates an NPX instruction 
that has operands, the 386 DX CPU waits for 
PEREQ signals that indicate when the NPX is ready 
for operand transfer. Once ail operands have been 
transferred (or if the instruction has no operands) 
the 386 DX CPU continues program execution while 
the NPX executes the ESC instruction. 

In 8086/8087 systems, WAIT instructions may be 
required to achieve synchronization of both com- 
mands and operands. In 80286/80287, 386 DX Mi- 
croprocessor and 387 DX Math Coprocessor sys- 
tems, WAIT instructions are required only for oper- 
and synchronization; namely, after NPX stores to 
memory (except FSTSW and FSTCW) or loads from 
memory. Used this way, WAIT ensures that the val- 
ue has already been written or read by the NPX be- 
fore the CPU reads or changes the value. 
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Once it has stalled to execute a numerics instruction 
and has transferred the operands from the 386 DX 
CPU, the NPX can process the instruction in parallel 
with and independent of the host CPU. When the 
NPX detects an exception, it asserts the ERROR# 
signal, which causes a 386 DX CPU interrupt. 


3.3.5 SYNCHRONOUS OR ASYNCHRONOUS 
MODES 

The internal logic of the 387 DX NPX (the FPU) can 
either operate directly from the CPU clock (synchro- 
nous mode) or from a separate clock (asynchronous 
mode). The two configurations are distinguished by 
the CKM pin. In either case, the bus control logic 
(BCL) of the NPX is synchronized with the CPU 
clock. Use of asynchronous mode allows the 386 
DX CPU and the FPU section of the NPX to run at 
different speeds. In this case, the ratio of the fre- 
quency of NUMCLK2 to the frequency of CPUCLK2 
must lie within the range 10:16 to 14:10. Use of syn- 
chronous mode eliminates one clock generator from 
the board design. 

3.3.6 AUTOMATIC BUS CYCLE TERMINATION 

In configurations where no extra wait states are re- 
quired, READYO# can be used to drive the 386 DX 
CPU READY# input. If this pin is used, it should be 
connected to the logic that ORs all READY outputs 
from peripherals on the 386 DX CPU bus. 
READYO# is asserted by the NPX only during I/O 
cycles that select th'e NPX. Refer to section 3.4 
“Bus Operation” for details. 


3.4 Bus Operation 

With respect to the bus interface, the 387 DX NPX is 
fully synchronous with the 386 DX Microprocessor. 
Both operate at the same rate, because each gener- 
ates its internal CLK signal by dividing CPUCLK2 by 
two. 

The 386 DX CPU initiates a new bus cycle by acti- 
vating ADS#. The NPX recognizes a bus cycle, if, 
during the cycle in which ADS# is activated, STEN, 
NPS1 #, and NPS2 are all activated. Proper opera- 
tion is achieved if NPS1 # is connected to the 
M/IO# output of the 386 DX CPU, and NPS2 to the 
A31 output. The 386 DX CPU’s A31 output is guar- 
anteed to be inactive in all bus cycles that do not 
address the NPX (i.e. I/O cycles to other devices, 
interrupt acknowledge, and reserved types of bus 
cycles). System logic must not signal a 16-blt bus 
cycle via the 386 DX CPU BS16# input during I/O 
cycles when A31 Is active. 


During the CLK period in which ADS# is activated, 
the NPX also examines the W/R# input signal to 
determine whether the cycle is a read or a write cy- 
cle and examines the CMDO# input to determine 
whether an opcode, operand, or control /status reg- 
ister transfer Is to occur. 

The 387 DX NPX supports both pipelined and non- 
pipellned bus cycles. A nonpipellned cycle is one for 
which the 386 DX CPU asserts ADS# when no oth- 
er NPX bus cycle is in progress. A pipelined bus cy- 
cle is one for which the 386 DX CPU asserts ADS# 
and provides valid next-address and control signals 
as soon as in the second CLK period after the 
ADS# assertion for the previous 386 DX CPU bus 
cycle. Pipelining increases the availability of the bus 
by at least one CLK period. The NPX supports pipe- 
lined bus cycles in order to optimize address pipelin- 
ing by the 386 DX CPU for memory cycles. 

Bus operation is described In terms of an abstract 
state machine. Figure 3.4 illustrates the states and 
state transitions for NPX bus cycles: 

• T| is the idle state. This is the state of the bus 
logic after RESET, the state to which bus logic 
returns after evey nonpipellned bus cycle, and 
the state to which bus logic returns after a series 
of pipelined cycles. 

• Trs is the READY# sensitive state. Different 
types of bus cycle may require a minimum of one 
or two successive Trs states. The bus logic re- 
mains in Trs state until READY# Is sensed, at 
which point the bus cycle terminates. Any number 
of wait states may be implemented by delaying 
READY#, thereby causing additional successive 
Trs states. 

• Tp is the first stete for every pipelined hus nynle. 
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The READYO# output of the 387 DX NPX indicates 
when a bus cycle for the NPX may be terminated if 
no extra wait states are required. For all write cycles 
(except those for the instructions FLDENV and 
FRSTOR), READYO# is always asserted in the first 
Trs state, regardless of the number of wait states. 
For all read cycles and write cycles for FLDENV and 
FRSTOR, READYO# Is always asserted in the sec- 
ond Trs state, regardless of the number of wait 
states. These rules apply to both pipelined and non- 
pipelined cycles. Systems designers must use 
READYO# in one of the following ways: 

1 . Connect it (directly or through logic that ORs 
READY signals from other devices) to the 
READY# Inputs of the 386 DX CPU and 387 DX 
NPX. 

2. Use it as one Input to a wait-state generator. 

The following sections illustrate different types of 
NPX bus cycles. 

Because different instructions have different 
amounts of overhead before, between, and after op- 
erand transfer cycles, it is not possible to represent 
in a few diagrams ail of the combinations of succes- 
sive operand transfer cycles. The following bus-cy- 
cle diagrams show memory cycles between NPX op- 
erand-transfer cycles. Note however that, during the 
instructions FLDENV, FSTENV, FSAVE, and 
FRSTOR, some consecutive accesses to the NPX 
do not have intervening memory accesses. For the 
timing relationship between operand transfer cycles 
and opcode write or other overhead activities, see 
Figure 3.8. 

3.4.1 NONPIPELINED BUS CYCLES 

Figure 3.5 illustrates bus activity for consecutive 
nonpipellned bus cycles. 

3.4.1. 1 Write Cycle 

At the second clock of the bus cycle, the 387 DX 
NPX enters the Trs (READY# -sensitive) state. Dur- 
ing this state, the 387 DX NPX samples the 
READY# input and stays In this state as long as 
READY# is inactive. 


In write cycles, the NPX drives the READYO# signal 
for one CLK period beginning with the second CLK 
of the bus cycle; therefore, the fastest write cycle 
takes two CLK cycles (see cycle 2 of Figure 3.5). For 
the instructions FLDENV and FRSTOR, however, 
the NPX forces a wait state by delaying the activa- 
tion of READYO# to the second Trs cycle (not 
shown in Figure 3.5). 

When READY# is asserted the NPX returns to the 
idle state, in which ADS# could be asserted again 
by the 386 DX Microprocessor for the next cycle. 

3.4. 1.2 Read Cycle 

At the second clock of the bus cycle, the NPX enters 
the Trs state. See Figure 3.5. In this state, the NPX 
samples the READY# input and stays in this state 
as long as READY# is Inactive. 

At the rising edge of CLK In the second clock period 
of the cycle, the NPX starts to drive the D31-D0 
outputs and continues to drive them as long as it 
stays in Trs state. 

In read cycles that address the NPX, at least one 
wait state must be Inserted to insure that the 386 DX 
CPU latches the correct data. Since the NPX starts 
driving the system data bus only at the rising edge of 
CLK in the second clock period of the bus cycle, not 
enough time is left for the data signals to propagate 
and be latched by the 386 DX CPU at the falling edge 
of the same clock period. The NPX drives the 
READYO# signal for one CLK period in the third 
CLK of the bus cycle. Therefore, If the READYO# 
output is used to drive the 386 DX CPU READY# 
input, one wait state is inserted automatically. 

Because one wait state Is required for NPX reads, 
the minimum is three CLK cycles per read, as cycle 
3 of Figure 3.5 shows. 

When READY# is asserted the NPX returns to the 
idle state, in which ADS# could be asserted again 
by the 386 DX CPU for the next cycle. The transition 
from Trs state to Idle state causes the NPX to put 
the tristate D31 -DO outputs into the floating state, 
allowing another device to drive the system data 
bus. 
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Cycles 1 & 2 represent part of the operand transfer cycle for instructions involving either 4-byte or 8-byte operand loads. 
Cycles 3 & 4 represent part of the operand transfer cycle for a store operation. 

*Cycles 1 & 2 could repeat here or T| states for various non-operand transfer cycles and overhead. 


Figure 3.5. NonpipeIJned Read and Write Cycies 


3A.2 PIPELINED BUS CYCLES 

Because all the activities of the 387 DX NPX bus 
interface occur either during the Trs state or during 
the transitions to or from that state, the only differ- 
ence between a pipelined and a nonpipelined cycle 
is the manner of changing from one state to another. 
The exact activities in each state are detailed In the 
previous section “Nonpipelined Bus Cycles”. 

When the 386 DX CPU asserts ADS# before the 
end of a bus cycle, both ADS# and READY# are 
active during a Trs state. This condition causes the 
NPX to change to a different state named Tp. The 
NPX activities in the transition from a Trs state to a 
Tp state are exactly the same as those in the tran- 
sition frorri a Trs state to a T| state in nonpipelined 
cycles. 


Tp state is metastable; therefore, one clock period 
later the NPX returns to Trs state. In consecutive 
pipelined cycles, the NPX bus logic uses only Trs 
and Tp states. 

Figure 3.6 shows the fastest transition Into and out 
of the pipelined bus cycles. Cycle 1 in this figure 
represents a nonpipelined cycle. (Nonpipelined write 
cycles with only one Trs state (i.e. no wait states) 
are always followed by another nonpipelined cycle, 
because READY# is asserted before the earliest 
possible assertion of ADS# for the next cycle.) 

Figure 3.7 shows the pipelined write and read cycles 
with one additional Trs states beyond the minimum 
required. To delay the assertion of READY# re- 
quires external logic. 
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3.4.3 BUS CYCLES OF MIXED TYPE 

When the 387 DX NPX bus logic is in the Trs state, 
it distinguishes between nonpipelined and pipelined 
cycles according to the behavior of ADS# and 
READY#. In a nonpipelined cycle, only READY# is 
activated, and the transition is from Trs to idle state. 
In a pipelined cycle, both READY# and ADS# are 
active and the transition is first from Trs state to Tp 
state then, after one clock period, back to Trs state. 

3.4.4 BUSY# AND PEREQ TIMING 
RELATIONSHIP 

Figure 3.8 shows the activation of BUSY# at the 
beginning of Instruction execution and its deactiva- 


tion after execution of the instruction is complete. 
When possible, the 387 DX NPX may deactivate 
BUSY# prior to the completion of the current in- 
struction allowing the CPU to transfer the next in- 
struction’s opcode and operands. PEREQ is activat- 
ed in this interval. If ERROR# (not shown in the 
diagram) is ever asserted, it would occur at least six 
CPUCLK2 periods after the deactivation of PEREQ 
and at least six CPUCLK2 periods before the deacti- 
vation of BUSY#. Figure 3.8 shows also that STEM 
is activated at the beginning of a bus cycle. 
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Cycle 1 -Cycle 4 represent the operand transfer cycle for an instruction involving a transfer of two 32-bit loads in total. 
The opcode write cycles and other overhead are not shown. 

Note that the next cycle will be a pipelined cycle If both READY# and ADS# are sampled active at the end of a Trs 
state of the current cycle. 


Figure 3.6. Fastest Transitions to and from Pipelined Cycles 
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NOTE: 

1. Cycles between operand write to the NPX and storing result. 


Figure 3.7. Pipelined Cycles with Wait States 



NOTES: 

1. Instruction dependent. 

2. PEREQ is an asynchronous input to the 386 tm dx Microprocessor; it may not be asserted (instruction dependent). 

3. More operand transfers. 

4. Memory read (operand) cycle is not shown. 


Figure 3.8. STEN, BUSY# and PEREQ Timing Relationship 
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4.0 ELECTRICAL DATA 

4.1 Absolute Maximum Ratings* 

Case Temperature Tc 

Under Bias - 65^0 to + 1 1 0°C 

Storage Temperature - 65®C to + 1 50®C 

Voltage on Any Pin with 

Respect to Ground - 0.5 to Vcc + 0-5V 

Power Dissipation 1 .5W 


* Notice: Stresses above those listed under “Abso- 
lute Maximum Ratings” may cause permanent dam- 
age to the device. This is a stress rating only and 
functional operation of the device at these or any 
other conditions above those indicated in the opera- 
tional sections of this specification is not implied. Ex- 
posure to absolute maximum rating conditions for 
extended periods may affect device reliability. 

NOTICE: Specifications contained within the 
following tables are subject to change. 


4.2 D.C. Characteristics 


Table 5.1. DC Specifications Tc = 0® to &5°C, Vcc = 5V ± 5% 


Symbol 

Parameter 

Min 

Max 

Units 

Test Conditions 

V|L 

Input LO Voltage 

-0.3 

+ 0.8 

V 

(Notel) 

V|H 

Input HI Voltage 

2.0 

Vcc + 0-3 

V 

(Note 1) 

VCL 

CPUCLK2 Input LO Voltage 

-0.3 

+ 0.8 

V 


VcH 

CPUCLK2 Input HI Voltage 

3.7 

Vcc +0.3 

V 


VoL 

Output LO Voltage 


0.45 

V 

(Note 2) 

VoH 

Output HI Voltage 

2.4 


V 

(Note 3) 

•cc 

Supply Current 






NUMCLK2 = 32 MHz(4.6) 


250 

mA 

•cc ^yp- ^ 1 50 mA 


NUMCLK2 = 40 MHz(4,6) 


310 

mA 

^CC tyP- = 1 90 mA 


NUMCLK2 = 50 MHz(4,6) 


390 

mA 

Ice typ- = 250 mA 


NUMCLK2 = 66.6 MHz(4,5) 


250 

mA 

■cc typ. = 1 50 mA 

Ili 

Input Leakage Current 


±15 

JLtA 

OV ^ V|N ^ Vcc 

Ilo 

I/O Leakage Current 


±15 

/xA 

0.45V ^ Vo < Vcc 

C|N 

Input Capacitance 


10 

PF 

fc = 1 MHz 

Co 

I/O or Output Capacitance 


12 

PF 

fc = 1 MHz 

CcLK 

Clock Capacitance 


15 - 

pF 

fc = 1 MHz 


NOTES: 

1. This parameter is for all inputs, including NUMCLK2 but excluding CPUCLK2. 

2. This parameter is measured at Iql as follows: 
data = 4.0 mA 

READYO# = 2.5 mA 

ERROR#, BUSY#, PEREQ = 2.5 mA 

3. This parameter is measured at Iqh as follows: 
data = 1.0 mA 

READYO# = 0.6 mA 

ERROR#, BUSY#, PEREQ = 0.6 mA 

4. Ice is measured at steady state, maximum capacitive loading on the outputs, and worst-case DC level at the inputs; 
CPUCLK2 at the same frequency as NUMCLK2. 

5. Ice specification for 387 DX-33 only (low power CHMOS IV process). 

6. Ice specification for 387 DX-16, 20, 25 at corresponding maximum NUMCLK2 FREQ. 
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4.3 A.C. Characteristics 


Table 4.2a. Combinations of Bus Interface and Execution Speeds 


Functional Block 

80387-16 

80387-20 

80387-25 

80387DX-33 

Bus Interface Unit (MHz) 

16 

20 

25 

33 

Execution Unit (MHz) 

16 

20 

25 

33 


Table 4.2b. Timing Requirements of the Execution Unit 
Tc = 0°C to +85X, Vcc = 5V ±5% 





16 MHz 

20 MHz 

25 MHz 

33 MHz 

Test 

Conditions 

Figure 

Reference 

Pin 

Symbol 

Parameter 

Min 

(ns) 

Max 

(ns) 

Min 

(ns) 

Max 

(ns) 

Min 

(ns) 

Max 

(ns) 

Min 

(ns) 

Max 

(ns) 

NUMCLK2 

t1 

Period 

31.25 

125 

25 

125 

20 

125 

15 

125 

2.0V 

4.1 

NUMCLK2 

t2a 

High Time 

9 


8 


7 


6.25 


2.0V 


NUMCLK2 

t2b 

High Time 

5 


5 


4 


4.5 


3.7V 


NUMCLK2 

t3a 

Low Tirtie 

9 


8 


7 


6.25 


2.0V 


NUMCLK2 

t3b 

Low Time 

7 


6 


5 


4.5 


0.8V 


NUMCLK2 

t4 

Fall Time 


8 


8 


7 


6 

3.7V to 0.8V 


NUMCLK2 

t5 

Rise Time 


8 


8 


7 


6 

0.8V to 8.7V 



Table 4.2c. Timing Requirements of the Bus interface Unit 
Tc = 0°C to +85X, Vcc = 5V ±5% 

(Ail measurements made at 1.5V and Cl = 50 pF unless otherwise specified) 





16 MHz 

20 MHz 

25 MHz 

33 MHz 

Test 

Conditions 

Figure 

Reference 

Pin 

Symbol 

Parameter 

Min 

(ns) 

Max 

(ns) 

Min 

(ns) 

Max 

(ns) 

Min 

(ns) 

Max 

(ns) 

Min 

(ns) 

Max 

(ns) 

CPUCLK2 

t1 

Period 

31.25 

125 

25 

125 

20 

125 

15 

125 

2.0V 

4.1 

CPUCLK2 

t2a 

High Time 

9 


8 


7 


6.25 


2.0V 


CPUCLK2 

t2b 

High Time 

5 


5 


4 


4.5 


3.7V 


CPUCLK2 

t3a 

Low Time 

9 


8 


7 


6.25 


2.0V 


CPUCLK2 

t3b 

Low Time 

7 


6 


5 


4.5 


0.8V 


CPUCLK2 

t4 

Fall Timp 


8 


8 


7 


4 

3.7\/ to 0.8V 


CPUCLK2 

t5 

Rise Time 


8 


8 


7 


4 

0.8V to 3.7V 


CPUCLK2/ 

NUMCLK2 


Ratio 

10/16 

14/10 

10/16 

14/10 

10/16 

14/10 

10/16 

14/10 



READYO# 

t7 

Out Delay 

3 

34 

3 

31 

3 

24 

3 

17 

Cl = 75 pFt 

4.2 

READYO# (2) 

t7 

Out Delay 

4 

31 

3 

27 

3 

21 

3 

15 

Cl = 25 pFtt 


PEREQ (1) 

t7 

Out Delay 

5 

34 

5 

34 

4 

33 

4 

25 

Cl = 75 pFt 


BUSY# (1) 

t7 

Out Delay 

5 

34 

5 

29 

4 

29 

4 

21 

Cl = 75 pFt 


BUSY# (1.2) 

t7 

Out Delay 

N/A 

N/A 

N/A 

N/A 

4 

27 

4 

19 

Cl = 25 pFtt 


ERROR# (1) 

t7 

Out Delay 

5 

34 

5 

34 

4 

33 

4 

25 

Cl = 75 pFt 


D31 -DO 

t8 

Out Delay 

1 

54 

1 

54 

0 

40 

0 

37 

Cl = 120 pFt 

4.3 

D31-D0 

tio 

Setup Time 

11 


11 


11 


8 




D31 -DO 

til 

Hold Time 

11 


11 


11 


8 




D31-D0 (3) 

t12* 

Float Time 

6 

33 

6 

27 

5 

24 

3 

19 

Cl = 120 pFt 


PEREQ (3) 

t13* 

Float Time 

1 

60 

1 

50 

1 

40 

1 

30 

Cl = 75 pFt 

4.5 

BUSY# (3) 

t13* 

Float Time 

1 

60 

1 

50 

1 

40 

1 

30 

Cl = 75 pFt 


ERROR# (3) 

t13* 

Float Time 

1 

60 

1 

50 

1 

40 

1 

30 

Cl = 75 pFt 


READYO# (3) 

t13* 

Float Time 

1 

60 

1 

50 

i 

1 

40 

1 

30 

Cl = 75 pFt 



* Float condition occurs when maximum output current becomes less than Ilq in magnitude. Float delay is not tested. 
tFor 25 MHz and 33 MHz, Cl = 50 pF 
ttFor 33 MHz, Cl = 50 pF 
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Table 4.2c. Timing Requirements of the Bus Interface Unit (Continued) 

Tc = OX to +85X,Vcc = 5V ±5% 

(All measurements made at 1.5V and Cl = 50 pF unless otherwise specified) 


Pin 

Symbol 

Parameter 

16 MHz 

20 MHz 

25 MHz 

33 MHz 

Figure 

Reference 

Min 

(ns) 

Max 

(ns) 

Min 

(ns) 

Max 

(ns) 

Min 

(ns) 

Max 

(ns) 

Max 

(ns) 

Min 

(ns) 

ADS# 

t14 

Setup Time 

25 


20 


15 


13 


4.3 

ADS# 

t15 

Hold Time 

5 


5 


4 


4 



W/R# 

t14 

Setup Time 

25 


20 


15 


13 



W/R# 

t15 

Hold Time 

5 


5 


4 


4 



READY# 

t16 

Setup Time 

20 


11 


8 


7 



READY# 

t17 

Hold Time 

4 


4 


4 


4 



CMDO# 

tie 

Setup Time 

20 


18 


15 


13 



CMDO# 

t17 

Hold Time 

2 


2 


4 


4 



NPS1# 

tie 

Setup Time 

20 


18 


15 


13 



NPS2 












NPS1 # 

t17 

Hold Time 

2 


2 


4 


4 



NPS2 ■ 












STEM 

tie 

Setup Time 

20 


20 


14 


13 



STEN 

t17 

Hold Time 

2 


2 


2 


2 



RESETIN 

tie 

Setup Time 

13 


12 


10 


5 


4.4 

RESETIN 

t19 

Hold Time 

4 


4 


3 


3 




NOTES: 

1. PEREQ, BUSY#, ERROR# 

Out Delay 4 @ Tc = 0°C 

4 @ Tc = 85X 

2. Not tested at 25 pF. 

3. Float delay is not tested. Float condition occurs when maximum output current becomes less than Ilo in magnitude. 



Figure 4.0a. Typical Output Valid Delay vs Load 
Capacitance at Max Operating Temperature 



50 75 100 125 150 

240448-15 

NOTE: 

This graph will not be linear outside of the Cl range 
shown. 

Figure 4.0b. Typical Output Rise Time vs Load 
Capacitance at Max Operating Temperature 
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Table 4.3. Other Parameters 



Pin 

Symbol 

Parameter 

Min 

Max 

Units 

RESETIN 

t30 

Duration 

40 


NUMCLK2 

RESETIN 

t31 

RESETIN Inactive to 1st Opcode Write 

50 


NUMCLK2 

BUSY# 

t32 

Duration 

6 


CPUCLK2 

BUSY#, ERROR# 

t33 

ERROR# (In) Active to BUSY# Inactive 

6 


CPUCLK2 

PEREQ, ERROR# 

t34 

PEREQ Inactive to ERROR# Active 

6 



READY#, BUSY# 

t35 

READY# Active to BUSY# Active 

4 

4 

CPUCLK2 

READY# 

t36 

Minimum Time from Opcode Write to 
Opcode/Operand Write 

i 

6 


CPUCLK2 

READY# 

t37 

Minimum Time from Operand Write to 
Operand Write 

8 


CPUCLK2 
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Instruction 

Optional 

Fields 

First Byte 

Second Byte 


OPA 

1 


1 


m 



mounii 

MF 



OPB 

m 


■SB 


d 

P 


1 


OPB 

mm 




0 

0 

1 


1 

1 

OP 




0 

1 

1 

1 

1 

1 

OP 



15-11 

10 

9 

8 

7 

6 

5 

4 3 2 1 0 




5.0 387 TM DX NPX EXTENSIONS TO 
THE 386 TM DX CPU 
INSTRUCTION SET 

Instructions for the 387 DX NPX assume one of the 
five forms shown in the following table. In all cases, 
instructions are at least two bytes long and begin 
with the bit pattern 11 011 B, which identifies the 
ESCAPE class of Instruction. Instructions that refer 
to memory operands specify addresses using the 
386 DX CPU addressing modes. 

OP = Instruction opcode, possible split into two 
fields OPA and OPB 

MF = Memory Format 

00— 32-bit real 

01 — 32-bit integer 

1 0— 64-bit real 

11 — 16-bit integer 

P = Pop 

0 — Do not pop stack 

1 — Pop stack after operation 

ESC = 11011 

d = Destination 

0 — Destination Is ST(0) 

1 — Destination is ST(i) 

R XOR d = 0— Destination (op) Source 
R XOR d = 1 — Source (op) Destination 


ST(i) = Register stack element / 

000 = Stack top 

001 = Second stack element 


111 = Eighth stack element 

MOD (Mode field) and R/M (Register/Memory spec- 
ifier) have the same interpretation as the corre- 
sponding fields of the 386 DX Microprocessor in- 
structions (refer to 386^^ DX Microprocessor Pro- 
grammer’s Reference Manual). 

SIB (Scale Index Base) byte and DISP (displace- 
ment) are optionally present in instructions that have 
MOD and R/M fields. Their presence depends on 
the values of MOD and R/M, as for 386 DX Micro- 
processor Instructions. 

The Instruction summaries that follow assume that 
the instruction has been prefetched, decoded, and is 
ready for execution; that bus cycles do not require 
wait states; that there are no local bus HOLD re- 
quest delaying processor access to the bus; and 
that no exceptions are detected during instruction 
execution. If the instruction has MOD and R/M fields 
that call for both base and Index registers, add one 
clock. 
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SSyTM DX NPX Extensions to the 386™ dX CPU instruction Set 



Encoding 

Clock Count Range | 

Instruction 

Byte 

Byte 

Optional 

32-Bit 

32-Bit 

64-Blt 

16-Bit 


0 

1 

Bytes 2-6 

Real 

Integer 

Real 

Integer 


DATA TRANSFER 

FLD = Loada 

Integer/real memory to ST(0) 

Long integer memory to ST(0) 
Extended real memory to ST(0) 
BCD memory to ST(0) 

ST(i) to ST(0) 

FST = Store 

ST(0) to integer/real memory 
ST(0) to ST(i) 

FSTP = Store and Pop 
ST(0) to integer/reai memory 
ST(0) to long integer memory 
ST(0) to extended real 
ST(0) to BCD memory 
ST{0) to ST(i). 

FXCH = Exchange 
ST(i) and ST(0) 

COMPARISON 
FCOM = Compare 
Integer/real memory to ST(0) 

ST(i) to ST(0) 

FCOMP = Compare and pop 
Integer/real memory to ST 

ST{i) to ST(0) 

FCOMPP == Compare and pop twice 
ST(1) to ST{0) 

FTST = Test ST(0) 

FUOOM == Urtorcterect compare 

fUCOMP ” UnfM'dered compare 
and pop 

FUCOMPP =“ Unofdered compare 
and pop twice 

FXAM = Examine ST(0) 

CONSTANTS 

FLDZ = Load + 0.0 into ST(0) 

FLD1 = Load + 1 .0 into ST(0) 
FLDPI = Load pi into ST(0) 

FLDL2T = Load Iog2(10) into ST(0) 


ESC MF 1 


ESC 111 


ESC 111 


ESC 001 


ESC MF 1 


ESC 111 


ESC 1 1 1 


ESC 101 


ESC 001 


ESC 000 


ESC 000 


ESC 110 


ESC 001 


fcSGIOI 


ESC 101 


ESC 010 


ESC 001 


ESC 001 


ESC 001 


ESC 001 


MOD 000 R/M 


MOD 101 R/M 


ESC Oil I MOD 101 r7^ 


MOD 100 R/M 


IIOOOST(i) 


ESC MF 1 I MOD 010 R/M 


ESC 101 I llOIOSf^ 


MOD oil R/M 


MOD 111 R/M 


MOD 111 R/M 


MOD 110 R/M 


11011 ST(i) 


11001 ST(i) 


ESCMFO 


MOD 010 R/M 


IIOIOST(i) 


ESC MF 0 


MOD oil R/M 


11011 ST(i) 


1101 1001 


11100100 


SIB/DISP 


SIB/DISP 


SIB/DISP 


SIB/DISP 


SIB/DISP 


SIB/DISP 


SIB/DISP 


SIB/DISP 


SIB/DISP 


11100ST(<1 


11101 STH) 


11101001 


11100101 


43 


63-76 


63-76 


35-42 23 

43-54 
43 

69-97 

12 

62-76 44 

11 

62-76 44 

65-82 
52 

134-190 

11 

17 


25 45-52 27 58-62 

21 

25 45-52 27 58-62 

21 

21 

25 

21 

21 

21 

29-37 

17 
22 
36 
36 - 


Shaded areas indicate instructions not available in 8087/80287. 


NOTE: 

a. When loading single- or double-precision zero from memory, add 5 clocks. 
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387 TM DX NPX Extensions to the 386 tm dx CPU Instruction Set (Continued) 



Encoding 

Clock Count Range 

Instruction 

Byte 

Byte 

Optional 

32-Bit 

32-Bit 

64-Bit 

16-Bit 


0 

1 

Bytes 2-6 

Real 

Integer 

Real 

Integer 


CONSTANTS (Continued) 


FLDL2E = Load log 2 (e) into ST(0) 

ESC 001 

11101010 1 

36 

FLDLG2 = Load logio(2) into ST(0) 

ESC 001 

11101100 1 

35 

FLDLN2 = Load loge(2) into ST(0) 

ESC 001 

11101101 I 

38 

ARITHMETIC 



, 

FADD = Add 




Integer/real memory with ST(0) 

ESC MF 0 

MOD 000 R/M 

SIB/DISP 

21-29 41-56 26-34 53-64 

ST(i) and ST{0) 

ESC d P 0 

IIOOOST(i) 1 

18-26b 

FSUB = Subtract 




Integer/ real memory with ST(0) 

ESC MF 0 

MOD 10 R R/M 

SIB/DISP 

21-29 41-56 26-34 53-64C 

ST(i) and ST(0) 

ESC d P 0 

1110RR/M 1 

18-26d 

FMUL = Multiply 




Integer/ real memory with ST(0) 

ESC MF 0 

MOD 001 R/M 

SIB/DISP 

24-32 50-71 28-53 63-74 

ST(i) and ST(0) 

ESC d P 0 

11001 R/M 1 

22-506 

FDIV = Divide 




Integer/real memory with ST(0) 

ESC MF 0 

MOD 11 RR/M 

SIB/DISP 

85 107-1 14f 91 120-1249 

ST(i) and ST(0) 

ESC d P 0 

1111 RR/M 1 

80h 

FSQRT' = Square root 

ESC 001 

11111010 1 

104-111 

FSCALE = Scale ST(0) by ST(1) 

ESC 001 

11111101 1 

63-82 

FPREM = Partial remainder 

ESC 001 

1111 1000 1 

60-140 

FPREM1 = Partial remainder 




(IEEE) 

ESC 001 ■ 

1111 0101 1 

78-168 

FRNDINT = Round ST(0) 

ESC 001 

1111 1100 


48-62 

to integer 





EXTRACT = Extract components 




of ST(0) 

ESC 001 

11110100 1 

57-63 

FABS = Absolute value of ST(0) 

ESC 001 

1110 0001 i 

21 

FCHS = Change sign of ST(0) 

ESC 001 

1110 0000 1 

23-24 


Shaded areas indicate instructions not available in 8087/80287. 

NOTES: 

b. Add 3 clocks to the range when d = 1 . 

c. Add 1 clock to each range when R = 1 . 

d. Add 3 clocks to the range when d = 0. 

e. typical = 52 (When d = 0, 46-54, typical = 49). 

f. Add 1 clock to the range when R = 1 . 

g. 135-141 when R = 1. 

h. Add 3 clocks to the range when d = 1 . 

i. -0 ^ ST(0) ^ + oo. 


4-339 




387 TM DX MATH COPROCESSOR 




iny 


387 TM DX NPX Extensions to the 386 tm dx CPU Instruction Set (Continued) 



Encoding 


Instruction 

Byte 

Byte 

Optionai 

Clock Count Range 


0 

1 

Bytes 2-6 



TRANSCENDENTAL 
WCOBH - Co$fneofST(0) 

FPTANk = Partial tangent of ST(0) 
FPATAN = Partial arctangent 
FSlNlc«SinoofST(0| 

FStNCOS*^ = Sine and cosine of ST<0) 
F2XM1» = 2ST(0) - 1 
FYL2Xm = ST(1) * log2(ST(0)) 
FYL2XPin = ST(1) * log2(ST(0) + 1.0) 
PROCESSOR CONTROL 

FINIT = Initialize NPX 
FSTSW AX = Store status word 
FLDCW = Load control word 
FSTCW = Store control word 
FSTSW = Store status word 
FCLEX = Clear exceptions 
FSTENV = Store environment 
FLDENV = Load environment 
FSAVE = Save state 
FRSTOR = Restore state 
FINCSTP = Increment stack pointer 
FDECSTP = Decrement stack pointer 
FFREE = Free ST(i) 

FNOP = No operations 


ESC 001 


ESC 001 


ESC 001 


ESC 001 


ESC 001 


ESC 001 


ESC Oil 


ESC 111 


ESC 001 


ESC 101 


ESC oil 


ESC 001 


ESC 001 


ESC 101 


ESC 101 


ESC 001 


ESC 001 


ESC 101 


ESC 001 


till 1111 


1111 0010 


1111 0011 


1111 1011 


MOD 101 R/M 


MOD 1 1 1 R/M 


MOD 111 R/M 


1110 0010 


MOD 110 R/M 


MOD 100 R/M 


MOD 110 R/M 


MOD 100 R/M 


1111 0110 


IIOOOST(i) 


1101 0000 


SIB/DISP 


SIB/DISP 


SIB/DISP 


SIB/DISP 


SIB/DISP 


SIB/DISP 


SIB/DISP 


122-680 

162-430i 

250-420 

121-880 

150-650 

167-410 

99-436 

210-447 

33 

13 

19 

15 

15 

11 

103-104 

71 

375-376 

308 

21 

22 

18 

12 


Shaded areas indicate instructions not available in 8087/80287. 

NOTES: 

j. These timings hold for operands in the range |x| < tt/A. For operands not in this range, up to 76 additional clocks may be 
needed to reduce the operand. 

k. 0 ^ I ST(0) I < 263. 

l. -1.0 ^ ST(0) ^ 1.0. 

m. 0 ^ ST(0) < oo, -oo < ST(1) < +00. 

n. 0 ^ |ST(0)| < (2 - SQRT(2))/2, -oo < ST(1) < +oo. 
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APPENDIX A 

COMPATIBILITY BETWEEN 
THE 80287 AND THE 8087 


The 80286/80287 operating in Real-Address mode 
will execute 8086/8087 programs without major 
modification. However, because of differences in the 
handling of numeric exceptions by the 80287 NPX 
and the 8087 NPX, exception-handling routines may 
need to be changed. 

This appendix summarizes the differences between 
the 80287 NPX and the 8087 NPX, and provides 
details showing how 8086/8087 programs can be 
ported to the 80286/80287. 

1. The NPX signals exceptions through a dedicated 
ERROR# line to the 80286. The NPX error signal 
does not pass through an interrupt controller (the 
8087 INT signal does). Therefore, any interrupt- 
controller-oriented Instructions in numeric excep- 
tion handlers for the 8086/8087 should be delet- 
ed. 

2. The 8087 instructions FENI/FNENI and FDISf/ 
FNDISI perform no useful function in the 80287. If 
the 80287 encounters one of these opcodes In its 
instruction stream, the instruction will effectively 
be ignored — none of the 80287 internal states will 
be updated. While 8086/8087 containing these 
Instructions may be executed on the 
S02S6/S02S7, it is unlikely that the exception- 
handling routines containing these Instructions 
will be completely portable to the 80287. 

3. Interrupt vector 16 must point to the numeric ex- 
ception handling routine. 

4. The ESC instruction address saved in the 80287 
includes any leading prefixes before the ESC op- 
code. The corresponding address saved in the 
8087 does not include leading prefixes. 

5. In Protected-Address mode, the format of the 
80287’s saved instruction and address pointers is 
different than for the 8087. The instruction op- 
code Is not saved in Protected mode— exception 
handlers will have to retrieve the opcode from 
memory If needed. 

6. Interrupt 7 will occur In the 80286 when executing 
ESC Instructions with either TS (task switched) or 
EM (emulation) of the 80286 MSW set (TS = 1 or 
EM = 1). If TS Is set, then a WAIT Instruction will 


also cause interrupt 7. An exception handler 
should be Included in 80286/80287 code to han- 
dle these situations. 

7. Interrupt 9 will occur if the second or subsequent 
words of a floating-point operand fall outside a 
segment’s size. Interrupt 13 will occur if the start- 
ing address of a numeric operand falls outside a 
segment’s size. An exception handler should be 
included in 80286/80287 code to report these 
programming errors. 

8. Except for the processor control Instructions, all 
of the 80287 numeric Instructions are automati- 
cally synchronized by the 80286 CPU — the 80286 
automatically tests the BUSY# line from the 
80287 to ensure that the 80287 has completed its 
previous instruction before executing the next 
ESC instruction. No explicit WAIT instructions are 
required to assure this synchronization. For the 
8087 used with 8086 and 8088 processors, ex- 
plicit WAITS are required before each numeric in- 
struction to ensure synchronization. Although 
8086/8087 programs having explicit WAIT in- 
structions will execute perfectly on the 
80286/80287 without reassembly, these WAIT in- 
structions are unnecessary. 

3. Since the S02S7 docs not require WAIT instruc- 
tions before each numeric instruction, the 
ASM266 assembler does not auiomaticaHy gener- 
ate these WAIT instructions. The ASM86 assem- 
bler, however, automatically precedes every ESC 
instruction with a WAIT instruction. Although nu- 
meric routines generated using the ASM86 as- 
sembler will generally execute correctly on the 
80286/80287, reassembly using ASM286 may re- 
sult in a more compact code image. 

The processor control instructions for the 80287 
may be coded using either a WAIT or No-WAIT 
form of mnemonic. The WAIT forms of these in- 
structions cause ASM286 to precede the ESC in- 
struction with a CPU WAIT instruction, in the iden- 
tical manner as does ASM86. 
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HIGH PERFORMANCE 
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Improves 386 tm dX System 

Performance 

— Reduces Average CPU Wait States to 
Nearly Zero 

— Zero Wait State Read Hit 

— Zero Wait State Posted Memory 
Writes 

— Allows Other Masters to Access the 
System Bus More Readily 

Hit Rates up to 99% 

Optimized as 386 DX Companion 

— Simple 386 DX Interface 

— Part of 386 DX-Based Compute 
Engine Including 387 tm dX Math 
Coprocessor and 82380 Integrated 
System Peripheral 

— 16 MHz, 20 MHz, 25 MHz, and 33 MHz 
Operation 

Software Transparent 


■ Synchronous Dual Bus Architecture 
— Bus Watching Maintains Cache 

Coherency 

m Maps Full 386 DX Address Space 
(4 Gigabytes) 

■ Flexible Cache Mapping Policies 
— Direct Mapped or 2-Way Set 

Associative Cache Organization 
— Supports Non-Cacheable Memory 
Space 

— Unified Cache for Code and Data 

GB Integrates Cache Directory and Cache 
Management Logic 

m High Speed CHMOS III Technology 
m 132-Pin PGA Package 
m 132-Lead Plastic Quad Flat Pack (PQFP) 


The 82385 Cache Controller is a high performance 32-bit peripheral for the Intel386 Microprocessor. It stores 
a copy of frequently accessed code and data from main memory in a zero wait state local cache memory. The 
82385 enables the 386 DX to run at its full potential by reducing the average number of CPU wait states to 
nearly zero. The dual bus architecture of the 82385 allows other masters to access system resources while the 
386 DX operates locally out of its cache. In this situation, the 82385’s “bus watching” mechanism preserves 
cache coherency by monitoring the system bus address lines at no cost to system or local throughput. 

The 82385 is completely software transparent, protecting the integrity of system software. High performance 
and board savings are achieved because the 82385 integrates a cache directory and ail cache management 
logic on one chip. 


82385 LOCAL 
BUS CONTROL 
BUS 

ARBITRATION 


386^^ DX LOCAL 
BUS CONTROL 
386 DX LOCAL 
BUS DECODES 



386 DX 
ADDRESS BUS 

SNOOP BUS 


CACHE 

CONTROL BUS 


82385 CONFIGURATION 


290143-1 


82385 Internal Block Diagram 


lntel386TM, 386 tm DX, 38?™ DX are trademarks of Intel Corporation. 
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1.0 82385 FUNCTIONAL OVERVIEW 

The 82385 Cache Controller is a high performance 
32-bit peripheral for the Intel386 microprocessor. 
This chapter provides an overview of the 82385, and 
of the basic architecture and operation of an 386 DX 
CPU/82385 system. 


1.1 82385 OVERVIEW 

The main function of a cache memory system is to 
provide fast local storage for frequently accessed 
code and data. The cache system intercepts 386 DX 
memory references to see if the required data re- 
sides in the cache. If the data resides in the cache (a 
hit), it is returned to the 386 DX without incurring wait 
states. If the data Is not cached (a miss), the refer- 
ence Is forwarded to the system and the data re- 
trieved from main memory. An efficient cache will 
yield a high “hit rate” (the ratio of cache hits to total 
386 DX accesses), such that the majority of access- 
es are serviced with zero wait states. The net effect 
is that the wait states incurred in a relatively infre- 
quent miss are averaged over a large number of ac- 
cesses, resulting in an average of nearly zero wait 


states per access. Since cache hits are serviced lo- 
cally, a processor operating out of Its local cache 
has a much lower “bus utilization” which reduces 
system bus bandwidth requirements, making more 
bandwidth available to other bus masters. 

The 82385 Cache Controller Integrates a cache di- 
rectory and all cache management logic required to 
support an external 32 Kbyte cache. The cache di- 
rectory structure Is such that the entire physical ad- 
dress range of the 386 DX (4 Gigabytes) Is mapped 
into the cache. Provision is made to allow areas of 
memory to be set aside as non-cacheable. The user 
has two cache organization options: direct mapped 
and 2-way set associative. Both provide the high hit 
rates necessary to make a large, relatively slow 
main memory array look like a fast, zero wait state 
memory to the 386 DX. 


1.2 SYSTEM OVERVIEW I: 

BUS STRUCTURE 

A good grasp of the bus structure of a 386 DX CPU/ 
82385 system is essential in understanding both the 
82385 and Its role in an 386 DX system. The follow- 
ing is a description of this structure. 
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1.2.1 386 DX Local Bus/82385 Local 
Bus/System Bus 

Figure 1-1 depicts the bus structure of a typical 386 
DX system. The “386 DX Local Bus” consists of the 
physical 386 DX address, data, and control busses. 
The local address and data busses are buffered 
and/or latched to become the “system” address 
and data busses. The local control bus Is decoded 
by bus control logic to generate the various system 
bus read and write commands. 

The addition of an 82385 Cache Controller causes a 
separation of the 386 DX bus into two distinct bus- 
ses: the actual 386 DX local bus and the “82385 
Local Bus” (Figure 1-2). The 82385 local bus is de- 
signed to look like the front end of an 386 DX by 
providing 82385 local bus equivalents to all appropri- 
ate 386 DX signals. The system ties to this “386 DX- 
like” front end just as it would to an actual 386 DX. 
The 386 DX simply sees a fast system bus, and the 
system sees a 386 DX front end with low bus band- 
width requirements. The cache subsystem is trans- 
parent to both. Note that the 82385 local bus is not 
simply a buffered version of the 386 DX bus, but 
rather is distinct from, and able to operate in parallel 
with the 386 DX bus. Other masters residing on ei- 
ther the 82385 local bus or system bus are free to 
manage system resources while the 386 DX oper- 
ates out of its cache. 


1.2.2 Bus Arbitration 

The 82385 presents the “386 DX-like” interface 
which is called the 82385 local bus. Whereas the 
386 DX provides a Hold Request/Hold Acknowl- 
edge bus arbitration mechanism via its HOLD and 
HLDA pins, the 82385 provides an equivalent mech- 
anism via its BHOLD and BHLDA pins. (These sig- 
nals are described in Section 3.7.) When another 
master requests the 82385 local bus, it issues the 
request to the 82385 via BHOLD. Typically, at the 
end of the current 82385 local bus cycle, the 82385 
will release the 82385 local bus and acknowledge 
the request via BHLDA. The 386 DX is of course free 
to continue operating on the 386 DX local bus while 
another master owns the 82385 local bus. 


1.2.3 Masier/Siave Operation 

The above 82385 local bus arbitration discussion is 
true when the 82385 is programmed for “Master” 
mode operation. The user can, however, configure 
the 82385 for “Slave” mode operation. (Program- 
ming is done via a hardware strap option.) The roles 
of BHOLD and BHLDA are reversed for an 82385 in 
slave mode; BHOLD is now an output indicating a 
request to control the bus, and BHLDA is an input 
indicating that a request has been granted. An 
82385 programmed in slave mode drives the 82385 
local bus only when it has requested and subse- 
quently been granted bus control. This allows multi- 
ple 386 DX CPU/82385 subsystems to reside on the 
same 82385 local bus (Figure 1-3). 



Figure 1-2. 386 tm dX CPU/82385 System Bus Structure 
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Figure 1-3. Multi-Master/Multi-Cache Environment 


1.2.4 Cache Coherency 

Ideally, a cache contains a copy of the most heavily 
used portions of main memory. To maintain cache 
“coherency” is to make sure that this local copy is 
identical to main memory. In a system where multi- 
ple masters can access the same memory, there is 
always a risk that one master will alter the contents 
of a memory location that is duplicated In the local 
cache of another master. (The cache is said to con- 
tain “stale” data.) One rather restrictive solution is to 
not allow cache subsystems to cache shared memo- 
ry. Another simple solution is to flush the cache any- 
time another master writes to system memory. How- 
ever, this can seriously dfinradG system perform- 
ance as excessive cache flushing will reduce the hit 


rate of what may otherwise be a highly efficient 
cache. 

The 82385 preserves cache coherency via “bus 
watching” (also called snooping), a technique that 
neither impacts performance nor restricts memory 
mapping. An 82385 that is not currently bus master 
monitors system bus cycles, and when a write cycle 
by another master Is detected (a snoop), the system 
address Is sampled and used to see if the refer- 
enced location is duplicated In the cache. If so (a 
snoop hit), the corresponding cache entry is invali- 
dated, which will force the 386 DX to fetch the up-to- 
date data from main memory the next time it access- 
es this modified location. Figure 1-4 depicts the gen- 
eral form of bus watching. 



Figure 1-4. 82385 Bus Watching— Monitor System Bus Write Cycles 
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1.3 SYSTEM OVERVIEW II; 

BASIC OPERATION 

This discussion is an overview of the basic operation 
of an 386 DX CPU/82385 system. Items discussed 
include the 82385’s response to all 386 DX cycles, 
including interrupt acknowledges, halts, and shut- 
downs. Also discussed are non-cacheable and local 
accesses. 


1.3.1 386 DX Memory Code and Data 
Read Cycles 

1.3.1.1 READ HITS 

When the 386 DX initiates a memory code or data 
read cycle, the 82385 compares the high order bits 
of the 386 DX address bus with the appropriate ad- 
dresses (tags) stored in its on-chip directory. (The 
directory structure is described In Chapter 2.) If the 
82385 determines that the requested data Is In the 
cache, it issues the appropriate control signals that 
direct the cache to drive the requested data onto the 
386 DX data bus, where it is read by the 386 DX. 
The 82385 terminates the 386 DX cycle without in- 
serting any wait states. 

1.3.1.2 READ MISSES 

If the 82385 determines that the requested data Is 
not in the cache, the request is forwarded to the 
82385 local bus and the data retrieved from main 
memory. As the data returns from main memory, it is 
directed to the 386 DX and also written Into the 
cache. Concurrently, the 82385 updates the cache 
directory such that the next time this particular piece 
of information is requested by the 386 DX, the 
82385 will find it in the cache and return It with zero 
wait states. 

The basic unit of transfer between main memory and 
cache memory in a cache subsystem is called the 
line size. In an 82385 system, the line size is one 32- 
blt aligned doubleword. During a read miss, all four 
82385 local bus byte enables are active. This en- 
sures that a full 32-bit entry is written into the cache. 
(The 386 DX simply ignores what it did not request.) 
In any other type of 386 DX cycle that is forwarded 
to the 82385 local bus, the logic levels of the 386 DX 
byte enables are duplicated on the 82385 local bus. 

The 82385 does not actively fetch main memory 
data independently of the 386 DX. The 82385 is es- 
sentially a passive device which only monitors the 
address bus and activates control signals. The read 
miss is the only mechanism by which main memory 
data is copied into the cache and validated in the 
cache directory. 


In an isolated read miss, the number of wait states 
seen by the 386 DX is that required by the system 
memory to respond with data plus the cache com- 
parison cycle (hit/miss decision). The cache system 
must determine that the cycle is a miss before it can 
begin the system memory access. However, since 
misses most often occur consecutively, the 82385 
will begin 386 DX address pipelined cycles to effec- 
tively “hide” the comparison cycle beyond the first 
miss (refer to Section 4.1.3). 

The 82385 can execute a main memory access on 
the 82385 local bus only if it currently owns the bus. 
If not, an 82385 in master mode will run the cycle 
after the current master releases the bus. An 82385 
In slave mode will issue a hold request, and will run 
the cycle as soon as the request Is acknowledged. 
(This is true for any read or write cycle that needs to 
run on the 82385 local bus.) 


1.3.2 386 DX Memory Write Cycles 

The 82385’s “posted write” capability allows the 
majority of 386 DX memory write cycles to run with 
zero wait states. The primary memory update policy 
implemented in a posted write is the traditional 
cache “write through” technique, which implies that 
main memory Is always updated in any memory write 
cycle. If the referenced location also happens to re- 
side in the cache (a write hit), the cache is updated 
as well. 

Beyond this, a posted write latches the 386 DX ad- 
dress, data, and cycle definition signals, and the 386 
DX local bus cycle is terminated without any wait 
states, even though the corresponding 82385 local 
bus cycle is not yet completed, or perhaps not even 
started. A posted write is possible because the 
82385’s bus state machine, which is almost identical 
to the 386 DX bus state machine, is able to run 
82385 local bus cycles independently of the 386 DX. 
The only time the 386 DX sees write cycle wait 
states is when a previously latched (posted) write 
has not yet been completed on the 82385 local bus 
or during an I/O write (which is not posted). A 386 
DX write can be posted even if the 82385 does not 
currently own the 82385 local bus. In this case, an 
82385 in master mode will run the cycle as soon as 
the current master releases the bus, and an 82385 
in slave mode will request the bus and run the cycle 
when the request is acknowledged. The 386 DX is 
free to continue operating out of its cache (on the 
386 DX local bus) during this time. 


1.3.3 Non-Cacheable Cycles 

Non-cacheable cycles fall into one of two catego- 
ries: cycles decoded as non-cacheable, and cycles 
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that are by default non-cacheable according to the 
82385’s design. All non-cacheable cycles are for- 
warded to the 82385 local bus. Non-cacheable cy- 
cles have no effect on the cache or cache directory. 

The 82385 allows the system designer to define ar- 
eas of main memory as non-cacheable. The 386 DX 
address bus is decoded and the decode output is 
connected to the 82385’s non-cacheable access 
(NCA#) input. This decoding is done in the first 386 
DX bus state in which the non-cacheable cycle ad- 
dress becomes available. Non-cacheable read cy- 
cles resemble cacheable read miss cycles, except 
that the cache and cache directory are unaffected. 
NCA defined non-cacheable writes, like most writes, 
are posted. 

The 82385 defines certain cycles as non-cacheable 
without using its non-cacheable access input. These 
include I/O cycles. Interrupt acknowledge cycles, 
and halt/shutdown cycles. I/O reads and interrupt 
acknowledge cycles execute as any other non- 
cacheable read. I/O write cycles are not posted. The 
386 DX is not allowed to continue until a ready signal 
is returned from the system. Halt/Shutdown cycles 
are posted. During a halt/shutdown condition, the 
82385 local bus duplicates the behavior of the 386 
DX, including the ability to recognize and respond to 
a BHOLD request. (The 82385’s bus watching 
mechanism is functional In this condition.) 


1.3.3.1 16-BIT MEMORY SPACE 

The 82385 does not cache 1 6-bit memory space (as 
decoded by the 386 DX BS16# input), but does 
make provisions to handle 16-bit space as non- 
cacheable. (There is no 82385 equivalent to the 386 
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386 DX BS16# input need not be asserted until the 
last state of a 16-bit cycle for the 386 DX to recog- 
nize it as such (unless NA# is sampled active earlier 
in the cycle.) The 82385, however, needs this Infor- 
mation earlier, specifically at the end of the first 386 
DX bus state in which the address of the 16-blt cycle 
becomes available. The result is that in a system 
without an 82385, 16-bit devices can inform the 386 
DX that they are 16-bit devices “on the fly,’’ while in 


a system with an 82385, devices decoded as 1 6-bit 
(using the 386 DX BS16#) must be located in ad- 
dress space set aside for 16-blt devices. If 16-bit 
space is decoded according to 82385 guidelines (as 
described later in the data sheet), then the 82385 
will handle 16-bit cycles just like the 386 DX does, 
including effectively locking the two halves of a non- 
aligned 16-bit transfer from Interruption by another 
master. 


1.3.4 386 DX Local Bus Cycles 

386 DX Local Bus Cycles are accesses to resources 
on the 386 DX local bus other; than to the 82385 
itself. The 82385 simply ignores these accesses: 
they are neither forwarded to the system nor do they 
affect the cache. The designer sets aside memory 
and/or I/O space for local resources by decoding 
the 386 DX address bus and feeding the decode to 
the 82385’s local bus access (LBA#) input. The de- 
signer can also decode the 386 DX cycle definition 
signals to keep specific 386 DX cycles from being 
forwarded to the system. For example, a multi-proc- 
essor design may wish to capture and remedy a 386 
DX shutdown locally without having it detected by 
the rest of the system. Note that In such a design, 
the local shutdown cycle must be terminated by lo- 
cal bus control logic. The 387 Math Coprocessor is 
considered a 386 DX local bus resource, but it need 
not be decoded as such by the user since the 82385 
is able to internally recognize 387 accesses via the 
M/IO# and A31 pins. 


1.3.5 Summary of 82385 Response to 
All 386 DX Cycles 

Table 1-1 summarizes the 82385 response to all 386 
DX bus cycles, as conditioned by whethel- or not the 
cycle is decoded as local or non-cacheable. The ta- 
ble describes the impact of each cycle on the cache 
and on the cache directory, and whether or not the 
cycle is forwarded to the 82385 local bus. Whenever 
the 82385 local bus is marked “IDLE”, it implies that 
this bus is available to other masters. 
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Table 1-1. 82385 Response to 386 DX Cycles 


82385 Response 82385 Response 82385 Response when 

386 DX Bus Cycle when Decoded when Decoded Decoded as an 386 DX 

Definition as Cacheable as Non-Cacheabie Local Bus Access 


M/IO# 

D/C# 

W/R# 

386 DX 
Cycle 


Cache 

Cache 

Directory 

82385 
Local Bus 

Cache 

Cache 

Directory 

82385 
Local Bus 

Cache 

Cache 

Directory 

82385 
Local Bus 

0 

0 

0 

INTACK 

N/A 

— 

— 

INT ACK 

— 

— 

INT ACK 

— 

— 

IDLE 

0 

0 

1 

UNDEFINED 

N/A 



UNDEFINED 



UNDEFINED 



IDLE 

0 

1 

0 

I/O READ 

N/A 

— 

— 

I/O READ 

— 

— 

I/O READ 


— 

IDLE 

0 

1 

1 

I/O WRITE 

N/A 

— 

— 

I/O WRITE 

— 

— 

I/O WRITE 

— 

— 

IDLE 

1 

0 

0 

MEM CODE 
READ 

HIT 

CACHE 

READ 

— 

IDLE 


— 

MEM 

CODE 

READ 

— 

— 

IDLE 

MISS 

CACHE 

WRITE 

DATA 

VALIDATION 

MEM CODE 
READ 

1 

0 

1 

HALT/ 

SHUTDOWN 

N/A 

— 

— 

HALT/ 

SHUTDOWN 

— 

— 

HALT/ 

SHUTDOWN 

— 

— 

IDLE 

1 

1 

0 

MEM DATA 
READ 

HIT 

CACHE 

READ 

— 

IDLE 

— 

— 

MEM 

DATA 

READ 

— 

— 

IDLE 

MISS 

CACHE 

WRITE 

DATA 

VALIDATION 

MEM DATA 
READ 

1 

1 

1 

MEM DATA 
WRITE 

HIT 

CACHE 

WRITE 

— 

MEM DATA 
WRITE 

— 

— 

MEM 

DATA 

WRITE 

— 

— 

IDLE 

MISS 

— 

— 

MEM DATA 
WRITE 


NOTES: 

• A dash ( — ) indicates that the cache and cache directory are unaffected. This table does not reflect how an access affects the LRU bit. 

• An “IDLE” 82385 Local Bus implies that this bus is available to other masters. 

• The 82385’s response to 80387 accesses is the same as when decoded as an 386 DX Local Bus access. 

® The only other operations that affect the cache directory are: 

1 . RESET or Cache Flush— all tag valid bits cleared. 

2. Snoop Hit — corresponding line valid bit cleared. 
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1.3.6 Bus Watching 

As previously discussed, the 82385 “qualifies” an 
386 DX bus cycle in the first bus state in which the 
address and cycle definition signals of the cycle be- 
come available. The cycle is qualified as read or 
write, cacheable or non-cacheable, etc. Cacheable 
cycles are further classified as hit or miss according 
to the results of the cache comparison, which ac- 
cesses the 82385 directory and compares the ap- 
propriate directory location (tag) to the current 386 
DX address. If the cycle turns out to be non-cache- 
able or a 386 DX local bus access, the hit/miss deci- 
sion is ignored. The cycle qualification requires one 
386 DX state. Since the fastest 386 DX access Is 
two states, the second state can be used for bus 
watching. 

When the 82385 does not own the system bus. It 
monitors system bus cycles. If another master writes 
into main memory, the 82385 latches the system ad- 
dress and executes a cache look-up to see if the 
altered main memory location resides in the cache. 
If so (a snoop hit), the cache entry is marked invalid 
in the cache directory. Since the directory is at most 
only being used every other state to qualify 386 DX 
accesses, snoop look-ups are interleaved between 
386 DX local bus look-ups. The cache directory is 
time multiplexed between the 386 DX address and 
the latched system address. The result is that all 
snoops are caught and serviced without slowing 
down the 386 DX, even when running zero wait state 
hits on the 386 DX local bus. 


1.3.7 Cache Flush 


The 82385 offers a cache flush input. When activat- 
ed, this signal causes the 82385 to invalidate all 
Hoto wuhjQh hgH pr0wiQMojy h00n cached. SpecIflcally, 


all tag valid bits are cleared. (Refer to the 82385 
directory structure in Chapter 2.) Therefore, the 
cache is empty and subsequent cycles are misses 
until the 386 DX begins repeating the new accesses 
(hits). The primary use of the FLUSH Input Is for di- 
agnostics and multi-processor support. 

NOTE: 

The use of this pin as a coherency mechanism may 
impact software transparency. 


2.0 82385 CACHE ORGANIZATION 

The 82385 supports two cache organizations: a sim- 
ple direct mapped organization and a slightly more 
complex, higher performance two way set associa- 
tive organization. The choice is made by strapping 
an 82385 input (2W/D#) either high or low. This 
chapter describes the structure and operation of 
both organizations. 


2.1 DIRECT MAPPED CACHE 


2.1.1 Direct Mapped Cache Structure 
and Terminology 

Figure 2-1 depicts the relationship between the 
82385’s internal cache directory, the external cache 
memory, and the 386 DX’s 4 Gigabyte physical ad- 
dress space. The 4 Gigabytes can conceptually be 
thought of as cache “pages” each being 8K double- 
words (32 Kbytes) deep. The page size matches the 
cache size. The cache can be further divided into 
1 024 (0 thru 1 023) sets of eight doublewords (8 x 32 
bits). Each 32-bit doubleword is called a “line.” The 
unit of transfer between the main memory and 
cache is one line. 



Figure 2-1. Direct Mapped Cache Organization 
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Each block in the external cache has an associated 
26-bit entry in the 82385’s internal cache directory. 
This entry has three components: a 17-bit “tag,” a 
“tag valid” bit, and eight “line valid” bits. The tag 
acts as a main memory page number (17 tag bits 
support 217 pages). For example, if line 9 of page 2 
currently resides in the cache, then a binary 2 is 
stored in the Set 1 tag field. (For any 82385 direct 
mapped cache page in main memory. Set 0 consists 
of lines 0-7, Set 1 consists of lines 8-15, etc. Line 9 
is shaded in Figure 2-1 .) An important characteristic 
of a direct mapped cache is that line 9 of any page 
can only reside in line 9 of the cache. All identical 
page offsets map to a single cache location. 

The data in a cache set is considered valid or invalid 
depending on the status of its tag valid bit. If clear, 
the entire set is considered invalid. If true, an individ- 
ual line within the set is considered valid or invalid 
depending on the status of its line valid bit. 

The 82385 sees the 386 DX address bus (A2-A31) 
as partitioned into three fields: a 17-bit “tag” field 
(A15-A31), a lO-bit “set-address” field (A5-A14), 
and a 3-bit “line select” field (A2-A4). (See Figure 
2-2.) The lower 13 address bits (A2-A14) also serve 
as the “cache address” which directly selects one 
of 8K doublewords in the external cache. 


2.1.2 Direct Mapped Cache Operation 

The following is a description of the interaction be- 
tween the 386 DX, cache, and cache directory. 

2.1.2.1 READ HITS 

When the 386 DX initiates a memory read cycle, the 
82385 uses the 10-bit set address to select one of 


1024 directory entries, and the 3-bit line select field 
to select one of eight line valid bits within the entry. 
The 1 3-bit cache address selects the corresponding 
doubleword in the cache. The 82385 compares the 
1 7-blt tag field (A1 5-A31 of the 386 DX access) with 
the tag stored in the selected directory entry. If the 
tag and upper address bits match, and if both the 
tag and appropriate line valid bits are set, the result 
is a hit, and the 82385 directs the cache to drive the 
selected doubleword onto the 386 DX data bus. A 
read hit does not alter the contents of the cache or 
directory. 

2.1.2.2 READ MISSES 

A read miss can occur in two ways. The first Is 
known as a “line” miss, and occurs when the tag 
and upper address bits match and the tag valid bit is 
set, but the line valid bit is clear. The second Is 
called a “tag” miss, and occurs when either the tag 
and upper address bits do not match, or the tag valid 
bit is clear. (The line valid bit is a “don’t care” in a 
tag miss.) In both cases, the 82385 forwards the 386 
DX reference to the system, and as the returning 
data Is fed to the 386 DX, it is written into the cache 
and validated in the cache directory. 

In a line miss, the incoming data is validated simply 
by setting the previously clear line valid bit. In a tag 
miss, the upper address bits overwrite the previously 
stored tag, the tag valid bit is set, the appropriate 
line valid bit is set, and the other seven line valid bits 
are cleared. Subsequent tag hits with line misses will 
only set the appropriate line valid bit. (Any data as- 
sociated with the previous tag is no longer consid- 
ered resident In the cache.) 
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2.1.2.3 OTHER OPERATIONS THAT AFFECT 
THE CACHE AND CACHE DIRECTORY 

The other operations that affect the cache and/or 
directory are write hits, snoop hits, cache flushes, 
and 82385 resets. In a write hit, the cache is updat- 
ed along with main memory, but the directory is un- 
affected. In a snoop hit, the cache is unaffected, but 
the affected line is invalidated by clearing its line 
valid bit in the directory. Both an 82385 reset and 
cache flush clear all tag valid bits. 

When an 386 DX CPU/82385 system “wakes up” 
upon reset, all tag valid bits are clear. At this point, a 
read miss is the only mechanism by which main 
memory data is copied into the cache and validated 
in the cache directory. Assume an early 386 DX 
code access seeks (for the first time) line 9 of page 
2. Since the tag valid bit is clear, the access is a tag 
miss, and the data is fetched from main memory. 
Upon return, the data is fed to the 386 DX and simul- 
taneously written into line 9 of the cache. The set 
directory entry is updated to show this line as valid. 
Specifically, the tag and appropriate line valid bits 
are set, the remaining seven line valid bits cleared, 
and a binary 2 written into the tag. Since code Is 
sequential in nature, the 386 DX will likely next want 
line 10 of page 2, then line 1 1 , and so on. If the 386 
DX sequentially fetches the next six lines, these 
fetches will be line misses, and as each Is fetched 
from main memory and written into the cache, its 
corresponding line valid bit is set. This Is the basic 


flovy of events that fills the cache with valid data. 
Only after a piece of data has been copied Into the 
cache and validated can it be accessed In a zero 
wait state read hit. Also, a cache entry must have 
been validated before it can be subsequently altered 
by a write hit, or invalidated by a snoop hit. 

An extreme example of “thrashing” is If line 9 of 
page two is an instruction to jump to line 9 of page 
one, which Is an instruction to jump back to line 9 of 
page two. Thrashing results from the direct mapped 
cache characteristic that all Identical page offsets 
map to a single cache location. In this example, the 
page one access overwrites the cached page two 
data, and the page two access overwrites the cach- 
ed page one data. As long as the code jumps back 
and forth the hit rate is zero. This is of course an 
extreme case. The effect of thrashing Is that a direct 
mapped cache exhibits a slightly reduced overall hit 
rate as compared to a set associative cache of the 
same size. 


2.2 TWO WAY SET ASSOCIATIVE 
CACHE 


2.2.1 Two Way Set Associative Cache 
Structure and Terminoiogy 

Figure 2-3 illustrates the relationship between the 
directory, cache, and 4 Gigabyte address space. 



Figure 2-3. Two-Way Set Associative Cache Organization 
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Whereas the direct mapped cache is organized as 
one bank of 8K doublewords, the two way set asso- 
ciative cache is organized as two banks (A and B) of 
4K doublewords each. The page size is halved, and 
the number of pages doubled. (Note the extra tag 
bit.) The cache now has 512 sets in each bank. (Two 
banks times 512 sets gives a total of 1024. The 
structure can be thought of as two half-sized direct 
mapped caches in parallel.) The performance ad- 
vantage over a direct mapped cache is that all iden- 
tical page offsets map to two cache locations in- 
stead of one, reducing the potential for thrashing. 
The 82385’s partitioning of the 386 DX address bus 
is depicted in Figure 2-4. 


2.2.2 LRU Replacement Algorithm 

The two way set associative directory has an addi- 
tional feature: the “least recently used” or LRU bit. 
In the event of a read miss, either bank A or bank B 
will be updated with new data. The LRU bit flags the 
candidate for replacement. Statistically, of two 
blocks of data, the block most recently used is the 
block most likely to be needed again in the near 
future. By flagging the least recently used block, the 
82385 ensures that the cache block replaced is the 
least likely to have data needed by the CPU. 


2.2.3 Two Way Set Associative 
Cache Operation 

2.2.3.1 READ HITS 

When the 386 DX initiates a memory read cycle, the 
82385 uses the 9-bit set address to select one of 
512 sets. The two tags of this set are simultaneously 
compared with A14-A31, both tag valid bits 
checked, and both appropriate line valid bits 
checked. If either comparison produces a hit, the 
corresponding cache bank is directed to drive the 
selected doubleword onto the 386 DX data bus. 
(Note that both banks will never concurrently cache 
the same main memory location.) If the requested 
data resides in bank A, the LRU bit is pointed toward 


B. If B produces the hit, the LRU bit is pointed 
toward A. 


2.2.3.2 READ MISSES 

As in direct mapped operation, a read miss can be 
either a line or tag miss. Let’s start with a tag miss 
example. Assume the 386 DX seeks line 9 of page 2, 
and that neither the A or B directory produces a tag 
match. Assume also, as indicated In Figure 2-3, that 
the LRU bit points to A. As the data returns from 
main memory, it is loaded into offset 9 of bank A. 
Concurrently, this data is validated by updating the 
set 1 directory entry for bank A. Specifically, the up- 
per address bits overwrite the previous tag, the tag 
valid bit is set, the appropriate line valid bit is set, 
and the other seven line valid bits cleared. Since this 
data is the most recently used, the LRU bit is turned 
toward B. No change to bank B occurs. 

If the next 386 DX request is line 10 of page two, the 
result ‘will be a line miss. As the data returns from 
main memory, it will be written into offset 10 of bank 
A (tag hit/line miss in bank A), and the appropriate 
line valid bit will be set. A line miss in one bank will 
cause the LRU bit to point to the other bank. In this 
example, however, the LRU bit has already been 
turned toward B. 


2.2.3.3 OTHER OPERATIONS THAT AFFECT 
THE CACHE AND CACHE DIRECTORY 

Other operations that affect the cache and cache 
directory are write hits, snoop hits, cache flushes, 
and 82385 resets. A write hit updates the cache 
along with main memory. If directory A detects the 
hit, bank A is updated. If directory B detects the hit, 
bank B is updated. If one bank is updated, the LRU 
bit is pointed toward the other. 

If a snoop hit invalidates an entry, for exarhple, in 
cache bank A, the corresponding LRU bit is pointed 
toward A. This ensures that invalid data is the prime 
candidate for replacement in a read miss. Finally, 
resets and flushes behave just as they do in a direct 
mapped cache, clearing all tag valid bits. 



Figure 2-4. 386 DX Address Bus Bit Fields — Two-Way Set Associative Organization 
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3.0 82385 PIN DESCRIPTION 

The 82385 creates the 82385 local bus, which is a 
functional 386 DX interface. To facilitate under- 
standing, 82385 local bus signals go by the same 
name as their 386 DX equivalents, except that they 
are preceded by the letter “B”. The 82385 local bus 
equivalent to ADS# is BADS#, the equivalent to 
NA# is BNA#, etc. This convention applies to bus 
states as well. For example, BT1 P is the 82385 local 
bus state equivalent to the 386 DX T1 P state. 


3.1 386 DX CPU/82385 INTERFACE 
SIGNALS 

These signals form the direct interface between the 
386 DX and 82385. 


3.1.1 386 DX CPU/82385 Clock (CLK2) 

CLK2 provides the fundamental timing for an 386 DX 
CPU/82385 system, and is driven by the same 
source that drives the 386 DX CLK2 input. The 
82385, like the 386 DX, divides CLK2 by two to gen- 
erate an internal “phase Indication” clock. (See Fig- 
ure 3-1 .) The CLK2 period whose rising edge drives 
the internal clock low Is called PHI1, and the CLK2 
period that drives the internal clock high is called 
PHI2. A PHI1-PHI2 combination (in that order) Is 


known as a “T” state, and is the basis for 386 DX 
bus cycles. 


3.1.2 386 DX CPU/82385 Reset 
(RESET) 

This input resets the 82385, bringing it to an initial 
known state, and is driven by the same source that 
drives the 386 DX RESET input. A reset effectively 
flushes the cache by clearing all cache directory tag 
valid bits. The falling edge of RESET Is synchronized 
to CLK2, and used by the 82385 to properly estab- 
lish the phase of Its Internal clock. (See Figure 3-2.) 
Specifically, the second internal phase following the 
falling edge of RESET is PHI2. 


3.1.3 386 DX CPU/82385 Address Bus 
(A2-A31), Byte Enables 
(BE0#-BE3#), and Cycle 
Definition Signals (M/IO#, 

D/C#, W/R#, LOCK#) 

The 82385 directly connects to these 386 DX out- 
puts. The 386 DX address bus is used in the cache 
directory comparison to see If data referenced by 
386 DX resides in the cache, and the byte enables 
inform the 82385 as to which portions of the data 
bus are involved In an 386 DX cycle. The cycle defi- 
nition signals are decoded by the 82385 to deter- 
mine the type of cycle the 386 DX is executing. 




Figure 3-2. Reset/Internal Phase Relationship 
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3.1.4 386 DX CPU/82385 Address 

Status (ADS#) and Ready Input 
(READYI#) 

ADS#, a 386 DX output, tells the 82385 that new 
atdciress anci cycle definition information is available. 
READYI#, an input to both the 386 DX (via the 386 
DX READY# input pin) and 82385, indicates the 
completion of an 386 DX bus cycle. ADS# and 
READYI # are used to keep track of the 386 DX bus 
state. 


3.1.5 386 DX Next Address Request 
(NA#) 

This 82385 output controls 386 DX pipelining. It can 
be tied directly to the 386 DX NA# input, or it can be 
logically “AND”ed with other 386 DX local bus next 
address requests. 


3. 1 .6 Ready Output (READYO # ) and 
Bus Ready Enable (BRDYEN#) 

The 82385 directly terminates all but two types of 
386 DX bus cycles with its READYO# output. 386 
DX local bus cycles must be terminated by the local 
device being accessed. This includes devices de- 
coded using the 82385 LBA# signal and 80387 ac- 
cesses. The other cycles not directly terminated by 
the 82385 are 82385 local bus reads, specifically 
cache read misses and non-cacheable reads. (Re- 
call that the 82385 forwards and runs such cycles on 
the 82385 bus.) In these cycles the signal that termi- 
nates the 82385 local bus access is BREADY#, 
which is gated through to the 386 DX local bus such 
that the 386 DX and 82385 local bus cycles are con- 
currently terminated. BRDYEN # is used to gate the 
BREADY# signal to the 386 DX. 


3.2 CACHE CONTROL SIGNALS 

These 82385 outputs control the external 32 KB 
cache data memory. 


3.2.1 Cache Address Latch Enable 
(CALEN) 

This signal controls the latch (typically an F or AS 
series 74373) that resides between the low order 
386 DX address bits and the cache SRAM address 
inputs. (The outputs of this latch are the “cache ad- 
dress” described in the previous chapter.) When 
CALEN Is high the latch is transparent. The falling 
edge of CALEN latches the current Inputs which re- 
main applied to the cache data memory until CALEN 
returns to an active high state. 


3.2.2 Cache Transmit/Receive 
(CT/R#) 

This signal defines the direction of an optional data 
transceiver (typically an F or AS series 74245) be- 
tween the cache and 386 DX data bus. When high, 
the transceiver Is pointed towards the 386 DX local 
data bus (the SRAMs are output enabled). When 
low, the transceiver points towards the cache data 
memory. A transceiver Is required if the cache Is de- 
signed with SRAMs that lack an output enable con- 
trol. A transceiver may also be desirable in a system 
that has a heavily loaded 386 DX local data bus. 
These devices are not necessary when using 
SRAMs which incorporate an output enable. 


3.2.3 Cache Chip Selects 
(CS0#-CS3#) 

These active low signals tie to the cache SRAM chip 
selects, and individually enable the four bytes of the 
32-bit wide cache. CSO# enables D0-D7, CS1# 
enables D8-D15, CS2# enables D16-D23, and 
CS3# enables D24-D31. During read hits, all four 
bytes are enabled regardless of whether or not all 
four 386 DX byte enables are active. (The 386 DX 
Ignores what It did not request.) Also, all four cache 
bytes are enabled in a read miss so as to update the 
cache with a complete line (double word). In a write 
hit, only those cache bytes that correspond to active 
byte enables are selected. This prevents cache data 
from being corrupted in a partial doubleword write. 


3.2.4 Cache Output Enables 

(COEA#, COEB#) and Write 
Enables (CWEA#, CWEB#) 

COEA# and COEB# are active low signals which 
tie to the cache SRAM or Transceiver output en- 
ables and respectively enable cache bank A or B. 
The state of DEFOE# (define cache output enable), 
an 82385 configuration Input, determines the func- 
tional definition of COEA# and COEB#. 

If DEFOE# = V|L, in a two-way set associative 
cache, either COEA# or COEB# is active during 
read hit cycles only, depending on which bank is 
selected. In a direct mapped cache, both are activat- 
ed during read hits, so the designer is free to use 
either one. This COEx# definition best suites cache 
SRAMs with output enables. 

If DEFOE# = V|H, COEx# Is active during read hit, 
read miss (cache update) and write hit cycles only. 
This COEx# definition suites cache SRAMs without 
output enables. In such systems, transceivers are 
needed and their output enables must be active for 
writing, as well as reading, the cache SRAMs. 
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CWEA# and CWEB# are active low signals which 
tie to the cache SRAM write enables, and respec- 
tively enable cache bank A or B to receive data from 
the 386 DX data bus (386 DX write hit or read miss 
update). In a two-way set associative cache, one or 
the other is enabled in a read miss or write hit. In a 
direct mapped cache, both are activated, so the de- 
signer is free to use either one. 

The various cache configurations supported by the 
82385 are described In Chapter 4. 


3.3 386 DX LOCAL BUS DECODE 
INPUTS 

These 82385 inputs are generated by decoding the 
386 DX address and cycle definition lines. These ac- 
tive low inputs are sampled at the end of the first 
state in which the address of a new 386 DX cycle 
becomes available (T1 or first T2P). 


3.3.1 386 DX Local Bus Access 
(LBA#) 

This input identifies an 386 DX access as directed to 
a resource (other than the cache) on the 386 DX 
local bus. (The 387 Numerics Coprocessor Is con- 
sidered a 386 DX local bus resource, but LBA# 
need not be generated as the 82385 internally de- 
codes 387 accesses.) The 82385 simply ignores 
these cycles. They are neither forwarded to the sys- 
tem nor do they affect the cache or cache directory. 
Note that LBA# has priority over all other types of 
cycles. If LBA# Is asserted, the cycle is interpreted 
as an 386 DX local bus access, regardless of the 

CjwSS vyi \j\ r\t\jTr. lino ctiiwvvo 

any 386 DX cycle (memory, I/O, Interrupt acknowl- 
edge, etc.) to be kept on the 386 local bus if desired. 


3.3.2 Non-Cacheable Access (NCA#) 

This active low input Identifies a 386 DX cycle as 
non-cacheable. The 82385 forwards non-cacheable 
cycles to the 82385 local bus and runs them. The 
cache and cache directory are unaffected. 

NCA# allows a designer to set aside a portion of 
main memory as non-cacheable. Potential applica- 
tions Include memory-mapped I/O and systems 
where multiple masters access dual ported memory 
via different busses. Another possibility makes use 
of the 386 DX D/C# output. The 82385 by default 
Implements a unified code and data cache, but driv- 
ing NCA# directly by D/C# creates a data only 
cache. If D/C# is Inverted first, the result Is a code 
only cache. 


3.3.3 16-Bit Access (X16#) 

X16# is an active low input which identifies 16-bit 
memory and/or I/O space, and the decoded signal 
that drives XI 6# should also drive the 386 DX 
BS16# Input. 16-bit accesses are treated like non- 
cacheable accesses: they are forwarded to and exe- 
cuted on the 82385 local bus with no impact on the 
cache or cache directory. In addition, the 82385 
locks the two halves of a non-aligned 1 6-bit transfer 
from interruption by another master, as does the 386 
DX. 


3.4 82385 LOCAL BUS INTERFACE 
SIGNALS 

The 82385 presents a “386 DX-like” front end to the 
system, and the signals discussed in this section are 
82385 local bus equivalents to actual 386 DX sig- 
nals. These signals are named with respect to their 
386 DX counterparts, but with the letter “B” append- 
ed to the front. 

Note that the 82385 itself does not have equivalent 
output signals to the 386 DX data bus (D0-D31), 
address bus (A2-A31), and cycle definition signals 
(M/IO#, D/C#, W/R#). The 82385 data bus (BDO- 
BD31) is actually the system side of a latching trans- 
ceiver, and the 82385 address bus and cycle defini- 
tion signals (BA2-BA31, BM/IO#, BD/C#, 
BW/R#) are the outputs of an edge-triggered latch. 
The signals that control this data transceiver and ad- 
dress latch are discussed In Section 3.5. 


3.4.1 82385 Bu^Byte Enables 

(BBLU#-bbt3#) 

BBE0#-BBE3# are the 82385 local bus equiva- 
lents to the 386 DX byte enables. In a cache read 
miss, the 82385 drives all four signals low, regard- 
less of whether or not all four 386 DX byte enables 
are active. This ensures that a complete line (dou- 
bleword) is fetched from main memory for the cache 
update. In all other 82385 local bus cycles, the 
82385 duplicates the logic levels of the 386 DX byte 
enables. The 82385 tri-states these outputs when it 
is not the current bus master. 


3.4.2 82385 Bus Lock (BLOCK#) 

BLOCK# is the 82385 local bus equivalent to the 
386 DX LOCK# output, and distinguishes between 
locked and unlocked cycles. When the 386 DX runs 
a locked sequence of cycles (and LBA# Is negated), 
the 82385 forwards and runs the sequence on the 
82385 local bus, regardless of whether any locations 
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referenced in the sequence reside in the cache. A 
read hit will be run as if it is a read miss, but a write 
hit will update the cache as well as being completed 
to system memory. In keeping with 386 DX behavior, 
the 82385 does not allow another master to interrupt 
the sequence. BLOCK# is tri-stated when the 
82385 is not the current bus master. 


3.4.3 82385 Bus Address Status 
(BADS#) 

BADS# is the 82385 local bus equivalent of ADS#, 
and indicates that a valid address (BA2-BA31, 
BBE0#-BBE3#) and cycle definition (BM/IO#, 
BW/R#, BD/C#) is available. It is asserted in BT1 
and BT2P states, and is tri-stated when the 82385 
does not own the bus. 


3.4.4 82385 Bus Ready Input 
(BREADY#) 

82385 local bus cycles are terminated by 
BREADY#, just as 386 DX cycles are terminated by 
the 386 DX READY# input. In 82385 local bus read 
cycles, BREADY# Is gated by BRDYEN# onto the 
386 DX local bus, such that it terminates both the 
386 DX and 82385 local bus cycles. 


3.4.5 82385 Bus Next Address 
Request (BNA#) 

BNA# is the 82385 local bus equivalent to the 386 
DX NA# input, and indicates that the system Is pre- 
pared to accept a pipelined address and cycle defi- 
nition. If BNA# is asserted and the new cycle infor- 
mation is available, the 82385 begins a pipelined cy- 
cle on the 82385 local bus. 


3.5 82385 BUS DATA TRANSCEIVER 
AND ADDRESS LATCH CONTROL , 
SIGNALS 

The 82385 data bus is the system side of a latching 
transceiver (typically an F or AS series 74646), and 
the 82385 address bus and cycle definition signals 
are the outputs of an edge-triggered latch (F or AS 
series 74374). The following is a discussion of the 
82385 outputs that control these devices. An impor- 
tant characteristic of these signals and the devices 
they control is that they ensure that BD0-BD31, 
BA2-BA31, BM/IO#, BD/C#, and BW/R# repro- 
duce the functionality and timing behavior of their 
386 DX equivalents. 


3.5.1 Local Data Strobe (LDSTB), Data 
Output Enable (DOE#), and Bus 
Transmit/Receive (BT/R#) 

These signals control the latching data transceiver. 
BT/R# defines the transceiver direction. When 
high, the transceiver drives the 82385 data bus in 
write cycles. When low, the transceiver drives the 
386 DX data bus in 82385 local bus read cycles. 
DOE# enables the transceiver outputs. 

The rising edge of LDSTB latches the 386 DX data 
bus in all write cycles. The interaction of this signal 
and the latching transceiver is used to perform the 
82385’s posted write capability. 


3.5.2 Bus Address Clock Pulse 
(BACP) and Bus Address 
Output Enable (BAOE#) 

These signals control the latch that drives BA2- 
BA31, BM/IO#, BW/R#, and BD/C#. In any 386 
DX cycle that is forwarded to the 82385 local bus, 
the rising edge of BACP latches the 386 DX address 
and cycle definition signals. BAOE# enables the 
latch outputs when the 82385 is the current bus 
master and disables them otherwise. 


3.6 STATUS AND CONTROL 
SIGNALS 


3.6.1 Cache Miss Indication (MISS#) 

This output accompanies cacheable read and write 
miss cycles. This signal transitions to Its active low 
state when the 82385 determines that a cacheable 
386 DX access is a miss. Its timing behavior follows 
that of the 82385 local bus cycle definition signals 
(BM/IO#, BD/C#, BW/R#) so that it becomes 
available with BADS# in BT1 or the first BT2P. 
MISS# is floated when the 82385 does not own the 
bus, such that multiple 82385’s can share the same 
node in multi-cache systems. (As discussed In Chap- 
ter 7, this signal also serves a reserved function in 
testing the 82385.) 


3.6.2 Write Buffer Status (WBS) 

The latching data transceiver Is also known as the 
“posted write buffer.” WBS indicates that this buffer 
contains data that has not yet been written to the 
system even though the 386 DX may have begun its 
next cycle. It is activated when 386 DX data is 
latched, and deactivated when the corresponding 
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82385 local bus write cycle is completed 
(BREADY#). (As discussed in Chapter 7, this signal 
also serves a reserved function in testing the 
82385.) 

WBS can serve several functions. In multi-processor 
applications, It can act as a coherency mechanism 
by informing a bus arbiter that it should let a write 
cycle run on the system bus so that main memory 
has the latest data. If any other 82385 cache sub- 
systems are on the bus, they will monitor the cycle 
via their bus watching mechanisms. Any 82385 that 
detects a snoop hit will invalidate the corresponding 
entry in its local cache. 


3.6.3 Cache Flush (FLUSH) 

When activated, this signal causes the 82385 to 
clear all of its directory tag valid bits, effectively 
flushing the cache. (As discussed in Chapter 7, this 
signal also serves a reserved function in testing the 
82385.) The primary use of the FLUSH input Is for 
diagnostics and multi-processor support. The use of 
this pin as a coherency mechanism may impact soft- 
ware transparency. 

The FLUSH input must be held active for at least 4 
CLK (8 CLK2) cycles to complete the flush se- 
quence. If FLUSH Is still active after 4 CLK cycles, 
any accesses to the cache will be misses and the 
cache will not be updated (since FLUSH is active). 


3.7 BUS ARBITRATION SIGNALS 
(BHOLD AND BHLDA) 

In nnnofnr ■4' +I>%n4 • « 
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request by a slave device for bus ownership. The 
82385 acknowledges this request via its BHLDA out- 
put. (These signals function Identically to the 386 DX 
HOLD and HLDA signals.) 

The roles of BHOLD and BHLDA are reversed for an 
82385 in slave mode. BHOLD is now an output Indi- 
cating a request for bus ownership, and BHLDA an 
input Indicating that the request has been granted. 


3.8 COHERENCY (BUS WATCHING) 
SUPPORT SIGNALS (SA2-SA31, 
SSTB#, SEN) 

These signals form the 82385’s bus watching inter- 
face. The Snoop Address Bus (SA2-SA31) con- 
nects to the system address lines if masters reside 
at both the system and 82385 local bus levels, or 
the 82385 local bus address lines if masters reside 
only at. the 82385 local bus level. Snoop Strobe 
(SSTB#) indicates that a valid address is on the 


snoop address inputs. Snoop Enable (SEN) indi- 
cates that the cycle is a write. In a system with mas- 
ters only at the 82385 local bus level, SA2-SA31, 
SSTB#, and SEN can be driven respectively by 
BA2-*BA31, BADS#, and BW/R# without any sup- 
port circuitry. 


3.9 CONFIGURATION INPUTS 
(2W/D#, M/S#, DEFOE#) 

These signals select the configurations supported 
by the 82385. They are hardware strap options and 
must not be changed dynamically. 2W/D# (2-Way/ 
Direct Mapped Select) selects a two-way set asso- 
ciative cache when tied high, or a direct mapped 
cache when tied low. M/S# (Master/Slave Select) 
chooses between master mode (M/S# high) and 
slave mode (M/S# low). DEFOE# defines the func- 
tionality of the 82385 cache output enables 
(COEA# and COEB#). DEFOE# allows the 82385 
to Interface to SRAMs with output enables 
(DEFOE# low) or to SRAMs requiring transceivers 
(DEFOE# high). 


4.0 385 DX LOCAL BUS INTERFACE 

The following is a detailed description of how the 
82385 interfaces to the 386 DX and to 386 DX local 
bus resources. Items specifically addressed are the 
interfaces to the 386 DX, the cache SRAMs, and the 
387 Numerics Coprocessor. 

The many timing diagrams in this and the next chap- 
ter provide insight into the dual pipelined bus struc- 
ture of a 386 DX CPU/82385 system. It’s important 
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possible cycle combination to use the 82385. The 
interface is simple, and the dual bus operation invisi- 
ble to the 386 DX and system. To facilitate discus- 
sion of the timing diagrams, several conventions 
have been adopted. Refer to Figure 4-2A, and note 
that 386 DX bus cycles, 386 DX bus states, and 
82385 bus states are identified along the top. All 
states can be identified by the “frame numbers’’ 
along the bottom. The cycles in Figure 4-2A include 
a cache read hit (CRDH), a cache read miss 
(CRDM), and a write (WT). WT represents any write, 
cacheable or not. When necessary to distinguish 
cacheable writes, a write hit goes by CWTH and a 
write miss by CWTM. Non-cacheable system reads 
go by SBRD. Also, it is assumed that system bus 
pipelining occurs even though the BNA# signal is 
not shown. When the system pipeline begins is a 
function of the system bus controller. 

386 DX bus cycles can be tracked by ADS# and 
READYI#, and 82385 cycles by BADS# and 
BREADY#. These four signals are thus a natural 
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choice to help track parallel bus activity. Note in the 
timing diagrams that 386 DX cycles are numbered 
using ADS# and READYI#, and 82385 cycles using 
BADS# and BREADY#. For example, when the ad- 
dress of the first 386 DX cycle becomes available, 
the corresponding assertion of ADS# is marked 
“1”, and the READYI# pulse that terminates the cy- 
cle is marked “1” as well. Whenever a 386 DX cycle 
is forwarded to the system, its number is forwarded 
as well so that the corresponding 82385 bus cycle 
can be tracked by BADS# and BREADY#. 

The “N” value in the timing diagrams is the assumed 
number of main memory wait states inserted in a 
non-pipelined 82385 bus cycle. For example, a non- 
pipelined access to N = 2 memory requires a total of 
four bus states, while a pipelined access requires 
three. (The pipeline advantage effectively hides one 
main memory wait state.) 


4.1 PROCESSOR INTERFACE 

This section presents the 386 DX CPU 782385 hard- 
ware interface and discusses the interaction and 
timing of this interface. Also addressed is how to 
decode the 386 DX address bus to generate the 


82385 inputs LBA#, NCA#, and X16#. (Recall that 
LBA# allows memory and/or I/O space to be set 
aside for 386 DX local bus resources; NCA# allows 
system memory to be set aside as non-cacheable; 
and X16# allows system memory and/or I/O space 
to be reserved for 16-bit resources.) Finally, the 
82385’s handling of 16-bit space is discussed. 


4.1.1 Hardware Interface 

Figure 4-1 is a diagram of an 386 DX CPU/82385 
system, which can be thought of as three distinct 
interfaces. The first is the 386 DX CPU 782385 inter- 
face (including the Ready Logic). The second' is the 
cache interface, as depicted by the cache control 
bus in the upper left corner of Figure 4-1 . The third is 
the 82385 bus interface, which includes both direct 
connects and signals that control the 74374 ad- 
dress/cycle definition latch and 74646 latching data 
transceiver. (The 82385 bus interface is the subject 
of the next chapter.) 

As seen in Figure 4-1, the 386 DX CPU/82385 inter- 
face is a straightforward connection. The only nec- 
essary support logic is that required to sum all ready 
sources. 
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Figure 4-1. 386 DX CPU/82385 Interface 
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4.1.2 Ready Generation 

Note in Figure 4-1 that the ready logic consists of 
two gates. The upper three-input AND gate (shown 
as a negative logic OR) sums all 386 DX local bus 
ready sources. One such source is the 82385 
READYO# output, which terminates read hits and 
posted writes. The output of this gate drives the 386 
DX READY# input and is monitored by the 82385 
(via READYI#) to track the 386 DX bus state. 

When the 82385 forwards a 386 DX read cycle to 
the 82385 bus (cache read miss or non-cacheable 
read), it does not directly terminate the cycle via 
READYO#. Instead, the 386 DX and 82385 bus cy- 
cles are concurrently terminated by a system ready 


source. This is the purpose of the additional two-in- 
put OR gate (negative logic AND) in Figure 4-1. 
When the 82385 forwards a read to the 82385 bus, it 
asserts BRDYEN# which enables the system ready 
signal (BREADY#) to directly terminate the 386 DX 
bus cycle. 

Figures 4-2A and 4-2B illustrate the behavior of the 
signals Involved In ready generation. Note In cycle 1 
of Figure 4-2A that the 82385 READYO# directly 
terminates the hit cycle. In cycle 2, READYO# is not 
activated, instead the 82385 BRDYEN# Is activated 
in BT2, BT2P, or BT2I states such that BREADY# 
can concurrently terminate the 386 DX and 82385 
bus cycles (frame 6). Cycle 3 is a posted write. The 
write data becomes available in TIP (frame 7), and 
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the address, data, and cycle definition of the write 
are latched in T2 (frame 8). The 386 DX cycle Is 
terminated by READYO# in frame 8 with no wait 
states. The 82385, however, sees the write cycle 
through to completion on the 82385 bus where It is 
terminated in frame 10 by BREADY#. In this case, 
the BREADY# signal is not gated through to the 
386 DX . Refer to Figures 4-2A and 4-2B for clarifi- 
cation. 


4.1.3. NA# and 386 DX Local Bus 
Pipelining 

Cycle 1 of Figure 4-2A is a typical cache read hit. 
The 386 DX address becomes available in T1 , and 
the 82385 uses this address to determine if the ref- 
erenced data resides in the cache. The cache look- 
up Is completed and the cycle qualified as a hit or 
miss in T1. If the data resides in the cache, the 
cache is directed to drive the 386 DX data bus, and 
the 82385 drives its READYO# output so the cycle 
can be terminated at the end of the first T2 with no 
wait states. 


Although cycle 2 starts out like cycle 1 , at the end of 
T1 (frame 3), it is qualified as a miss and forwarded 
to the 82385 bus. The 82385 bus cycle begins one 
state after the 386 DX bus cycle. Implying a one wait 
state overhead associated with cycle 2 due to the 
look-up. When the 82385 encounters the miss, it im- 
mediately asserts NA#, which puts the 386 DX into 
pipelined mode. Once In pipelined mode, the 82385 
Is able to qualify an 386 DX cycle using the 386 DX 
pipelined address and control signals. The result Is 
that the cache look-up state is hidden In all but the 
first of a contiguous sequence of read misses. This 
is shown in the first two cycles, both read misses, of 
Figure 4-2B. The CPU sees the look-up state in the 
first cycle, but not In the second. In fact, the second 
miss requires a total of only two states, as not only 
does 386 DX pipelining hide the look-up state, but 
system pipelining hides one of the main memory 
wait states. (System level pipelining via BNA# is dis- 
cussed in the next chapter.) Several characteristics 
of the 82385’s pipelining of the 386 DX are as fol- 
lows: 

— The above discussion applies to all system 
reads, not just cache read misses. 
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does not occur if the number of main memory 
wait states is equal to or greater than two. 

As far as the design is concerned, NA# is generally 
tied directly to the 386 DX NA# input. However, oth- 
er local NA# sources may be logically “AND”ed 
with the 82385 NA# output if desired. It is essential, 
however, that no device other than the 82385 drive 
the 386 DX NA# input unless that device resides on 
the 386 DX local bus in space decoded via LBA#. If 
desired, the 82385 NA# output can be ignored and 
the 386 DX NA# input tied high. The 386 DX NA# 
input should never be tied low, which would always 
keep it active. 


4.1.4 LBA#,NCA#,andX16# 
Generation 

The 82385 input signals LBA#, NCA# and X16# 
are generated by decoding the 386 DX address 
(A2-A31) and cycle definition (W/R#, D/C#, 
M/IO#) lines. The 82385 samples them at the end 
of the first state in Which they become available, 
which is either T1 or the first T2P cycle. The decode 
configuration and timings are illustrated respoctivoly 
in Figures 4-3A and 4-3B. 



Figure 4-3. NCA#, LBA#, X16# Generation 


— The 82385 provides the fastest possible switch 
to pipelining, T1-T2-T2P. The exception to this is 
when a system read follows a posted write. In 
this case, the sequence is T1-T2-T2-T2P. (Refer 
to cycle 4 of Figure 4-2A.) The number of T2 
states is dependent on the number of main 
memory wait states. 

— Refer to the read hit in Figure 4-2A (cycle 1), and 
note that NA# is actually asserted before the 
end of T1, before the hit/miss decision is made. 
This is of no consequence since even though 
NA# is sampled active in T2, the activation of 
READYO# in the same T2 renders NA# a 
“don’t care”. NA# is asserted in this manner to 
meet 386 DX timing requirements and to ensure 
the fastest possible switch to pipelined mode. 

— All read hits and the majority of writes can be 
serviced by the 82385 with zero wait states in 
non-pipelined mode, and the 82385 accordingly 
attempts to run all such cycles in non-pipelined 
mode. An exception is seen in the hit cycles (cy- 
cles 3 and 4) of Figure 4-2B. The 82385 does not 
know soon enough that cycle 3 is a hit, and thus 
sustains the pipeline. The result is that three se- 
quential hits are required before the 386 DX is 
totally out of pipelined mode. (The three hits look 
like T1P-T2P, T1P-T2, T1-T2.) Note that this 
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4.1.5 82385 Handling of 16-Bit Space 

As discussed previously, the 82385 does not cache 
devices decoded as 16-bit. Instead it makes provi- 
sion to accommodate 16-bit space as non-cache- 
able via the XI 6# input. XI 6# is generated when 
the user decodes the 386 DX address and cycle def- 
inition lines for the BS16# input of the 386 DX (Fig- 
ure 4-3). The decode output now drives both the 386 
DX BS16# input and the 82385 XI 6# input. Cycles 
decoded this way are treated as non-cacheable. 
They are forwarded to and executed on the 82385 
bus, but have no impact on the cache or cache di- 
rectory. The 82385 also monitors the 386 DX byte 
enables in a 16-bit cycle to see if an additional cycle 
is required to complete the transfer. Specifically, a 
second cycle is required if (BEO# OR BE1#) AND 
(BE2# OR BE3#) is asserted in the current cycle. 
The 82385, like the 386 DX , will not allow the two 
halves of a 16-bit transfer to be interrupted by anoth- 
er master. There is an important distinction between 
the handling of 16-bit space in a 386 DX system with 
an 82385 as compared to a system without an 
82385. The 386 DX BS16# input need not be as- 
serted until the last state of a 16-bit cycle for the 386 
DX to recognize it as such. The 82385, however, 
needs the information earlier, specifically at the end 
of the first 386 DX bus state (T1 or first T2P) in 
which the address of the 16-bit cycle becomes avail- 
able. The result Is that in a system without an 82385, 
16-bit devices can define themselves as 16-bit de- 
vices “on the fly”, while in a system with an 82385, 
1 6-bit devices should be located in space set aside 
for 16-bit devices via the XI 6# decode. 


4.2 CACHE INTERFACE 

The following is a description of the external data 
cache and 82385 cache interface. 


4.2.1 Cache Configurations 

The 82385 controls the cache memory via the con- 
trol signals shown in Figure 4-1 . These signals drive 
one of four possible cache configurations, as depict- 
ed in Figures 4-4A through 4-4D. Figure 4-4A shows 
a direct mapped cache organized as 8K double- 
words. The likely design choice is four 8K x 8 
SRAMs. Figure 4-4B depicts the same cache memo- 
ry but with a data transceiver between the cache 
and 386 DX data bus. In this configuration, CT/R# 
controls the transceiver direction, COEA# drives the 
transceiver output enable. (COEB# could also be 
used, and DEFOE# is strapped high.) A data buffer 
is required If the chosen SRAM does not have a 
separate output enable. Additionally, buffers may be 
used to ease SRAM timing requirements or in a sys- 
tem with a heavily loaded data bus. (Guidelines for 
SRAM selection are Included in Chapter 6.) 

Figure 4-4C depicts a two-way set associative cache 
organized as two banks (A and B) of 4K double- 
words each. The likely design choice is sixteen 
4K X 4 SRAM’s. Finally, Figure 4-4D depicts the two- 
way organization with data buffers between the 
cache memory and data bus. 
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Figure 4-4A. Direct Mapped Cache without Data Buffers 



Figure 4-4B. Direct Mapped Cache with Data Buffers 
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4.2.2 Cache Control — Direct Mapped 

Figure 4-5A illustrates the timing of cache read and 
write hits, while Figure 4-5B illustrates cache up- 
dates. In a read hit, the cache output enables are 
driven from the beginning of T2 (cycle 1 of Figure 
4-5A). If at the end of T1 the cycle is qualified as a 
cacheable read, the output enables are asserted on 
the assumption that the cycle will be a hit. (Driving 
the output enables before the actual hit/miss deci- 
sion is made eases SRAM timing requirements.) 

Cycle 1 of Figure 4-5B illustrates what happens 
when the assumption of a hit turns out to be wrong. 


Note that the output enables are asserted at the be- 
ginning of T2, but then disabled at the end of T2. 
Once the output enables are Inactive, the 82385 
turns the transceiver around (via CT/R#) and drives 
the write enables to begin the cache update cycle. 
Note in Figure 4-5B that once the 386 DX is in pipe- 
lined mode, the output enables need not be driven 
prior to a hit/miss decision, since the decision is 
made earlier via the pipelined address information. 

One consequence of driving the output enables low 
in a miss before the hit/miss decision is made is that 
since the cache starts driving the 386 DX data bus. 



NOTES: 

CRDH = Cache Read Hit 
CWTH = Cache Write Hit 


Figure 4-5A. Cache Read and Write Cycies— Direct Mapped (N = 1) 
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the 82385 cannot enable the 74646 transceiver (Fig- 
ure 4-1) until after the cache outputs are disabled. 
(The timing of the 74646 control signals Is described 
in the next chapter.) The result is that the 74646 
cannot be enabled soon enough to support N = 0 
main memory (“N” was defined in section 4.0 as the 
number of non-pipelined main memory wait states). 
This means that memory which can run with zero 
wait states in a non-pipelined cycle should not be 
mapped into cacheable memory. This should not 
present a problem, however, as a main memory sys- 
tem hijjjt vvith N = 0 memory has no need of a cache. 
(The main memory is as fast as the cache.) Zero 
wait state memory can be supported if it is decoded 
as non-cacheable. The 82385 knows that a cycle is 


non-cacheable in time not to drive the cache output 
enables, and can thus enable the 74646 sooner. 

In a write hit, the 82385 only updates the cache 
bytes that are meant to be updated as directed by 
the 386 DX byte enables. This prevents corrupting 
cache data In partial doubleword writes. Note in Fig- 
ure 4-5A that the appropriate bytes are selected via 
the cache byte select lines CS0# -CS3#. In a read 
hit, all four select lines are driven as the 386 DX will 
simply ignore data it does not need. Also, In a cache 
update (read miss), all four selects are active in or- 
der to update the cache with a complete line (dou- 
bleword). 



NOTE: 

CRDM = Cache Read Miss 


Figure 4-5B. Cache Update Cycles — Direct Mapped (N = 1) 
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4.2.3 Cache Control — ^Two-Way Set 
Associative 

Figures 4-6A and 4-6B illustrate the timing of cache 
read hits, write hits, and updates for a two-way set 
associative cache. (Note that the cycle sequences 
are the same as those in Figures 4-5A and 4-5B.) In 
a cache read hit, only one bank on the other is en- 
abled to drive the 386 DX data bus, so unlike the 
control of a direct mapped cache, the appropriate 
cache output enable cannot be driven until the out- 
come of the hit/miss decision is known. (This im- 
plies stricter SRAM timing requirements for a two- 
way set associative cache.) In write hits and read 
misses, only one bank or the other is updated. 


4.3 387TM DX INTERFACE 

The 387 DX Math Coprocessor Interfaces to the 386 
DX just as it would in a system without an 82385. 
The 387 DX READYO# output is logically “AND”ed 
along with all other 386 DX local bus ready sources 
(Figure 4-1), and the output is fed to the 387 DX 
READY#, 82385 READYI#, and 386 DX READY# 
inputs. 

The 386 DX uniquely addresses the 387 DX by driv- 
ing M/IO# low and A31 high. The 82385 decodes 
this internally and treats 387 DX accesses in the 
same way it treats 386 DX cycles in which LB A# Is 
asserted, it ignores them. 



Figure 4-6A. Cache Read and Write Cycles — Two Way Set Associative (N = 1) 
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5.0 82385 LUCAL BUS AND SYSTEM 
INTERFACE 

The 82385 system interface is the 82385 Local Bus, 
which presents a “386 DX -like” front end to the 
system. The system ties to it just as it would to a 386 
DX . Although this 386 DX -like front end is function- 
ally equivalent to a 386 DX , there are timing differ- 
ences which can easily be accounted for in a system 
design. 

The following is a description of the 82385 system 
interface. After presenting the 82385 bus state ma- 
chine, the 82385 bus signals are described, as are 
techniques for accommodating any differences be- 
tween the 82385 bus and 386 DX bus. Following this 
is a discussion of the 82385’s condition upon reset. 


5.1 THE 82385 BUS STATE MACHINE 


5.1.1 Master Mode 

Figure 5-1 A illustrates the 82385 bus state machine 
when the 82385 Is programmed in master mode. 
Note that it is almost identical to the 386 DX bus 
state machine, only the bus states are 82385 bus 
states (BT1P, BTH, etc.) and the state transitions 
are conditioned by 82385 bus inputs (BNA#, 
BHOLD, etc.). Whereas a “pending request” to the 
386 DX state machine indicates that the 386 DX ex- 
ecution or prefetch unit needs bus access, a pend- 
ing request to the 82385 state machine indicates 
that a 386 DX bus cycle needs to be forwarded to 
the system (read miss, non-cacheable read, write. 
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BHOLD ASSERTED 



Figure 5-1 A. 82385 Local Bus State Machine — Master Mode 
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NO REQUEST + BHLDA ASSERTED 



Figure 5-1 B. 82385 Local Bus State Machine—Slave Mode 


4-372 




82385 




iny 


etc.). The only difference between the state ma- 
chines is that the 82385 does not implement a direct 
BT1P-'BT2P transition. If BNA# is asserted in 
BT1P, the resulting state sequence is BT1P-BT2(- 
BT2P. The 82385’s ability to sustain a pipeline is not 
affected by the lack of this state transition. 


5.1.2 Slave Mode 

The 82385’s slave mode state machine (Figure 
5-1 B) is similar to the master mode machine except 
that now transitions are conditioned by BHLDA rath- 
er than BHOLD. (Recall that in slave mode, the roles 
of BHOLD and BHLDA are reversed from their mas- 
ter mode roles.) Figure 5-2 clarifies slave mode state 
machine operation. Upon reset, a slave mode 82385 
enters the BTH state. When the 386 DX of the slave 
82385 subsystem has a cycle that needs to be for- 
warded to the system, the 82385 moves to BTI and 
issues a hold request via BHOLD. It is important to 
note that a slave mode 82385 does not drive the bus 
in a BTI state. When the master or bus arbiter re- 
turns BHLDA, the slave 82385 enters BTI and runs 


the cycle. When the cycle is completed, and if no 
additional requests are pending, the 82385 moves 
back to BTH and disables BHOLD. 

If, while a slave 82385 is running a cycle, the master 
or arbiter drops BHLDA (Figure 5-2B), the 82385 will 
complete the current cycle, move to BTH and re- 
move the BHOLD request. If the 82385 still had cy- 
cles to run when it was kicked off the bus, it will 
immediately assert a new BHOLD and move to BTI 
to await bus acknowledgement. Note, however, that 
it will only move to BTI if BHLDA is negated, ensur- 
ing that the handshake sequence is completed. 

There are several cases in which a slave 82385 will 
not immediately release the bus if BHLDA is 
dropped. For example, if BHLDA is dropped during a 
BT2P state, the 82385 has already committed to the 
next system bus pipelined cycle and will execute it 
before releasing the bus. Also, the 82385 will com- 
plete the second half of a two-cycle 1 6-bit transfer, 
or will complete a sequence of locked cycles before 
releasing the bus. This should not present any prob- 
lems, as a properly designed arbiter will not assume 
that the 82385 has released the bus until it sees 
BHOLD become inactive. 
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B. Sequence of Events if Master or Arbiter Drops BHLDA 


Figure 5-2. BHOLD/BHLDA— Slave Mode 
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5.2 The 82385 Local Bus 

The 82385 bus can be broken up into two groups of 
signals: those which have direct 386 DX counter- 
parts, and additional status and control signals pro- 
vided by the 82385. The operation and Interaction of 
all 82385 bus signals are depicted in Figures 5-3A 
through 5-3L for a wide variety of cycle sequences. 
These diagrams serve as a reference for the 82385 
bus discussion and provide insight into the dual bus 
operation of the 82385. 


5.2.1 82385 Bus Counterparts to 
386 DX Signals 

The following sections discuss the signals presented 
on the 82385 local bus which are functional equiva- 
lents to the signals present at the 386 DX local bus. 


5.2.1.1 ADDRESS BUS (BA2-BA31) AND 
CYCLE DEFINITION SIGNALS 
(BM/IO#, BD/C#, BW/R#) 

These signals are not driven directly by the 82385, 
but rather are the outputs of the 74374 address/cy- 
cle definition latch. (Refer to Figure 4-1 for the hard- 
ware interface.) This latch is controlled by the 82385 
BACP and BAOE# outputs. The behavior and timing 
of these outputs and the latch they control (typically 
F or AS series TTL) ensure that BA2-BA31, 
BM/IO#, BW/R#, and BD/C# are compatible in 
timing and function to their 386 DX counterparts. 

The behavior of BACP can be seen in Figure 5-3B, 
where the rising edge of BACP latches and forwards 

j.u^ r\\/ ^ 
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BT1 or first BT2P state. However, the 82385 need 
not be the current bus master to latch the 386 DX 
address, as evidenced by cycle 4 of Figure 5-3A. In 
this case, the address is latched in frame 8, but not 
forwarded to the system (via BAOE#) until frame 
10. (The latch and output enable functions of the 
74374 are independent and Invisible to one 
another.) 


Note that in frames 2 and 6 the BACP pulses are 
marked “False.” The reason is that BACP Is issued 
and the address latched before the hit/ miss deter- 
mination is made. This ensures that should the cycle 
be a miss, the 82385 bus can move directly into BT1 
without delay. In the case of a hit, the latched ad- 
dress is simply never qualified by the assertion of 
BADS#. The 82385 bus stays In BTI if there is no 
access pending (new cycle is a hit) and no bus activ- 
ity. It will move to and stay in BT2I if the system has 
requested a pipelined cycle and the 82385 does not 
have a pending bus access (new cycle is a hit). 


5.2.1.2 DATA BUS (BD0-BD31) 

The 82385 data bus is the system side of the 74646 
latching transceiver. (See Figure 4-1 .) This device is 
controlled by the 82385 outputs LDSTB, DOE#, and 
BT/R#. LDSTB latches data in write cycles, DOE# 
enables the transceiver outputs, and BT/R# con- 
trols the transceiver direction. The interaction of 
these signals and the transceiver Is such that BDO- 
BD31 behave just like their 386 DX counterparts. 
The transceiver is configured such that data flow in 
write cycles (A to B) is latched, and data flow in read 
cycles (B to A) Is flow-through. 

Although BD0-BD31 function just like their 386 DX 
counterparts, there Is a timing difference that must 
be accommodated for in a system design. As men- 
tioned above, the transceiver is transparent during 
read cycles, so the transceiver propagation delay 
must be added to the 386 DX data setup. In addition, 
the cache SRAM setup must be accommodated for 
In cache read miss cycles. 

r»rkn_r‘ci/-‘hQcihlo roarlc tho Hata coti in ic nl\/nn hw 
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The required BD0-BD31 setup in a cache read miss 
is given by: 

MinBD0-BD31 ^ 74646 B-to-A ^ Cache SRAM 

Read Data Max Propagation Min Write 

Setup- Delay Setup 

OneCLK2 _ 82385 CWEA# or 

Period CWEB# Min Delay 

If a data buffer is located between the 386 DX data 
bus and the cache SRAMs, then its maximum propa- 
gation delay must be added to the above formula as 
well. A design analysis should be completed for ev- 
ery new design to determine actual margins. 

A design can accommodate the increased data set- 
up by choosing appropriately fast main memory 
DRAMS and data buffers. Alternatively, a designer 
may deal with the longer setup by inserting an extra 
wait state into cache read miss cycles. If an addition- 
al state is to be inserted, the system bus controller 
should sample the 82385 MISS# output to distin- 
guish read misses from cycles that do not require 
the longer setup. Tips on using the 82385 MISS# 
signal are presented later in this chapter. 

The behavior of LDSTB, DOE#, and BT/R# can be 
understood via Figures 5-3A through 5-3L. Note that 
In cycle 1 of Figure 5-3A (a non-cacheable system 
read), DOE# is activated midway through BT1, but 
In cycle 1 of Figure 5-3B (a cache read miss), DOE# 
is not activated until midway through BT2. The rea- 
son is that in a cacheable read cycle, the cache 
SRAMs are enabled to drive the 386 DX data bus 
before the outcome of the hit/miss decision (in an- 
ticipation of a hit). In cycle 1 of Figure 5-3B, the as- 
sertion of DOE# must be delayed until after the 
82385 has disabled the cache output buffers. The 
result is that N = 0 main memory should not be 
mapped into the cache. 

5.2.1.3 BYTE ENABLES (BBE0#-BBE3#) 

These outputs are driven directly by the 82385, and 
are completely compatible in timing and function 
with their 386 DX counterparts. When a 386 DX cy- 
cle is forwarded to the 82385 bus, the 386 DX byte 
enables are duplicated on BBE0#-BBE3#. The 
one exception is a cache read miss, during which 
BBE0#-BBE3# are all active regardless of the 
status of the 386 DX byte enables. This ensures that 
the cache is updated with a valid 32-bit entry. 


5.2. 1.4 ADDRESS STATUS (BADS#) 

BADS# is identical in function and timing to its 386 
DX counterpart. It is asserted in BT1 and BT2P 
states, and indicates that valid address and cycle 
definition (BA2-BA31, BBE0#-BBE3#, BM/IO#, 
BW/R#, BD/C#) information Is available on the 
82385 bus. 


5.2.1. 5 READY (BREADY#) 

The 82385 BREADY# Input terminates 82385 bus 
cycles just as the 386 DX READY# input terminates 
386 DX bus cycles. The behavior of BREADY# is 
the same as that of READY#, but note in the A.C. 
timing specifications that a cache read miss requires 
a longer BREADY# setup than do other cycles. This 
must be accommodated for in ready logic design. 

5.2.1.6 NEXT ADDRESS (BNA#) 

BNA# is identical in function and timing to its 386 
DX counterpart. Note that In Figures 5-3A through 5- 
3L, BNA# is assumed asserted in every BT1P or 
first BT2 state. Along with the 82385’s pipelining of 
the 386 DX , this ensures that the timing diagrams 
accurately reflect the full pipelined nature of the dual 
bus structure. 


5.2.1.7 BUS LOCK (BLOCK#) 

The 386 DX flags a locked sequence of cycles by 
asserting LOCK#. During a locked sequence, the 
386 DX does not acknowledge hold requests, so the 
sequence executes without Interruption by another 
master. The 82385 forces all locked 386 DX cycles 
to run on the 82385 bus (unless LBA# is active), 
regardless of whether or not the referenced location 
resides in the cache. In addition, a locked sequence 
of 386 DX cycles is run as a locked sequence on the 
82385 bus; BLOCK# is asserted and the 82385 
does not allow the sequence to be interrupted. 
Locked writes (hit or miss) and locked read misses 
affect the cache and cache directory just as their 
unlocked counterparts do. A locked read hit, howev- 
er, is handled differently. The read is necessarily 
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forced to run on the 82385 local bus, and as the 
data returns from main memory, it is “re-copied” into 
the cache. (See Figure 5-3L.) The directory is not 
changed as it already Indicates that this location ex- 
ists in the cache. This activity is invisible to the sys- 
tem and ensures that semaphores are properly han- 
dled. 

BLOCK# is asserted during locked 82385 bus cy- 
cles just as LOCK# is asserted during locked 386 
DX cycles. The BLOCK# maximum valid delay, 
however, differs from that of LOCK#, and this must 
be accounted for in any circuitry that makes use of 
BLOCK#. The difference is due to the fact that 
LOCK#, unlike the other 386 DX cycle definition sig- 
nals, is not pipelined. The situation is clarified in Fig- 
ure 5-3 K. In cycle 2 the state of LOCK# is not 
known before the corresponding system read starts 
(Frames 4 and 5). In this case, LOCK# is asserted 
at the beginning of T1P, and the delay for BLOCK# 
to become active is the delay of LOCK# from the 
386 DX plus the propagation delay through the 
82385. This occurs because T1P and the corre- 
sponding BT1 P are concurrent (Frame 5). The result 
is that BLOCK# should not be sampled at the end 
of BT 1 P. The first appropriate sampling point Is mid- 
way through the next state, as shown in Frame 6. In 
Figure 5-3L, the maximum delay for BLOCK# to be- 
come valid in Frame 4 is the same as the maximum 
delay for LOCK# to become valid from the 386 DX . 
This is true since the pipelining issue discussed 
above does not occur. 

The 82385 should negate BLOCK# after 
BREADY# of the last 82385 Locked Cycle was as- 
serted and Lock turns inactive. This means that in a 
sequence of cycles which begins with a 82385 
Locked Cycle arid goes on with all the possible 
Locked Cycles (other 82385 cycles, idles, and local 
cycles), while LOCK# Is continuously active, the 
82385 will maintain BLOCK# active continuously. 
Another implication is that in a Locked Posted Write 
Cycle followed by non-locked sequence, BLOCK# 
is negated one CLK after BREADY# of the write 
cycle. In other 82385 Locked Cycles, followed by 
non-locked sequences, BLOCK# Is negated one 
CLK after LOCK# is negated, which occurs two 
CLKs after BREADY# is asserted. In the last case 
BLOCK# active moves by one CLK to the non- 
locked sequence. 

The arbitration rules of Locked Cycles are: 

MASTER MODE: 

BHOLD input signal is ignored when BLOCK# or 
internal lock (16-bit non-aligned cycle) are active. 
BHLDA output signal remains inactive, and BAOE# 
output signal remains active at that time Interval. 


SLAVE MODE: 

The 82385 does not relinquish the system bus if 
BLOCK# or Internal lock are active. The BHOLD 
output signal remains active when BLOCK# or inter- 
nal lock Is active plus one CLK. The BHLDA input 
signal is ignored when BLOCK# or the Internal lock 
is active plus one CLK. This means the 82385 slave 
does not respond to BHLDA inactivation. The 
BAOE# output signal remains active during the 
same time interval. 


5.2.2 Additional 82385 Bus Signals 

The 82385 bus provides two status outputs and one 
control input that are unique to cache operation and 
thus have no 386 DX counterparts. The outputs are 
MISS#, and WBS, and the input Is FLUSH. 


5.2.2.1 CACHE READ/WRITE MISS 
INDICATION (MISS#) 

MISS# can be thought of as an extra 82385 bus 
cycle definition signal similar to BM/IO#, BW/R#, 
and BD/C#, that distinguishes cacheable read and 
write misses from other cycles. MISS#, like the oth- 
er definition signals, becomes valid with BADS# 
(BT1 or first BT2P). The behavior of MISS# is illus- 
trated in Figures 5-3B, 5-3C, and 5-3J. The 82385 
floats MISS# when another master owns the bus, 
allowing multiple 82385s to share the same node in 
multi-cache systems. MISS# should thus be lightly 
pulled up (-^20 Kfl) to keep it negated during hold 
(BTH) states. 

MISS# can serve several purposes. As discussed 
previously, the BDu~BD3i and BREADY# setup 
times in a cache read miss are longer than in other 
cycles. A bus controller can distinguish these cycles 
by gating MISS# with BW/R#. MISS# may also 
prove useful in gathering 82385 system perform- 
ance data. 


5.2.2.2 WRITE BUFFER STATUS (WBS) 

WBS Is activated when 386 DX write cycle data is 
latched into the 74646 latching transceiver (via 
LDSTB). It Is deactivated upon completion of the 
write cycle on the 82385 bus when the 82385 sees 
the BREADY# signal. WBS behavior Is illustrated in 
Figures 5-3F through 5-3J, and potential applica- 
tions are discussed in Chapter 3. 
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Figure 5-3A. Consecutive SBRD Cycles — (N = 0) 
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Figure 5-3B. Consecutive CRDM Cycles-~(N = 1) 
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Figure 5-3G. Interleaved WT/CRDH Cycles— (N = 1) 
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Figure 5-3H. WT, WT, CRDH— (N = 1) 
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Figure 5-3K. LOCK#/BLOCK# in Non-Cacheable or Miss Cycles— (N= 1) 
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5.2.2.3 CACHE FLUSH (FLUSH) 

FLUSH is an 82385 input which is used to reset all 
tag valid bits within the cache directory. The FLUSH 
input must be kept active for at least 4 CLK (8 CLK2) 
periods to complete the directory flush. Flush is gen- 
erally used In diagnostics but can also be used In 
applications where snooping cannot guarantee co- 
herency. 


5.3 BUS WATCHING (SNOOP) 
INTERFACE 

The 82385’s bus watching interface consists of the 
snoop address (SA2-SA31), snoop strobe 
(SSTB#), and snoop enable (SEN) inputs. If mas- 
ters reside at the system bus level, then the SA2- 
SA31 inputs are connected to the system address 
lines and SEN the system bus memory write com- 
mand. SSTB# indicates that a valid address is pres- 
ent on the system bus. Note that the snoop bus in- 
puts are synchronous, so care must be taken to en- 
sure that they are stable during their sample win- 
dows. If no master resides beyond the 82385 bus 
level, then SA2-SA31, SEN, and SSTB# can re- 
spectively tie directly to BA2-BA31, BW/R#, and 
BADS#. However, it Is recommended that SEN be 
driven by the logical “AND” of BW/R# and 
BM/IO# so as to prevent I/O writes from unneces- 
sarily invalidating cache data. 


When the 82385 detects a system write by another 
master, it internally latches SA2-SA31 and runs a 
cache look-up to see if the altered main memory 
location Is duplicated in the cache. If yes (a snoop 
hit), the line valid bit associated with that cache en- 
try is cleared. An important feature of the 82385 Is 
that even if the 386 DX is running zero wait state hits 
out of the cache, all snoops are serviced. This is 
accomplished by time multiplexing the cache direc- 
tory between the 386 DX address and latched sys- 
tem address. If the SSTB# signal occurs during an 
82385 comparison cycle (for the 386 DX ), the 386 
DX cycle has the highest priority in accessing the 
cache directory. This takes the first of the two 386 
DX states. The other state is then used for the 
snoop comparison. This worst case example, depict- 
ed in Figure 5-4, shows the 386 DX running zero wait 
state hits on the 386 DX local bus, and another mas- 
ter running zero wait state writes on the 82385 bus. 
No snoops are missed, and no performance penalty 
incurred. 


5.4 RESET DEFINITION 

Table 5-1 summarizes the states of all 82385 out- 
puts during reset and initialization: A slave mode 
82385 tri-states its “386 DX-like” front end. A mas- 
ter mode 82385 emits a pulse stream on its BACP 
output. As the 386 DX address and cycle definition 
lines reach their reset values, this stream will latch 
the reset values through to the 82385 bus. 


T1 T2 T1 T2 T1 



BT1 

BT2 

BT1 

BT2 

BT1 

CLK, BCLK 

\_y 


V / 

\__/ 

Sy / 

ADS#“ 



\ 


V 

/ 

/ 




386™ DX ADDRESS 

IX 

386 DX#1, 

IX 

386 DX#2 

”X 

SSTB# (BADS#) 

\ 


V 



/ 

/ 




385LB ADDRESS 

IX 

385 #1 

IX 

385 #2 

IX 

SEN (B/WR#) 






/ 





CACHE DIR. ADDR. 

X 386 DX#1 X 585 #1 X 386 DX #2 X 585 #2 X 


1111 1 


290143-41 

Figure 5.4. Interleaved Snoop and 386 DX Accesses to the Cache Directory 
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Table 5-1. Pin State During RESET and Initialization 


Output Name 

Signal Level During RESET and Initialization 

Master Mode 

Slave Mode 

NA# 

High 

High 

READYO# 

High 

High 

BRDYEN# 

High 

High 

CALEN 

High 

High 

CVVEA#-CVvEB# 

High 

High 

CS0#-CS3# 

Low 

Low 

CT/R# 

High 

High 

COEA#-COEB# 

High 

High 

BADS# 

High 

HighZ 

BBE0#-BBE3# 

386 DX BE# 

High Z 

BLOCK# 

High 

High Z 

MISS# 

High 

HighZ 

BACP 

Pulse(i) 

Pulse 

BAOE# 

Low 

High 

BT/R# 

Low 

Low 

DOE# 

High 

High 

LDSTB 

Low 

Low 

BHOLD 


Low 

BHLDA 

Low 

•— 

WBS 

Low 

Low 


NOTE: 

1. In Master Mode, BAOE# is low and BACP emits a pulse stream during reset. As the 386 DX address and cycle definition 
signals reach their reset values, the pulse stream on BACP will latch these values through to the 82385 local bus. 


6.0 82385 SYSTEM DESIGN 
CONSIDERATIONS 


6.1 INTRODUCTION 

This chapter discusses techniques which should be 
implemented in an 82385 system. Because of the 
high frequencies and high performance nature of the 
386 DX CPU/82385 system, good design and layout 
techniques are necessary. It Is always recommend- 
ed to perform a complete design analysis on new 
system designs. 


6.2 POWER AND GROUNDING 


6.2.1 Power Connections 

The PGA 82385 utilizes 8 power (Vcc) and 1 0 
ground (Vss) pins. The PQFP 82385 has 9 power 
and 9 ground pins. All Vcc and Vss Pins must be 
connected to their appropriate plane. On a printed 
circuit board, all Vcc Pins must be connected to the 
power plane and all Vss Pins must be connected to 
the ground plane. 


6.2.2 Power Decoupling 

Although the 82385 itself Is generally a “passive” 
device in that it has few output signals, the cache 
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subsystem as a whole is quite active. Therefore, 
many decoupling capacitors should be placed 
around the 82385 cache subsystem. 

Low inductance capacitors and interconnects are 
recommended for best high frequency electrical per- 
formance. Inductance can be reduced by shortening 
circuit board traces between the decoupling capaci- 
tors and their respective devices as much as possi- 
ble. Capacitors specifically for PGA packages are 
also commercially available, for the lowest possible 
Inductance. 


6.2.3 Resistor Recommendations 

Because of the dual bus structure of the 82385 sub- 
system (386 DX Local Bus and 82385 Local Bus), 
any signals which are recommended to be pulled up 
will be respective to one of the busses. The follow- 
ing sections will discuss signals for both busses. 

6.2.3.1 386 DX LOCAL BUS 

For typical designs, the pullup resistors shown in Ta- 
ble 6-1 are recommended. This table correlates to 
Chapter 7 of the 386 DX Data Sheet. However, par- 
ticular designs may have a need to differ from the 
listed values. Design analysis is recommended to 
determine specific requirements. 

6.2.3.2 82385 LOCAL BUS 

Pullup resistor recommendations for the 82385 Lo- 
cal Bus signals are shown in Table 6-2. Design anal- 
ysis is necessary to determine if deviations to the 
typical values given is needed. 


Table 6-1. Recommended Resistor Pullups to 
Vcc (386 DX Local Bus) 


Pin and 
Signal 

Pullup 

Value 

Purpose 

ADS# 

PGA El 3 
PQFP123 

20 Ka ±10% 

Lightly Pull ADS# 
Negated for 386 DX 
Hold States 

LOCK# 
PGA FI 3 
PQFP118 

20 Ka ±10% 

Lightly Pull LOCK# 
Negated for 386 DX 
Hold States 


Table 6-2. Recommended Resistor Pullups to 
Vcc (82385 Local Bus) 


Signal and 
Pin 

Pullup 

Value 

Purpose 

BADS# 
PGAN9 
PQFP 89 

20 Ka ±10% 

Lightly Pull BADS# 
Negated for 82385 
Hold States 

BLOCK# 
PGA P9 
PQFP 86 

20 Ka ±10% 

Lightly Pull BLOCK# 
Negated for 82385 
Hold States 

MISS# 
PGAN8 
PQFP 85 

20 Ka ±10% 

Lightly Pull MISS# 
Negated for 82385 
Hold States 


6.3 82385 SIGNAL CONNECTIONS 


6.3.1 Configuration Inputs 

The 82385 configuration signals (M/S#, 2W/D#, 
DEFOE#) must be connected (pulled up) to the ap- 
propriate logic level for the system design. There is 
also a reserved 82385 input which must be tied to 
the appropriate level. Refer to Table 6-3 for the sig- 
nals and their required logic level. 


Table 6-3. 82385 Configuration 
Inputs Logic Levels 


Pin and 
Signal 

Logic 

Level 

Purpose 

M/S# 
PGAB13 
PQFP 129 

High 

Master Mode Operation 

Low 

Slave Mode Operation 

2W/D# 
PGAD12 
PQFP 127 

High 

2-Way Set Associative 

Low 

Direct Mapped 

Resrved 
PGA LI 4 
PQFP 102 

High 

Must be tied to Vqc via 
a pull-up for proper 
functionality 

DEFOE# 
PGAA14 
PQFP 128 

N/A 

Define Cache Output 
Enables. Allows use of 
any SRAM. 


NOTE: 

The listed 82385 pins which need to be tied high should 
use a pull-up resistor in the range of 5 KH to 20 Kfi. 
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6.3.2 CLK2 and RESET 

The 82385 has two inputs to which the 386 DX 
CLK2 signal must be connected. One is labeled 
CLK2 (82385 PGA pin C13, PQFP lead 126) and the 
other is labeled BCLK2 (82385 PGA pin LI 3, PQFP 
lead 103). These two Inputs must be tied together on 
the printed circuit board. 

The 82385 also has two reset inputs. RESET (82385 
PGA pin D13, PQFP lead 125) and BRESET (82385 
PGA pin K12, PQFP lead 104) must be connected 
on the printed circuit board. 


6.4 UNUSED PIN REQUIREMENTS 

For reliable operation, ALWAYS connect unused in- 
puts to a valid logic level. As is the case with most 
other CMOS processes, a floating input will increase 
the current consumption of the component and give 
an indeterminate state to the component. 


6.5 CACHE SRAM REQUIREMENTS 

The 82385 offers the option of using SRAMs with or 
without an output enable pin. This is possible by in- 
serting a transceiver between the SRAMs and the 
386 DX local data bus and strapping DEFOE# to 
the appropriate logic level for a given system config- 
uration. This transceiver may also be desirable in a 
system which has a very heavily loaded 386 DX lo- 
cal data bus. The following sections discuss the 
SRAM requirements for all cache configurations. 


6.5.1 Cache Memory without 
Transceivers 

As discussed In Section 3.2, the 82385 presents all 
of the control signals necessary to access the cache 
memory. The SRAM chip selects, write enables, and 
output enables are driven directly by the 82385. Ta- 
ble 6-4 lists the required SRAM specifications. 
These specifications allow for zero margins. They 
should be used as guides for the actual system de- 
sign. 


6.5.2 Cache Memory With 
Transceivers 

To implement an 82385 subsystem using cache 
memory transceivers, CQEA# or CQEB# must be 
used as output enable signals for the transceivers 
and DEFQE# must be appropriately strapped for 
proper CQEx# functionality (since the cache SRAM 
transceivers must be enabled for writes as well as 
reads ). DEFQE# must be tied high when using 
cache SRAM transceivers. In a 2-way set associa- 
tive organization, CQEA# enables the transceiver 
for bank A and CQEB# enables the bank B trans- 
ceiver. A direct mapped cache may use either 
CQEA# or CQEB# to enable the transceiver. Table 
6-5 lists the required SRAM specifications. These 
specifications allow for zero margin. They should be 
used as guides for the actual system design. 


Table 6-4. SRAM Specs for Non-Buff ered Cache Memory 


SRAM Spec Requirements | 



Direct Mapped 


2-Way Set Associative 


20 

25 

33 

20 

25 

33 

Read Cycle Requirements 

Address Access (MAX) 

44 

36 

27 

42 

34 

27 

Chip Select Access (MAX) 

56 

44 

35 

56 

41 

35 

QE# to Data Valid (MAX) 

19 

13 

10 

14 

13 

10 

QE# to Data Float (MAX) 

20 

15 

10 

20 

15 

10 

Write Cycle Requirements 

Chip Select to End of Write (MIN) 

30 

25 

20 

30 

25 

20 

Address Valid to End of Write (MIN) 

42 

37 

29 

40 

37 

29 

Write Pulse Width (MIN) 

30 

25 

20 

30 

25 

20 

Data Setup (MAX) 

— 

— 

— 

— 

— 

— 

Data Hold (MIN) 

4 

4 

2 

4 

4 

2 
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Table 6-5. SRAM Specs for Buffered Cache Memory 


SRAM Spec Requirements 



Direct Mapped 


2-Way Set Associative 


20 

25 

33 

20 

25 

33 

Read Cycle Requirements 







Address Access (MAX) 

37 

29 

20 

35 

29 

20 

Chip Select Access (MAX) 

48 

36 

27 

48 

36 

27 

OE# to Data Valid (MAX) 

N/A 

N/A 

N/A 

N/A 

N/A 

N/A 

OE# to Data Float (MAX) 

N/A 

N/A 

N/A 

N/A 

N/A 

N/A 

Write Cycle Requirements 







Chip Select to End of Write (MIN) 

30 

25 

20 

30 

23 

20 

Address Valid to End of Write (MIN) 

42 

37 

29 

40 

36 

27 

Write Pulse Width (MIN) 

30 

25 

20 

30 

25 

20 

Data Setup (MAX) 

15 

10 

10 

15 

10 

10 

Data Hold (MIN) 

3 

3 

3 

3 

3 

3 


7.0 SYSTEM TEST CONSIDERATIONS 


7.1 INTRODUCTION 

Power On Self Testing (POST) is performed by most 
systems after a reset. This chapter discusses the 
requirements for properly testing an 82385 based 
system after power up. 


7.2 MAIN MEMORY (DRAM) TESTING 

Most systems perform a memory test by writing a 
data pattern and then reading and comparing the 
data. This test may also be used to determine the 
total available memory within the system. Without 
properly taking into account the 82385 cache mem- 
ory, the memory test can give erroneous results. 
This will occur if the cache responds with read hits 
during the memory test routine. 


7.2.1 Memory Testing Routine 

In order to properly test main memory, the test rou- 
tine must not read from the same block consecutive- 
ly. For instance, if the test routine writes a data pat- 
tern to the first 32 kbytes of memory (0000-7FFFH), 
reads from the same block, writes a new pattern to 
the same locations (0000-7FFFH), and reads the 
new pattern, the second pattern tested would have 
had data returned from the 82385 cache memory. 
Therefore, It is recommended that the test routine 
work with a memory block of at least 64 kbytes. This 
will guarantee that no 32 kbyte block will be read 
twice consecutively. 


7.3 82385 CACHE MEMORY TESTING 

With the addition of SRAMs for the cache memory, it 
may be desirable for the system to be able to test 
the cache SRAMs during system diagnostics. This 
requires the test routine to access only the cache 
memory. The requirements for this routine are based 
on where It resides within the memory map. This can 
be broken into two areas: the routine residing In 
cacheable memory space or the routine residing in 
either non-cacheable memory or on the 386 DX lo- 
cal bus (using the LBA# input). 


7.3.1 Test Routine in the NCA# or 
LBA# Memory Map 

In this configuration, the test routine will never be 
cached. The recommended method is code which 
will access a single 32 kbyte block during the test. 
Initially, a 32 kbyte read (assume 0000-7FFFH) 
must be executed. This will fill the cache directory 
with the address information which will be used in 
the diagnostic procedure. Then, a 32 kbyte write to 
the same address locations (0000-7FFFH) will load 
the cache with the desired test pattern (due to write 
hits). The comparison can be made by completing 
another 32 kbyte read (same locations, 0000- 
7FFFH), which will be cache read hits. Subsequent 
writes and reads to the same addresses will enable 
various patterns to be tested. 
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7.3.2 Test Routine in Cacheable 
Memory 

In this case, it must be understood that the diagnos- 
tic routine must reside in the cache memory before 
the actual data testing can begin. Otherwise, when 
the 386 DX performs a code fetch, a location within 
the cache memory which is to be tested will be al- 
tered due to the read miss (code fetch) update. 

The first task is to load the diagnostic routine into 
Ihe top of the cache memory. It must be known how 
much memory is required for the code as the rest of 
the cache memory will be tested as in the earlier 
method. Once the diagnostics have been cached 
(via read updates), the code will perform the same 
type of read/write/read/compare, as in the routine 
explained in the above section. The difference is 
that now the amount of cache memory to be tested 
is 32 kbytes minus the length of the test routine. 


7.4 82385 CACHE DIRECTORY 
TESTING 

Since the 82385 does not directly access the data 
bus, it is not possible to easily complete a compari- 
son of the cache directory. (The 82385 can serially 
transmit its directory contents. See Section 7.5.) 
However, the cache memory tests described in Sec- 
tion 7.3 will indicate if the directory is working prop- 
erly. Otherwise, the data comparison within the diag- 
nostics will show locations which fail. 

There is a slight possibility that the cache memory 
comparison could pass even if locations within the 
directory gave false hit/miss results. This could 
cause the comparison to always be performed to 
main memory instead of the cache and give a proper 
comparison to the 386 DX . The solution here is to 
use the MISS# output of the 82385 as an Indicator 
to a diagnostic port which can be read by the 386 
DX . It could also be used to flag an Interrupt if a 
failure occurs. 

The implementation of these techniques in the diag- 
nostics will assure proper functionality of the 82385 
subsystem. 


7.5 SPECIAL FUNCTION PINS 

As mentioned in Chapter 3, there are three 82385 
pins which have reserved functions in addition to 
their normal operational functions. These pins are 
MISS#, WBS, and FLUSH. 

As discussed previously, the 82385 performs a di- 
rectory flush when the FLUSH input Is held active for 
at least 4 CLK (8 CLK2) cycles. However, the 
FLUSH pin also serves as a diagnostic input to the 
82385. The 82385 will enter a reserved mode if the 
FLUSH pin is high at the falling edge of RESET. 

If, during normal operation, the FLUSH input Is ac- 
tive for only one CLK (2 CLK2) cycle/s, the 82385 
will enter another reserved mode. Therefore It must 
be guaranteed that FLUSH is active for at least the 4 
CLK (8 CLK2) cycle specification. 

WBS and MISS# serve as outputs in the 82385 re- 
served modes. 


8.0 MECHANICAL DATA 


8.1 INTRODUCTION 

This chapter discusses the physical package and its 
connections in detail. 


8.2 PIN ASSIGNMENT 

The 82385 pinout as viewed from the top side of the 
component is shown by Figure 8-1. Its pinout as 
viewed from the Pin side of the component is shown 
In Figure 8-2. 

Vcc and Vss connections must be made to multiple 
Vcc and Vss (GND) pins. Each Vcc and Vss niust 
be connected to the appropriate voltage level. The 
circuit board should include Vcc and GND planes for 
power distribution and all Vcc and Vss Pins must be 
connected to the appropriate plane. 
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Figure 8-1. 82385 PGA Pinout — View from TOP Side 
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Figure 8-2. 82385 PGA Pinout — View from PIN Side 
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Figure 8-3. 82385 PGA Pinout — View from TOP Side 
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Table 8-1. 82385 PGA Pinout — Functional Grouping 


PGA 

PQFP 

Signal 

M2 

65 

A31 

L3 

64 

A30 

L2 

63 

A29 

K3 

62 

A28 

L1 

61 

A27 

J3 

60 

A26 

K2 

59 

A25 

K1 

58 

A»24 

J2 

57 

A23 

J1 

56 

A22 

H3 

54 

A20 

H1 

53 

A19 
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52 

A18 

G2 

49 
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48 

A16 
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47 
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46 
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45 
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44 
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E2 

43 
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42 
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41 
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40 
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39 
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38 
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37 
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8.3 PACKAGE DIMENSIONS AND 8.4 PACKAGE THERMAL 

MOUNTING SPECIFICATION 

The 82385 package is a 132-pin ceramic Pin Grid The PGA case temperature should be measured at 
Array (PGA). The pins are arranged 0.100 inch the center of the top surface opposite the pins, as in 

(2.5 mm) center-to-center, in a 14 x 14 matrix, three Figure 8-4. The case temperature may be measured 

rows around (Figure 8-3). in any environment to determine whether or not the 

82385 is within the specified operating range. 

A wide variety of available sockets allow low inser- 
tion force or zero insertion force mounting. These 
come in a choice of terminals such as soldertail, sur- 
face mount, or wire wrap. 



Figure 8-3.1. 132-Pin PGA Package Dimensions 
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Figure 8-3.4. Terminal Details 
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Figure 8-3.5. Typical Lead 



Figure 8-3.6. Detail M 


PLASTIC QUAD FLAT PACK 

Table 8-2. Symbol List for Plastic Quad Flat Pack 


Letter or 
Symbol 

Description 
of Dimensions 

A 

Package height: distance 
from seating plane to 
highest point of body 

A1 

Standoff: Distance from 
seating plane to base plane 

D/E 

Overall package dimension: 
lead tip to lead tip 

D1/E1 

Plastic body dimension 

D2/E2 

Bumper Distance 

D3/E3 

Footprint 

LI 

Foot length 

N 

Total number of leads 


NOTES: 

1. All dimensions and tolerances conform to ANSI Y14.5M- 
1982. 

2. Datum plane -H- located at the mold parting line and 
coincident with the bottom of the lead where lead exits 
plastic body. 

3. Datums A-B and -D- to be determined where center 
leads exit plastic body at datum plane -H-. 

4. Controlling Dimension, Inch. 

5. Dimensions D1, D2, El and E2 are measured at the 
mold parting line and do not include mode protrusion. Al- 
lowable mold protrusion of 0.18mm (0.007 in.) per side. 

6. Pin 1 identifier is located within one of the two zones 
indicated. 

7. Measured at datum plane -H-. 

8. Measured at seating plane datum -C-. 
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. MEASURE PGA CASE TEMPERATURE 
AT CENTER OF TOP SURFACE 



132 -PIN PGA 


Figure 8-4. Measuring 82385 PGA Case Temperature 
Table 8-3. 82385 PGA Package Typical Thermal Characteristics. 


Thermal Resistance— X/Watt 

Airflow— f3/min (m3/sec) 
rn 50 I 100 I 200 I 400 r 


0 

(0) 

50 

(0.25) 

100 

(0.50) 

200 

(1.01 

2 

2 

2 

2 

19 

18 

17 

15 

16 

15 

14 

12 

15 

14 

13 

11 


Parameter 

6 Junction-to-Case 
(Case Measured 
as Figure 8.4) 

0 Case-to-Ambient 
(No Heatsink) 

6 Case-to-Ambient 
(with Omnidirectional 

MoatcinU^ 

. .../ 

6 Case-to-Ambient 
(with Unidirectional 
Heatsink) 


NOTES: 

1. Table 8-3 applies to 82385 PGA plugged into socket or soldered directly onto board. 

2. ^JA = ^JC + ^CA- 

3. 0J-CAP = 4X/W (approx.) 

^J-PIN = 4®C/W (inner pins) (approx.) 

^J-PIN = 8X/W (outer pins) (approx.) 
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9.0 ELECTRICAL DATA 

9.1 INTRODUCTION 

This chapter presents the A.C. and D.C. specifica- 
tions for the 82385. 

9.2 MAXIMUM RATINGS 

StoraQS Temperaturs 85**Cto 150^*0 

Case Temperature under Bias . . . to + 1 10°C 
Supply Voltage with Respect 

toVss -0.5V to +6.5V 

Voltage on Any Other Pin —0.5V to Vqc + 0-5V 


NOTE: 

Stress above those listed may cause permanent 
damage to the device. This is a stress rating only 
and functional operation at these or any other con- 
ditions above those listed in the operational sec- 
tions of this specification is not implied. 

Exposure to absolute maximum rating conditions 
for extended periods may affect device reliability. 
Although the 82385 contains protective circuitry to 
resist damage from static electrical discharges, al- 
ways take precautions against high static voltages 
or electric fields. 


9.3 D.C. SPECIFICATIONS Vcc = 5V ±5%;Vss = ov 


Table 9-1. D.C. Specifications 


Symboi 

Parameter 

Min 

Max 

Unit 

Test Condition 

V|L 

Input Low Voltage 

-0.3 

0.8 

V 

(Note 1) 

V|H 

Input High Voltage 

2.0 

Vcc + 0-3 

V 


VCL 

CLK2, BCLK2 Input Low 

-0.3 

0.8 

V 

(Note 1) 

VcH 

CLK2. BCLK2 Input High 

3.7 

Vcc + 0.3 

V 


VoL 

Output Low Voltage 


0.45 

V 

lOL = 4 mA 

VOH 

Output High Voltage 

2.4 


V 

Iqh = 

Ice 

Supply Current 


300 

mA 

(Note 2) 

(Note 4) 

Ili 

Input Leakage Current 


±15 

jixA 

OV < V|N ^ Vcc 

Ilo 

Output Leakage Current 


±15 

jliA 

0.45 < Vqut < Vcc 

C|N 

Input Capacitance 


10 

PF 

(Note 3) 

COUT 

Output Capacitance 


10 

PF 

(Note 3) 

CCLK 

CLK2 Input Capacitance 


15 

pF 

(Note 3) 


NOTES: 

1. Minimum value is not 100% tested. 

2. Ice is specified with inputs driven to CMOS levels. Ice may be higher if driven to TTL levels. 

3. Not 100% tested. Test conditions fc = 1 MHz, Inputs = OV, Tcase = Room. 

4. 300 mA is the maximum Ice at 33 MHz. 

275 mA is the maximum Ice at 25 MHz. 

250 mA is the maximum Ice at 20 MHz. 
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9.4 A.C. SPECIFICATIONS 

The A.C. specifications given in the following tables 
consist of output delays and input setup require- 
ments. The A.C. diagram’s purpose is to illustrate 
the clock edges from which the timing parameters 
are measured. The reader should not Infer any other 
timing relationships from them. For specific informa- 
tion on timing relationships between signals, refer to 
the appropriate functional section. 

A.C. spec measurement is defined in Figure 9-1. In- 
puts must be driven to the levels shown when A.C. 
specifications are measured. 82385 output delays 


are specified with minimum and maximum limits, 
which are measured as shown. 82385 input setup 
and hold times are specified as minimums and de- 
fine the smallest acceptable sampling window. With- 
in the sampling window, a synchronous input signal 
must be stable for correct 82385 operation. 


9.4.1 Frequency Dependent Signals 

The 82385 has signals whose output valid delays 
are dependent on the clock frequency. These sig- 
nals are marked in the A.C. Specification Tables with 
a Note 1 . 



290143-47 

LEGEND: 

A — Maximum output delay specification 
B — Minimum output delay specification 
C — Minimum input setup specification 
B— Minimum input hold specification 

NOTES: 

1. Under rated loading 82385 output (tp and tf) is typically ^ 4.0 ns from 0.8V to 2.0V. 

2. Input waveforms have tr ^ 2.0 ns from 0.8V to 2.0V. 


Figure 9-1. Drive Leveis and Measurement Points for A.C. Specification 
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A.C. SPECIFICATION TABLES 

Many of the A.C. Timing parameters are frequency dependent. The frequency dependent A.C. Timing parame- 
ters are guaranteed only at the maximum specified operating frequency. 

Table 9-2. 82385 A.C. Timing Specifications 

Vcc = 5.0±5% 


Symbol 

Parameter 

20 MHz 

25 MHz 

33 MHz 

Units 

Notes 

Min 

Max 

Min 

Max 

Min 

Max 

Tcase 

Case Temperature 

0 

85 

0 

75 

0 

75 

‘’C 


t1 

Operating Frequency 

15.40 



25.00 

15.40 

33.33 

mHz 


mm 


25.00 

32.50 

20.00 

32.50 

15.00 

32.50 




CLK2, BCLK2 High Time @ 2.0V 



8 


6.25 


|Q§|| 



CLK2. BCLK2 High Time @ 3.7V 

7 


5 


4.5 


B9i 



CLK2, BCLK2 Low Time @ 2.0V 

10 


8 







CLK2, BCLK2 Low Time @ 0.8V 

8 


6 


m 

llll 


(Note 8) 


CLK2, BCLK2 Fall Time 


8 


7 


4 

ns 

(Notes 8, 9) 


CLK2. BCLK2 Rise Time 


8 


7 


4 

ns 



A2-A1 9, A21 “A31 Setup Time 



18 


13 


ns 



LOCK# Setup Time 

16 


14 


9.5 


ns 



BE(0-3)# Setup Time 

19 


m 


10 


ns 



A20 Setup Time 


im 

H 






t8 

A2-A31, BE(0-3)# LOCK# Hold Time 

3 


3 






t9a 

M/IO#, D/C# Setup Time 

1^1 








Hi 

W/R# Setup Time 

IQ 






ll^Si 


t9c 

ADS# Setup Time 

22 








t10 

ADS#, D/C#, M/IO#, W/R# Hold Time 

5 


3 


3 


ns 


t11 

READYI# Setup Time 

12 


8 


7 


ns 

(Note 1) 

t12 

READYI# Hold Time 

4 


4 


3 


ns 


t13a1 

NCA# Setup Time (See t55b2) 

21 


18 


13 


ns 

(Note 6) 

t13a2 

NCA# Setup Time (See t55b3) 

16 


m 


9 


ns 

(Note 6) 

t13b 

LBA# Setup Time 

10 


Q 


5.75 


ns 


t13c 

X16# Setup Time 

10 


7 




ns 


t14a 

NCA# Hold Time 

4 


3 


H 


ns 


t14b 

LBA#,X16# Hold Time 

4 


3 


3 


ns 


t15 

RESET, BRESET Setup Time 

12 


10 


8 


ns 


t16 

RESET. BRESET Hold Time 

4 


3 


2 


ns 


t17 

NA# Valid Delay 

15 

34 

4 

27 

4 

19.2 

ns 

(25 pF Load) 
(Note 1) 

t18 

READYO# Valid Delay 

4 

28 

4 

22 

3 

15 

ns 

(25 pF Load) 
(Note 1) 

t19 

BRDYEN# Valid Delay 

4 

28 

4 

21 

3 

13 

ns 
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Table 9-2. 82385 A.C. Timing Specifications (Continued) 
Vcc = 5.0 ±5% 


Symbol 

Parameter 

20 MHz 

25 MHz 

33 MHz 

Units 

Notes 

Min 

Max 

Min 

Max 

Min 

Max 

t21a1 

GALEN Rising, PHI1 

3 

24 

4 

21 

3 

15 

ns 


t21a2 

CALEN Falling, PHI1 

3 

24 

4 

21 

3 

15 

ns 


t21a3 

CALEN Falling in TIP, PHI2 

3 

24 

4 

21 

3 

15 

ns 


t21b 

CALEN Rising Following CWTH Cycle 

3 

34 

4 

27 

3 

20 

ns 

(Note 1) 

t21c 

CALEN Pulse Width 

10 


10 


10 


ns 


t21d 

CALEN Rising to CS# Falling 

13 


13 


13 


ns 


t22a1 

CWEx# Falling, PHI1 (CWTH) 

4 

25 

4 

23 

3 

18 

ns 

(Note 1 ) 

t22a2 

CWEx# Falling, PHI2 (CRDM) 

4 

25 

4 

23 

3 

18 

ns 

(Note 1) 

t22b 

CWEx# Pulse Width 

30 


25 


20 


ns 

(Notes 1 , 2) 

t22c1 

CWEx# Rising, PHI1 (CWTH) 

4 

25 

4 

21 

3 

16 

ns 

(Note 1) 

t22c2 

CWEx# Rising, PHI2 (CRDM) 

12 

25 

8 

21 

6 

16 

ns 

(Note 1) 

t23a 

CS(0--3)# Rising 

12 

37 

9 

29 

3 

25 

ns 

(Note 1) 

t23b 

COEx# Falling to CS(0-3)# Falling 

0 


0 


0 


ns 

(Note 1) 

t24 

CT/R# Valid Delay 

12 

38 

9 

30 

3 

22 

ns 

(Noto 1) 

t25a 

COEx# Falling (Direct) 

1 

22 

4 

19.5 

3 

15 

ns 

(25 pF Load) 

t25b 

COEx# Falling (2-Way) 

1 

24.5 

4 

19.5 

3 

15 

ns 

(25 pF Load) (Notel) 

t25c1 

COEx# Rising Delay @ Tcase = Min 

5 

17 

4 

17.5 

3 

12 

ns 

(25 pF Load) 

t25c2 

COEx# Rising Delay @ Tcase = Max 

5 

19 

4 

19.5 

3 

12 

ns 

(25 pF Load) 

t25d 

CWEx# Falling to COEx# Falling or 
CWEx# Rising to COEX# 

Rising when DEFOE# = Vcc 

0 

5 

0 

5 

0 

5 

ns 

(25 pF Load) 

t26 

CS(0-3)# Falling to CWEx# Rising 

30 


25 


20 


ns 

(Notes 1 , 2) 

t27 

CWEx# Falling to CS(0-3)# Falling 

0 


0 


0 


ns 


t28a 

CWEx# Rising to CALEN Rising 

0 


0 


2 


ns 


t28b 

CWEx# Rising to CS(0-3)# Falling 

0 


0 


2 


ns 


t31 

SA(2--31) Setup Time 

19 


10 


8 


ns 


t32 

SA(2-31) Hold Time 

3 


3 


3 


ns 


t33 

BADS# Valid Delay 

6 

28 

4 

21 

3 

16 

ns 

(Note 1) 

t34 

BADS# Float Delay 

6 

30 

4 

30 

4 

25 

ns 

(Note 3) 

t35 

BNA# Setup Time 

9 


7 


7 


ns 


t36 

BNA# Hold Time 

15 


4 


2 


ns 


t37 

BREADY# Setup time 

26 


20 


13 


ns 

(Notel) 

t38 

BREADY# Hold Time 

4 


3 


2 


ns 


t40a 

BACP Rising Delay 

4 

20 

4 

16 

2 

12 

ns 


t40b 

BACP Falling Delay 

4 

22 

4 

20 

2 

18 

ns 
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Table 9-2. 82385 A.C. Timing Specifications (Continued) 
Vcc = 5.0 ±5% 


Symbol 

Parameter 

20 MHz 

25 MHz 

33 MHz 

Units 

Notes 

Min 

Max 

Min 

Max 

Min 

Max 

t41 

BAOE# Valid Delay 

4 

18 

4 

15 

2 

12 

ns 


t43a 

BT/R# Valid Delay 

2 

19 

4 

16 

2 

14 

ns 


t43b1 

DOE# Falling Delay 

2 

23 

4 

20 

2 


ns 


t43b2 

DOE# Rising Delay @ Tcase = Min 



B 


B 


ns 


t43b3 

DOE# Rising Delay @ Tcase = Max 



B 

19 


B 



t43c 

LDSTB Valid Delay 



B 



B 

ns 


t44a 

SEN Setup Time 

11 


9 


7 


ns 


t44b 

SSTB# Setup Time 

ID 


5 


B 


ns 


t45 

SEN, SSTB# Setup Time 

5 


5 


2 




M/S# = 

Vcc (Master Mode) 









Ue 

BHOLD Setup Time 

17 


B 


ID 




t47 

BHOLD Hold Time 

5 


3 


2 


IQII 


t48 

BHLDA Valid Delay 

B 


4 


B 


BSI 


M/S# - 

Vss (Slave Mode) 









t49 

BHLDA Setup Time 

17 


15 


ID 


ns 


t50 

BHLDA Hold Delay 

5 


3 


2 


ns 


t51 

BHOLD Valid Delay 

B 

m 

4 


B 

B 

ns 


t55a 

BLOCK# Valid Delay 

B 


4 


B 

[j^f 

ns 

(Notes 1 ,5) 

t55b1 

BBE(0~3)# Valid Delay 

4 

^01 

.4 

26 

B 


m 


t55b2 

BBE(0-3#) Valid Delay 

B 


4 


B 


m 


t55b3 

BBE(0-3)# Valid Delay 

4 

36 

4 


B 



(Notes 1 , 7) 

t55c 

LOCK# Valid to BLOCK# Valid 

0 

30 

0 



1^ 



t56 

MISS# Valid Delay 

4 

35 

4 


Laj 

22 

ns 

(Note 1) 


MISS#, BBE(0-3)#, BLOCK# Float Delay 

4 


4 



m 


(Note 3) 


WBS Valid Delay 

B 


4 



iDD 

BI9i 

(Note 1) 


FLUSH Setup Time 

B 


B 



iHBI 



t60 

FLUSH Hold Time 

5 


5 


3 


ns 


t61 

FLUSH Setup to RESET Falling 

26 


21 


16 


ns 

(Note 4) 

t62 

FLUSH Hold to RESET Falling 

26 


21 


16 


ns 

(Note 4) 


NOTES: 

1 . Frequency dependent specification. 

2. Used for cache data memory (SRAM) specifications. 

3. Float times not 100% tested. 

4. This feature is tested only at 16 MHz. 

5. BLOCK# delay is either from BPHI1 or from 386 LOCK#. Refer to Figure 5-3K and 5-3L in the 82385 data sheet. 

6. NCA# setup time is now specified to the rising edge of PHI2 in the state after 386 DX addresses become valid (either the 
first T2 or the state after the first T2P). 

7. BBE# Valid delay is a function of NCA# setup. 

8. Not 100% tested. 

9. t5 is measured from 0.8V to 3.7V. 
t6 is measured from 3.7V to 0.8V 

This parameter is not 100% tested and is guaranteed by Intel’s test methodology. 
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Cache Read Miss (Cache Update Cycle) 


PHM ; PHI2 PHI1 ; PHI2 PHIl ' PHI2 


:< — 23 MAX - 
123 MIN K 


23 MIN U- ,-»- 22 AMAX- 

22 AMIN,-^-H I 


- 21 A-H Ht- 21 A- 


*-24MAX^ -427^ ^ 

24MIN 4,1 

^ ^ ^ 

®. This would be 21 B if previous bus cycle was Cache Write Hit cycle. 

Cache Read Cycle 


CALEN (T 1 ) 


COE# 

(DIRECT MAPPED) 


T1,T1P 

' PHI 2 


T2,T2P 

' PH12 







(TTinr 

— 

-»- 23 MAX-^ 1 

H 23 MIN ' 






24 MAX — 

l-^ 24 MIN-*j 

1 



I //7Z 

\l/ \ 



1 

1 

25 A ' 

_ .... 


1 

1 

\\\k i 

Ill} 


1 

« 

: 

-^ 25 C-*j 



©. This would be 21 B if previous bus cycle was Cache Write Hit cycle. 
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System Bus Interface Parameters (Continued) 


OUTPUT DELAYS 


BCLK2 

BPHI2 

BPHI1 

s 

BPHI2 

r 

\- 

BCLK 




/ 

\ 

/ 

BADS#, BBE# 
BLOCK# 
MISS# 

(VALID DELAY) 

BADS#, BBE# 
BLOCK# 
MISS# 

FLOAT DELAY 

BHOLD 
(SLAVE CONFIG.) 

BHLDA.WBS 
(MASTER CONFIG.) 

BACP, BAOE# 

BT/R#, DOE# 

LDSTB 

BACP 

DOE# 

33 

55 

— 56 — 



wn% 





34 

-i — 57 — 





WTTITs 





- — 51 — 





WIM 





48 

— 58-^ 










Bi 

■ 










■ 

— 43A-^ 










BSSIIIIH 







^40 — 



\ 



mu. 






11 
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APPENDIX A 


82385 Signal Summary 


Signal 

Group/Name 

Signal Function 

Active 

State 

Input/ 

Output 

Tri-State 

Output? 

386 DX INTERFACE 

RESET 

386 DX Reset 

High 

I 


A2-A31 

386 DX Address Bus 

High 

I 

— 

BE0#-BE3# 

366 DX Byte Enables 

Low 

I 

— 

CLK2 

386 DX Clock 

— 

I 


READYO# 

Ready Output 

Low 

0 

No 

BRDYEN# 

Bus Ready Enable 

Low 

0 

No 

READYI# 

386 DX Ready Input 

Low 

I 

— 

ADS# 

386 DX Address Status 

Low 

I 

— 

M/IO# 

386 DX Memory / I/O Indication 

— 

I 

— 

W/R# 

386 DX Write/ Read Indication 

— 

I 

— 

D/C# 

386 DX Data/Control Indication 

— 

I 

— 

LOCK# 

386 DX Lock Indication 

Low 

I 

— 

NA# 

386 DX Next Address Request 

Low 

0 

No 

CACHE CONTROL 

CALEN 

Cache Address Latch Enable 

High 

0 

No 

CT/R# 

Cache Transmit/ Receive 

— 

0 

No 

CS0#-CS3# 

Cache Chip Selects 

Low 

0 

No 

COEA#,COEB# 

Cache Output Enables 

Low 

0 

No 

CWEA#,CWEB# 

Cache Write Enables 

Low 

0 

No 

LOCAL DECODE 

LB A# 

386 DX Local Bus Access 

Low 

I 

— 

NCA# 

Non-Cacheable Access 

Low 

I 

— 

X16# 

1 6-Bit Access 

Low 

I 

— , 

STATUS AND CONTROL 

MISS# 

Cache Miss Indication 

Low 

0 

Yes 

WBS 

Write Buffer Status 


0 

No 

FLUSH 

Cache Flush 

High 

I 


82385 INTERFACE 

BREADY# 

385 Ready Input 

Low 

I 

— 

BNA# 

385 Next Address Request 

Low 

I 

— 

BLOCK# 

385 Lock Indication 

Low 

0 

Yes 

BADS# 

385 Address Status 

Low 

0 

Yes 

BBE0#-BBE3# 

385 Byte Enables 

Low 

0 

Yes 
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82385 Signal Summary (Continued) 


Signal 

Group/Name 

Signal Function 

Active 

State 

Input/ 

Output 

Tri-State 

Output? 

DATA/ADDR CONTROL 

LDSTB 

Local Data Strobe 

Pos. Edge 

0 

No 

DOE# 

Data Output Enable 

Low 

0 

No 

BT/R# 

Bus Transmit/ Receive 

■— 

0 

No 

BACP 

Bus Address Clock Pulse 

Pos. Edge 

0 

No 

BAOE# 

Bus Address Output Enable 

Low 

0 

No 

CONFIGURATION 

2W/D# 

2-Way/ Direct Map Select 

— 

I 

— 

M/S# 

Master/Slave Select 

— 

I 

— 

DEFOE# 

Define Cache Output Enable 

— 

1 

— 

COHERENCY 

SA2-SA31 

Snoop Address Bus 

High 

I 

— 

SSTB# 

Snoop Strobe 

Low 

I 

— 

SEN 

Snoop Enable 

High 

I 

— 

ARBITRATION 

BHOLD 

Hold 

High 

I/O 

No 

BHLDA 

Hold Acknowledge 

High 

I/O 

No 


10.0 REVISION HISTORY 


DOCUMENT: ADVANCE INFORMATION DATA SHEET 

PRIOR REV: 290143-003 September 1988 

NEW REV: 290143-004 September 1989 

Change # 

Page # 

Para. # 

Change 

1. 

Throughout 

Fig. 8-3 

PQFP Package added 

2. 

Throughout 

Tables 
8-2, 8-3 

PQFP Info 

3. 

Throughout 

Table 8-4 

PQFP Thermal Resistance 

4. 

Throughout 


A.C. Specifications Unified (20 MHz, 25 MHz, 33 MHz) 

5. 

Throughout 


DEFOE# Specifications added to device 
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386 TM SX MICROPROCESSOR 


Intel* 


■ Fulf 32-Bit Internal Architecture 

— 8-, 16-, 32-Bit Data Types 

— 8 General Purpose 32-Blt Registers 

■ Runs lntel 386 TM Software in a Cost 
Effective 16-Bit Hardware Environment 
— Runs Same Applications and O.S.’s 

as the 386 TM dx Processor 
— Object Code Compatible with 8086, 
80186, 80286, and 386 Processors 
— Runs MS-DOS*, OS/2* and UNIX** 

■ Very High Performance 16-Bit Data Bus 

— 20 MHz Clock 
-Two-Clock Bus Cycles 

— 20 Megabytes/Sec Bus Bandwidth 
— Address Pipelining Allows Use of 

Slower/Cheaper Memories 

■ Integrated Memory Management Unit 
— Virtual Memory Support 

— Optional On-Chip Paging 

— 4 Levels of Hardware Enforced 
Protection 

— MMU Fully Compatible with Those of 
the 80286 and 386 DX CPUs 


■ Virtual 8086 Mode Allows Execution of 
8086 Software in a Protected and 
Paged System 

■ Large Uniform Address Space 
— 16 Megabyte Physical 

— 64 Terabyte Virtual 

— 4 Gigabyte Maximum Segment Size 

■ High Speed Numerics Support with the 
387 TM 3X Coprocessor 

■ On-Chip Debugging Support Including 
Breakpoint Registers 

■ Complete System Development 
Support 

— Software: C, PL/M, Assembler 
— Debuggers: PMON-386 DX, 

ICEtm.386 SX 

— Extensive Third-Party Support: C, 
Pascal, FORTRAN, BASIC, Ada*** on 
VAX, UNIX**, MS-DOS*, and Other 
Hosts 

■ High Speed CHMOS III Technology 

■ 100-Pin Plastic Quad Flatpack Package 

(See Packaging Outlines and Dimensions #231369) 


The 386TM sX Microprocessor is a 32-bit CPU with a 16-bit external data bus and a 24-bit external address 
bus. The 386 SX CPU brings the high-performance software of the lntel386TM Architecture to midrange 
systems. It provides the performance benefits of a 32-bit programming architecture with the cost savings 
associated with 1 6-blt hardware systems. 


SEGMENTATION UNIT 



HOLD, I NTR.N MI 
► ERROR, BUSY 


M/I0#.D/C#. 

. W/R#, LOCK#, 
ADS#, NA#, 
READY# 

► D0-D15 


240187-47 


386TM SX Pipelined 32-Bit Microarchitecture 

* MS-DOS and OS/2 are trademarks of Microsoft Corporation. 

** UNIX is a trademark of AT&T. 

***Ada is a trademark of the Department of Defense. 
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386TM SX MICROPROCESSOR 


1.0 PIN DESCRIPTION 


NOTE: 

NC = No Connect 



Figure 1.1. 386 tm sx Microprocessor Pin out Top View 


Address 


Table 1.1. Alphabetical Pin Assignments 
^ta I Control I 


18 

Do 

1 

ADS# 

16 

51 

Di 

100 

BHE# 

19 

52 

□2 

99 

BLE# 

17 

53 

Da 

96 

BUSY# 

34 

54 

D4 

95 

CLK2 

15 

55 

Ds 

94 

D/C# 

24 

56 

De 

93 

ERROR# 

36 

58 

D7 

92 

HLDA 

3 

59 

Da 

90 

HOLD 

4 

60 

Dg 

89 

INTR 

40 

61 

Dio 

88 

LOCK# 

26 

62 

Dii 

87 

M/IO# 

23 

64 

Di2 

86 

NA# 

6 

65 

Di3 

83 

NMI 

38 

66 

Di4 

82 

PEREQ 

37 

70 

Di5 

81 

READY# 

7 

72 



RESET 

33 

73 


W/R# 

25 
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1.0 PIN DESCRIPTION (Continued) 

The following are the 386tm sx Microprocessor pin descriptions. The following definitions are used in the pin 
descriptions: 

# The named signal is active LOW. 

I Input signal. 

O Output signal. 

I/O Input and Output signal. 

No electrical connection. 


iiiwi 

Type 

Pin 

Name and Function 

CLK2 

1 

15 

CLK2 provides the fundamental timing for the 386tm sx 
M icroprocessor. For additional information see Clock. 

RESET 

1 

33 

RESET suspends any operation In progress and places the 

386TM SX Microprocessor In a known reset state. See Interrupt 
Signals for additional information. 

D15-D0 

I/O 

81-83,86-90, 

92-96,99-100,1 

Data Bus inputs data during memory, I/O and interrupt 
acknowledge read cycles and outputs data during memory and 

I/O write cycles. See Data Bus for additional information. 

A 23 -A 1 

0 

80-79,76-72,70, 

66-64,62-58, 

56-51,18 

Address Bus outputs physical memory or port I/O addresses. 

See Address Bus for additional Information. 

W/R# 

0 

25 

Write/Read is a bus cycle definition pin that distinguishes write 
cycles from read cycles. See Bus Cycle Definition Signals for 
additional information. 

D/C# 

0 

24 

Data/Control is a bus cycle definition pin that distinguishes data 
cycles, either memory or I/O, from control cycles which are: 
Interrupt acknowledge, halt, and code fetch. See Bus Cycle 
Definition Signals for additional information. 

M/IO# 

0 

23 

Memory/iO is a bus cycle definition pin that distinguishes 
memory cycles from input/output cycles. See Bus Cycle 
Definition Signals for additional information. 

LOCK# 

0 

26 

Bus Lock is a bus cycle definition pin that indicates that other 
system bus .masters are not to gain control of tho system bus 
while it is active. See Bus Cycle Definition Signals for 
additional Information. 

ADS# 

0 

16 

Address Status Indicates that a valid bus cycle definition and 
address (W/R#, D/C#, M/IO#, BHE#, BLE# and A 23 -A'| are 
being driven at the 386tm sx Microprocessor pins. See Bus 
Control Signals for additional information. 

NA# 

1 

6 

Next Address Is used to request address pipelining. See Bus 
Control Signals for additional information. 

READY# 

1 

7 

Bus Ready terminates the bus cycle. See Bus Control Signals 
for additional information. 

BHE#,BLE# 

0 

19,17 

Byte Enables indicate which data bytes of the data bus take part 
in a bus cycle. See Address Bus for additional information. 
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1.0 PIN DESCRIPTION (Continued) 


Symbol 

Type 

Pin 

Name and Function 

HOLD 

I 

4 

Bus Hold Request input allows another bus master to request 
control of the local bus. See Bus Arbitration Signals for 
additional Information. 

HLDA 

0 

3 

Bus Hold Acknowledge output indicates that the 386 tm SX 
Microprocessor has surrendered control of its local bus to 
another bus master. See Bus Arbitration Signals for additional 
information. 

INTR 

I 

40 

Interrupt Request is a maskable input that signals the 386 tm SX 
Microprocessor to suspend execution of the current program and 
execute an interrupt acknowledge function. See Interrupt 

Signals for additional information. 

NMI 

I 

38 

Non-Maskable Interrupt Request is a non-maskable input that 
signals the 386 tm sx Microprocessor to suspend execution of 
the current program and execute an Interrupt acknowledge 
function. See Interrupt Signals for additional information. 

BUSY# 

I 

34 

Busy signals a busy condition from a processor extension. See 
Coprocessor Interface Signals for additional information. 

ERROR# 

I 

36 

Error signals an error condition from a processor extension. See 
Coprocessor Interface Signals for additional information. 

PEREQ 

I 

37 

Processor Extension Request indicates that the processor has 
data to be transferred by the 386 tm SX Microprocessor. See 
Coprocessor Interface Signals for additional information. 

N/C 


20, 27-31,43-47 

No Connects should always be left unconnected. Connection of 
a N/C pin may cause the processor to malfunction or be 
incompatible with future steppings of the 386 tm sx 

Microprocessor. 

Vcc 

I 

8-10,21,32,39 

42,48,57,69, 

71,84,91,97 

System Power provides the + 5V nominal DC supply input. 

Vss 

I 

2,5,11-14,22 

35,41,49-50, 

63,67-68, 

77-78,85,98 

System Ground provides the OV connection from which all 
inputs and outputs are measured. 
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31 16 

15 0 


FLAGS 


IP 


51 16 15 0 

MSW CRO 

PAGE FAULT LINEAR ADDRESS REGISTER CR2 
PAGE DIRECTORY SASE REGISTER CR3 


FLAGS AND 

INSTRUCTION 

POINTER 



- INTEL RESERVED DO NOT USE 


SYSTEM ADDRESS 
REGISTERS 


LINEAR BREAKPOINT ADDRESS 0 
LINEAR BREAKPOINT ADDRESS 1 
LINEAR BREAKPOINT ADDRESS 2 
LINEAR BREAKPOINT ADDRESS 3 


BREAKPOINT STATUS 
BREAKPOINT CONTROL 


Figure 2.1. 386 tm sx Microprocessor Registers 
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INTRODUCTION 

The 386 SX Microprocessor is 100% object code 
compatible with the 386 DX, 286 and 8086 micro- 
processors. System manufacturers can provide 386 
DX CPU based systems optimized for performance 
and 386 SX CPU based systems optimized for cost, 
both sharing the same operating systems and appli- 
cation software. Systems based on the 386 SX CPU 
can access the world’s largest existing microcom- 
puter software base, including the growing 32-bit 
software base. Only the Intel386 DX architecture 
can run UNIX, OS/2 and MS-DOS. 

Instruction pipelining, high bus bandwidth, and a 
very high performance ALU ensure short average 
Instruction execution times and high system 
throughput. The 386 SX CPU is capable of execution 
at sustained rates of 2.5-3.0 million instructions per 
second. 

The integrated memory management unit (MMU) in- 
cludes an address translation cache, advanced mul- 
ti-tasking hardware, and a four-level hardware-en- 
forced protection- mechanism to support operating 
systems. The virtual machine capability of the 
386 SX CPU allows simultaneous execution of appli- 
cations from multiple operating systems such as 
MS-DOS and UNIX. 

The 386 SX CPU offers on-chip testability and de- 
bugging features. Four breakpoint registers allow 
conditional or unconditional breakpoint traps on 
code execution or data accesses for powerful de- 
bugging of even ROM-based systems. Other testa- 
bility features include self-test, tri-state of output 
buffers, and direct access to the page translation 
cache. 


2.0 BASE ARCHITECTURE 

The 386 SX Microprocessor consists of a central 
processing unit, a memory management unit and a 
bus interface. 

The central processing unit consists of the execu- 
tion unit and the instruction unit. The execution unit 
contains the eight 32-bit general purpose registers 
which are used for both address calculation and 
data operations and a 64-bit barrel shifter used to 
speed shift, rotate, multiply, and divide operations. 
The instruction unit decodes the instruction opcodes 
and stores them in the decoded instruction queue 
for immediate use by the execution unit. 

The memory management unit (MMU) consists of a 
segmentation unit and a paging unit. Segmentation 
allows the managing of the logical address space by 


providing an extra addressing component, one that 
allows easy code and data relocatability, and effi- 
cient sharing. The paging mechanism operates be- 
neath and Is transparent to the segmentation pro- 
cess, to allow management of the physical address 
space. 

The segmentation unit provides four levels of pro- 
tection for isolating and protecting applications and 
the operating system from each other. The hardware 
enforced protection allows the design of systems 
with a high degree of integrity. 

The 386 SX Microprocessor has two modes of oper- 
ation: Real Address Mode (Real Mode), and Protect- 
ed Virtual Address Mode (Protected Mode). In Real 
Mode the 386 SX Microprocessor operates as a very 
fast 8086, but with 32-bit extensions If desired. Real 
Mode is required primarily to set up the processor 
for Protected Mode operation. 

Within Protected Mode, software can perform a task 
switch to enter into tasks designated as Virtual 8086 
Mode tasks. Each such task behaves with 8086 se- 
mantics, thus allowing 8086 software (an application 
program or an entire operating system) to execute. 
The Virtual 8086 tasks can be isolated and protect- 
ed from one another and the host 386 SX Micro- 
processor operating system by use of paging. 

Finally, to facilitate high performance system hard- 
ware designs, the 386 SX Microprocessor bus inter- 
face offers address pipelining and direct Byte En- 
able signals for each byte of the data bus. 


2.1 Register Set 

The 386 SX Microprocessor has thirty-four registers 
as shown in Figure 2-1. These registers are grouped 
Into the following seven categories: 

General Purpose Registers: The eight 32-bit gen- 
eral purpose registers are used to contain arithmetic 
and logical operands. Four of these (EAX, EBX, 
ECX, and EDX) can be used either in their entirety as 
32-bit registers, as 1 6-blt registers, or split into pairs 
of separate 8-bit registers. 

Segment Registers: Six 1 6-bit special purpose reg- 
isters select, at any given time, the segments of 
memory that are immediately addressable for code, 
stack, and data. 

Flags and Instruction Pointer Registers: The two 

32-bit special purpose registers in figure 2.1 record 
or control certain aspects of the 386 SX Microproc- 
essor state. The EFLAGS register includes status 
and control bits that are used to reflect the outcome 
of many instructions and modify the semantics of 
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some instructions. The Instruction Pointer, called 
EIP, is 32 bits wide. The Instruction Pointer controls 
Instruction fetching and the processor automatically 
increments it after executing an instruction. 


Debug Registers: The six programmer accessible 
debug registers provide on-chip support for debug- 
ging. The use of the debug registers is described in 
Section 2.10 Debugging Support. 


Control Registers: The four 32-bit control register 
are used to control the global nature of the 386 SX 
Microprocessor. The CRO register contains bits that 
set the different processor modes (Protected, Real, 
Paging and Coprocessor Emulation). CR2 and CR3 
registers are used in the paging operation. 

System Address Registers: These four special 
registers reference the tables or segments support- 
ed by the 80286/386 SX/386 DX CPU’s protection 
model. These tables or segments are: 

GDTR (Global Descriptor Table Register), 

IDTR (Interrupt Descriptor Table Register), 
LDTR (Local Descriptor Table Register), 

TR (Task State Segment Register). 


Test Registers: Two registers are used to control 
the testing of the RAM/CAM (Content Addressable 
Memories) In the Translation Lookaside Buffer por- 
tion of the 386 SX Microprocessor. Their use is dis- 
cussed in Testability. 

EFLAGS REGISTER 

The flag register is a 32-bit register named EFLAGS. 
The defined bits and bit fields within EFLAGS, 
shown in Figure 2.2, control certain operations and 
Indicate the status of the 386 SX Microprocessor. 
The lower 16 bits (bits 0-15) of EFLAGS contain the 
16- bit flag register named FLAGS. This Is the de- 
fault flag register used when executing 8086, 80286, 
or real mode code. The functions of the flag bits are 
given in Table 2.1. 
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Table 2.1. Flag Definitions 


Bit Position 

Name 

Function 

0 

CF 

Carry Flag — Set on high-order bit carry or borrow; cleared 
otherwise. 

2 

PF 

Parity Flag — Set if low-order 8 bits of result contain an even 
number of 1-bits; cleared otherwise. 

4 

AF 

Auxiliary Carry Flag — Set on carry from or borrow to the low 
order four bits of AL; cleared otherwise. 

6 

ZF 

Zero Flag — Set if result is zero; cleared otherwise. 

7 

SF 

Sign Flag — Set equal to high-order bit of result (0 if positive, 1 if 
negative). 

8 

TF 

Single Step Flag — Once set, a single step interrupt occurs after 
the next instruction executes. TF is cleared by the single step 
interrupt. 

9 

IF 

Interrupt-Enable Flag — When set, maskable interrupts will cause 
the CPU to transfer control to an interrupt vector specified 
location. 

10 

DF 

Direction Flag — Causes string instructions to auto-increment 
(default) the appropriate index registers when cleared. Setting 

DF causes auto-decrement. 

11 

OF 

Overflow Flag — Set if the operation resulted in a carry/ borrow 
into the sign bit (high-order bit) of the result but did not result in a 
carry/borrow out of the high-order bit or vice-versa. 

12,13 

lOPL 

I/O Privilege Level — Indicates the maximum CPL permitted to 
execute I/O instructions without generating an exception 13 fault 
or consulting the I/O permission bit map while executing In 
protected mode. For virtual 86 mode It indicates the maximum 

CPL allowing alteration of the IF bit. 

14 

NT 

Nested Task — Indicates that the execution of the current task is 
nested within another task. 

16 

RF 

Resume Flag — Used in conjunction with debug register 
breakpoints. It is checked at instruction boundaries before 
breakpoint processing. If set, any debug fault Is ignored on the 
next instruction. 

17 

VM 

Virtual 8086 Mode — If set while in protected mode, the 386 tm SX 
Microprocessor will switch to virtual 8086 operation, handling 
segment loads as the 8086 does, but generating exception 13 
faults on privileged opcodes. 
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CONTROL REGISTERS 

The 386 SX Microprocessor has three control registers of 32 bits, CRO, CR2 and CR3, to hold the machine 
state of a global nature. These registers are shown in Figures 2.1 and 2.2. The defined CRO bits are described 
in Table 2.2. 


Table 2.2. CRO Definitions 


Bit Position 

Name 

Function 

0 

PE 

Protection mode enable — places the 386 tm sx Microprocessor 

Into protected mode. If PE is reset, the processor operates again 

In Real Mode. PE may be set by loading MSW or CRO. PE can be 
reset only by loading CRO, It cannot be reset by the LMSW 
instruction. 

1 

MP 

Monitor coprocessor extension — allows WAIT instructions to 
cause a processor extension not present exception (number 7). 

2 

EM 

Emulate processor extension — causes a processor extension 
not present exception (number 7) on ESC instructions to allow 
emulating a processor extension. 

3 

TS 

Task switched — indicates the next Instruction using a processor 
extension will cause exception 7, allowing software to test 
whether the current processor extension context belongs to the 
current task. 

31 

PG 

Paging enable bit — is set to enable the on-chip paging unit. It is 
reset to disable the on-chip paging unit. 


2.2 Instruction Set 

The instruction set is divided into nine categories of 
operations: 


Data Transfer 

Arithmetic 

Shift/Rotate 

String Manipulation 

Bit Manipulation 

Control Transfer 

High Level Language Support 

Operating System Support 

Processor Control 


These Instructions are listed in Table 9.1 

Instruction Set Clock Count Summary. 


All 386 SX Microprocessor instructions operate on 
either 0, 1 , 2 or 3 operands; an operand resides in a 
register, in the instruction itself, or in memory. Most 
zero operand instructions (e.g CLI, STI) take only 
one b\He. One operand Instructions generally are 
two b^es long. The average instruction is 3.2 bytes 
long. Since the 386 SX Microprocessor has a 16 
byte prefetch instruction queue, an average of 5 in- 
structions will be prefetched. The use of two oper- 
ands permits the following types of common instruc- 
tions: 

Register to Register 
Memory to Register 
Immediate to Register 
Memory to Memory 
Register to Memory 
Immediate to Memory. 
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The operands can be either 8, 16, or 32 bits long. As 
a general rule, when executing code written for the 
386 SX Microprocessor (32 bit code), operands are 
8 or 32 bits; when executing existing 8086 or 80286 
code (16-bit code), operands are 8 or 16 bits. Prefix- 
es can be added to ail instructions which override 
the default length of the operands (i.e. use 32-bit 
operands for 16-bit code, or 16-bit operands for 32- 
bit code). 


2.3 Memory Organization 

Memory on the 386 SX Microprocessor is divided 
into 8-bit quantities (bytes), 16-bit quantities (words), 
and 32-bit quantities (dwords). Words are stored in 
two consecutive bytes in memory with the low-order 
byte at the lowest address. Dwords are stored In 
four consecutive bytes in memory with the low-order 
byte at the lowest address. The address of a word or 
dword is the byte address of the low-order byte. 

In addition to these basic data types, the 386 SX 
Microprocessor supports two larger units of memory: 
pages and segments. Memory can be divided up 
Into one or more variable length segments, which 
can be swapped to disk or shared between pro- 
grams. Memory can also be organized Into one or 
more 4K byte pages. Finally, both segmentation and 
paging can be combined, gaining the advantages of 
both systems. The 386 SX Microprocessor supports 
both pages and segmentation In order to provide 
maximum flexibility to the system designer. Segmen- 
tation and paging are complementary. Segmentation 
is useful for organizing memory In logical modules, 
and as such Is a tool for the application programmer, 
while pages are useful to the system programmer for 
managing the physical memory of a system. 


ADDRESS SPACES 

The 386 SX Microprocessor has three types of ad- 
dress spaces: logical, linear, and physical. A 
logical address (also known as a virtual address) 
consists of a selector and an offset. A selector is the 
contents of a segment register. An offset is formed 
by summing ail of the addressing components 
(BASE, INDEX, DISPLACEMENT), discussed in sec- 
tion 2.4 Addressing Modes, into an effective ad- 
dress. This effective address along with the selector 
is known as the logical address. Since each task on 
the 386 SX Microprocessor has a maximum of 16K 
(214 -1) selectors, and offsets can be 4 gigabytes 
(with paging enabled) this gives a total of 246 bits, or 
64 terabytes, of logical address space per task. The 
programmer sees the logical address space. 

The segmentation unit translates the logical ad- 
dress space into a 32-bit linear address space. If the 
paging unit is not enabled then the 32-blt linear ad- 
dress is truncated into a 24-bit physical address. 
The physical address is what appears on the ad- 
dress pins. 

The primary differences between Real Mode and 
Protected Mode are how the segmentation unit per- 
forms the translation of the logical address into the 
linear address, size of the address space, and pag- 
ing capability. In Real Mode, the segmentation unit 
shifts the selector left four bits and adds the result to 
the effective address to form the linear address. 
This linear address is limited to 1 megabyte. In addi- 
tion, real mode has no paging capability. 

Protected Mode will see one of two different ad- 
dress spaces, depending on whether or not paging 
is enabled. Every selector has a logical base ad- 
dress associated with it that can be up to 32 bits in 
length. This 32-bit logical base address is added to 
the effective address to form a final 32-bit linear 
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Figure 2.3. Address Translation 


address. If paging is disabled this final linear ad- 
dress reflects physical memory and is truncated so 
that only the lower 24 bits of this address are used 
to address the 1 6 megabyte memory address space. 
If paging is enabled this final linear address reflects 
a 32-bit address that is translated through the pag- 
ing unit to form a 16-megabyte physical address. 
The logical base address is stored in one of two 
operating system tables (i.e. the Local Descriptor 
Table or Global Descriptor Table). 

Figure 2.3 shows the .•'elationship between the '/ari- 
ous address spaces. 

SEGMENT REGISTER USAGE 

The main data structure used to organize memory is 
the segment. On the 386 SX Microprocessor, seg- 
ments are variable sized blocks of linear addresses 
which have certain attributes associated with them. 
There are two main types of segments, code and 
data. The segments are of variable size and can be 
as small as 1 byte or as large as 4 gigabytes (2^2 
bits). 

In order to provide compact instruction encoding 
and increase processor performance, instructions 
do not need to explicitly specify which segment reg- 
ister is used. The segment register is automatically 
chosen according to the rules of Table 2.3 (Segment 
Register Selection Rules). In general, data refer- 
ences use the selector contained in the DS register, 
stack references use the SS register and instruction 


fetches use the CS register. The contents of the In- 
struction Pointer provide the offset. Special segment 
override prefixes allow the explicit use of a given 
segment register, and override the implicit rules list- 
ed in Table 2.3. The override prefixes also allow the 
use of the ES, FS and GS segment registers. 

There are no restrictions regarding the overlapping 
of the base addresses of any segments. Thus, all 6 
segments could have the base address set to zero 
and create a system with a four gigabyte linear ad- 
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address space is the same as the linear address 
space. Further details of segmentation are dis- 
cussed in chapter 4 PROTECTED MODE ARCHI- 
TECTURE. 


2.4 Addressing Modes 

The 386 SX Microprocessor provides a total of 8 
addressing modes for instructions to specify oper- 
ands. The addressing modes are optimized to allow 
the efficient execution of high level languages such 
as C and FORTRAN, and they cover the vast majori- 
ty of data references needed by high-level lan- 
guages. 

REGISTER AND IMMEDIATE MODES 

Two of the addressing modes provide for Instruc- 
tions that operate on register or immediate oper- 
ands: 


4-420 






386 TM SX MICROPROCESSOR 



Table 2.3. Segment Register Selection Rules 


Type of 

Implied (Default) 

Segment Override 

Memory Reference 

Segment Use 

Prefixes Possible 

Code Fetch 

CS 

None 

Destination of PUSH, PUSHF, INT, 

CALL, PUSHA Instructons 

ss 

None 

Source of POP, POPA, POPF, IRET, 

RET Instructions 

ss 

None 

Destination of STOS, 

MOVE, REP STOS, and 

REP MOVS instructions 

ES 

None 

Other data references, 
with effective address 
using base register of: 



[EAX] 

DS 

CS.SS,ES,FS,GS 

[EBX] 

DS 

CS,SS,ES,FS,GS 

[ECX] 

DS 

CS,SS,ES,FS,GS 

[EDX] 

DS 

CS,SS,ES,FS,GS 

[ESI] 

DS 

CS,SS,ES,FS,GS 

[EDI] 

DS 

CS,SS,ES,FS,GS 

[EBP] 

SS 

CS,DS,ES,FS,GS 

[ESP] 

SS 

CS,DS,ES,FS,GS 


Register Operand Mode: The operand is located in 
one of the 8, 16 or 32-bit general registers. 

Immediate Operand Mode: The operand is includ- 
ed in the instruction as part of the opcode. 

32-BIT MEMORY ADDRESSING MODES 

The remaining 6 modes provide a mechanism for 
specifying the effective address of an operand. The 
linear address consists of two components: the seg- 
ment base address and an effective address. The 
effective address is calculated by summing any 
combination of the following three address elements 
(see figure 2.3): 

DISPLACEMENT: an 8, 16 or 32-bit immediate val- 
ue, following the instruction. 

BASE: The contents of any general purpose regis- 
ter. The base registers are generally used by compil- 
ers to point to the start of the local variable area. 

INDEX: The contents of any general purpose regis- 
ter except for ESP. The index registers are used to 
access the elements of an array, or a string of char- 
acters. The index register’s value can be multiplied 
by a scale factor, either 1 , 2, 4 or 8. The scaled index 
Is especially useful for accessing arrays or struc- 
tures. 


Combinations of these 3 components make up the 6 
additional addressing modes. There is no perform- 
ance penalty for using any of these addressing com- 
binations, since the effective address calculation Is 
pipelined with the execution of other instructions. 
The one exception is the simultaneous use of Base 
and Index components which requires one addition- 
al clock. 

As shown In Figure 2.4, the effective address (EA) of 
an operand is calculated according to the following 
formula: 

EA = BasGRegister + (Indexpegister^scaling) + Displacement 

1 . Direct Mode: The operand’s offset Is contained 
as part of the instruction as an 8, 16 or 32-blt 
displacement. 

2. Register Indirect Mode: A BASE register con- 
tains the address of the operand. 

3. Based Mode: A BASE register’s contents are 
added to a DISPLACEMENT to form the oper- 
and’s offset. 

4. Scaled Index Mode: An INDEX register’s con- 
tents are multiplied by a SCALING factor, and the 
result is added to a DISPLACEMENT to form the 
operand’s offset. 
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5. Based Scaled Index Mode: The contents of an 
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tor, and the result is added to the contents of a 
BASE register to obtain the operand’s offset. 

6. Based Scaled Index Mode with Displacement: 

The contents of an INDEX register are multiplied 
by a SCALING factor, and the result is added to 
the contents of a BASE register and a DISPLACE- 
MENT to form the operand’s offset. 


DIFFERENCES BETWEEN 16 AND 32 BIT 
ADDRESSES 

In order to provide software compatibility with the 
8086 and the 80286, the 386 SX Microprocessor 
can execute 16-bit instructions in Real and Protect- 
ed Modes. The processor determines the size of the 
instructions it is executing by examining the D bit in a 
Segment Descriptor. If the D bit is 0 then all operand 
lengths and effective addresses are assumed to be 
1 6 bits long. If the D bit is 1 then the default length 
for operands and addresses is 32 bits. In Real Mode 
the default size for operands and addresses is 16 
bits. 


Regardless of the default precision of the operands 

— 4.u^ no£> o\/ A 4-^ 

ui auuic;sooo, ii lo \ju\j o/x ivnoi wpi v.>uk;oov.;i io ciuio lw 

execute either 1 6 or 32-bit instructions. This is speci- 
fied through the use of override prefixes. Two prefix- 
es, the Operand Length Prefix and the Address 
Length Prefix, override the value of the D bit on an 
individual instruction basis. These prefixes are auto- 
matically added by assemblers. 

The Operand Length and Address Length Prefixes 
can be applied separately or in combination to any 
instruction. The Address Length Prefix does not al- 
low addresses over 64K bytes to be accessed In 
Real Mode. A memory address which exceeds 
OFFFFH will result in a General Protection Fault. An 
Address Length Prefix only allows the use of the ad- 
ditional 386 SX Microprocessor addressing modes. 

When executing 32-bit code, the 386 SX Microproc- 
essor uses either 8 or 32-bit displacements, and any 
register can be used as base or index registers. 
When executing 1 6-bit code, the displacements are 
either 8 or 1 6-bits, and the base and Index register 
conform to the 80286 model. Table 2.4 Illustrates 
the differences. 
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Table 2.4. BASE and INDEX Registers for 16- and 32-Bit Addresses 



16-Bit Addressing 

32-Bit Addressing 

BASE REGISTER 

BX,BP 

Any 32-bit GP Register 

INDEX REGISTER 

SI,DI 

Any 32-bit GP Register 

Except ESP 

SCALE FACTOR 

None 

1,2, 4,8 

DISPLACEMENT 

0,8, 16-bits 

0, 8, 32-bits 


2.5 Data Types 

The 386 SX Microprocessor supports all of the data 
types commonly used in high level languages: 

Bit: A single bit quantity. 

Bit Field: A group of up to 32 contiguous bits, which 
spans a maximum of four bytes. 

Bit String: A set of contiguous bits; on the 386 SX 
Microprocessor, bit strings can be up to 4 gigabits 
long. 

Byte: A signed 8-bit quantity. 

Unsigned Byte: An unsigned 8-bit quantity. 

Integer (Word): A signed 16-bit quantity. 

Long Integer (Double Word): A signed 32-bit quan- 
tity. All operations assume a 2’s complement repre- 
sentation. 

Unsigned Integer (Word): An unsigned 16-bit 
quantity. 

Unsigned Long Integer (Double Word): An un- 
signed 32-bit quantity. 

Signed Quad Word: A signed 64-bit quantity. 

Unsigned Quad Word: An unsigned 64-bit quantity. 

Pointer: A 1 6 or 32-bit offset-only quantity which in- 
directly references another memory location. 

Long Pointer: A full pointer which consists of a 16- 
bit segment selector and either a 1 6 or 32-bit offset. 

Char: A byte representation of an ASCII Alphanu- 
meric or control character. 

String: A contiguous sequence of bytes, words or 
dwords. A string may contain between 1 byte and 4 
gigabytes 


BCD: A byte (unpacked) representation of decimal 
digits 0-9. 

Packed BCD: A byte (packed) representation of two 
decimal digits 0-9 storing one digit in each nibble. 

When the 386 SX Microprocessor is coupled with its 
numerics coprocessor, the 387 tm sx, then the fol- 
lowing common floating point types are supported: 

Floating Point: A signed 32, 64, or 80-bit real num- 
ber representation. Floating point numbers are sup- 
ported by the 387 tm sx numerics coprocessor. 

Figure 2.5 illustrates the data types supported by the 
386 SX Microprocessor and the 387 SX. 


2.6 I/O Space 

The 386 SX Microprocessor has two distinct physi- 
cal address spaces: physical memory and I/O. Gen- 
erally, peripherals are placed in I/O space although 
the 386 SX Microprocessor also supports memory- 
mapped peripherals. The I/O space consists of 64K 
bytes which can be divided into 64K 8-bit ports or 
32K 16-bit ports, or any combination of ports which 
add up to no more than 64K bytes. The 64K I/O 
address space refers to physical addresses rather 
than linear addresses since I/O instructions do not 
go through the segmentation or paging hardware. 
The M/IO# pin acts as an additional address line, 
thus allowing the system designer to easily deter- 
mine which address space the processor Is access- 
ing. 

The I/O ports are accessed by the IN and OUT in- 
structions, with the port address supplied as an im- 
mediate 8-blt constant in the instruction or in the DX 
register. All 8-bit and 16-bit port addresses are zero 
extended on the upper address lines. The I/O in- 
structions cause the M/IO# pin to be driven LOW. 
I/O port addresses 00F8H through OOFFH are re- 
served for use by Intel. 
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Figure 2.5. 386 tm sx Microprocessor Supported Data Types 
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Table 2.5. Interrupt Vector Assignments 


Function 

Interrupt 

Number 

Instruction Which 

Can Cause 

Exception 

Return Address 
Points to 
Faulting 
Instruction 

Type 

Divide Error 

0 

DIV, IDIV 

YES 

FAULT 

Debug Exception 

1 

any instruction 

YES 

TRAP* 

NMI Interrupt 

2 

INT2orNMI 

NO 

NMI 

One Byte Interrupt 

3 

INT 

NO 

TRAP 

Interrupt on Overflow 

4 

INTO 

NO 

TRAP 

Array Bounds Check 

5 

BOUND 

YES 

FAULT 

Invalid OP-Code 

6 

Any illegal instruction 

YES 

FAULT 

Device Not Available 

7 

ESC, WAIT 

YES 

FAULT 

Double Fault 

8 

Any Instruction that can 
generate an exception 


ABORT 

Coprocessor Segment Overrun 

9 

ESC 

NO 

ABORT 

Invalid TSS 

10 

JMP, CALL, IRET, INT 

YES 

FAULT 

Segment Not Present 

11 

Segment Register Instructions 

YES 

FAULT 

Stack Fault 

12 

Stack References 

YES 

FAULT 

General Protection Fault 

13 

Any Memory Reference 

YES 

FAULT 

Page Fault 

14 

Any Memory Access or Code Fetch 

YES 

FAULT 

Coprocessor Error 

16 

ESC, WAIT 

YES 

FAULT 

Intel Reserved 

17-32 




Two Byte Interrupt 

0-255 

INTn 

NO 

TRAP 


*Some debug exceptions may report both traps on the previous instruction and faults on the next instruction. 


2.7 Interrupts and Exceptions 

Interrupts and exceptions alter the normal program 
flow in order to handle external events, report errors 
or exceptional conditions. The difference between 
interrupts and exceptions is that interrupts are used 
to handle asynchronous external events while ex- 
ceptions handle instruction faults. Although a pro- 
gram can generate a software interrupt via an I NT N 
instruction, the processor treats software interrupts 
as exceptions. 

Hardware interrupts occur as the result of an exter- 
nal event and are classified into two types: maskable 
or non-maskable. Interrupts are serviced after the 
execution of the current instruction. After the inter- 
rupt handler is finished servicing the interrupt, exe- 
cution proceeds with the instruction immediately 
after the interrupted instruction. 


Exceptions are classified as faults, traps, or aborts, 
depending on the way they are reported and wheth- 
er or not restart of the instruction causing the excep- 
tion is supported. Faults are exceptions that are de- 
tected and serviced before the execution of the 
faulting instruction. Traps are exceptions that are 
reported immediately after the execution of the in- 
struction which caused the problem. Aborts are ex- 
ceptions which do not permit the precise location of 
the instruction causing the exception to be deter- 
mined. 

Thus, when an interrupt service routine has been 
completed, execution proceeds from the instruction 
immediately following the interrupted instruction. On 
the other hand, the return address from an excep- 
tion fault routine will always point to the instruction 
causing the exception and will include any leading 
instruction prefixes. Table 2.5 summarizes the possi- 
ble interrupts for the 386 SX Microprocessor and 
shows where the return address points to. 
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The 386 SX Microprocessor has the ability to handle 
up to 256 different interrupts/exceptions. In order to 
service the interrupts, a table with up to 256 interrupt 
vectors must be defined. The interrupt vectors are 
simply pointers to the appropriate interrupt service 
routine. In Real Mode, the vectors are 4-byte quanti- 
ties, a Code Segment plus a 1 6-bit offset; in Protect- 
ed Mode, the interrupt vectors are 8 byte quantities, 
which are put in an Interrupt Descriptor Table. Of the 
256 possible interrupts, 32 are reserved for use by 
Intel and the remaining 224 are free to be used by 
the system designer. 

INTERRUPT PROCESSING 

When an Interrupt occurs, the following actions hap- 
pen. First, the current program address and Flags 
are saved on the stack to allow resumption of the 
interrupted program. Next, an 8-bit vector is supplied 
to the 386 SX Microprocessor which identifies the 
appropriate entry in the interrupt table. The table 
contains the starting address of the interrupt service 
routine. Then, the user supplied interrupt service 
routine is executed. Finally, when an IRET instruc- 
tion is executed the old processor state is restored 
and program execution resumes at the appropriate 
Instruction. 

The 8-bit interrupt vector is supplied to the 386 SX 
Microprocessor in several different ways: exceptions 
supply the interrupt vector internally; software INT 
instructions contain or imply the vector; maskable 
hardware interrupts supply the 8-blt vector via the 
Interrupt acknowledge bus sequence. Non-Maska- 
ble hardware Interrupts are assigned to interrupt 
vector 2. 


Maskable Interrupt 

Maskable interrupts are the most common way to 
respond to asynchronous external hardware events. 
A hardware interrupt occurs when the INTR is pulled 
HIGH and the Interrupt Flag bit (IF) is enabled. The 
processor only responds to interrupts between in- 
structions (string instructions have an ‘interrupt win- 
dow* between memory moves which allows Inter- 
rupts during long string moves). When an interrupt 
occurs the processor reads an 8-bit vector supplied 
by the hardware which identifies the source of the 
interrupt (one of 224 user defined interrupts). 


Interrupts through Interrupt gates automatically reset 
IF, disabling INTR requests. Interrupts through Trap 
Gates leave the state of the IF bit unchanged. Inter- 
rupts through a Task Gate change the IF bit accord- 
ing to the Image of the EFLAGs register in the task’s 
Task State Segment (TSS). When an IRET instruc- 
tion is executed, the original state of the IF bit is 
restored. 


Non-Maskable Interrupt 

Non-maskable interrupts provide a method of servic- 
ing very high priority interrupts. When the NMI Input 
Is pulled HIGH it causes an interrupt with an internal- 
ly supplied vector value of 2. Unlike a normal hard- 
ware interrupt, no interrupt acknowledgment se- 
quence is performed for an NMI. 

While executing the NMI servicing procedure, the 
386 SX Microprocessor will not service any further 
NMI request or INT requests until an interrupt return 
(IRET) instruction Is executed or the processor is 
reset. If NMI occurs while currently servicing an NMI, 
Its presence will be saved for servicing after execut- 
ing the first IRET instruction. The IF bit is cleared at 
the beginning of an NMI Interrupt to inhibit further 
INTR interrupts. 

Software Interrupts 

A third type of interrupt/exception for the 386 SX 
Microprocessor is the software Interrupt. An INT n 
instruction causes the processor to execute the in- 
terrupt service routine pointed to by the nth vector in 
the Interrupt table. 

A special case of the two byte software interrupt INT 
n Is the one byte INT 3, or breakpoint interrupt. By 
inserting this one byte instruction in a program, the 
user can set breakpoints in his program as a debug- 
ging tool. 

A final type of software interrupt is the single step 
interrupt, it is discussed in Single Step Trap. 
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INTERRUPT AND EXCEPTION PRIORITIES 

Interrupts are externally generated events. Maska- 
ble Interrupts (on the INTR input) and Non-Maskable 
Interrupts (on the NMI input) are recognized at in- 
struction boundaries. When NMI and maskable 
INTR are both recognized at the same instruction 
boundary, the 386 SX Microprocessor invokes the 
NMI service routine first. If maskable interrupts are 
still enabled after the NMI service routine has been 
Invoked, then the 386 SX Microprocessor will invoke 
the appropriate interrupt service routine. 

As the 386 SX Microprocessor executes instruc- 
tions, it follows a consistent cycle in checking for 
exceptions, as shown in Table 2.6. This cycle is re- 

Table 2.6. Sequence of Exception Checking 

Consider the case of the 386 tm sx Microprocessor having just completed an instruction. It then performs 
the following checks before reaching the point where the next instruction is completed: 

1. Check for Exception 1 Traps from the instruction just completed (single-step via Trap Flag, or Data 
Breakpoints set In the Debug Registers). 

2. Check for external NMI and INTR. 

3. Check for Exception 1 Faults in the next instruction (Instruction Execution Breakpoint set in the Debug 
Registers for the next instruction). 

4. Check for Segmentation Faults that prevented fetching the entire next instruction (exceptions 1 1 or 13). 

5. Check for Page Faults that prevented fetching the entire next instruction (exception 14). 

6. Check for Faults decoding the next instruction (exception 6 if illegal opcode; exception 6 If in Real Mode 
or in Virtual 8086 Mode and attempting to execute an instruction for Protected Mode only; or exception 
13 if instruction is longer than 15 bytes, or privilege violation In Protected Mode (i.e. not at lOPL or at 
CPL=0). 

7. If WAIT opcode, check if TS= 1 and MP=1 (exception 7 If both are 1). 

8. If Escape opcode for numeric coprocessor, check if EM = 1 or TS= 1 (exception 7 if either are 1). 

9. If WAIT opcode or ESCape opcode for numeric coprocessor, check ERROR# Input signal (exception 16 
if ERROR# input is asserted). 

1 0. Check in the following order for each memory reference required by the instruction: 

a. Check for Segmentation Faults that prevent transferring the entire memory quantity (exceptions 1 1 , 
12 , 13 ). 

b. Check for Page Faults that prevent transferring the entire memory quantity (exception 14). 


peated as each instruction is executed, and occurs 
in parallel with instruction decoding and execution. 

INSTRUCTION RESTART 

The 386 SX Microprocessor fully supports restarting 
all instructions after Faults. If an exception is detect- 
ed In the instruction to be executed (exception cate- 
gories 4 through 10 in Table 2.6), the 386 SX Micro- 
processor Invokes the appropriate exception service 
routine. The 386 SX Microprocessor is in a state that 
permits restart of the instruction, for all cases but 
those given in Table 2.7. Note that all such cases 
will be avoided by a properly designed operating 
system. 


NOTE: 

Segmentation exceptions are generated before paging exceptions. 

Table 2.7. Conditions Preventing Instruction Restart 

1. An Instruction causes a task switch to a task whose Task State Segment is partially ‘not present' (An 
entirely ‘not present' TSS is restartable). Partially present TSS’s can be avoided either by keeping the 
TSS’s of such tasks present in memory, or by aligning TSS segments to reside entirely within a single 4K 
page (for TSS segments of 4K bytes or less). 

2. A coprocessor operand wraps around the top of a 64K-byte segment or a 4G-byte segment, and spans 
three pages, and the page holding the middle portion of the operand is ‘not present'. This condition can 
be avoided by starting at a page boundary any segments containing coprocessor operands if the 
segments are approximately 64K-200 bytes or larger (I.e. large enough for wraparound of the coproces- 
sor operand to possibly occur). 

Note that these conditions are avoided by using the operating system designs mentioned in this tabie. 


4-427 





386TM SX MICROPROCESSOR 



Table 2.8. Register Values after Reset 


Flag Word (EFLAGS) 

UUUU0002H 

Note 1 

Machine Status Word (CRO) 

uuuuuulOH 


Instruction Pointer (EIP) 

OOOOFFFOH 


Code Segment (CS) 

FOOOH 

Note 2 

Data Segment (DS) 

OOOOH 

Note 3 

Stack Segment (SS) 

OOOOH 


Extra Segment (ES) 

OOOOH 

Note 3 

Extra Segment (FS) 

OOOOH 


Extra Segment (GS) 

OOOOH 


EAX register 

OOOOH 

Note 4 

EDX register 

component and stepping ID 

Note 5 

All other registers 

undefined 

Note 6 


NOTES: 

1. EFLAG Register. The upper 14 bits of the EFLAGS register are undefined, all defined flag bits are zero. 

2. The Code Segment Register (CS) will have its Base Address set to OFFFFOOOOH and Limit set to OFFFFH. 

/ 3. The Data and Extra Segment Registers (DS, ES) will have their Base Address set to OOOOOOOOOH and Limit set to 

OFFFFH. 

4. If self-test is selected, the EAX register should contain a 0 value. If a value of 0 is not found then the self-test has 
detected a flaw In the part. 

5. EDX register always holds component and stepping Identifier. 

6. All undefined bits are Intel Reserved and should not be used. 


DOUBLE FAULT 

A Double Fault (exception 8) results when the proc- 
essor attempts to invoke an exception service rou- 
tine for the segment exceptions (10, 11, 12 or 13), 
but in the process of doing so detects an exception 
other than a Page Fault (exception 14). 

One other cause of generating a Double Fault is the 
386 SX Microprocessor detecting any other excep- 
tion when it is attempting to invoke the Page Fault 
(exception 14) service routine (for example, if a Page 
Fault Is detected when the 386 SX Microprocessor 
attempts to invoke the Page Fault service routine). 
Of course, in any functional system, not only in 386 
SX Microprocessor-based systems, the entire page 
fault service routine must remain ‘present* in memo- 
ry- 


2.8 Reset and Initialization 

When the processor is initialized or Reset the regis- 
ters have the values shown in Table 2.8. The 386 SX 
Microprocessor will then start executing instructions 
near the top of physical memory, at location 
OFFFFFOH. When the first Intersegment Jump or 
Call is executed, address lines A20--A23 will drop 
LOW for CS-relative memory cycles, and the 386 SX 
Microprocessor will only execute instructions in the 
lower one megabyte of physical memory. This al- 
lows the system designer to use a shadow ROM at 
the top of physical memory to initialize the system 
and take care of Resets. 


RESET forces the 386 SX Microprocessor to termi- 
nate ail execution and local bus activity. No instruc- 
tion execution or bus activity will occur as long as 
Reset Is active. Between 350 and 450 CLK2 periods 
after Reset becomes Inactive, the 386 SX Micro- 
processor will start executing instructions at the top 
of physical memory. 


2.9 Testability 

The 386 SX Microprocessor, like the 386 Microproc- 
essor, offers testability features which include a self- 
lesi and uireul access to the page translation cache. 

SELF-TEST 

The 386 SX Microprocessor has the capability to 
perform a self-test. The self-test checks the function 
of all of the Control ROM and most of the non-ran- 
dom logic of the part. Approximately one-half of the 
386 SX Microprocessor can be tested during self- 
test. 

Self -Test is Initiated on the 386 SX Microprocessor 
when the RESET pin transitions from HIGH to LOW, 
and the BUSY# pin is LOW. The self-test takes 
about 220 clocks, or approximately 33 milliseconds 
with a 16 MHz 386 SX CPU. At the completion of 
self-test the processor performs reset and begins 
normal operation. The part has successfully passed 
self-test if the contents of the EAX are zero. If the 
results of the EAX are not zero then the self-test has 
detected a flaw in the part. 
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Figure 2.6. Test Registers 


TLB TESTING 

The 386 SX Microprocessor also provides a mecha- 
nism for testing the Translation Lookaside Buffer 
(TLB) if desired. This particular mechanism may not 
be continued in the same way in future processors. 

There are two TLB testing operations: 1) writing en- 
tries into the TLB, and, 2) performing TLB lookups. 
Two Test Registers, shown in Figure 2.6, are provid- 
ed for the purpose of testing. TR6 is the “test com- 
mand register”, and TR7 is the “test data register”. 
For a more detailed explanation of testing the TLB, 
see the 386 tm sX Microprocessor Programmer’s 
Reference Manual. 


2.10 Debugging Support 

The 386 SX Microprocessor provides several fea- 
tures which simplify the debugging process. The 
three categories of on-chip debugging aids are: 

1 . The code execution breakpoint opcode (OCCH). 

2. The single-step capability provided by the TF bit 
in the flag register. 

3. The code and data breakpoint capability provided 
by the Debug Registers DRO-3, DR6, and DR7. 

BREAKPOINT INSTRUCTION 

A single-byte software interrupt (Int 3) breakpoint in- 
struction is available for use by software debuggers. 


The breakpoint opcode is OCCh, and generates an 
exception 3 trap when executed. 

SINGLE-STEP TRAP 

If the single-step flag (TF, bit 8) in the EFLAG regis- 
ter is found to be set at the end of an instruction, a 
single-step exception occurs. The single-step ex- 
ception is auto vectored to exception number 1 . 

DEBUG REGISTERS 

The Debug Registers are an advanced debugging 
feature of the 386 SX Microprocessor. They allow 
data access breakpoints as well as code execution 
breakpoints. Since the breakpoints are indicated by 
on-chip registers, an instruction execution break- 
point can be placed In ROM code or in code shared 
by several tasks, neither of which can be supported 
by the INT 3 breakpoint opcode. 

The 386 SX Microprocessor contains six Debug 
Registers, consisting of four breakpoint address reg- 
isters and two breakpoint control registers. Initially 
after reset, breakpoints are in the disabled state; 
therefore, no breakpoints will occur unless the de- 
bug registers are programmed. Breakpoints set up in 
the Debug Registers are auto-vectored to exception 
1 . Figure 2.7 shows the breakpoint status and con- 
trol registers. 
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Figure 2.7. Debug Registers 


3.0 KtAL mOul AkCHi i tC i Uku 

When the processor is reset or powered up it is ini- 
tialized in Real Mode. Real Mode has the same base 
architecture as the 8086, but allows access to the 
32-blt register set of the 386 SX Microprocessor. 
The addressing mechanism, memory size, and inter- 
rupt handling are all identical to the Real Mode on 
the 80286. 

The default operand size in Real Mode is 1 6 bits, as 
in the 8086. In order to use the 32-bit registers and 
addressing modes, override prefixes must be used. 
In addition, the segment size on the 386 SX Micro- 
processor in Real Mode Is 64K bytes so 32-blt ad- 
dresses must have a value less then OOOOFFFFH. 
The primary purpose of Real Mode Is to set up the 
processor for Protected Mode operation. 


3.1 Memory Addressing 

In Real Mode the linear addresses are the same as 
physical addresses (paging is not allowed). Physical 
addresses are formed in Real Mode by adding the 
contents of the appropriate segment register which 
Is shifted left by four bits to an effective address. 
This addition results in a 20-blt physical address or a 
1 megabyte address space. Since segment registers 
are shifted left by 4 bits. Real Mode segments al- 
ways start on 1 6-byte boundaries. 

All segments in Real Mode are exactly 64K bytes 
long, and may be read, written, or executed. The 
386 SX Microprocessor will generate an exception 
1 3 if a data operand or Instruction fetch occurs past 
the end of a segment. 
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Table 3.1. Exceptions in Real Mode 


Function 

Interrupt 

Number 

Related 

Instructions 

Return 

Address Location 

Interrupt table limit 
too small 

8 

INT vector is not 
within table limit 

Before 

Instruction 

CS, DS, ES, FS, GS 

Segment overrun exception 

13 

Word memory reference 
with offset = OFFFFH. 
an attempt to execute 
past the end of CS segment. 

Before 

Instruction 

SS Segment overrun 
exception 

12 

Stack Reference 
beyond offset = OFFFFH 

Before 

Instruction 


3.2 Reserved Locations 

There are two fixed areas in memory which are re- 
served in Real address mode: the system initializa- 
tion area and the interrupt table area. Locations 
OOOOOH through 003FFH are reserved for interrupt 
vectors. Each one of the 256 possible interrupts has 
a 4-byte jump vector reserved for It. Locations 
OFFFFFOH through OFFFFFFH are reserved for sys- 
tem Initialization. 


3.3 Interrupts 

Many of the exceptions discussed in section 2.7 are 
not applicable to Real Mode operation; in particular, 
exceptions 10, 11 and 14 do not occur In Real 
Mode. Other exceptions have slightly different 
meanings in Real Mode; Table 3.1 identifies these 
exceptions. 


3.4 Shutdown and Halt 

The HLT instruction stops program execution and 
prevents the processor from using the local bus until 
restarted. Either NMI, INTR with interrupts enabled 
(IF=1), or RESET will force the 386 SX Microproc- 
essor out of halt. If interrupted, the saved CS:IP will 
point to the next Instruction after the HLT. 

Shutdown will occur when a severe error is detected 
that prevents further processing. In Real Mode, 
shutdown can occur under two conditions: 

1 . An interrupt or an exception occurs (Exceptions 8 
or 1 3) and the interrupt vector is larger than the 
Interrupt Descriptor Table. 

2. A CALL, INT or PUSH instruction attempts to 
wrap around the stack segment when SP is not 
even. 

An NMI input can bring the processor out of shut- 
down if the Interrupt Descriptor Table limit Is large 
enough to contain the NMI interrupt vector (at least 


OOOFH) and the stack has enough room to contain 
the vector and flag information (i.e. SP Is greater that 
0005H). Otherwise, shutdown can only be exited by 
a processor reset. 


3.5 LOCK operation 

The LOCK prefix on the 386 SX Microprocessor, 
even in Real Mode, Is more restrictive than on the 
80286. This is due to the addition of paging on the 
386 SX Microprocessor in Protected Mode and Vir- 
tual 8086 Mode. The LOCK prefix is not supported 
during repeat string Instructions. 

The only instruction forms where the LOCK prefix is 
legal on the 386 SX Microprocessor are shown in 
Table 3.2. 


Table 3.2. Legal Instructions for the LOCK Prefix 


Opcode 

Operands 
(Dest, Source) 

BIT Test and 
SET/RESET 
/COMPLEMENT 

Mem, Reg/Immediate 

XCHG 

Reg, Mem 

XCHG 

Mem, Reg 

ADD, OR, ADC, SBB, 
AND, SUB, XOR 

Mem, Reg/lmmedlate 

NOT, NEG, INC, DEC 

Mem 


An exception 6 will be generated if a LOCK prefix is 
placed before any instruction form or opcode not 
listed above. The LOCK prefix allows Indivisible 
read/modify/write operations on memory operands 
using the Instructions above. 

The LOCK prefix is not lOPL-sensitive on the 386 SX 
Microprocessor. The LOCK prefix can be used at 
any privilege level, but only on the Instruction forms 
listed In Table 3.2. 
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4.0 PROTECTED MODE 
ARCHITECTURE 

The complete capabilities of the 386 SX Microproc- 
essor are unlocked when the processor operates in 
Protected Virtual Address Mode (Protected Mode). 
Protected Mode vastly increases the linear address 
space to four gigabytes (232 bytes) and allows the 
running of virtual memory programs of almost unlim- 
ited size (64 terabytes ( 2^6 bytes)). In addition, Pro- 
tected Mode allows the 386 SX Microprocessor to 
run ail of the existing 386 DX CPU (using oniy 16 
megabytes of physical memory), 80286 and 8086 
CPU’s software, while providing a sophisticated 
memory management and a hardware-assisted pro- 
tection mechanism. Protected Mode allows the use 
of additional Instructions specially optimized for sup- 
porting multitasking operating systems. The base ar- 
chitecture of the 386 SX Microprocessor remains 
the same; the registers, instructions, and addressing 
modes described In the previous sections are re- 
tained. The main difference between Protected 
Mode and Real Mode from a programmer’s view- 
point is the increased address space and a different 
addressing mechanism. 


4.1 Addressing Mechanism 

Like Real Mode, Protected Mode uses two compo- 
nents to form the logical address; a 16-bit selector is 
used to determine the linear base address of a seg- 
ment, the base address is added to a 32-bit effective 
address to form a 32-bit linear address. The linear 
address is then either used as a 24-bit physical ad- 
dress, or if paging is enabled the paging mechanism 
maps the 32-bit linear address into a 24-bit physical 

V>Ov>. 

The difference between the two modes lies in calcu- 
lating the base address. In Protected Mode, the se- 
lector is used to specify an index into an operating 
system defined table (see Figure 4.1). The table 
contains the 32-bit base address of a given seg- 
ment. The physical address is formed by adding the 
base address obtained from the table to the offset. 

Paging provides an additional memory management 
mechanism which operates only In Protected Mode. 
Paging provides a means of managing the very large 
segments of the 386 SX Microprocessor, as paging 
operates beneath segmentation. The page mecha- 
nism translates the protected linear address which 
comes from the segmentation unit into a physical 
address. Figure 4.2 shows the complete 386 SX Mi- 
croprocessor addressing mechanism with paging 
enabled. 


4.2 Segmentation 

Segmentation Is one method of memory manage- 
ment. Segmentation provides the basis for protec- 
tion. Segments are used to encapsulate regions of 
memory which have common attributes. For exam- 
ple, all of the code of a given program could be con- 
tained In a segment, or an operating system table 
may reside In a segment. All Information about each 
segment is stored In an 8 byte data structure called 
a descriptor. All of the descriptors in a system are 
coniained in descriptor tables which are recognized 
by hardware. 

TERMINOLOGY 

The following terms are used throughout the discus- 
sion of descriptors, privilege levels and protection: 

PL: Privilege Level — One of the four hierarchical 
privilege levels. Level 0 is the most privileged 
level and level 3 is the least privileged. 

RPL: Requestor Privilege Level — The privilege level 
of the original supplier of the selector. RPL Is 
determined by the least two significant bits of 
a selector. 

DPL: Descriptor Privilege Level— This is the least 
privileged level at which a task may access 
that descriptor (and the segment associated 
with that descriptor). Descriptor Privilege Lev- 
el is determined by bits 6:5 In the Access 
Right Byte of a descriptor. 

CPL: Current Privilege Level — ^The privilege level at 
which a task Is currently executing, which 
equals the privilege level of the code segment 
being executed. CPL can also be determined 
by examining the lowest ? hit.s of the CS regis- 
ter, except for conforming code segments. 

EPL: Effective Privilege Level — ^The effective privi- 
lege level is the least privileged of the RPL 
and the DPL. EPL is the numerical maximum 
of RPL and DPL. 

Task: One instance of the execution of a program. 
Tasks are also referred to as processes. 

DESCRIPTOR TABLES 

The descriptor tables define all of the segments 
which are used in a 386 SX Microprocessor system. 
There are three types of tables which hold descrip- 
tors: the Global Descriptor Table, Local Descriptor 
Table, and the Interrupt Descriptor Table. All of the 
tables are variable length memory arrays and can 
vary in size from 8 bytes to 64K bytes. Each table 
can hold up to 8192 8-byte descriptors. The upper 
13 bits of a selector are used as an index into the 
descriptor table. The tables have registers associat- 
ed with them which hold the 32-blt linear base ad- 
dress and the 1 6-bit limit of each table. 
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Figure 4.1. Protected Mode Addressing 
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Figure 4.2. Paging and Segmentation 
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Figure 4.3. Descriptor Table Registers 

4-433 




386 TM SX MICROPROCESSOR 


inl^ 


Each of the tables has a register associated with it: 
GDTR, LDTR, and IDTR; see Figure 2.1. The LGDT, 
LLDT, and LIDT instructions load the base and limit 
of the Global, Local, and Interrupt Descriptor Tables 
into the appropriate register. The SGDT, SLOT, and 
SIDT store the base and limit values. These are priv- 
ileged instructions. 

Global Descriptor Table 

The Global Descriptor Table (GDT) contains de- 
scriptors which are available to ail of the tasks in a 
system. The GDT can contain any type of segment 
descriptor except for interrupt and trap descriptors. 
Every 386 SX CPU system contains a GDT. 

The first slot of the Global Descriptor Table corre- 
sponds to the null selector and is not used. The null 
selector defines a null pointer value. 

Local Descriptor Table 

LDTs contain descriptors which are associated with 
a given task. Generally, operating systems are de- 
signed so that each task has a separate LDT. The 
LDT may contain only code, data, stack, task gate, 
and call gate descriptors. LDTs provide a mecha- 
nism for isolating a given task’s code and data seg- 
ments from the rest of the operating system, while 
the GDT contains descriptors for segments which 
are common to all tasks. A segment cannot be ac- 
cessed by a task If its segment descriptor does not 
exist in either the current LDT or the GDT. This pro- 
vides both Isolation and protection for a task’s seg- 
ments while still allowing global data to be shared 
among tasks. 


Unlike the 6-byte GDT or IDT registers which contain 
a base address and limit, the visible portion of the 
LDT register contains only a 1 6-blt selector. This se- 
lector refers to a Local Descriptor Table descriptor In 
the GDT (see figure 2.1). 

Interrupt Descriptor Table 

The third table needed for 386 SX Microprocessor 
systems Is the Interrupt Descriptor Table. The IDT 
contains the descriptors which point to the location 
of the up to 256 interrupt service routines. The IDT 
may contain only task gates. Interrupt gates, and 
trap gates. The IDT should be at least 256 bytes in 
size In order to hold the descriptors for the 32 Intel 
Reserved Interrupts. Every interrupt used by a sys- 
tem must have an entry in the IDT. The IDT entries 
are referenced by I NT instructions, external interrupt 
vectors, and exceptions. 

DESCRIPTORS 

The object to which the segment selector points to 
is called a descriptor. Descriptors are eight byte 
quantities which contain attributes about a given re- 
gion of linear address space. These attributes in- 
clude the 32-bit base linear address of the segment, 
the 20-blt length and granularity of the segment, the 
protection level, read, write or execute privileges, 
the default size of the operands (16-bit or 32-bit), 
and the type of segment. All of the attribute informa- 
tion about a segment is contained in 12 bits in the 
segment descriptor. Figure 4.4 shows the general 
format of a descriptor. All segments on the 386 SX 
Microprocessor have three attribute fields in com- 
mon: the P bit, the DPL bit, and the S bit. The P 


31 0 BYTE 

ADDRESS 

0 


+ 4 


BASE Base Address of the segment 
LIMIT The length of the segment 

P Present Bit 1= Present 0 = Not Present 

DPL Descriptor Privilege Level 0-3 

S Segment Descriptor 0 = System Descriptor 1 = Code or Data Segment Descriptor 

TYPE Type of Segment 

A Accessed Bit 

G Granularity Bit 1 = Segment length is page granular 0 = Segment length is byte granular 

D Default Operation Size (recognized in code segment descriptors only) 1 = 32-bit segment 0 = 1 6-bit segment 

0 Bit must be zero (0) for compatibility with future processors 

AVL Available field for user or OS 


Figure 4.4. Segment Descriptors 


SEGMENT BASE15...0 

SEGMENT LIMIT 1 5... 0 

BASE 31 ... 24 

G 

D 

0 

AVL 

LIMIT 
19. ..16 

P 

DPL 

S 

TYPE 

1 1 

A 

BASE 
23... 16 


4-434 




386 TM SX MICROPROCESSOR 


int^ 


(Present) Bit is 1 if the segment is loaded in physical 
memory. If P = 0 then any attempt to access this 
segment causes a not present exception (exception 
11). The Descriptor Privilege Level, DPL, is a two bit 
field which specifies the protection level, 0-3, asso- 
ciated with a segment. 

The 386 SX Microprocessor has two main catego- 
ries of segments: system segments and non-system 
segments (for code and data). The segment bit, S, 
determines if a given segment is a system segment 


or a code or data segment. If the S bit is 1 then the 
segment is either a code or data segment; if it is 0 
then the segment is a system segment. 

Code and Data Descriptors (S= 1) 

Figure 4.5 shows the general format of a code and 
data descriptor and Table 4.1 illustrates how the bits 
in the Access Right Byte are interpreted. 


31 0 


SEGMENT BASE 15. 

..0 




SEGMENT LIMIT 1 5... 0 






LIMIT 
19. ..16 

ACCESS 

BASE 

BASE 31 ... 24 

G 

D 

0 

AVL 

RIGHTS 

BYTE 

23... 16 


D/B 1 = Default Instructions Attributes are 32-Bits G Granularity Bit 1 = Segment length is page granular 

0 = Default Instruction Attributes are 16-Bits 0 = Segment length is byte granular 

AVL Available field for user or OS 0 Bit must be zero (0) for compatibility with future processors 


Figure 4.5. Code and Data Descriptors 


Table 4.1. Access Rights Byte Definition for Code and Data Descriptors 


Bit 

Position 

Name 

Function 


7 

6-5 

Present (P) 

Descriptor Privilege 
Level (DPL) 

P = 1 Segment is mapped into physical memory. 

P = 0 No mapping to physical memory exists, base and limt are 
not used. 

Segment privilege attribute used in privilege tests. 

4 

Segment Descrip- 
tor (S) 

S = 1 Code or Data (includes stacks) segment descriptor 

S = 0 System Segment Descriptor or Gate Descriptor 

3 

Executable (E) 

E = 0 Descriptor type is data segment: 

If 

2 

Expansion Direc- 

ED = 0 Expand up segment, offsets must be ^ limit. 

Data 


tion (ED) 

ED = 1 Expand down segment, offsets must be > limit. 

^ Segment 

1 

Writeable (W) 

W = 0 Data segment may not be written into. 

W = 1 Data segment may be written into. 

(S = 1. 

E = 0) 

3 

Executable (E) 

E = 1 Descriptor type is code segment: 

If 

2 

Conforming (C) 

C = 1 Code segment may only be executed 
when CPL ^ DPL and CPL 
remains unchanged. 

Code 

Segment 

MS = 1. 

1 

Readable (R) 

R = 0 Code segment may not be read. 

R = 1 Code segment may be read. 

E = 1) 

0 

Accessed (A) 

A = 0 Segment has not been accessed. 

A = 1 Segment selector has been loaded into segment register 
or used by selector test instructions. 
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16 
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SEGMENT BASE 15. 

..0 




SEGMENT LIMIT 15. 

..0 


0 

BASE 31 ... 24 

G 

0 

0 

0 

LIMIT 
19... 16 

P 

DPL 

1 

0 

TYPE 

1 1 1 

BASE 
23... 16 

+ 4 


Type Defines Type 

0 Invalid 8 

1 Available 80286 TSS 9 

2 LDT A 

3 Busy 80286 TSS B 

4 80286 Call Gate C 

5 Task Gate (for 80286 or 386 tm sx Microprocessor Task) D 

6 80286 Interrupt Gate E 

7 80286 Trap Gate F 


Defines 

Invalid 

Available 386™ sx Microprocessor TSS 
Undefined (Intel Reserved) 

Busy 386 TM sx Microprocessor TSS 
386TM Sx Microprocessor Caii Gate 
Undefined (Intel Reserved) 

386™ SX Microprocessor Interrupt Gate 
386TM SX Microprocessor Trap Gate 


Figure 4.6. System Descriptors 


Code and data segments have several descriptor 
fields in common. The accessed bit, A, is set when- 
ever the processor accesses a descriptor. The gran- 
ularity bit, G, specifies if a segment length Is byte- 
granular or page-granular. 

System Descriptor Formats (S=0) 

System segments describe Information about oper- 
ating system tables, tasks, and gates. Figure 4.6 
shows the general format of system segment de- 
scriptors, and the various types of system segments. 
386 SX system descriptors (which are the same as 
386 DX CPU system descriptors) contain a 32-bit 
base linear address and a 20-bit segment limit. 
80286 system descriptors have a 24-bit base ad- 
dress and a 1 6-bit segment limit. 80286 system de- 
scriptors are identified by the upper 16 bits being all 
zero. 

nifforonroe Between 386 ™ sX Microprocessor 
and 80286 Descriptors 

In order to provide operating system compatibility 
with the 80286 the 386 SX CPU supports all of the 
80286 segment descriptors. The 80286 system seg- 
ment descriptors contain a 24-bit base address and 
1 6-bit limit, while the 386 SX CPU system segment 
descriptors have a 32-blt base address, a 20-blt limit 
field, and a granularity bit. The word count field 
specifies the number of 16-bit quantities to copy for 
80286 call gates and 32-bit quantities for 386 SX 
CPU call gates. 


Selector Fields 

A selector In Protected Mode has three fields: Local 
or Global Descriptor Table indicator (Tl), Descriptor 
Entry Index (Index), and Requestor (the selector’s) 
Privilege Level (RPL) as shown in Figure 4.7. The Tl 
bit selects either the Global Descriptor Table or the 
Local Descriptor Table. The Index selects one of 8k 
descriptors in the appropriate descriptor table. The 
RPL bits allow high speed testing of the selector’s 
privilege attributes. 

Segment Descriptor Cache 

In addition to the selector value, every segment reg- 
ister has a segment descriptor cache register asso- 
ciated with it. Whenever a segment register’s con- 
tents are changed, the 8-byte descriptor associated 
with that selector Is automatically loaded (cached) 
on the chip. Once loaded, all references to that seg- 
ment use the cached descriptor information instead 
of reaccCoSing the descriptor. The contents of the 
descriptor cache are not visible to the programmer. 
Since descriptor caches only change when a seg- 
ment register is changed, programs which modify 
the descriptor tables must reload the appropriate 
segment registers after changing a descriptor’s val- 
ue. 
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Figure 4.7. Example Descriptor Selection 


4.3 Protection 

The 386 SX Microprocessor has four levels of pro- 
tection which are optimized to support a multi-task- 
ing operating system and to isolate and protect user 
programs from each other and the operating system. 
The privilege levels control the use of privileged in- 
structions, I/O Instructions, and access to segments 
and segment descriptors. The 386 SX Microproces- 
sor also offers an additional type of protection on a 
page basis when paging is enabled. 

The four-level hierarchical privilege system is an ex- 
tension of the user/supervisor privilege mode com- 
monly used by minicomputers. The user/supervisor 
mode Is fully supported by the 386 SX Microproces- 
sor paging mechanism. The privilege levels (PL) are 
numbered 0 through 3. Level 0 Is the most privileged 
level. 


RULES OF PRIVILEGE 

The 386 SX Microprocessor controls access to both 
data and procedures between levels of a task, ac- 
cording to the following rules. 

— Data stored in a segment with privilege level p 
can be accessed only by code executing at a 
privilege level at least as privileged as p. 

— A code segment/procedure with privilege level p 
can only be called by a task executing at the 
same or a lesser privilege level than p. 


PRIVILEGE LEVELS 

At any point in time, a task on the 386 SX Microproc- 
essor always executes at one of the four privilege 
levels. The Current Privilege Level (CPL) specifies 
what the task’s privilege level is. A task’s CPL may 
only be changed by control transfers through gate 
descriptors to a code segment with a different privi- 
lege level. Thus, an application program running at 
PL=3 may call an operating system routine at 
PL= 1 (via a gate) which would cause the task’s CPL 
to be set to 1 until the operating system routine was 
finished. 


Selector Privilege (RPL) 

The privilege level of a selector is specified by the 
RPL field. The selector’s RPL is only used to estab- 
lish a less trusted privilege level than the current 
privilege level of the task for the use of a segment. 
This level is called the task’s effective privilege level 
(EPL). The EPL is defined as being the least privi- 
leged (numerically larger) level of a task’s CPL and a 
selector’s RPL. The RPL is most commonly used to 
verify that pointers passed to an operating system 
procedure do not access data that Is of higher privi- 
lege than the procedure that originated the pointer. 
Since the originator of a selector can specify any 
RPL value, the Adjust RPL (ARPL) instruction is pro- 
vided to force the RPL bits to the originator’s CPL. 
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Table 4.2. Descriptor Types Used for Control Transfer 


Control Transfer Types 

Operation Types 

Descriptor 

Referenced 

Descriptor 

Tabie 

Intersegment within the same privilege level 

JMP, GALL RET,JRET* 

Gode Segment 

GDT/LDT 

Intersegment to the same or higher privilege level 
Interrupt within task may change GPL 

GALL 

Gall Gate 

GDT/LDT 

Interrupt instruction 
Exception External 
Interrupt 

Trap or 

Interrupt 

Gate 

IDT 

Intersegment to a lower privilege level 
(changes task GPL) 

RET, iRET* 

Code Segment 

GDT/LDT 


GALL, JMP 

Task State 
Segment 

GDT 

Task Switch 

GALL, JMP 

Task Gate 

GDT/LDT 

IRET^* 

Interrupt instruction, 
Exception, External 
Interrupt 

Task Gate 

IDT 


*NT (Nested Task bit of flag register) = 0 
**NT (Nested Task bit of flag register) = 1 


I/O Privilege 

The I/O privilege level (lOPL) lets the operating sys- 
tem code executing at CPL = 0 define the least privi- 
leged level at which I/O instructions can be used. An 
exception 1 3 (General Protection Violation) is gener- 
ated if an I/O instruction Is attempted when the GPL 
of the task Is less privileged then the lOPL. The 
lOPL is stored in bits 13 and 14 of the EFLAGS reg- 
ister. The following instructions cause an exception 
13 if the GPL is greater than lOPL: IN, INS, OUT, 
OUTS, ST!, CLI, LOCK preflv- 

Descriptor Access 

There are basically two types of segment accesses: 
those Involving code segments such as control 
transfers, and those involving data accesses. Deter- 
mining the ability of a task to access a segment In- 
volves the type of segment to be accessed, the In- 
struction used, the type of descriptor used and GPL, 
RPL, and DPL as described above. 

Any time an instruction loads a data segment regis- 
ter (DS, ES, FS, GS) the 386 SX Microprocessor 
makes protection validation checks. Selectors load- 
ed in the DS, ES, FS, GS registers must refer only to 
data segment or readable code segments. 


Finally the privilege validation checks are performed. 
The GPL is compared to the EPL and if the EPL Is 
more privileged than the GPL, an exception 13 (gen- 
eral protection fault) is generated. 

The rules regarding the stack segment are slightly 
different than those Involving data segments. In- 
structions that load selectors into SS must refer to 
data segment descriptors for writeable data seg- 
ments. The DPL and RPL must equal the GPL of all 
other descriptor types or a privilege level violation 
will cause an exception 1 3. A stack not present fault 
causes an exception 1 2. 

PRIVILEGE LEVEL TRANSFERS 

Inter-segment control transfers occur when a selec- 
tor is loaded in the GS register. For a typical system 
most of these transfers are simply the result of a call 
or a jump to another routine. There are five types of 
control transfers which are summarized in Table 4.2. 
Many of these transfers result In a privilege level 
transfer. Ghanging privilege levels is done only by 
control transfers, using gates, task switches, and in- 
terrupt or trap gates. 

Gontrol transfers can only occur If the operation 
which loaded the selector references the correct de- 
scriptor type. Any violation of these descriptor usage 
rules will cause an exception 13. 
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ESP 

EBP 

ESI 

EDI 

0000000000000000 
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OS 
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Type = 9: Available 386 tm SX Microprocessor TSS. 
Type = B: Busy 386 SX Microprocessor TSS. 


Figure 4.8. 386 tm sx Microprocessor TSS and TSS Registers 
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I/O Ports Accessible: 2 9, 12, 13, 15, 20 24, 27, 33, 34, 40, 41, 48, 50, 52, 53, 58 60, 62, 63, 96 ^ 127 


Figure 4.9. Sample I/O Permission Bit Map 


CALL GATES 

Gates provide protected indirect CALLs. One of the 
major uses of gates is to provide a secure method of 
privilege transfers within a task. Since the operating 
system defines all of the gates in a system, it can 
ensure that all gates only allow entry Into a few trust- 
ed procedures. 

TASK SWITCHING 

A very important attribute of any multi-tasking/multi- 
user operating system is its ability to rapidly switch 
between tasks or processes. The 386 SX Microproc- 
essor directly supports this operation by providing a 
task switch instruction in hardware. The task switch 
operation saves the entire state of the machine (all 
of the registers, address space, and a link to the 
previous task), loads a new execution state, per- 
forms protection checks, and commences execution 
in the new task. Like transfer of control by gates, the 
task switch operation Is invoked by executing an in- 
ter-segment JMP or CALL instruction which refers to 
a Task State Segment (TSS), or a task gate descrip- 
tor In the GOT or LDT. An I NT n instruction, excep- 
tion, trap, or external Interrupt may also invoke the 
task switch operation if there is a task gate descrip- 
tor in thfi associated IDT descriptor slot. 

The TSS descriptor points to a segment (see Figure 
4.8) containing the entire execution state. A task 
gate descriptor contains a TSS selector. The 386 SX 
Microprocessor supports both 286 and 386 SX CPU 
TSSs. The limit of a 386 SX Microprocessor TSS 
must be greater than 64H (2BH for a 286 TSS), and 
can be as large as 16 megabytes. In the additional 
TSS space, the operating system Is free to store ad- 
ditional information such as the reason the task Is 
inactive, time the task has spent running, or open 
files belonging to the task. 

Each task must have a TSS associated with it. The 
current TSS is identified by a special register in the 
386 SX Microprocessor called the Task State Seg- 
ment Register (TR). This register contains a selector 
referring to the task state segment descriptor that 
defines the current TSS. A hidden base and limit 
register associated with TSS descriptor are loaded 
whenever TR is loaded with a new selector. Return- 
ing from a task is accomplished by the IRET Instruc- 
tion. When IRET is executed, control is returned to 


the task which was interrupted. The currently exe- 
cuting task’s state is saved in the TSS and the old 
task state is restored from its TSS. 

Several bits In the flag register and machine status 
word (CRO) give information about the state of a 
task which is useful to the operating system. The 
Nested Task bit, NT, controls the function of the 
IRET instruction. If NT = 0 the IRET Instruction per- 
forms the regular return. If NT= 1 IRET performs a 
task switch operation back to the previous task. The 
NT bit is set or reset in the following fashion: 

When a CALL or I NT instruction initiates a task 
switch, the new TSS will be marked busy and 
the back link field of the new TSS set to the old 
TSS selector. The NT bit of the new task is set 
by CALL or I NT initiated task switches. An in- 
terrupt that does not cause a task switch will 
clear NT (The NT bit will be restored after exe- 
cution of the interrupt handler). NT may also be 
set or cleared by POPF or IRET instructions. 

The 386 SX Microprocessor task state segment is 
marked busy by changing the descriptor type field 
from TYPE 9 to TYPE OBH. A 286 TSS is marked 
busy by changing the descriptor type field from 
TYPE 1 to TYPE 3. Use of a selector that references 
a busy task state segment causes an exception 13. 

The VM (Virtual Mode) bit is used to indicate if a task 
is a Virtual 8086 task. If VM = 1 then the tasks will 
use the Real Mode addressing mechanism. The vir- 
tual 8086 environment Is only entered and exited by 
a task switch. 

The coprocessor’s state Is not automatically saved 
when a task switch occurs. The Task Switched Bit, 
TS, in the CRO register helps deal with the coproces- 
sor’s state in a multi-tasking environment. Whenever 
the 386 SX Microprocessor switches task, it sets the 
TS bit. The 386 SX Microprocessor detects the first 
use of a processor extension instruction after a task 
switch and causes the processor extension not 
available exception 7. The exception handler for ex- 
ception 7 may then decide whether to save the state 
of the coprocessor. 

The T bit in the 386 SX Microprocessor TSS Indi- 
cates that the processor should generate a debug 
exception when switching to a task. If T=1 then 
upon entry to a new task a debug exception 1 will be 
generated. 
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INITIALIZATION AND TRANSITION TO 
PROTECTED MODE 

Since the 386 SX Microprocessor begins executing 
in Real Mode immediately after RESET it is neces- 
sary to initialize the system tables and registers with 
the appropriate values. The GDT and IDT registers 
must refer to a valid GDT and IDT. The IDT should 
be at least 256 bytes long, and the GDT must con- 
tain descriptors for the initial code and data seg- 
ments. 

Protected Mode is enabled by loading CRO with PE 
bit set. This can be accomplished by using the MOV 
CRO, R/M instruction. After enabling Protected 
Mode, the next instruction should execute an inter- 
segment JMP to load the CS register and flush the 
instruction decode queue. The final step Is to load all 
of the data segment registers with the initial selector 
values. 

An alternate approach to entering Protected Mode is 
to use the built in task-switch to load all of the regis- 
ters. In this case the GDT would contain two TSS 
descriptors in addition to the code and data descrip- 
tors needed for the first task. The first JMP instruc- 
tion in Protected Mode would jump to the TSS caus- 
ing a task switch and loading all of the registers with 
the values stored in the TSS. The Task State Seg- 
ment Register should be initialized to point to a valid 
TSS descriptor. 


4.4 Paging 

Paging is another type of memory management use- 
ful for virtual memory multi-tasking operating sys- 
tems. Unlike segmentation, which modularizes pro- 
grams and data into variable length segments, pag- 
ing divides programs into .multiple uniform size 
pages. Pages bear no direct relation to the logical 
structure of a program. While segment selectors can 
be considered the logical ‘name* of a program mod- 
ule or data structure, a page most likely corresponds 
to only a portion of a module or data structure. 

PAGE ORGANIZATION 

The 386 SX Microprocessor uses two levels of ta- 
bles to translate the linear address (from the seg- 
mentation unit) into a physical address. There are 
three components to the paging mechanism of the 
386 SX Microprocessor; the page directory, the 
page tables, and the page itself (page frame). All 
memory-resident elements of the 386 SX Microproc- 
essor paging mechanism are the same size, namely 
4K bytes. A uniform size for all of the elements sim- 
plifies memory allocation and reallocation schemes, 
since there is no problem with memory fragmenta- 
tion. Figure 4.10 shows how the paging mechanism 
works. 


TWO LEVEL PAGING SCHEME 



OFFFFFFH 


Figure 4.10. Paging Mechanism 
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Figure 4.1 1. Page Directory Entry (Points to Page Table) 
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Figure 4.12. Page Table Entry (Points to Page) 


Page Fault Register 

CR2 is the Page Fault Linear Address register. It 
holds the 32-bit linear address which caused the last 
Page Fault detected. 

Page Descriptor Base Register 

CR3 is the Page Directory Physical Base Address 
Register. It contains the physical starting address of 
the Page Directory (this value Is truncated to a 24-bit 
value associated with the 386 SX CPU’s 16 mega- 
byte physical memory limitation). The lower 12 bits 
of CR3 are always zero to ensure that the Page Di- 
rectory Is always page aligned. Loading it with a 
MOV CR3, reg instruction causes the page table en- 
try cache to be flushed, as will a task switch through 
a TSS which changes the value of CRO. 


dress. The contents of a Page Table Entry are 
shown In figure 4.12. The middle 10 bits of the linear 
address (A21-A12) are used as an Index to select 
the correct Page Table Entry. 

The Page Frarhe Address contains the upper 20 bits 
of a 32-bit physical address that Is used as the base 
address for the Page Frame. The lower 1 2 bits of the 
Page Frame Address are zero so that the Page 
Frame addresses appear on 4 kbyte boundaries. For 
an 386 DX CPU system the upper 20 bits will select 
one of 220 Page Frames, but for an 386 SX Micro- 
processor system the upper 20 bits only select one 
of 212 Page Frames. Again, this is because the 
386 SX Microprocessor is limited to a 24-blt physical 
address space and the upper 8 bits (A24-A3'|) are 
truncated when the address Is output on Its 24 ad- 
dress pins. 


Page Directory 

The Page Directory Is 4k bytes long and allows up to 
1 024 page directory entries. Each page directory en- 
try contains information about the page table and 
the address of the next level of tables, the Page 
Tables. The contents of a Page Directory Entry are 
shown In figure 4.11. The upper 10 bits of the linear 
address (A31-A22) are used as an index to select 
the correct Page Directory Entry. 

The page table address cor^tains the upper 20 bits 
of a 32-bit physical address that Is used as the base 
address for the next set of tables, the page tables. 
The lower 1 2 bits of the page table address are zero 
so that the page table addresses appear on 4 kbyte 
boundaries. For a 386 DX CPU system the upper 20 
bits will select one of 220 page tables, but for a 
386 SX Microprocessor system the upper 20 bits 
only select one of 212 page tables. Again, this Is 
because the 386 SX Microprocessor is limited to a 
24-bit physical address and the upper 8 bits (A24- 
A31) are truncated when the address is output on its 
24 address pins. 


Page Directory /Table Entries 

The lower 12 bits of the Page Table Entries and 
Page Directory Entries contain statistical Information 
about pages and page tables respectively. The P 
(Present) bit Indicates if a Page Directory or Page 
Table entry. can be used In address translation. If 
P = 1, the entry can be used for address translation. 
If P = 0, the entry cannot be used for translation. All 
of the other bits are available for use by the soft- 


used to Indicate where on disk the page is stored. 


The A (Accessed) bit is set by the 386 SX CPU for 
both types of entries before a read or write access 
occurs to an address covered by the entry. The D 
(Dirty) bit is set to 1 before a write to an address 
covered by that page table entry occurs. The D bit Is 
undefined for Page Directory Entries. When the P, A 
and D bits are updated by the 386 SX CPU, the proc- 
essor generates a Read- Modify-Write cycle which 
locks the bus and prevents conflicts with other proc- 
essors or peripherals. Software which modifies 
these bits should use the LOCK prefix to ensure the 
integrity of the page tables In multi-master systems. 


Page Tables 

Each Page Table is 4K bytes long and allows up to 
1024 Page table Entries. Each page table entry con- 
tains Information about the Page Frame and its ad- 


The 3 bits marked system software definable In Fig- 
ures 4.11 and Figure 4.12 are software definable. 
System software writers are free to use these bits 
for whatever purpose they wish. 
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PAGE LEVEL PROTECTION (R/W, U/S BITS) 

The 386 SX Microprocessor provides a set of pro- 
tection attributes for paging systems. The paging 
mechanism distinguishes between two levels of pro- 
tection: User, which corresponds to level 3 of the 
segmentation based protection, and supervisor 
which encompasses all of the other protection levels 
(0, 1 , 2). Programs executing at Level 0, 1 or 2 by- 
pass the page protection, although segmentation- 
based protection is still enforced by the hardware. 

The U/S and R/W bits are used to provide User/Su- 
pervisor and Read/Write protection for individual 
pages or for all pages covered by a Page Table Di- 
rectory Entry. The U/S and R/W bits in the second 
level Page Table Entry apply only to the page de- 
scribed by that entry. While the U/S and R/W bits in 
the first level Page Directory Table apply to all pages 
described by the page table pointed to by that direc- 
tory entry. The U/S and R/W bits for a given page 
are obtained by taking the most restrictive of the U/ 
S and R/W from the Page Directory Table Entries 
and using these bits to address the page. 

TRANSLATION LOOKASIDE BUFFER 

The 386 SX Microprocessor paging hardware is de- 
signed to support demand paged virtual memory 
systems. However, performance would degrade 
substantially If the processor was required to access 
two levels of tables for every memory reference. To 
solve this problem, the 386 SX Microprocessor 
keeps a cache of the most recently accessed pages, 
this cache is called the Translation Lookaside Buffer 
(TLB). The TLB is a four-way set associative 32-en- 
try page table cache. It automatically keeps the most 
commonly used page table entries in the processor. 
The 32-entry TLB coupled with a 4K page size re- 
sults in coverage of 128K bytes of memory address- 
es. For many common multi-tasking systems, the 
TLB will have a hit rate of greater than 98%. This 
means that the processor will only have to access 
the two-level page structure for less than 2% of all 
memory references. 

PAGING OPERATION 

The paging hardware operates in the following fash- 
ion. The paging unit hardware receives a 32-bit lin- 
ear address from the segmentation unit. The upper 
20 linear address bits are compared with all 32 en- 
tries in the TLB to determine if there is a match. If 
there is a match (i.e. a TLB hit), then the 24-bit phys- 
ical address Is calculated and is placed on the ad- 
dress bus. 

If the page table entry is not in the TLB, the 386 SX 
Microprocessor will read the appropriate Page Direc- 
tory Entry. If P = 1 on the Page Directory Entry, indi- 
cating that the page table is in memory, then the 386 
SX Microprocessor will read the appropriate 


Page Table Entry and set the Access bit. If P = 1 on 
the Page Table Entry, indicating that the page is in 
memory, the 386 SX Microprocessor will update the 
Access and Dirty bits as needed and fetch the oper- 
and. The upper 20 bits of the linear address, read 
from the page table, will be stored in the TLB for 
future accesses. If P = 0 for either the Page Directo- 
ry Entry or the Page Table Entry, then the processor 
will generate a page fault Exception 14. 

The processor will also generate a Page Fault (Ex- 
ception 14) if the memory reference violated the 
page protection attributes. CR2 will hold the linear 
address which caused the page fault. Since Excep- 
tion 14 is classified as a fault, CSiElP will point to the 
instruction causing the page-fault. The 16-bit error 
code pushed as part of the page fault handler will 
contain status bits which indicate the cause of the 
page fault. 

The 1 6-bit error code is used by the operating sys- 
tem to determine how to handle the Page Fault. Fig- 
ure 4.13 shows the format of the Page Fault error 
code and the Interpretation of the bits. Even though 
the bits in the error code (U/S, W/R, and P) have 
similar names as the bits in the Page Directory/Ta- 
ble Entries, the interpretation of the error code bits is 
different. Figure 4.14 indicates what type of access 
caused the page fault. 
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Figure 4.13. Page Fault Error Code Format 


U/S: The U/S bit indicates whether the access 
causing the fault occurred when the processor was 
executing in User Mode (U/S = 1) or in Supervisor 
mode (U/S = 0) 

W/R: The W/R bit indicates whether the access 
causing the fault was a Read (W/R = 0) or a Write 
(W/R = 1) 

P: The P bit Indicates whether a page fault was 
caused by a not-present page (P = 0), or by a page 
level protection violation (P = 1) 


U = Undefined 


U/S 

W/R 

Access Type 

0 

0 

Supervisor* Read 

0 

1 

Supervisor Write 

1 

0 

User Read 

1 

1 

User Write 


*Descriptor table access will fault with U/S = 0, even if 
the program is executing at level 3. 

Figure 4.14. Type of Access Causing Page Fault 
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int^ 


OPERATING SYSTEM RESPONSIBILITIES 

When the operating system enters or exits paging 
mode (by setting or resetting bit 31 in the CRO regis- 
ter) a short JMP must be executed to flush the 
386 SX Microprocessor’s prefetch queue. This en- 
sures that ail instructions executed after the address 
rnode change will generate correct addresses. 

The 386 SX Microprocessor takes care of the page 
address translation process, relieving the burden 
from an operating system in a demand-paged sys- 
tem. The operating system is responsible for setting 
up the initial page tables and handling any page 
faults. The operating system also Is required to Inval- 
idate (i.e. flush) the TLB when any changes are 
made to any of the page table entries. The operating 
system must reload CR3 to cause the TLB to be 
flushed. 

Setting up the tables is simply a matter of loading 
CR3 with the address of the Page Directory, and 
allocating space for the Page Directory and the 
Page Tables. The primary responsibility of the oper- 
ating system is to Implement a swapping policy and 
handle all of the page faults. 

A final concern of the operating system is to ensure 
that the TLB cache matches the information in the 
paging tables. In particular, any time the operating 
systems sets the P (Present) bit of page table entry 
to zero. The TLB must be flushed by reloading CR3. 
Operating systems may want to take advantage of 
the fact that CR3 is stored as part of a TSS, to give 
every task or group of tasks its own set of page 
tables. 


4.5 Virtual 8086 Environment 

The 386 SX Microprocessor allows the execution of 
8086 application programs in both Real Mode and in 
the Virtual 8086 Mode. The Virtual 8086 Mode al- 
lows the execution of 8086 applications, while still 
allowing the system designer to take full advantage 
of the 386 SX CPU’s protection mechanism. 

VIRTUAL 8086 ADDRESSING MECHANISM 

One of the major differences between 386 SX CPU 
Real and Protected modes is how the segment se- 
lectors are interpreted. When the processor is exe- 
cuting in Virtual 8086 Mode, the segment registers 
are used in a fashion identical to Real Mode. The 
contents of the segment register are shifted left 4 
bits and added to the offset to form the segment 
base linear address. 

The 386 SX Microprocessor allows the operating 
system to specify which programs use the 8086 ad- 


dress mechanism and which programs use Protect- 
ed Mode addressing on a per task basis. Through 
the use of paging, the one megabyte address space 
of the Virtual Mode task can be mapped to any- 
where in the 4 gigabyte linear address space of the 
386 SX Microprocessor. Like Real Mode, Virtual 
Mode addresses that exceed one megabyte will 
cause an exception 1 3. However, these restrictions 
should not prove to be important, because most 
tasks running in Virtual 8086 Mode will simply be 
existing 8086 application programs. 

PAGING IN VIRTUAL MODE 

The paging hardware allows the concurrent running 
of multiple Virtual Mode tasks, and provides protec- 
tion and operating system isolation. Although it Is 
not strictly necessary to have the paging hardware 
enabled to run Virtual Mode tasks, it is needed in 
order to run multiple Virtual Mode tasks or to relo- 
cate the address space of a Virtual Mode task to 
physical address space greater than one megabyte. 

The paging hardware allows the 20-bit linear ad- 
dress produced by a Virtual Mode program to be 
divided into as many as 256 pages. Each one of the 
pages can be located anywhere within the maximum 
1 6 megabyte physical address space of the 386 SX 
Microprocessor. In addition, since CR3 (the Page Di- 
rectory Base Register) is loaded by a task switch, 
each Virtual Mode task can use a different mapping 
scheme to map pages to different physical locations. 
Finally, the paging hardware allows the sharing of 
the 8086 operating system code between multiple 
8086 applications. 

PROTECTION AND I.^O PERMISSION BIT MAR 

Ajj vyjrtijaj mqH 0 pfograms execute at privilege level 
3. As such, Virtual Mode programs are subject tb all 
of the protection checks defined in Protected Mode. 
This is different than Real Mode, which implicitly is 
executing at privilege level 0. Thus, an attempt to 
execute a privileged instruction in Virtual Mode will 
cause an exception 1 3 fault. 

The following are privileged instructions, which may 
be executed only at Privilege Level 0. Attempting to 
execute these instructions in Virtual 8086 Mode (or 
anytime CPL^O) causes an exception 13 fault: 


LIDT; 

MOV DRn,REG; 

MOV reg.DRn; 

LGDT; 

MOV TRn,reg; 

MOV reg,TRn; 

LMSW; 

MOV CRn,reg; 

MOV reg.CRn; 

CLTS; 



HLT; 
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Several instructions, particularly those applying to 
the multitasking and the protection model, are avail- 
able only in Protected Mode. Therefore, attempting 
to execute the following instructions in Real Mode or 
in Virtual 8086 Mode generates an exception 6 fault: 


LTR; 

STR; 

LLDT; 

SLOT; 

LAR; 

VERR; 

LSL; 

VERW; 

ARPL; 



The instructions which are lOPL sensitive In Protect- 
ed Mode are; 

IN; STI; 

OUT; CLI 

INS; 

OUTS; 

REPINS; 

REP OUTS; 

In Virtual 8086 Mode the following instructions are 
lOPL-sensitIve: 

INT n; STI; 

PUSHF; CLI; 

POPF; IRET; 

The PUSHF, POPF, and IRET instructions are lOPL- 
sensitive in Virtual 8086 Mode only. This provision 
allows the IF flag to be virtualized to the virtual 8086 
Mode program. The INT n software interrupt Instruc- 
tion is also lOPL-sensitive in Virtual 8086 mode. 
Note that the INT 3, INTO, and BOUND Instructions 
are not lOPL-sensitIve in Virtual 8086 Mode. 

The I/O instructions that directly refer to addresses 
in the processor’s I/O space are IN, INS, OUT, and 
OUTS. The 386 SX Microprocessor has the ability to 
selectively trap references to specific I/O address- 
es. The structure that enables selective trapping is 
the I/O Permission Bit Map in the TSS segment (see 
Figures 4.8 and 4.9). The I/O permission map is a bit 
vector. The size of the map and its location in the 
TSS segment are variable. The processor locates 
the I/O permission map by means of the I/O map 
base field in the fixed portion of the TSS. The I/O 
map base field is 16 bits wide and contains the off- 
set of the beginning of the I/O permission map. 

In protected mode when an I/O instruction (IN, INS, 
OUT or OUTS) is encountered, the processor first 
checks whether CPL<IOPL. If this condition is true, 
the I/O operation may proceed. If not true, the proc- 
essor checks the I/O permission map (in Virtual 
8086 Mode, the processor consults the map without 
regard for the lOPL). 


Each bit In the map corresponds to an I/O port byte 
address; for example, the bit for port 41 is found at 
I/O map base + 5, bit offset 1 . The processor tests 
ail the bits that correspond to the I/O addresses 
spanned by an I/O operation; for example, a double 
word operation tests four bits corresponding to four 
adjacent byte addresses. If any tested bit is set, the 
processor signals a general protection exception. If 
all the tested bits are zero, the I/O operations may 
proceed. 

It Is not necessary for the I/O permission map to 
represent all the I/O addresses. I/O addresses not 
spanned by the map are treated as if they had one- 
bits in the map. The I/O map base should be at 
least one byte less than the TSS limit, the last byte 
beyond the I/O mapping information must contain 
all 1’s. 

Because the I/O permission map is in the TSS seg- 
ment, different tasks can have different maps. Thus, 
the operating system can allocate ports to a task by 
changing the I/O permission map in the task’s TSS. 

IMPORTANT IMPLEMENTATION NOTE: Beyond 
the last byte of I/O mapping information in the I/O 
permission bit map must be a byte containing all 1 ’s. 
The byte of all 1’s must be within the limit of the 
386 SX CPU TSS segment (see Figure 4.8). 

Interrupt Handling 

In order to fully support the emulation of an 8086 
machine, interrupts in Virtual 8086 Mode are han- 
dled in a unique fashion. When running in Virtual 
Mode all interrupts and exceptions involve a privi- 
lege change back to the host 386 SX Microproces- 
sor operating system. The 386 SX Microprocessor 
operating system determines if the interrupt comes 
from a Protected Mode application or from a Virtual 
Mode program by examining the VM bit in the 
EFLAGS Image stored on the stack. 

When a Virtual Mode program is interrupted and ex- 
ecution passes to the interrupt routine at level 0, the 
VM bit is cleared. However, the VM bit is still set in 
the EFLAG image on the stack. 

The 386 SX Microprocessor operating system in turn 
handles the exception or interrupt and then returns 
control to the 8086 program. The 386 SX Microproc- 
essor operating system may choose to let the 8086 
operating system handle the interrupt or it may emu- 
late the function of the interrupt handler. For exam- 
ple, many 8086 operating system calls are accessed 
by PUSHing parameters on the stack, and then exe- 
cuting an INT n instruction. If the lOPL is set to 0 
then all INT n instructions will be intercepted by the 
386 SX Microprocessor operating system. 
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An 386 SX Microprocessor operating system can 
provide a Virtual 8086 Environment which is totally 
transparent to the application software by intercept- 
ing and then emulating 8086 operating system’s 
calls, and intercepting IN and OUT instructions. 


Entering and Leaving Virtual 8086 Mode 

Virtual 8086 mode is entered by executing a 32-blt 
IRET instruction at CPL = 0 where the stack has a 1 
in the VM bit of its EFLAGS image, or a Task Switch 
(at any CPL) to a 386 SX Microprocessor task 
whose 386 SX CPU TSS has a EFLAGS image con- 
taining a 1 in the VM bit position while the processor 
is executing in the Protected Mode. POPF does not 
affect the VM bit but a PUSHF always pushes a 0 in 
the VM bit. 

The transition out of Virtual 8086 mode to protected 
mode occurs only on receipt of an interrupt or ex- 
ception. In Virtual 8086 mode, all interrupts and ex- 
ceptions vector through the protected mode IDT, 
and enter an Interrupt handler In protected mode. As 
part of the interrupt processing the VM bit is cleared. 

Because the matching IRET must occur from level 0, 
Interrupt or Trap Gates used to field an interrupt or 
exception out of Virtual 8086 mode must perform an 
inter-level Interrupt only to level 0. Interrupt or Trap 
Gates through conforming segments, or through 
segments with DPL>0, will raise a GP fault with the 
CS selector as the error code. 


Task Switches To/From Virtual 8086 Mode 


Tasks which can execute in Virtual 8086 mode must 
be described by a TSS with the 386 SX CPU format 
(type 9 or 11 descriptor). A task switch out of virtual 


/ +l-»a oomck oe or»\# rkth- 


er task switch out of a task with a 386 SX CPU TSS. 
All of the programmer visible state, including the 
EFLAGS register with the VM bit set to 1 , is stored in 
the TSS. The segment registers in the TSS will con- 
tain 8086 segment base values rather than selec- 
tors. 


Transitions Through Trap and Interrupt Gates, ' 
and IRET 

A task switch is one way to enter or exit Virtual 8086 
mode. The other method is to exit through a Trap or 
Interrupt gate, as part of handling an interrupt, and 
to enter as part of executing an IRET instruction. 
The transition out must use a 386 SX CPU Trap 
Gate (Type 14), or 386 SX CPU Interrupt Gate (Type 
15), which must point to a non-conforming level 0 
segment (DPL=0) in order to permit the trap han- 
dler to IRET back to the Virtual 8086 program. The 
Gate must point to a non-conforming level 0 seg- 
ment to perform a level switch to level 0 so that the 
matching IRET can change the VM bit. 386 SX CPU 
gates must be used since 286 gates save only the 
low 16 bits of the EFLAGS register (the VM bit will 
not be saved). Also, the 16-bit IRET used to termi- 
nate the 286 interrupt handler will pop only the lower 
16 bits from FLAGS, and will not affect the VM bit. 
The action taken for a 386 SX CPU Trap or Interrupt 
gate if an interrupt occurs while the task is executing 
in virtual 8086 mode Is given by the following se- 
quence: 

1 . Save the FLAGS register in a temp to push later. 
Turn off the VM, TF, and IF bits. 

2. Interrupt and Trap gates must perform a level 
switch from 3 (where the Virtual 8086 Mode pro- 
gram executes) to level 0 (so IRET can return). 

3. Push the 8086 segment register values onto the 
new stack, in this order: GS, FS, DS, ES. These 
are pushed as 32-bit quantities. Then load these 4 
registers with null selectors (0). 

4. Push the old 8086 stack pointer onto the new 
stack by pushing the SS register (as 32-bits), then 
pushing the 32-bit ESP register saved above. 

5. Push the 32-bit EFLAGS register saved in step i . 

6. Push the old 8086 instrubtion onto the new stack 
by pushing the CS register (as 32-bits), then push- 
ing the 32-bit EIP register. 

7. Load up the new CS:EIP value from the Interrupt 
gate, and begin execution of the interrupt routine 
In protected mode. 


A task switch into a task described by a 386 SX CPU 
TSS will have an additional check to determine If the 
Incoming task should be resumed in Virtual 8086 
mode. Tasks described by 286 format TSSs cannot 
be resumed in Virtual 8086 mode, so no check is 
required there (the FLAGS image in 286 format TSS 
has only the low order 16 FLAGS bits). Before load- 
ing the segment register Images from a 386 SX CPU 
TSS, the FLAGS Image is loaded, so that the seg- 
ment registers are loaded from the TSS image as 
8086 segment base values. The task is now ready to 
resume in Virtual 8086 mode. 


The transition out of V86 mode performs a level 
change and stack switch, in addition to changing 
back to protected mode. Also all of the 8086 seg- 
ment register images are stored on the stack (be- 
hind the SS.'ESP image), and then loaded with null 
(0) selectors before entering the interrupt handler. 
This will permit the handler to safely save and re- 
store the DS, ES, FS, and GS registers as 286 selec- 
tors. This is needed so that interrupt handlers which 
don’t care about the mode of the interrupted pro- 
gram can use the same prologue and epilogue code 
for state saving regardless of whether or not a ‘na- 
tive* mode or Virtual 8086 Mode program was inter- 
rupted. Restoring null selectors to these registers 
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before executing the I RET will cause a trap in the 
interrupt handler. Interrupt routines which expect or 
return values in the segment registers will have to 
obtain/return values from the 8086 register images 
pushed onto the new stack. They will need to know 
the mode of the interrupted program In order to 
know where to find/return segment registers, and 
also to know how to Interpret segment register val- 
ues. 

The IRET instruction will perform the inverse of the 
above sequence. Only the extended IRET instruc- 
tion (operand size ==32) can be used and must be 
executed at level 0 to change the VM bit to 1 . 

1 . If the NT bit in the FLAGS register is on, an inter- 
task return is performed. The current state is 
stored In the current TSS, and the link field in the 
current TSS is used to locate the TSS for the in- 
terrupted task which is to be resumed. Otherwise, 
continue with the following sequence: 

2. Read the FLAGS Image from SS:8[ESP] into the 
FLAGS register. This will set VM to the value ac- 
tive in the interrupted routine. 

3. Pop off the instruction pointer CSiEIP. EIP is 
popped first, then a 32-bit word is popped which 
contains the CS value In the lower 16 bits. If 
VM = 0, this CS load is done as a protected mode 
segment load. If VM = 1, this will be done as an 
8086 segment load. 

4. Increment the ESP register by 4 to bypass the 
FLAGS image which was ‘popped* in step 1 . 

5. If VM = 1 , load segment registers ES, DS, FS, and 

GS from memory locations SS:[ESP + 8], 
SS:[ESP+12], SS:[ESP + 16], and 

SS:[ESP = 20], respectively, where the new value 
of ESP stored In step 4 is used. Since VM = 1, 
these are done as 8086 segment register loads. 

Else if VM = 0, check that the selectors in ES, DS, 
FS, and GS are valid in the interrupted routine. 
Null out invalid selectors to trap if an attempt Is 
made to access through them. 

6. If RPL(CS)>CPL, pop the stack pointer SS:ESP 
from the stack. The ESP register is popped first, 
followed by 32-bits containing SS In the lower 16 
bits. If VM = 0, SS Is loaded as a protected mode 
segment register load. If VM = 1, an 8086 seg- 
ment register load is used. 

7. Resume execution of the interrupted routine. The 
VM bit in the FLAGS register (restored from the 
interrupt routine’s stack image in step 1) deter- 
mines whether the processor resumes the Inter- 
rupted routine in Protected mode or Virtual 8086 
Mode. 


5.0 FUNCTIONAL DATA 

The 386 SX Microprocessor features a straightfor- 
ward functional interface to the external hardware. 
The 386 SX Microprocessor has separate parallel 
buses for data and address. The data bus is 1 6-bits 
In width, and bi-directional. The address bus outputs 
24-bit address values using 23 address lines and 
two byte enable signals. 

The 386 SX Microprocessor has two selectable ad- 
dress bus cycles: address pipelined and non-ad- 
dress pipelined. The address pipelining option al- 
lows as much time as possible for data access by 
starting the pending bus cycle before the present 
bus cycle is finished. A non-pipellned bus cycle 
gives the highest bus performance by executing ev- 
ery bus cycle in two processor CLK cycles. For maxi- 
mum design flexibility, the address pipelining option 
is selectable on a cycle-by-cycle basis. 

The processor’s bus cycle Is the basic mechanism 
for information transfer, either from system to proc- 
essor, or from processor to system. 386 SX Micro- 
processor bus cycles perform data transfer in a mini- 
mum of only two clock periods. The maximum trans- 
fer bandwidth at 16 MHz Is therefore 16 Mbytes/ 
sec. However, any bus cycle will be extended for 
more than two clock periods if external hardware 
withholds acknowledgement of the cycle. 

The 386 SX Microprocessor can relinquish control of 
its local buses to allow mastership by other devices, 
such as direct memory access (DMA) channels. 
When relinquished, HLDA is the only output pin driv- 
en by the 386 SX Microprocessor, providing near- 
complete isolation of the processor from Its system 
(all other output pins are In a float condition). 


5.1 Signal Description Overview 

Ahead is a brief description of the 386 SX Micro- 
processor input and output signals arranged by func- 
tional groups. Note the # symbol at the end of a 
signal name Indicates the active, or asserted, state 
occurs when the signal is at a LOW voltage. When 
no # is present after the signal name, the signal is 
asserted when at the HIGH voltage level. 

Example signal: M/IO# — HIGH voltage Indicates 
Memory selected 

— LOW voltage indicates 
I/O selected 

The signal descriptions sometimes refer to AC tim- 
ing parameters, such as ‘t 25 Reset Setup Time* and 
‘t 26 Reset Hold Time.* The values of these parame- 
ters can be found in Table 7.4. 
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CLOCK (CLK2) 

CLK2 provides the fundamental timing for the 
386 SX Microprocessor. It is divided by two internally 
to generate the Internal processor clock used for in- 
struction execution. The internal clock is comprised 
of two phases, ‘phase one' and ‘phase two'. Each 
CLK2 period is a phase of the internal clock. Figure 
5.2 illustrates the relationship. If desired, the phase 
of the internal processor clock can be synchronized 
to a known phase by ensuring the falling edge of the 
RESET signal meets the applicable setup and hold 
times t 25 and t 26 - 


DATA BUS (D 15 -D 0 ) 

These three-state bidirectional signals provide the 
general purpose data path between the 386 SX Mi- 
croprocessor and other devices. The data bus out- 
puts are active HIGH and will float during bus hold 
acknowledge. Data bus reads require that read-data 
setup and hold times t 2 i and t 22 be met relative to 
CLK2 for correct operation. 
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ADDRESS BUS (A23-A1, BHE#, BLE#) 

These three-state outputs provide physical memory 
addresses or I/O port addresses. A 23 -A 16 are LOW 
during I/O transfers except for I/O transfers auto- 
matically generated by coprocessor instructions. 
During coprocessor I/O transfers, A 22 -A 16 are driv- 
en LOW, and A 23 is driven HIGH so that this ad- 
dress line can be used by external logic to generate 
the coprocessor select signal. Thus, the I/O address 
driven by the 386 SX Microprocessor for coproces- 
sor commands is 8000F8H, the I/O addresses driv- 
en by the 386 SX Microprocessor for coprocessor 
data are 8000FCH or 8000FEH for cycles to the 
387TM SX. 

The address bus is capable of addressing 16 mega- 
bytes of physical memory space (OOOOOOH through 
FFFFFFH), and 64 kilobytes of I/O address space 
(OOOOOOH through OOFFFFH) for programmed I/O. 
The address bus is active HIGH and will float during 
bus hold acknowledge. 

The Byte Enable outputs, BHE# and BLE#, directly 
Indicate which bytes of the 16-bit data bus are in- 
volved with the current transfer. BHE# applies to 
Di 5 ”D 8 and BLE# applies to D 7 -D 0 . If both BHE# 
and BLE# are asserted, then 16 bits of data are 
being transferred. See Table 5.1 for a complete de- 
coding of these signals. The byte enables are active 
LOW and will float during bus hold acknowledge. 

BUS CYCLE DEFINITION SIGNALS (W/R#, D/ 
C#, M/IO#, LOCK#) 

These three-state outputs define the type of bus cy- 
cle being performed: W/R# distinguishes between 


write and read cycles, D/C# distinguishes between 
data and control cycles, M/IO# distinguishes be- 
tween memory and I/O cycles, and LOCK# distin- 
guishes between locked and unlocked bus cycles. 
All of these signals are active LOW and will float 
during bus acknowledge. 

The primary bus cycle definition signals are W/R#, 
D/C# and M/IO#, since these are the signals driv- 
en valid as ADS# (Address Status output) becomes 
active. The LOCK# Is driven valid at the same time 
the bus cycle begins, which due to address pipelin- 
ing, could be after ADS# becomes active. Exact bus 
cycle definitions, as a function of W/R#, D/C#, and 
M/IO# are given In Table 5.2. 

LOCK# indicates that other system bus masters are 
not to gain control of the system bus while it is ac- 
tive. LOCK# is activated on the CLK2 edge that be- 
gins the first locked bus cycle (i.e., it is not active at 
the same time as the other bus cycle definition pins) 
and is deactivated when ready is returned at the end 
of the last bus cycle which is to be locked. The be- 
ginning of a bus cycle is determined when READY# 
is returned in a previous bus cycle and another Is 
pending (ADS# is active) or the clock in which 
ADS# Is driven active if the bus was idle. This 
means that it follows more closely with the write 
data rules when it is valid, but may cause the bus to 
be locked longer than desired. The LOCK# signal 
may be explicitly activated by the LOCK prefix on 
certain instructions. LOCK# is always asserted 
when executing the XCHG instruction, during de- 
scriptor updates, and during the interrupt acknowl- 
edge sequence. 


Table 5 . 1 . Byte Enable Definitions 


BHE# 1 

BLE# 

Function 

0 

0 

Word Transfer 

0 

1 

Byte transfer on upper byte of the data bus, D-is-Ds 

1 

0 

Byte transfer on lower byte of the data bus, D 7 -D 0 

1 

1 

Never occurs 


Table 5 . 2 . Bus Cycle Definition 


M/IO# 

D/C# 

W/R# 

Bus Cycle Type 

Locked? 

0 

0 

0 

Interrupt Acknowledge 

Yes 

0 

0 

1 

does not occur 


0 

1 

0 

I/O Data Read 

No 

0 

1 

1 

I/O Data Write 

No 

1 

0 

0 

Memory Code Read 

No 

1 

0 

1 

Halt: Shutdown: 

Address = 2 Address = 0 

BHE# = 1 BHE# = 1 

BLE# = 0 BLE# = 0 

No 

1 

1 

0 

Memory Data Read 

Some Cycles 

1 

1 

1 

Memory Data Write 

Some Cycles 
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BUS CONTROL SIGNALS (ADS#, READY#, 
NA#) 

The following signals allow the processor to indicate 
when a bus cycle has begun, and allow other system 
hardware to control address pipelining and bus cycle 
termination. 


Address Status (ADS#) 

This three-state output Indicates that a valid bus cy- 
cle definition and address (W/R#, D/C#, M/IO#, 
BHE#, BLE# and A 23 -A 1 ) are being driven at the 
386 SX Microprocessor pins. ADS# is an active 
LOW output. Once ADS# is driven active, valid ad- 
dress, b\de enables, and definition signals will not 
change. In addition, ADS# will remain active until its 
associated bus cycle begins (when READY# is re- 
turned for the previous bus cycle when running pipe- 
lined bus cycles). When address pipelining Is uti- 
lized, maximum throughput is achieved by initiating 
bus cycles when ADS# and READY# are active in 
the same clock cycle. ADS# will float during bus 
hold acknowledge. See sections Non-Pipelined Ad- 
dress and Pipelined Address for additional infor- 
mation on how ADS# Is asserted for different bus 
states. 


Transfer Acknowledge (READY#) 

This Input indicates the current bus cycle Is com- 
plete, and the active bytes Indicated by BHE# and 
BLE# are accepted or provided. When READY# Is 
sampled active during a read cycle or interrupt ac- 
knowledge cycle, the 386 SX Microprocessor latch- 
es the input data and terminates the cycle. When 
nm/AL.^ T it' iv> dciiii|jic;u cioiive duriDg a write cycle, the 
processor terminates the bus cycle. 

READY # Is Ignored on the first bus state of all bus 
cycles, and sampled each bus state thereafter until 
asserted. READY# must eventually be asserted to 
acknowledge every bus cycle, including Halt Indica- 
tion and Shutdown Indication bus cycles. When be- 
ing sampled, READY# must always meet setup and 
hold times tig and X 20 for correct operation. 

Npxt Address Request (NA#) 

This is used to request address pipelining. This input 
indicates the system is prepared to accept new val- 
ues of BHE#, BLE#, A 23 -A 1 , W/R#, D/C# and 
M/IO# from the 386 SX Microprocessor even if the 
end of the current cycle is not being acknowledged 
on READY#. If this Input is active when sampled, 
the next address is driven onto the bus, provided the 
next bus request Is already pending internally. NA# 
is ignored In CLK cycles in which ADS# or READY# 


is activated. This signal is active LOW and must sat- 
isfy setup and hold times ti 5 and tie ^or correct op- 
eration. See Pipelined Address and Read and 
Write Cycles for additional information. 

BUS ARBITRATION SIGNALS (HOLD, HLDA) 

This section describes the mechanism by which the 
processor relinquishes control of its local buses 
when requested by another bus master device. See 

Entering and Exiting Hold Acknowledge for addi- 
tional information. 


Bus Hold Request (HOLD) 

This input Indicates some device other than the 
386 SX Microprocessor requires bus mastership. 
When control is granted, the 386 SX Microprocessor 
floats A 23 -A 1 , BHE#, BLE#, D 15 -D 0 . LOCK#, M/ 
10#, D/C#, W/R# and ADS#, and then activates 
HLDA, thus entering the bus hold acknowledge 
state. The local bus will remain granted to the re- 
questing master until HOLD becomes inactive. 
When HOLD becomes inactive, the 386 SX Micro- 
processor will deactivate HLDA and drive the. local 
bus (at the same time), thus terminating the hold 
acknowledge condition. 

HOLD must remain asserted as long as any other 
device is a local bus master. External pull-up resis- 
tors may be required when In the hold acknowledge 
state since none of the 386 SX Microprocessor float- 
ed outputs have internal pull-up resistors. See 
Resistor Recommendations for additional informa- 
tion. HOLD Is not recognized while RESET is active. 
If RESET is asserted while HOLD Is asserted, RE- 
SET .has priority and places the bus into an Idle 
state, rather than the hold acknowledge (high-im- 
pedance) state. 

HOLD Is a level-sensitive, active HIGH, synchronous 
input. HOLD signals must always meet setup and 
hold times t 23 and t 24 for correct operation. 

Bus Hold Acknowledge (HLDA) 

When active (HIGH), this output indicates the 386 
SX Microprocessor has relinquished control of Its lo- 
cal bus in response to an asserted HOLD signal, and 
is in the bus Hold Acknowledge state. 

The Bus Hold Acknowledge state offers near-com- 
plete signal isolation. In the Hold Acknowledge 
state, HLDA is the only signal being driven by the 
386 SX Microprocessor. The other output signals or 
bidirectional signals (D 15 -D 0 , BHE#, BLE#, A 23 - 
Ai, W/R#, D/C#, M/IO#, LOCK# and ADS#) are 
in a high-impedance state so the requesting bus 
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master may control them. These pins remain OFF 
throughout the time that HLDA remains active (see 
Table 5.3)). Pull-up resistors may be desired on sev- 
eral signals to avoid spurious activity when no bus 
master is driving them. See Resistor Recommen- 
dations for additional Information. 

When the HOLD signal is made inactive, the 386 SX 
Microprocessor will deactivate HLDA and drive the 
bus. One rising edge on the NMI input is remem- 
bered for processing after the HOLD input is negat- 
ed. 


Table 5.3. Output pin State During HOLD 


Pin Value 

Pin Names 

1 

Float 

HLDA 

LOCK#, M/IO#, D/C#, W/R#, 

ADS#, A 23 -A 1 , BHE#, BLE#, D 15 -D 0 


In addition to the normal usage of Hold Acknowl- 
edge with DMA controllers or master peripherals, 
the near-complete Isolation has particular attractive- 
ness during system test when test equipment drives 
the system, and in hardware fault-tolerant applica- 
tions. 


HOLD Latencies 

The maximum possible HOLD latency depends on 
the software being executed. The actual HOLD la- 
tency at any time depends on the current bus activi- 
ty, the state of the LOCK# signal (internal to the 
CPU) activated by the LOCK# prefix, and interrupts. 
The 386 SX Microprocessor will not honor a HOLD 
request until the current bus operation is complete. 
Table 5.4 shows the types of bus operations that 
can affect HOLD latency, and indicates the types of 
delays that these operations may introduce. When 
considering maximum HOLD latencies, designers 
must select which of these bus operations are possi- 
ble, and then select the maximum latency from 
among them. 

The 386 SX Microprocessor breaks 32-bit data or 
I/O accesses Into 2 internally locked 16-bit bus cy- 
cles; the LOCK# signal is not asserted. The 386 SX 
Microprocessor breaks unaligned 16-bit or 32-bit 
data or I/O accesses Into 2 or 3 internally locked 16- 
bit bus cycles. Again, the LOCK# signal is not as- 
serted but a HOLD request will not be recognized 
until the end of the entire transfer. 

Wait states affect HOLD latency. The 386 SX Micro- 
processor will not honor a HOLD request until the 
end of the current bus operation, no matter 


how many wait states are required. Systems with 
DMA where data transfer is critical must Insure that 
READY # returns sufficiently soon. 

COPROCESSOR INTERFACE SIGNALS 
(PEREQ, BUSY#, ERROR#) 

In the following sections are descriptions of signals 
dedicated to the numeric coprocessor Interface. In 
addition to the data bus, address bus, and bus cycle 
definition signals, these following signals control 
communication between the 386 SX Microprocessor 
and its 387 tm sX processor extension. 

Coprocessor Request (PEREQ) 

When asserted (HIGH), this input signal indicates a 
coprocessor request for a data operand to be trans- 
ferred to/from memory by the 386 SX Microproces- 
sor. In response, the 386 SX Microprocessor trans- 
fers information between the coprocessor and 
memory. Because the 386 SX Microprocessor has 
internally stored the coprocessor opcode being exe- 
cuted, it performs the requested data transfer with 
the correct direction and memory address. 

PEREQ is a level-sensitive active HIGH asynchro- 
nous signal. Setup and hold times, t 29 and tao, rela- 
tive to the CLK2 signal must be met to guarantee 
recognition at a particular clock edge. This signal is 
provided with a weak internal pull-down resistor of 
around 20 K-ohms to ground so that it will not float 
active when left unconnected. 


Coprocessor Busy (BUSY#) 

When asserted (LOW), this input Indicates the co- 
processor is still executing an instruction, and is not 
yet able to accept another. When the 386 SX Micro- 
processor encounters any coprocessor instruction 
which operates on the numerics stack (e.g. load, 
pop, or arithmetic operation), or the WAIT instruc- 
tion, this input is first automatically sampled until it is 
seen to be inactive. This sampling of the BUSY# 
Input prevents overrunning the execution of a previ- 
ous coprocessor instruction. 

The FNINIT, FNSTENV, FNSAVE, FNSTSW, 
FNSTCW and FNCLEX coprocessor instructions are 
allowed to execute even if BUSY# is active, since 
these instructions are used for coprocessor initializa- 
tion and exception-clearing. 

BUSY # Is an active LOW, level-sensitive asynchro- 
nous signal. Setup and hold times, t 29 and tao, rela- 
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five to the CLK2 signal must be met to guarantee 
recognition at a particular clock edge. This pin is pro- 
vided with a weak internal pull-up resistor of around 
20 K-ohms to Vcc so that it will not float active when 
left unconnected. 

BUSY# serves an additional function. If BUSY# is 
sampled LOW at the falling edge of RESET, the 386 
SX Microprocessor performs an internal self-test 
(see Bus Activity During and Following Reset. If 
BUSY# is sampled HIGH, no self-test is performed. 

Coprocessor Error (ERROR # ) 

When asserted (LOW), this input signal indicates 
that the previous coprocessor instruction generated 
a coprocessor error of a type not masked by the 
coprocessor’s control register. This input is automat- 
ically sampled by the 386 SX Microprocessor when 
a coprocessor instruction is encountered, and if ac- 
tive, ,the 386 SX Microprocessor generates excep- 
tion 1 6 to access the error-handling software. 

Several coprocessor instructions, generally those 
which clear the numeric error flags in the coproces- 
sor or save coprocessor state, do execute without 
the 386 SX Microprocessor generating exception 1 6 
even if ERROR# is active. These instructions are 
FNINIT, FNCLEX, FNSTSW, FNSTSWAX, 
FNSTCW, FNSTENV and FNSAVE. 

ERROR# is an active LOW, level-sensitive asyn- 
chronous signal. Setup and hold times, t 29 and tao, 
relative to the CLK2 signal must be met to guarantee 
recognition at a particular clock edge. This pin Is pro- 
vided with a weak internal pull-up resistor of around 
20 K-ohms to Vcc so that It will not float active when 
left unconnected. 


INTERRUPT SIGNALS (INTR, NMI, RESET) 

The following descriptions cover inputs that can in- 
terrupt or suspend execution of the processor’s cur- 
rent instruction stream. 


Maskable Interrupt Request (INTR) 

When asserted, this Input indicates a request for In- 
terrupt service, which can be masked by the 386 SX 
CPU Flag Register IF bit. When the 386 SX Micro- 
processor responds to the INtR Input, It performs 
two interrupt acknowledge bus cycles and, at the 
end of the second, latches an 8-bit interrupt vector 
on Dy-Do to identify the source of the interrupt. 

INTR is an active HIGH, level-sensitive asynchro- 
nous signal. Setup and hold times, t 27 and t 28 , rela- 
tive to the CLK2 signal must be met to guarantee 


recognition at a particular clock edge. To assure rec- 
ognition of an INTR request, INTR should remain 
active until the first Interrupt acknowledge bus cycle 
begins. INTR Is sampled at the beginning of every 
instruction in the 386 SX Microprocessor’s Execu- 
tion Unit. In order to be recognized at a particular 
Instruction boundary, INTR must be active at least 
eight CLK2 clock periods before the beginning of the 
instruction. If recognized, the 386 SX Microproces- 
sor will begin execution of the interrupt. 

Non-Maskable Interrupt Request (NMI)) 

This input indicates a request for interrupt service 
which cannot be masked by software. The non- 
maskable interrupt request is always processed ac- 
cording to the pointer or gate in slot 2 of the interrupt 
table. Because of the fixed NMI slot assignment, no 
interrupt acknowledge cycles are performed when 
processing NMI. 

NMI is an active HIGH, rising edge-sensitive asyn- 
chronous signal. Setup and hold times, t 27 and t 28 . 
relative to the CLK2 signal must be met to guarantee 
recognition at a particular clock edge. To assure rec- 
ognition of NMI, it must be Inactive for at least eight 
CLK2 periods, and then be active for at least eight 
CLK2 periods before the beginning of the instruction 
boundary in the 386 SX Microprocessor’s Execution 
Unit, 

Once NMI processing has begun, no additional 
NMI’s are processed until after the next IRET In- 
struction, which is typically the end of the NMI serv- 
ice routine. If NMI is re-asserted prior to that time, 
however, one rising edge on NMI will be remem- 
bered for processing after executing the next IRET 
Instruction. 


Interrupt Latency 

The time that elapses before an Interrupt request is 
serviced (Interrupt latency) varies according to sev- 
eral factors. This delay must be taken into account 
by the interrupt source. Any of the following factors 
can affect interrupt latency: 

1. If interrupts are masked, an INTR request will not 
be recognized until interrupts are reenabled. 

2. If an NMI is currently being serviced, an Incoming 
NMI request will not be recognized until the 
386 SX Microprocessor encounters the IRET in- 
struction. 

3. An interrupt request is recognized only on an In- 
struction boundary of the 386 SX Microproces- 
sor’s Execution Unit except for the following cas- 
es: 

— Repeat string Instructions can be interrupted 
after each iteration. 
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— If the instruction loads the Stack Segment reg- 
ister, an interrupt is not processed until after 
the following Instruction, which should be an 
ESP. This allows the entire stack pointer to be 
loaded without interruption. 

— If an instruction sets the interrupt flag (enabling 
Interrupts), an interrupt is not processed until 
after the next instruction. 

The longest latency occurs when the interrupt re- 
quest arrives while the 386 SX Microprocessor is 
executing a long instruction such as multiplication, 
division, or a task-switch in the protected mode. 

4. Saving the Flags register and CS:EIP registers. 

5. If interrupt service routine requires a task switch, 
time must be allowed for the task switch. 

6. If the Interrupt service routine saves registers that 
are not automatically saved by the 386 SX Micro- 
processor. 

RESET 

This input signal suspends any operation in progress 
and places the 386 SX Microprocessor in a known 
reset state. The 386 SX Microprocessor is reset by 
asserting RESET for 1 5 or more CLK2 periods (80 or 
more CLK2 periods before requesting self-test). 
When RESET is active, all other input pins are ig- 
nored, and all other bus pins are driven to an Idle 
bus state as shown In Table 5.5. If RESET and 
HOLD are both active at a point in time, RESET 
takes priority even If the 386 SX Microprocessor was 
In a Hold Acknowledge state prior to RESET active. 

RESET is an active HIGH, level-sensitive synchro- 
nous signal. Setup and hold times, tas and tae. must 
be met in order to assure proper operation of the 
386 SX Microprocessor. 


Table 5.5. Pin State (Bus Idle) During Reset 


Pin Name 

Signal Level During Reset 

ADS# 

1 

D15--D0 

Float 

BHE#, BLE# 

0 

A23-A1 

1 

W/R# 

0 

D/C# 

1 

M/IO# 

0 

LOCK# 

1 

HLDA 

0 


5.2 Bus Transfer Mechanism 

All data transfers occur as a result of one or more 
bus cycles. Logical data operands of byte and word 
lengths may be transferred without restrictions on 


physical address alignment. Any byte boundary may 
be used, although two physical bus cycles are per- 
formed as required for unaligned operand transfers. 

The 386 SX Microprocessor address signals are de- 
signed to simplify external system hardware. Higher- 
order address bits are provided by A23-A1. BHE# 
and BLE# provide linear selects for the two bytes of 
the 16-bit data bus. 

Byte Enable outputs BHE# and BLE# are asserted 
when their associated data bus bytes are involved 
with the present bus cycle, as listed in Table 5.6. 


Table 5.6. Byte Enables and Associated Data 
and Operand Bytes 


Byte Enable 
Signal 

Associated Data Bus Signals 

BLE# 

BHE# 

D7-D0 

Dis-De 

(byte 0 — least significant) 
(byte 1 — most significant) 


Each bus cycle is composed of at least two bus 
states. Each bus state requires one processor clock 
period. Additional bus states added to a single bus 
cycle are called wait states. See section 5.4 Bus 

Functional Description. 


5.3 Memory and I/O Spaces 

Bus cycles may access physical memory space or I/ 
O space. Peripheral devices in the system may ei- 
ther be memory-mapped, or I/O-mapped, or both. 
As shown in Figure 5.3, physical memory addresses 
range from OOOOOOH to OFFFFFFH (16 megabytes) 
and I/O addresses from OOOOOOH to OOFFFFH (64 
kilobytes). Note the I/O addresses used by the auto- 
matic I/O cycles for coprocessor communication are 
8000F8H to 8000FFH, beyond the address range of 
programmed I/O, to allow easy generation of a co- 
processor chip select signal using the A23 and M/ 
10# signals. 


5.4 Bus Functional Description 

The 386 SX Microprocessor has separate, parallel 
buses for data and address. The data bus Is 1 6-bits 
in width, and bidirectional. The address bus provides 
a 24-bit value using 23 signals for the 23 upper-order 
address bits and 2 Byte Enable signals to directly 
indicate the active bytes. These buses are interpret- 
ed and controlled by several definition signals. 

The definition of each bus cycle is given by three 
signals: M/IO#, W/R# and D/C#. At the same 
time, a valid address is present on the byte enable 
signals, BHE# and BLE#, and the other address 
signals A23-A1. A status signal, ADS#, Indicates 
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Since A23 is HIGH during automatic communication with coprocessor, A23 HIGH and M/IO# LOW can be used to 

easily generate a coprocessor select signal. 


Figure 5.3. Physical Memory and I/O Spaces 


CLK2r 

(INPUT) 


BHE#.BLE#,A1-A23,r 

M/IO#.D/C#.W/R#L. 

(OUTPUTS) 


CYCLE 1 CYCLE 2 CYCLE 3 

NON-PIPELINED NON-PIPELINED NON-PIPELINED 

(READ) (READ) (READ) 

T1 T2 T1 T2 T1 T2 

1^2 U 2 ^1 U 2 U 2 ^1 U 2 ^1 U 2 ^1 


ADS#r 

(OUTPUT) ^ 

NA#r 

(INPUT) ^ 

READY# r 
(INPUT) 

LOCK# r 

(OUTPUT) ^ 


DO-DISI In 
(INPUT DURING READ) ^ “i" 




Fastest non-pipelined bus cycles consist of T 1 and T2 


Figure 5.4. Fastest Read Cycles with Non-pipelined Address Timing 
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When the 386 SX Microprocessor bus is not per- 
forming one of the activities listed above, it is either 
Idle or in the Hold Acknowledge state, which may be 
detected externally. The idle state can be identified 
by the 386 SX Microprocessor giving no further as- 
sertions on its address strobe output (ADS#) since 
the beginning of its most recent bus cycle, and the 
most recent bus cycle having been terminated. The 
hold acknowledge state Is identified by the 386 SX 
Microprocessor asserting its hold acknowledge 
(HLDA) output. 

The shortest time unit of bus activity is a bus state. A 
bus state is one processor clock period (two CLK2 
periods) in duration. A complete data transfer occurs 
during a bus cycle, composed of two or more bus 
states. 

The fastest 386 SX Microprocessor bus cycle re- 
quires only two bus states. For example, three con- 
secutive bus read cycles, each consisting of two bus 
states, are shown by Figure 5.4. The bus states in 
each cycle are named T1 and T2. Any memory or I/ 
O address may be accessed by such a two-state 
bus cycle, if the external hardware is fast enough. 



Figure 5.5. Fastest Read Cycles with Pipelined Address Timing 


when the 386 SX Microprocessor issues a new bus 
cycle definition and address. 

Collectively, the address bus, data bus and all asso- 
ciated control signals are referred to simply as ‘the 
bus’. When active, the bus performs one of the bus 
cycles below: 

1 . Read from memory space 

2. Locked read from memory space 

3. Write to memory space 

4. Locked write to memory space 

5. Read from I/O space (or coprocessor) 

6. Write to I/O space (or coprocessor) 

7. Interrupt acknowledge (always locked) 

8. Indicate halt, or indicate shutdown 

Table 5.2 shows the encoding of the bus cycle defi- 
nition signals for each bus cycle. See Bus Cycle 
Definition Signals for additional information. 
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Every bus cycle continues until it is acknowledged 
by the external system hardware, using the 386 SX 
Microprocessor READY# input. Acknowledging the 
bus cycle at the end of the first T2 results in the 
shortest bus cycle, requiring only T1 and T2. If 
READY# Is not immediately asserted however, T2 
states are repeated Indefinitely until the READY# 
input is sampled active. 

The address pipelining option provides a choice of 
bus cycle timings. Pipelined or non-pipelined ad- 
dress timing Is selectable on a cycle-by-cycle basis 
with the Next Address (NA#) input. 

When address pipelining is selected the address 
(BHE#, BLE# and A 23 -A 1 ) and definition (W/R#, 
D/C#, M/IO# and LOCK#) of the next cycle are 
available before the end of the current cycle. To sig- 
nal their availability, the 386 SX Microprocessor ad- 


dress status output (ADS#) is asserted. Figure 5.5 
Illustrates the fastest read cycles with pipelined ad- 
dress timing. 

Note from Figure 5.5 the fastest bus cycles using 
pipelined address require only two bus states, 
named TIP and T2P. Therefore cycles with pipe- 
lined address timing allow the same data bandwidth 
as non-pipelined cycles, but address-to-data access 
time Is Increased by one T-state time compared to 
that of a non-pipelined cycle. 

READ AND WRITE CYCLES 

Data transfers occur as a result of bus cycles, classi- 
fied as read or write cycles. During read cycles, data 
is transferred from an external device to the proces- 
sor. During write cycles, data is transferred from the 
processor to an external device. 
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Idle states are shown here for diagram variety only. Write cycles are not always followed by an idle state. An active bus 
cycle can immediately follow the write cycle. 


Figure 5.6. Various Bus Cycles with Non*Pipelined Address (zero wait states) 
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Two choices of address timing are dynamically se- 
lectable: non-pipelined or pipelined. After an idle bus 
state, the processor always uses non-pipelined ad- 
dress timing. However the NA# (Next Address) in- 
put may be asserted to select pipelined address tim- 
ing for the next bus cycle. When pipelining is select- 
ed and the 386 SX Microprocessor has a bus re- 
quest pending internally, the address and definition 
of the next cycle is made available even before the 
current bus cycle is acknowledged by READY#. 

Terminating a read or write cycle, like any bus cycle, 
requires acknowledging the cycle by asserting the 
READY# input. Until acknowledged, the processor 
inserts wait states into the bus cycle, to allow adjust- 
ment for the speed of any external device. External 
hardware, which has decoded the address and bus 
cycle type, asserts the READY# input at the appro- 
priate time. 


At the end of the second bus state within the bus 
cycle, READY# is sampled. At that time, if external 
hardware acknowledges the bus cycle by asserting 
READY#, the bus cycle terminates as shown in Fig- 
ure 5.6. If READY# is negated as in Figure 5.7, the 
386 SX Microprocessor executes another bus state 
(a wait state) and READY# is sampled again at the 
end of that state. This continues indefinitely until the 
cycle Is acknowledged by READY# asserted. 

When the current cycle is acknowledged, the 
386 SX Microprocessor terminates it. When a read 
cycle is acknowledged, the 386 SX Microprocessor 
latches the information present at its data pins. 
When a write cycle is acknowledged, the 386 SX 
CPU’s write data remains valid throughout phase 
one of the next bus state, to provide write data hold 
time. 
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Idle states are shown here for diagram variety only. Write cycles are not always followed by an idle state. An active bus 
cycle can immediately follow the write cycle. 


Figure 5.7. Various Bus Cycles with Non-Pipelined Address (various number of wait states) 
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Non-Pipelined Address 

Any bus cycle may be performed with non-pipellned 
address timing. For example, Figure 5.6 shows a 
mixture of read and write cycles with non-pipelined 
address timing. Figure 5.6 shows that the fastest 
possible cycles with non-pipelined address have two 
bus states per bus cycle. The states are named T 1 
and T2. In phase one of T1, the address signals and 
bus cycle definition signals are driven valid and, to 
signal their availability, address strobe (ADS#) is 
simultaneously asserted. 

During read or write cycles, the data bus behaves as 
follows. If the cycle is a read, the 386 SX Microproc- 
essor floats its data signals to allow driving by the 
external device being addressed. The 386 SX Mi- 
croprocessor requires that all data bus pins be 
at a valid logic state (HIGH or LOW) at the end of 
each read cycle, when READY# is asserted. The 
system MUST be designed to meet this require- 
ment. If the cycle is a write, data signals are driven 
by the 386 SX Microprocessor beginning In phase 
two of T 1 until phase one of the bus state following 
cycle acknowledgment. 


Figure 5.7 illustrates non-pipelined bus cycles with 
one wait state added to Cycles 2 and 3. READY# is 
sampled inactive at the end of the first T2 in Cycles 
2 and 3. Therefore Cycles 2 and 3 have T2 repeated 
again. At the end of the second T2, READY# Is 
sampled active. 

When address pipelining is not used, the address 
and bus cycle definition remain valid during all wait 
states. When wait states are added and it is desir- 
able to maintain non-pipelined address timing, it is 
necessary to negate NA# during each T2 state ex- 
cept the last one, as shown in Figure 5.7 Cycles 2 
and 3. If NA# is sampled active during a T2 other 
than the last one, the next state would be T2I or T2P 
instead of another T2. 

When address pipelining Is not used, the bus states 
and transitions are completely illustrated by Figure 
5.8. The bus transitions between four possible 
states, T1, T2, Tj, and Th- Bus cycles consist of T1 
and T2, with T2 being repeated for wait states. Oth- 
erwise the bus may be Idle, Tj, or in the hold ac- 
knowledge state Th- 


HOLD ASSERTED 
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Bus States: 

T1— first clock of a non-pipelined bus cycle (386 tm sx CPU drives new address and asserts ADS#). 

T2 — subsequent clocks of a bus cycle when NA# has not been sampled asserted in the current bus cycle. 

Ti— idle state. 

Th— hold acknowledge state (386 SX CPU asserts HLDA). 

The fastest bus cycle consists of two states T1 and T2. 

Four basic bus states describe bus operation when not using pipelined address. 


Figure 5.8. Bus States (not using pipelined address) 
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Bus cycles always begin with T1 . T1 always leads to 
T2. If a bus cycle Is not acknowledged during T2 and 
NA# is inactive, T2 Is repeated. When a cycle is 
acknowledged during T2, the following state will be 
T1 of the next bus cycle if a bus request is pending 
Internally, or Tj If there is no bus request pending, or 
Th if the HOLD input Is being asserted. 

Use of pipelined address allows the 386 SX Micro- 
processor to enter three additional bus states not 
shown in Figure 5.8. Figure 5.12 is the complete bus 
state diagram, including pipelined address cycles. 

Pipelined Address 

Address pipelining is the option of requesting the 
address and the bus cycle definition of the next in- 


ternally pending bus cycle before the current bus 
cycle Is acknowledged with READY# asserted. 
ADS# is asserted by the 386 SX Microprocessor 
when the next address is issued. The address pipe- 
lining option is controlled on a cycle-by-cycle basis 
with the NA# Input signal. 

Once a bus cycle is in progress and the current ad- 
dress has been valid for at least one entire bus 
state, the NA# Input is sampled at the end of every 
phase one until the bus cycle is acknowledged. Dur- 
ing non-pipelined bus cycles NA# is sampled at the 
end of phase one In every T2. An example Is Cycle 2 
in Figure 5.9, during which NA# is sampled at the 
end of phase one of every T2 (it was asserted once 
during the first T2 and has no further effect during 
that bus cycle). 


PROCESSOR CLK 

BHE#.BLE#. p 
A1 -A23, 
M/IO#, D/C# ^ 



D0-D15 
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Following any idle bus state (Tl), addresses are non-pipelined. Within non-pipelined bus cycles, NA# is only sampled 
during wait states. Therefore, to begin address pipelining during a group of non-pipelined bus cycles requires a non-pipe- 
lined cycle with at least one wait state (Cycle 2 above). 


Figure 5.9. Transitioning to Pipelined Address During Burst of Bus Cycies 
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If NA# is sampled active, the 386 SX Microproces- 
sor is free to drive the address and bus cycle defini- 
tion of the next bus cycle, and assert ADS#, as 
soon as it has a bus request internally pending. It 
may drive the next address as early as the next bus 
state, whether the current bus cycle is acknowl- 
edged at that time or not. 

Regarding the details of address pipelining, the 
386 SX Microprocessor has the following character- 
istics: 

1 . The next address may appear as early as the bus 
state after NA# was sampled active (see Figures 
5.9 or 5.10). In that case, state T2P is entered 
immediately. However, when there is not an inter- 
nal bus request already pending, the next address 
will not be available immediately after NA# is as- 
serted and T2I is entered instead of T2P (see Fig- 


ure 5.11 Cycle 3). Provided the current bus cycle 
isn’t yet acknowledged by READY# asserted, 
T2P will be entered as soon as the 386 SX Micro- 
processor does drive the next address. External 
hardware should therefore observe the ADS# 
output as confirmation the next address is actual- 
ly being driven on the bus. 

2. Any address which is validated by a pulse on the 
ADS# output will remain stable on the address 
pins for at least two processor clock periods. The 
386 SX Microprocessor cannot produce a new 
address more frequently than every two proces- 
sor clock periods (see Figures 5.9, 5.10, and 
5.11). 

3. Only the address and bus cycle definition of the 
very next bus cycle is available. The pipelining ca- 
pability cannot look further than one bus cycle 
ahead (see Figure 5.11 Cycle 1). 
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Following any bus state (Ti) the address Is always non-pipelined and NA# is only sampled during wait states. To start 
address pipelining after an idle state requires a non-pipelined cycle with at least one wait state (cycle 1 above) 

The pipelined cycles (2, 3, 4 above) are shown with various numbers of wait states. 


Figure 5.10. Fastest Transition to Pipelined Address Foiiowing Idie Bus State 
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The complete bus state transition diagram, including 
operation with pipelined address is given by Figure 
5.12. Note it is a superset of the diagram for non- 
pipelined address only, and the three additional bus 
states for pipelined address are drawn in bold. 


The fastest bus cycle with pipelined address con- 
sists of just two bus states, T 1 P and T2P (recall for 
non-pipelined address It Is T1 and T2). TIP is the 
first bus state of a pipelined cycle. 
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Figure 5.11. Details of Address Pipefining During Cycles with Wait States 
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Bus States: 

T1 — first clock of a non-pipelined bus cycle (386 tm sx CPU 
drives new address and asserts ADS#). 

T2— subsequent clocks of a bus cycle when NA# has not been 
sampled asserted in the current bus cycle. 

T2I— subsequent clocks of a bus cycle when NA# has been 
sampled asserted in the current bus cycle but there Is not yet 
an internal bus request pending (386 SX CPU will not drive new 
address or assert ADS#). 

T2P — subsequent clocks of a bus cycle when NA# has been 
sampled asserted in the current bus cycle and there is an Inter- 
nal bus request pending (386 SX CPU drives new address and 
asserts ADS#). 

T 1 P — first clock of a pipelined bus cycle. 

Ti— Idle state. 

Th—hold acknowledge state (386 SX CPU asserts HLDA). 
Asserting NA# for pipelined address gives access to three 
more bus states: T2I, T2P and T1 P. 

Using pipelined address, the fastest bus cycle consists of T1P 
and T2P. 


READY# NEGATED 


Figure 5.12. Complete Bus States (including pipelined address) 
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Initiating and Maintaining Pipelined Address 

Using the state diagram Figure 5.12, observe the 
transitions from an idle state, Tj, to the beginning of 
a pipelined bus cycle TIP. From an idle state, Tj, the 
first bus cycle must begin with T1 , and is therefore a 
non-pipelined bus cycle. The next bus cycle will be 
pipelined, however, provided NA# is asserted and 
the first bus cycle ends in a T2P state (the address 
for the next bus cycle is driven during T2P). The fast- 
est path from an idle state to a bus cycle with pipe- 
lined address is shown in bold below: 

Ti, T|, Tj, T1 - T2 - T2P, TIP - T2P, 

idle non-pipelined pipelined 

states cycle cycle 

T1-T2-T2P are the states of the bus cycle that es- 
tablish address pipelining for the next bus cycle, 
which begins with TIP. The same is true after a bus 
hold state, shown below: 

Th, Th, Th, TI - T2 - T2P, TIP - T2P, 
hold acknowledge non-pipelined pipelined 

states cycle cycle 

The transition to pipelined address Is shown func- 
tionally by Figure 5.10 Cycle 1. Note that Cycle 1 is 
used to transition Into pipelined address timing for 
the subsequent Cycles 2, 3 and 4, which are pipe- 
lined. The NA# input is asserted at the appropriate 
time to select address pipelining for Cycles 2, 3 and 
4. 

Once a bus cycle is in progress and the current ad- 
dress has been valid for one entire bus state, the 
NA# input is sampled at the end of every phase one 
until the bus cycle is acknowledged. Sampling be- 
gins in T2 during Cycle 1 in Figure 5.10. Once NA# 
is sampled active during the current cycle, the 
386 SX Microprocessor is free to drive a new ad- 
dress and bus cycle definition on the bus as early as 
the next bus state. In Figure 5.10 Cycle 1 for exam- 
ple, the next address is driven during state T2P. 
Thus Cycle 1 makes the transition to pipelined ad- 
dress timing, since it begins with TI but ends with 
T2P. Because the address for Cycle 2 is available 
before Cycle 2 begins. Cycle 2 is called a pipelined 


bus cycle, and it begins with TIP. Cycle 2 begins as 
soon as READY# asserted terminates Cycle 1. 

Examples of transition bus cycles are Figure 5.10 
Cycle 1 and Figure 5.9 Cycle 2. Figure 5.10 shows 
transition during the very first cycle after an idle bus 
state, which Is the fastest possible transition into ad- 
dress pipelining. Figure 5.9 Cycle 2 shows a tran- 
sition cycle occurring during a burst of bus cycles. In 
any case, a transition cycle is the same whenever it 
occurs: it consists at least of TI, T2 (NA# is assert- 
ed at that time), and T2P (provided the 386 SX Mi- 
croprocessor has an internal bus request already 
pending, which It almost always has). T2P states are 
repeated if wait states are added to the cycle. 

Note that only three states (TI, T2 and T2P) are 
required in a bus cycle performing a transition from 
non-pipelined address into pipelined address timing, 
for example Figure 5.10 Cycle 1. Figure 5.10 Cycles 
2, 3 and 4 show that address pipelining can be main- 
tained with two-state bus cycles consisting only of 
TIP and T2P. 

Once a pipelined bus cycle is In progress, pipelined 
timing is maintained for the next cycle by asserting 
NA# and detecting that the 386 SX Microprocessor 
enters T2P during the current bus cycle. The current 
bus cycle must end in state T2P for pipelining to be 
maintained in the next cycle. T2P is identified by the 
assertion of ADS#. Figures 5.9 and 5.10 however, 
each show pipelining ending after Cycle 4 because 
Cycle 4 ends in T2I. This indicates the 386 SX Micro- 
processor didn’t have an internal bus request prior 
to the acknowledgement of Cycle 4. If a cycle ends 
with a T2 or T2I, the next cycle will not be pipelined. 

Realistically, address pipelining is almost always 
maintained as long as NA# is sampled asserted. 
This Is so because In the absence of any other re- 
quest, a code prefetch request is always internally 
pending until the instruction decoder and code pre- 
fetch queue are completely full. Therefore, address 
pipelining is maintained for long bursts of bus cycles, 
if the bus is available (i.e., HOLD inactive) and NA# 
Is sampled active in each of the bus cycles. 
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INTERRUPT ACKNOWLEDGE (INTA) CYCLES 

In response to an interrupt request on the INTR in- 
put when interrupts are enabled, the 386 SX Micro- 
processor performs two interrupt acknowledge cy- 
cles. These bus cycles are similar to read cycles in 
that bus definition signals define the type of bus ac- 
tivity taking place, and each cycle continues until ac- 
knowledged by READY# sampled active. 

The state of A 2 distinguishes the first and second 
internjpt acknowledge cycles. The byte address 
driven during the first interrupt acknowledge cycle is 
4 (A 23 -A 3 , Ai, BLE# LOW, A 2 and BHE# HIGH). 
The byte address driven during the second interrupt 
acknowledge cycle is 0 (A 23 -A 1 , BLE# LOW, and 
BHE# HIGH). 


The LOCK# output Is asserted from the beginning 
of the first interrupt acknowledge cycle until the end 
of the second interrupt acknowledge cycle. Four idle 
bus states, Tj, are Inserted by the 386 SX Microproc- 
essor between the two Interrupt acknowledge cycles 
for compatibility with spec TRHRL of the 8259A In- 
terrupt Controller. 

During both interrupt acknowledge cycles, D 15 -D 0 
float. No data is read at the end of the first interrupt 
acknowledge cycle. At the end of the second Inter- 
rupt acknowledge cycle, the 386 SX Microprocessor 
will read an external interrupt vector from D 7 -D 0 of 
the data bus. The vector Indicates the specific Inter- 
rupt number (from 0-255) requiring service. 
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Interrupt Vector (0-255) is read on D0-D7 at end of second interrupt Acknowledge bus cycle. 

Because each Interrupt Acknowledge bus cycle is followed by idle bus states, asserting NA# has no practical effect. 
Choose the approach which is simplest for your system hardware design. 


Figure 5.13. Interrupt Acknowledge Cycles 
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HALT INDICATION CYCLE 

The execution unit halts as a result of executing a 
HLT instruction. Signaling its entrance into the halt 
state, a halt Indication cycle is performed. The halt 
indication cycle is identified by the state of the bus 


definition signals shown on page 40, Bus Cycle 
Definition Signals, and an address of 2. The halt 
indication cycle must be acknowledged by READY# 
asserted. A halted 386 SX Microprocessor resumes 
execution when INTR (If Interrupts are enabled), NMI 
or RESET Is asserted. 


CLK2 
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BHEjj^, Al.r 
M/IO#, W/R# L 
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Figure 5.14. Example Halt Indication Cycle from Non-Pipelined Cycle 
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SHUTDOWN INDICATION CYCLE 

The 386 SX Microprocessor shuts down as a result 
of a protection fault while attempting to process a 
double fault. Signaling its entrance into the shut- 
down state, a shutdown indication cycle Is per- 
formed. The shutdown indication cycle is identified 
by the state of the bus definition signals shown in 
Bus Cycle Definition Signals and an address of 0. 
The shutdown Indication cycle must be acknowl- 
edged by READY# asserted. A shutdown 386 SX 
Microprocessor resumes execution when NMI or 
RESET is asserted. 


ENTERING AND EXITING HOLD 
ACKNOWLEDGE 

The bus hold acknowledge state, Th, is entered in 
response to the HOLD input being asserted. In the 
bus hold acknowledge state, the 386 SX Microproc- 
essor floats all outputs or bidirectional signals, ex- 
cept for HLDA. HLDA is asserted as long as the 
386 SX Microprocessor remains in the bus hold ac- 
knowledge state. In the bus hold acknowledge state, 
all Inputs except HOLD and RESET are ignored. 
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Figure 5.15. Example Shutdown Indication Cycle from Non-Pipelined Cycle 
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Th may be entered from a bus idle state as in Figure 
5.16 or after the acknowledgement of the current 
physical bus cycle if the LOCK# signal is not assert- 
ed, as in Figures 5.17 and 5.18. 

Th is exited in response to the HOLD input being 
negated. The following state will be Tj as In Figure 
5.16 if no bus request is pending. The following bus 
state will be T1 if a bus request is internally pending, 
as in Figures 5.17 and 5.18. Th is exited in response 
to RESET being asserted. 

If a rising edge occurs on the edge-triggered NMI 
input while in Th, the event is remembered as a non- 
maskable interrupt 2 and is serviced when Th is exit- 
ed unless the 386 SX Microprocessor is reset before 
Th is exited. 

RESET DURING HOLD ACKNOWLEDGE 

RESET being asserted takes priority over HOLD be- 
ing asserted. If RESET is asserted while HOLD re- 


mains asserted, the 386 SX Microprocessor drives 
its pins to defined states during reset, as in Table 
5.5 Pin State During Reset, and performs internal 
reset activity as usual. 

If HOLD remains asserted when RESET Is Inactive, 
the 386 SX Microprocessor enters the hold acknowl- 
edge state before performing Its first bus cycle, pro- 
vided HOLD Is still asserted when the 386 SX Micro- 
processor would otherwise perform its first bus cy- 
cle. 


BUS ACTIVITY DURING AND FOLLOWING 
RESET 

RESET is the highest priority Input signal, capable of 
interrupting any processor activity when it is assert- 
ed. A bus cycle in progress can be aborted at any 
stage, or idle states or bus hold acknowledge states 
discontinued so that the reset state Is established. 
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NOTE: 

For maximum design flexibility the 386 tm sX CPU has no internal pullup resistors on its outputs. Your design may require 
an external pullup on ADS# and other outputs to keep them negated during float periods. 


Figure 5.16. Requesting Hold from Idle Bus 
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NOTE: 

HOLD is a synchronous input and can be asserted at any CLK2 edge, provided setup and hold (t 23 and t 24 ) require- 
ments are met. This waveform is useful for determining Hold Acknowledge latency. 


Figure 5.17. Hequesting Hoid from Active Bus (NA# Inactive) 
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RESET should remain asserted for at least 15 CLK2 
periods to ensure it is recognized throughout the 
386 SX Microprocessor, and at least 80 CLK2 peri- 
ods if self-test is going to be requested at the falling 
edge. RESET asserted pulses less than 15 CLK2 
periods may not be recognized. RESET pulses less 
than 80 CLK2 periods followed by a self-test may 
cause the self-test to report a failure when no true 
failure exists. 

Provided the RESET falling edge meets setup and 
hold times t 25 and tae. the internal processor clock 
phase is defined at that time as illustrated by Figure 
5.19 and Figure 7.7. 


A self-test may be requested at the time RESET 
goes inactive by having the BUSY # Input at a LOW 
level as shown In Figure 5.19. The self-test requires 
approximately (220 + eo) CLK2 periods to com- 
plete. The self-test duration Is not affected by the 
test results. Even if the self-test indicates a problem, 
the 386 SX Microprocessor attempts to proceed 
with the reset sequence aftenA^ards. 

After the RESET falling edge (and after the self-test 
If it was requested) the 386 SX Microprocessor per- 
forms an internal initialization sequence for approxi- 
mately 350 to 450 CLK2 periods. 
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NOTE: 

HOLD is a synchronous input and can be asserted at any CLK2 edge, provided setup and hold (t23 and t24) require- 
ments are met. This waveform is useful for determining Hold Acknowledge latency. 


Figure 5.18. Requesting Hold from Idle Bus (NA# active) 
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NOTES: 

1. BUSY# should be held stable for 8 CLK2 periods before and after the CLK2 period in which RESET falling edge 
occurs. 

2. If self-test is requested the outputs remain in their reset state as shown here. 


Figure 5.19. Bus Activity from Reset Untii First Code Fetch 
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5.5 Self-test Signature 

Upon completion of self-test (if self-test was re- 
quested by driving BUSY # LOW at the falling edge 
of RESET) the EAX register will contain a signature 
of OOOOOOOOH indicating the 386 SX Microprocessor 
passed its self-test of microcode and major PLA 
contents with no problems detected. The passing 
signature in EAX, OOOOOOOOH, applies to all revision 
levels. Any non-zero signature indicates the unit is 
faulty. 

5.6 Component and Revision 
Identifiers 

To assist users, the 386 SX Microprocessor after 
reset holds a component Identifier and revision iden- 
tifier in its DX register. The upper 8 bits of DX hold 
23H as identification of the 386 SX Microprocessor 
(the lower nibble, 03H, refers to the Intel386 DX Ar- 
chitecture. The upper nibble, 02H, refers to the sec- 
ond member of the Intel386 DX Family). The lower 8 
bits of DX hold an 8-bit unsigned binary number re- 
lated to the component revision level. The revision 
identifier will, in general, chronologically track those 
component steppings which are intended to have 
certain improvements or distinction from previous 
steppings. The 386 SX Microprocessor revision 
identifier will track that of the 386 DX CPU where 
possible. 

The revision identifier is intended to assist users to a 
practical extent. However, the revision identifier val- 
ue is not guaranteed to change with every stepping 
revision, or to follow a completely uniform numerical 
sequence, depending on the type or intention of re- 
vision, or manufacturing materials required to be 
changed. Intel has sole discretion over these char- 
acteristics of the component. 


Table 5.7. Component and 
Revision Identifier History 


Stepping 

Revision Identifier 

AO 

04H 

B 

05H 

C 

08H 


5.7 Coprocessor Interfacing 

The 386 SX Microprocessor provides an automatic 
Interface for the Intel 387 SX numeric floating-point 
coprocessor. The 387 SX coprocessor uses an I/O 
mapped interface driven automatically by the 386 
SX Microprocessor and assisted by three dedicated 
signals; BUSY#, ERROR# and PEREQ. 

As the 386 SX Microprocessor begins supporting a 
coprocessor instruction, it tests the BUSY# and ER- 
ROR# signals to determine if the coprocessor can 
accept its next instruction. Thus, the BUSY# and 
ERROR# Inputs eliminate the need for any ‘pre- 


amble’ bus cycles for communication between proc- 
essor and coprocessor. The 387tm sX can be given 
its command opcode immediately. The dedicated 
signals provide instruction synchronization, and 
eliminate the need of using the WAIT opcode (9BH) 
for 387TM SX instruction synchronization (the WAIT 
opcode was required when the 8086 or 8088 was 
used with the 8087 coprocessor). 

Custom coprocessors can be Included in 386 SX Mi- 
croprocessor based systems by memory-mapped or 
I/O-mapped interfaces. Such coprocessor interfac- 
es allow a completely custom protocol, and are not 
limited to a set of coprocessor protocol ‘primitives'. 
Instead, memory-mapped or I/O-mapped interfaces 
may use ail applicable instructions for high-speed 
coprocessor communication. The BUSY# and ER- 
ROR# Inputs of the 386 SX Microprocessor may 
also be used for the custom coprocessor interface, if 
such hardware assist is desired. These signals can 
be tested by the WAIT opcode (9BH). The WAIT in- 
struction will wait until the BUSY# Input is inactive 
(Interruptable by an NMI or enabled INTR input), but 
generates an exception 16 fault If the ERROR# pin 
is active when the BUSY# goes (or Is) inactive. If 
the custom coprocessor interface is memory- 
mapped, protection of the addresses used for the 
interface can be provided with the 386 SX CPU’s on- 
chip paging or segmentation mechanisms. If the 
custom interface is I/O-mapped, protection of the 
interface can be provided with the lOPL (I/O Privi- 
lege Level) mechanism. 

The 387TM sX numeric coprocessor interface is I/O 
mapped as shown In Table 5.8. Note that the 
387TM SX coprocessor interface addresses are be- 
yond the OH-OFFFFH range for programmed I/O. 
When the 386 SX Microprocessor supports’ the 
387TM SX coprocessor, the 386 SX Microprocessor 
automatically generates bus cycles to the coproces- 
sor Interface addresses. 


Table 5.8. Numeric Coprocessor Port Addresses 


Address in 386tm sX 
CPU I/O Space 

387TM SX Coprocessor 
Register 

8000F8H 

8000FCH/8000FEH* 

Opcode Register 

Operand Register 


•Generated as 2nd bus cycle during Dword transfer. 


To correctly map the 387 tm sx registers to the ap- 
propriate I/O addresses, connect the CM DO and 
CMD1 lines of the 387tm sX as listed In Table 5.9. 

Table 5.9. Connections for CMDO 
and CMD1 Inputs for the 387 tm sx 


Signal 

Connection 

CMDO 

CMD1 

Connect directly 
to 386TM SX CPU A2 signal 
Connect to ground. 
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Software Testing for Coprocessor Presence 

When software is used to test for coprocessor 
(387 SX) presence, it should use only the following 
coprocessor opcodes: FINIT, FNINIT, FSTCW mem, 
FSTSW mem and FSTSW AX. To use other coproc- 
essor opcodes when a coprocessor is known to be 
not present, first set EM = 1 in the 386 SX CPU’s 
CRO register. 


6.0 PACKAGE THERMAL 
SPECIFICATIONS 

The 386 SX Microprocessor is specified for opera- 
tion when case temperature is within the range of 
0°C-85‘’C. The case temperature may be measured 
In any environment, to determine whether the 
386 SX Microprocessor is within specified operating 
range. The case temperature should be measured at 
the center of the top surface opposite the pins. 

The ambient temperature is guaranteed as long as 
Tc is not violated. The ambient temperature can be 
calculated from the Ojc and 0ja from the following 
equations: 

Tj = To + P*»jc 

Ta = Tj - P*e,a 

Tc = Tq + ^jcJ 

Values for 0ja and 0jc are given in table 6.1 for the 
100 lead fine pitch. Oja is given at various airflows. 
Table 6.2 shows the maximum Ta allowable (without 
exceeding Tc) at various airflows. Note that Ta can 
K0 Improved further by attaching Tins' or a 'heat 
sink' to the package. 


7.0 ELECTRICAL SPECIFICATIONS 

The following sections describe recommended elec- 
trical connections for the 386 SX Microprocessor, 
and its electrical specifications. 

7.1 Power and Grounding 

The 386 SX Microprocessor is implemented in 
CHMOS III technology and has modest power re- 
quirements. However, its high clock frequency and 
47 output buffers (address, data, control, and HLDA) 
can cause power surges as multiple output buffers 
drive new signal levels simultaneously. For clean on- 
chip power distribution at high frequency, 14 Vcc 
and 18 Vss pins separately feed functional units of 
the 386 SX Microprocessor. 

Power and ground connections must be made to ail 
external Vcc and Vss pins of the 386 SX Microproc- 
essor. On the circuit board, all Vcc pins should be 
connected on a Vcc plane and all Vss pins should 
be connected on a GND plane. 

POWER DECOUPLING RECOMMENDATIONS 

Liberal decoupling capacitors should be placed near 
the 386 SX Microprocessor. The 386 SX Microproc- 
essor driving its 24-bit address bus and 16-blt data 
bus at high frequencies can cause transient power 
surges, particularly when driving large capacitive 
loads. Low Inductance capacitors and Interconnects 
are recommended for best high frequency electrical 
performance. Inductance can be reduced by short- 
ening circuit board traces between the 386 SX Mi- 
croprocessor and decoupling capacitors as much as 
possible. 


Table 6.1. Thermal Resistances (X/Watt) 0jc and ^ja. 


Package 

0jc 

0ja versus Airflow - ft/min (m/sec) 

0 

(0) 

200 

(1.01) 

400 

(2.03) 

600 

(3.04) 

800 

(4.06) 

1000 

(5.07) 

100 Lead 

Fine Pitch 

7 

33 

27 

24 

21 

18 

17 


Table 6.2. Maximum Ta at various airflows. 


Package 

Frequency 

Ta{°C) versus Airflow - ft/mln (m/sec) 

0 

(0) 

200 

(1.01) 

400 

(2.03) 

600 

(3.04) 

800 

(4.06) 

1000 

(5.07) 

100L PQFP 
Fine Pitch 

16 MHz 

49 

58 

62 

66 

70 

71 

20 MHz 

45 

55 

59 

64 

68 

70 


Max. Ta calculated at 5.0V and max Ice- 
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Table 7.1. Recommended Resistor Pull-ups to Vcc 


Pin 

Signal 

Pull-up Value 

Purpose 

16 

ADS# 

20 K-Ohm ± 10% 

Lightly pull ADS# inactive during 

386TM SX CPU hold acknowledge 
states 

26 

LOCK# 

20 K-Ohm ± 10% 

Lightly pull LOCK# inactive during 

386TM SX CPU hold acknowledge 
states 


RESISTOR RECOMMENDATIONS 

The ERROR# and BUSY# inputs have internal pull- 
up resistors of approximately 20 K-Ohms and the 
PEREQ Input has an internal pull-down resistor of 
approximately 20 K-Ohms built into the 386 SX Mi- 
croprocessor to keep these signals inactive when 
the 387 SX Is not present in the system (or tempo- 
rarily removed from its socket). 

In typical designs, the external pull-up resistors 
shown In Table 7.1 are recommended. However, a 
particular design may have reason to adjust the re- 
sistor values recommended here, or alter the use of 
pull-up resistors in other ways. 

OTHER CONNECTION RECOMMENDATIONS 

For reliable operation, always connect unused in- 
puts to an appropriate signal level. N/C pins should 
always remain unconnected. Connection of N/C 
pins to Vcc or Vss will result in component mal- 
function or incompatibility with future steppings 
of the 386 SX Microprocessor. 

Particularly when not using interrupts or bus hold (as 
when first prototyping), prevent any chance of spuri- 
ous activity by connecting these associated inputs to 
GND: 


Pin 

Signal 

40 

INTR 

38 

NMI 

4 

HOLD 


If not using address pipelining, connect pin 6, NA#, 
through a pull-up in the range of 20 K-Ohms to Vcc. 


7.2 Maximum Ratings 


Table 7.2. Maximum Ratings 


Parameter 

Maximum Rating 

Storage temperature 

Case temperature under bias 
Supply voltage with respect 
to Vss 

Voltage on other pins 

-65 “C tolSO^’C 
-65 °C tollO^C 

-.5V to 6.5V 
-.5Vto (Vcc + .5)V 


Table 7.2 gives stress ratings only, and functional 
operation at the maximums is not guaranteed. Func- 
tional operating conditions are given in section 7.3, 
D.C. Specifications, and section 7.4, A.C. Specifi- 
cations. 

Extended exposure to the Maximum Ratings may af- 
fect device reliability. Furthermore, although the 
386 SX Microprocessor contains protective circuitry 
to resist damage from static electric discharge, al- 
ways take precautions to avoid high static voltages 
or electric fields. 
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7.3 D.C. Specifications 

Functional operating range: Vcc = 5V±10%; Tcase= 0°C to 85°C 


Table 7.3. D.C. Characteristics 


Symbol 

Parameter 

Min 

Max 

Unit 

Notes 

V|L 

Input LOW Voltage 

-0.3 

+ 0.8 

V 


V|H 

Input HIGH Voltage 

2.0 

Vcc + 0.3 

V 


V|LC 

CLK2 Input LOW Voltage 

-0.3 

+ 0.8 

V 


V|HC 

CLK2 Input HIGH Voltage 



D 


VoL 

Output LOW Voltage 

IOL“4mA: A23 -Ai,Di5-Do 

loL == 5mA: BHE # ,BLE # ,W/R # . 

D/C#, M/IO#, LOCK#, 
ADS#,HLDA 


. 0.45 
' 0.45 



VoH 

Output high voltage < 

lOH = “ 1 nnA: A23“Ai 

IOH=~0-2mA: A23-At,^ll^^P5 

IOH= -0.9mA: BHE#,BL|i||if#fl#, 

IOH= -0.18 mA: 

r2.4 4 

VCC-9.S 

2.4%#' 

A 




Ili 

Input leakage currenfSl 

(for all pins excepSt , - 

PEREQ, BUSY# and ERRpft'*) ’ 

m 


jutA 

o 

o 

> 

VI 

z 

> 

V 

l|H 

Input Leakage Current%F;^'^ 

(PEREQ pin) 




V|h = 2.4V, Notel 

l|L 

Input Leakage.Qutf^ 

(BUSY# andle'^R# pins) 


-400 

juiA 

V|L= 0.45V, Note 2 

•lo 

Output leakai^ current 


±15 

]ulA 

0.45 V ^VouT^ Vcc 


Supply Current 

CLK2 = 32 MHz 

CLK2 = 40 MHz 


275 

305 

mA 

mA 



Input capacitance 



la 


Gout 

Output or I/O capacitance 


12 

PF 


CcLK 

CLK2 Capacitance 


20 

PF 

Fc=1 MHz, Note 4 


Tested at the minimuiT! operating frequency of the part. 


NOTES: 

1 . PEREQ input has an internal pull-down resistor. 

2. BUSY# and ERROR# inputs each have an internal pull-up resistor. 

3. Icc max measurement at worst case load, frequency, Vcc and temperature. 

4. Not 100% tested. 
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7.4 A.C. Specifications 

The A.C. specifications given in Table 7.4 consist of 
output delays, input setup requirements and input 
hold requirements. All A.C. specifications are rela- 
tive to the CLK2 rising edge crossing the 2.0V level. 

A.C. spec measurement Is defined by Figure 7.1. In- 
puts must be driven to the voltage levels indicated 
by Figure 7.1 when A.C. specifications are mea- 
sured. Output delays are specified with minimum 
and maximum limits measured as shown. The mini- 
mum delay times are hold times provided to external 
circuitry. Input setup and hold times are specified 


as minimums, defining the smallest acceptable sam- 
pling window. Within the sampling window, a syn- 
chronous input signal must be stable for correct op- 
eration. 

Outputs NA#, W/R#, D/C#, M/IO#, LOCK#, 
BHE#, BLE#, A 23 -A 1 and HLDA only change at 
the beginning of phase one. D 15 -D 0 (write cycles) 
only change at the beginning of phase two. The 
READY#, HOLD, BUSY#, ERROR#, PEREQ and 
Di 5 ~Do (read cycles) inputs are sampled at the be- 
ginning of phase one. The NA#, INTR and NMI In- 
puts are sampled at the beginning of phase two. 



Figure 7.1. Drive Levels and Measurement Points for A.C. Specifications 
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A.C. SPECIFICATONS TABLES 

Functional operating range: Vcc = 5V±10%; Tcase= 0 ‘*C to 85®C 


Table 7.4. A.C. Characteristics at 16 MHz 


Symbol 

Parameter 

Min 

Max 

Unit 

Figure 

Notes 


Operating frequency 

4 , 

16 

MHz 


Half CLK2 Freq 

ti 

CLK2 period 

31 

125 

ns 

7.3 


t 2 a 

CLK2 HIGH time 

9 


ns 

7.3 

at 2V(3) 

t 2 b 

CLK2 HIGH time 

5 


ns 

7.3 

at(Vcc-0.8)V(3) 

t3a 

CLK2 LOW time 

9 


ns 

7.3 

at2V(3) 

t3b 

CLK2 LOW time 

7 


ns 

7.3 

a|p.8V(3) 

t4 

CLK2 fall time 


8 

ns 

7.3 

*^|p6-0.8)V to 0.8V(3) 

ts 

CLK2 rise time 


8 

ns* 

7.3 . 

^?^^e.8Vto(Vcc-0.8)V(3) 

te 

A 23 “Ai valid delay 

4 

m 

IBSI 

7.5 

' Cl=120pF(4) 

t7 

A 23 -A 1 float delay 

4 

mEM 

— 


(Note 1) 

te 

BHE#,BLE#,LOCK# 
valid delay 

■ 


HH 

^mmmm 

BiH 

Cl=75pF(4) 

tg 

BHE#.BLE#,LOCK# 
float delay 


H 



(Note 1 ) 

tio 

W/R#,M/IO#,D/C#,,^ 
ADS# valid delay 

mm 

■B 

s M 

— 

m 

Cl = 75pF(4) 


W/R#, M/IO#, 

ADS# float ‘ 

.K 6 

. ' 

ns 

m 

(Note 1) 


D 15 -D 0 Write t^ta 

Valid Delay " 


40 

ns 

w 

Cl=120pF(4) 


D-i s-Dq Write Datfi, . 

Float Delay VC ^ 




7.6 

(Note 1) 

tl4 

HLDA vali^jyay 

6 

33 

ns 

7.5 

Cl = 75pF(4) 

tl5 

NA# setppjflffe 

5 


ns 

IQgH 


tl 6 

NA# hdid time 



ns 

7A 


tl9 

READY# setup time 

19 


ns 

7.4 


t 20 

READY# hold time 

4 


ns 

' 

7.4 


t 21 

D 15 -D 0 Read Data 
setup time 

9 



HI 


t 22 

D 15 -D 0 Read Data 
hold time 

6 


ns 

H 


t23 




ns 

7.4 


t24 


5 


ns 

7.4 


t25 




ns 

7.7 


t26 

RESET hold time 

4 


ns 

7.7 
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Functional operating range: Vcc = 5V± 10%; Tcase^O^C to SS^C 

Table 7.4. A.C. Characteristics at 16 MHz (Continued) 


Symbol 

Parameter 

Min 

Max 

Unit 

Figure 

Notes 

^27 

NMI, INTR setup time 

16 


ns 

7.4 

(Note 2) 

^28 

NMI, INTR hold time 

16 


ns 

7.4 

(Note 2) 

^29 

PEREQ, ERROR#, BUSY# 
setup time 

16 


ns 

7.4 

(Note 2) 

^30 

PEREQ, ERROR#, BUSY# 
hold time 

5 


ns 

7.4 

(Note 2) 


Table 7.5. A.C. Characteristics at 20 MHz 


Symbol 

Parameter 

Min 

Max 

Unit 

Figure 

Notes 


Operating Frequency 

4 

20 

MHz 


Half CLK2 Frequency 

t1 

CLK2 period 

25 

125 

ns 

wm 


t2a 

CLK2 HIGH time 

8 


ns 

7.3 

at 2V (Note 3) 

t2b 

CLK2 HIGH time 

5 


ns 

Bn 


t3a 

CLK2 LOW time 

8 

. ' 

ns 

Bn 


t3b 

CLK2 LOW time 

6 : 



1091 


t4 

CLK2 fall time 

m 


'\ns' 

7.3 


t5 

CLK2 rise time 

n 



7.3 

0.8V to (Vcc - 0-8V) (Note 3) 

t6 

A23-A1 valid delay 


^^SO; 

ns 

7.5 

Cl = 120pF(Note4) 

t7 

A23-A1 float delay J V' 


iz'' 

w 

ns 

7.6 

(Notel) 

t8 

BHE#, BLE#. LOCK# valiif'delay , , 



ns 

7.5 

Cl = 75 pF (Note 4) 

t9 

BHE#, BLE#, LOCK# floS delay \ 


32 

ns 

7.6 

(Note 1 ) 

tlOa 

M/IO#, D/C# valid delay , 

6 

28 

ns 

7.5 

Cl = 75 pF (Note 4) 

tlOb 

W/R#, ADS# valid delay ^ ' 

6 

26 

ns 

7.5 

Cl = 75 pF (Note 4) 

til 

W/R#, M/IO#, D/C#^OS# float delay 

6 

30 

ns 

7.6 

(Note 1 ) 

t12 

D1 5-DO Write Data Valid Delay 

4 

38 

ns 

7.5 

Cl = 120 pF 

t13 

D15-D0 Write Data Float Delay 

4, 

27 

ns 

7.6 

(Note 1 ) 

t14 

HLDA valid delay 

4 

28 

ns 

7.5 

Cl = 75 pF (Note 4) 

t15 

NA# setup time 

5 


ns 

7.4 


t16 

NA# hold time 

12 


ns 

7.4 
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Table 7.5. A.C. Characteristics at 20 MHz (Continued) 


Symbol 

Parameter 




Figure 

Notes 

t19 

READY# setup time 

12 



. 


BBH 


t20 

READY# hold time ^ 


■HH 


HEQH 


t21 

D1 5-DO Read Data setup time 


WM 




t22 



n 


7.4 


t23 





^EBH 


t24 

HOLD hold time 



ns 



t25 

RESET setup time v - a 

■B 



7.7 



RESET hold time,. 

' 4 


IBSIIi 

7.7 


t27' 

NMI. INTR setup time c;;\: ' 



ns 

7.4 

(Note 2) 

t28 

NMUNTR hold time v? 

16 


ns 

7.4 

(Note 2) 

t29 

PEREQ, ERROFJ#v8USY# setup time 

14 


ns 

7.4 

(Note 2) 

t30 

PEREQ, ERRC^I^BUSY# hoidtime 

5 


ns 

7.4 

(Note 2) 


NOTES: 

1. Float condition occurs when maximum output current becomes less than Ilo in magnitude. Float delay is not 100% 
tested. 

2: These inputs are allowed to be asynchronous lO CLK2. The setup and hold specifications are given fqr testing purposes, 
to assure recognition within a specific CLK2 period. 

3: These are not tested. They are guaranteed by design characterization. 

4: Tested with Cl set at 50 pf and derated to support the indicated distributed capacitive load. See Figures 7.8 though 7.10 
for the capacitive derating curve. 

A.C. TEST LOADS A.C. TIMING WAVEFORMS 


Figure 7.2. A.C. Test Loads Figure 7.3. CLK2 Waveform 



386''’^ SX CPU ^ 


OUTPUT '' I 

i c, 


240187-36 
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READY# [ 




BUSY#, p 
ERROR# 
PEREQ 




BHE#,BLE#. 
LOCK# L 


W/R#.M/IO#. r 
D/C#.ADS# L 


A1-A23 


D0-D15 

(OUTPUT) 
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CLK2 

BHE#,BLE#. 

LOCK# 

W/R#.M/IO#, 
D/C#, ADS# 

A1-A23 

D0-D15 

HLDA 



Figure 7.6. A.C. Timing Waveforms— Output Float Delay and HLDA Valid Delay Timing 



Figure 7.7. A.C. Timing Waveforms— RESET Setup and Hold Timing and Internal Phase 
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Figure 7.8. Typical Output Valid Delay versus Figure 7.9. Typical Output Valid Delay versus 

Load Capacitance at Maximum Operating Load Capacitance at Maximum Operating 

Temperature (Cl =120 pF) Temperature (Cl = 75 pF) 



Figure 7.10. Typical Output Valid Delay versus Temperature 

Load Capacitance at Maximum Operating 
Temperature (Cl = 50 pF) 



Figure 7.12. Typical Icc vs Frequency 
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Figure 7.14. Preliminary ICETM-sse SX Emulator User Cable with OIB and PQFP Adapter 
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7.5 Designing for ICEtm. 386 SX 
Emulator (Advanced Data) 

The 386 SX CPU’s in-circuit emulator product is the 
ICEtm. 386 SX emulator. Use of the emulator re- 
quires the target system to provide a socket that is 
compatible with the ICE-386 SX emulator. The ICE- 
386 SX offers a 1 0O-pin fine pitch flat-pack probe for 
emulating user systems. The 100-pin fine pitch flat- 
pack probe requires a socket, called the 100-pin 
PQFP, which is available from 3M text-tool (part 
number 2-0100-07243-000). The ICE-386 SX emula- 
tor probe attaches to the target system via an adapt- 
er which replaces the 386 SX CPU component in the 
target system. Because of the high operating fre- 
quency of 386 SX CPU systems and of the 
ICE-386 SX emulator, there is no buffering between 
the 386 SX CPU emulation processor in the ICE-386 
SX emulator probe and the target system. A direct 
result of the non-buffered interconnect is that the 
ICE-386 SX emulator shares the address and data 
bus with the user’s system, and the RESET signal is 
intercepted by the ICE emulator hardware. In order 
for the ICE-386 SX emulator to be functional in the 
user’s system without the Optional Isolation Board 
(01 B) the designer must be aware of the following 
conditions: 

1 . The bus controller must only enable data trans- 
ceivers onto the data bus during valid read cycles 
of the 386 SX CPU, other local devices or other 
bus masters. 

2. Before another bus master drives the local proc- 
essor address bus, the other master must gain 
control of the address bus by asserting HOLD and 
receiving the HLDA response. 

3. The emulation processor receives the RESET sig- 
nal 2 or 4 CLK2 cycles later than an 386 SX CPU 
would, and responds to RESET later. Correct 
phase of the response is guaranteed. 

In addition to the above considerations, the 
ICE-386 SX emulator processor module has several 
electrical and mechanical characteristics that should 
be taken Into consideration when designing the 386 
SX CPU system. 

Capacitive Loading: ICE-386 SX adds up to 27 pP 
to each 386 SX CPU signal. 

Drive Requirements: ICE-386 SX adds one FAST 
TTL load on the CLK2, control, address, and data 
lines. These loads are within the processor module 
and are driven by the 386 SX CPU emulation proces- 
sor, which has standard drive and loading capability 
listed In Tables 7.3 and 7.4. 

Power Requirements: For noise immunity and 
CMOS latch-up protection the ICE-386 SX emulator 
processor module is powered by the user system. 


The circuitry on the processor module draws up to 
1.4A including the maximum 386 SX CPU Ice ^rom 
the user 386 SX CPU socket. 

386 SX CPU Location and Orientation: The 

ICE-386 SX emulator processor module may require 
lateral clearance. Figure 7.12 shows the clearance 
requirements of the IMP adapter. The optional Isola- 
tion board (OIB), which provides extra electrical buff- 
ering and has the same lateral clearance require- 
ments as Figure 7.13, adds an additional 0.5 Inches 
to the vertical clearance requirement. This is illus- 
trated in Figure 7.14. 

Optional Isolation Board (OIB) and the CLK2 
speed reduction: Due to the unbuffered probe de- 
sign, the ICE-386 SX emulator is susceptible to er- 
rors on the user’s bus. The OIB allows the ICE-386 
SX emulator to function in user systems with faults 
(shorted signals, etc.). After electrical verification the 
OIB may be removed. When the OIB Is installed, the 
user system must have a maximum CLK2 frequency 
of 20 MHz. 


8.0 DIFFERENCES BETWEEN THE 
386 SX CPU AND THE 386 DX 
CPU 

The following are the major differences between the 

386 SX CPU and the 386 DX CPU: 

1 . The 386 SX CPU generates byte selects on 
BHE# and BLE# (like the 8086 and 80286) to 
distinguish the upper and lower bytes on its 1 6-bit 
data bus. The 386 DX CPU uses four byte selects, 
BE0#-BE3#, to distinguish between the different 
bytes on its 32-bit bus. 

2. The 386 SX CPU has no bus sizing option. The 
386 DX CPU can select between either a 32-bit 
bus or a 16-blt bus by use of the BS16# input. 
The 386 SX CPU has a 16-blt bus size. 

3. The NA# pin operation in the 386 SX CPU is 
identical to that of the NA# pin on the 386 DX 
CPU with one exception: the 386 DX CPU NA# 
pin cannot be activated on 16-bit bus cycles 
(where BS16# Is LOW in the 386 DX CPU case), 
whereas NA# can be activated on any 386 SX 
CPU bus cycle. 

4. The contents of all 386 SX CPU registers at reset 
are identical to the contents of the 386 DX CPU 
registers at reset, except the DX register. The DX 
register contains a component-stepping Identifier 
at reset, i.e. 

in 386 DX CPU, DH = 3 indicates 386 DX CPU 
after reset 

DL = revision number; 

in 386 SX CPU, DH = 23H indicates 386 SX 
after reset CPU 

DL = revision number. 
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5. The 386 DX CPU uses A31 and M/IO# as selects 
for the numerics coprocessor. The 386 SX CPU 
uses A23 and M/IO# as selects. 

6. The 386 DX CPU prefetch unit fetches code in 
four-byte units. The 386 SX CPU prefetch unit 
reads two bytes as one unit (like the 80286). In 
BS1 6 mode, the 386 DX CPU takes two consecu- 
tive bus cycles to complete a prefetch request. If 
there is a data read or write request after the pre- 
fetch starts, the 386 DX CPU will fetch all four 
bytes before addressing the new request. 

7. Both 386 DX CPU and 386 SX CPU have the 
same logical address space. The only difference 
is that the 386 DX CPU has a 32-bit physical ad- 
dress space and the 386 SX CPU has a 24-blt 
physical address space. The 386 SX CPU has a 
physical memory address space of up to 16 
megabytes instead of the 4 gigabytes available to 
the 386 DX CPU. Therefore, in 386 SX CPU sys- 
tems, the operating system must be aware of this 
physical memory limit and should allocate memo- 
ry for applications programs within this limit. If a 
386 DX CPU system uses only the lower 16 
megabytes of physical address, then there will be 
no extra effort required to migrate 386 DX CPU 
software to the 386 SX CPU. Any application 
which uses more than 16 megabytes of memory 
can run on the 386 SX CPU if the operating sys- 
tem utilizes the 386 SX CPU’s paging mechanism. 
In spite of this difference in physical address 
space, the 386 SX CPU and 386 DX CPU can run 
the same operating systems and applications 
within their respective physical memory con- 
straints. 


9.0 INSTRUCTION SET 

This section describes the instruction set Table 9=1 
lists all instructions along with Instruction encoding 
diagrams and clock counts. Further details of the 
Instruction encoding are then provided in the follow- 
ing sections, which completely describe the encod- 
ing structure and the definition of all fields occurring 
within instructions. 


9.1 386 SX CPU Instruction Encoding 
and Clock Count Summary 

To calculate elapsed time for an instruction, multiply 
the instruction clock count, as listed In Table 9.1 be- 


low, by the processor clock period (e.g. 62.5 ns for 
an 386 SX Microprocessor operating at 16 MHz). 
The actual clock count of an 386 SX Microprocessor 
program w|ll average 5% more than the calculated 
clock count due to Instruction sequences which exe- 
cute faster than they can be fetched from memory. 

Instruction Clock Count Assumptions 

1 . The Instruction has been prefetched, decoded, 
and is ready for execution. 

2. Bus cycles do not require wait states. 

3. There are no local bus HOLD requests delaying 
processor access to the bus. 

4. No exceptions are detected during Instruction ex- 
ecution. 

5. If ah effective address is calculated. It does not 
use two general register components. One regis- 
ter, scaling and displacement can be used within 
the clock counts shown. However, if the effective 
address calculation uses two general register 
components, add 1 clock to the clock count 
shown. 

Instruction Clock Count Notation 

1 . If two clock counts are given, the smaller refers to 
a register operand and the larger refers to a mem- 
ory operand. 

2. n = number of times repeated. 

3. m = number of components in the next instruc- 
tion executed, where the entire displacement (if 
any) counts as one component, the entire imme- 
diate data (if any) counts as one component, and 
all other bytes of the Instruction and preflx(es) 
each count as one component. 

Misaligned or 32-Bit Operand Accesses 

— if Instructions accesses a misaligned 16-blt oper- 
and or 32-bit operand on even address add: 

2* clocks for read or write 
4** clocks for read and write 

— If instructions accesses a 32-bit operand on odd 
address add: 

4* clocks for read or write 
8** clocks for read and write 

Wait States 

Wait states add 1 clock per wait state to instruction 
execution for each data access. 
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GENERAL DATA TRANSFER 
MOV = Move: 

Register to Register/Memory 

Register/Memory to Register 
Immediate to Register/Memory 


Table 9-1. Instruction Set Clock Count Summary 


1 0 0 0 1 0 0 w I mod reg r/m | 
1 0 0 0 1 0 1 w I mod reg r/^ 


1 1 0 0 0 1 1 w mod 0 0 0 r/m immediate data 


CLOCK COUNT 
Real 

Address Protected 


Real 

Address Protected 
Mode or Virtual 

Virtual Address 

8086 Mode 

Mode 


Immediate to Register (short form) 


I 1 0 1 1 w reg I immediate data 


Memory to Accumulator (short form) 


1010000W I full displacement 


Accumulator to Memory (short form) 


1010001W I full displacement 


Register Memory to Segment Register 


1 0 0 01 1 1 0 I mod sregO r/m | 


Segment Register to Register/Memory 


1 0 0 0 1 1 0 0 I mod sreg3 r/m [ 


MOVSX = Move With Sign Extension 


Register From Register/Memory 


00001111 I 1011111W |m6dreg>;^ r/m | 


MOVZX = Move With Zero Extension 


Register From Register/Memory 


00001111 I 101 VO Tj'V ^ i mod reg f/m | 


Register/Memory 

Register (short form) 

Segment Register (ES, CS, SS or DS) 
(short form) 

Segment Register (ES, CS, SS, DS, 
FS or GS) 


11111111 J mbdTI'O r/m I 


q (TOi0 1 f 1 1 I 1 0 sreg3 0^ O.] 
01.1 0 1 OsO ;| ' imfif^iate d£da ' 


PUSHA = Push All 


Register/Memory 


1 0001 1 1 1 -|mod 0 00 r/m 


Register (short form) , ' . 

Segment Register (ES, CS, SS or DS)"' 
(short form) 

Segment Register (ES, CS, SS or DS), 
FSorGS ^ 

POPA = Pop All 
XCHG = Exchange 


f 01 oil reg I 
1 0 0 0 sreg 2 1 1 1 | 


0 0 0 01 1 1 1 I 1 0 sreg 3 0 01 


Register/Memory With Register 


1 0 0 0 0 1 1 w I mod reg r/m | 


Register With Accumulator (short form) [10 010 reg | 

IN = Input from: 


Clk Count 
Virtual 
8086 Mode 


OUT = Output to: 


1 1 1 0 0 1 0 w I port number 


1 1 1 0 0 1 1 w I port number 


LEA = Load EA to Register 


1 0 0 01 1 01 I mod reg r/m j 
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Table 9-1. Instruction Set Clock Count Summary (Continued) 

I CLOCK COUNT 


INSTRUCTION 


SEGMENT CONTROL 
LDS - Load Pointer to DS 
LES = Load Pointer to ES 


LGS - Load Pointer to GS 

LSS = Load Pointer to SS 

FLAG CONTROL 

CLC = Clear Carry Flag 

CLD = Clear Direction Flag 

CLI = Clear Interrupt Enable Flag 

CLTS = Clear Task Switched Rag 

CMC = Compiement Carry Fiag 

LAKF = Load AH into Fiag 

POPF = Pop Rags 

PUSHF = Push Rags 

SAHF = Store AH into Rags 

STC = Set Carry Rag 

STD = Set Direction Rag 

STI == Set interrupt Enabie Fiag 

ARITHMETIC 


11000101 I mod reg r/m | 
11000100 I mod reg r/m | 


000011 11 I 10110101 

00001 111 I 101 10010 

11111 000 I 
11111100 I 
11111010 I 

00001 1 1 1 I 0000011 0 
11110101 I 
10011111 I 
10011101 I 

1 0 0 1 1 1 0 M 


Real 


Real 


Address 

Protected 

Address 

Protected 

Mode or 

Virtual 

Mode or 

Virtual 

Virtual 

Address 

Virtual 

Address 

8086 

Mode 

Mode 

8086 

Mode 

Mode 


Register to Register 


noyioioi I , 

Memory to Register 0 0 0 0 0 1 "w 

Immediate to Register/Memoiy'^^^^f^ | 1 OOOOOsw 
Immediate to Accumulator (s^q^^rm) [ OOOOOlOw 

ADC = Add With Carry 

Register to Register | 000 1 OOd w 

Register to Memory (ooo 1 OOOw 

Memory to Register | 000 1 00 1 w 

Immediate to Register/Mernory | lOOOOOsw 

Immediate to Accumulator (short form) 

INC = Increment 

Register/ Memory 

Register (short form) 

SUB = Subtract 

Register from Register I 00 1 0 1 Od w 


0 0 0 0 0 1 w I mod reg r/m | 


I lOOOOOsw I mod 000 r/m | immediate data 
rm) I OOOOOlOw I immediate data 


0 0 0 1 0 0 d w I mod reg r/m | 

0 0 0 1 0 0 0 w j mod reg r/riil 

0 0 0 1 0 0 1 w I mod reg r/ftT} 

lOOOOOsw I mod 010 r/m I Immediate data 



0 0 1 0 1 0 d w mod reg r/m 


86 
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Table 9-1. Instruction Set Clock Count Summary (Continued) 


INSTRUCTION 


CLOCK COUNT | 

NOTES 

Real 


Real 


Address 

Protected 

Address 

Protected 

Mode or 

Virtual 

Mode or 

Virtual 

Virtual 

Address 

Virtual 

Address 

8086 

Mode 

8086 

Mode 

Mode 


Mode 


7** 

7** 

b 

h 

6* 

6* 

b 

h 

2/7** 

2/7** 

b 

h 

2 

2 



2 

2 



7 ** 

7 *. 

b 

h 

6* 


b 

h 

2/7** 

; ^■:a/7*'* 

b 

h 





2 .. 

2 



Cv 









2/6 

b 

h 


2 




2 



\ ' 5* 

5* 

b 

h 

6* 

6* 

b 

h 

2/5* 

2/5* 

b 

h 

2 

2 



2/6* 

2/6* 

b 

h 

4 

4 



4 

4 



4 

4 



4 

4 



12-17/15-20* 

12-17/15-20* 

b.d 

d.h 

12-25/15-28* 

12-25/15-28* 

b.d 

d.h 

12-41/17-46* 

12-41/17-46* 

b.d 

d. h 

12-17/15-20* 

12-17/15-20* 

b.d 

d.h 

12-25/15-28* 

12-25/15-28* 

b.d 

d.h 

12-41/17-46* 

12-41/17-46* 

b.d 

d. h 

12-17/15-20* 

12-17/15-20* 

b.d 

d.h 

12-25/15-28* 

12-25/15-28* 

b.d 

d.h 

12-41/17-46* 

12-41/17-46* 

b.d 

d.h 

13-26 

'13-26/14-27 

b.d 

d.h 

13-42 

13-42/16-45 

b. d 

d.h 


ARITHMETIC (Continued) 

Register from Memory 

Memory from Register 

Immediate from Register/Memory 

Immediate from Accumulator (short form) 

5BB = Subtract with Borrow 

Register from Register 

Register from Memory 

Memory from Register 

Immediate from Register/Memory 

Immediate from Accumulator (short form) 

DEC = Decrement 

Register/Memory 

Register (short form) 

CMP = Compare 

Register with Register 

Memory with Register 

Register with Memory 

Immediate with Register/Memory 

Immediate with Accumulator (short form) 

MEG = Change Sign , 

AAA = ASCII Adjust for Add 
AAS = ASCII Adjust for Subtract 
DAA = Decimal Adjust for Add 
DAS = Decimal Adjust for SubtrAei ^ v 
MUL = Multiply (unsigned) { 

Accumulator with Register/Mehtdry 
Multiplier-Byte 
-Word 

-Doubleword 

t MUL = Integer Multiply (signed) 

Accumulator with Register/Memory 
Multiplier-Byte 
-Word 

-Doubleword, 

^Register with Register/Memory 
Multiplier-Byte 
-Word 

-Doubleword 


-Word 

-Doubleword 


I 0 0 1 0 1 0 0 w [mod reg r/m| 
I 0 0 1 0 1 0 1 w [mod reg r/m| 


1 0 0 0 0 0 s w mod 1 0 1 r/m immediate data 


001 0 1 1 Ow 


immediate data 


I 0 0 0 1 1 0 d w |mod reg r/m| 
I 0 0 01 1 0 0 w [mod reg r/^ 


0 0 0 1 1 0 1 w mod r 


lOOOOOsw mod Oil r/m immediate data 


0001 now 


immediate data 


I 1 1 1 1 1 1 1 w [reg 0 01 r/m| 




1 00 1 1 1 Od w 

rriixjii^r r/ml 

1 001 1 1 00> 

m^7eg r/m| ^ ^ 

1 001 ifotw 

mod reg. ' ^ ' r/nrtj ' ' . \' ' ' 

1 toaooo'sw 

mod 1 1 1 irnrpiH^ data 



1 <1011110 W. 

' . imrn^ic^b'daia 

111110 1 't 

tnod 0 1 1 ^ r/ftti 

1 001 ion 4 

'■ > 

1 00 til 1 Tt 

1 00100111 

1 001 011 11 



1 11 1 1 0 1 1 w |mod 1 0 0 r/m| 


1 1 11 1 0 1 1 w |mod 1 0 1 r/m| 


1 00001111 1 10101111 |mod reg r/m| 


r| 0 11 0 1 0 s 1 |mod reg r/m| immediate data 
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Table 9-1. Instruction Set Clock Count Summary (Continued) 


CLOCK COUNT 

NOTES 

Real 


Real 


Address 

Protected 

Address 

Protected 

Mode or 

Virtual 

Mode or 

Virtual 

Virtual 

Address 

Virtual 

Address 

8086 

Mode 

8086 

Mode 

Mode 


Mode 


7** 

7** 

b 

h 

6* 

6* 

b 

h 

2 / 7 * 

2/7** 

b 

h 

2 

2 



2 / 5 * 

2/5* 

b 

h 

2/5* X 

';;2/5* 

b 

h 


2 



2 

2 



7 ** 

7** 

b 

h 

. 6* 

6* 

b 

h 

2 / 7 ** 

2/7** 

b 

h 

2 

2 



2 

2 



7 ** 

7** 

b 

h 

6* 

6* 

b 

h 

2 / 7 ** 

2/7** 

b 

h 

2 

2 



2 / 6 ** 

2/6** 

b 

h 

10* 

10* 

b 

h 

15 

9*/29** 

b 

s/t, h, m 

5 

5* 

b 

h 

7 

7** 

b 

h 

14 

8*/28* 

b 

s/t, h, m 

7* 

7* 

b 

h 

4* 

4* 

' b 

h 

5* 

5* 


h 

5 + 9n** 

5 + 9n** 

b 

h 


INSTRUCTION 


|L0GIC (Continued) 

Register to Memory 
Memory to Register 
Immediate to Register/Memory 
Immediate to Accumulator (Short Form) 

|TEST = And Function to Flags, No Result 

Register/Memory and Register 

Immediate Data and Register/Memory 

Immediate Data and Accumulator 
(Short Form) 

OR = Or 

Register to Register 
Register to Memory 
Memory to Register 
Immediate to Register/Memory 

Immediate to Accumulator (Short Form) 

XOR = Exclusive Or 
Register to Register 

Register to Memory 

Memory to Register ^ 

Immediate to Register/Memory 
Immediate to Accumulator (Short Form) 

NOT = Invert Register/Memory 

STRING MANIPULATION 

CMPS = Compare Byte Word 

INS = Input Byte/Word from 0X Port 

LODS = Load Byte/Word to AL/AX/EAX 

MOVS = Move Byte Word 

OUTS = Output Byte/Word to DX Port 

SCAS = Scan Byte Word 

STOS = Store Byte/Word from 
AL/ AX/EX 

XLAT = Translate String 

REPEATED STRING MANIPULATION 

Repeated by Count in CX or ECX 

REPECMPS = Compare String 

(Find Non-Match) I 


0 0 1 0 0 0 0 w I mod reg r/m | 


0 0 1 0 0 0 1 w I mod reg r/m | 


1 0 0 0 0 0 0 w mod 10 0 r/m immediate data 


0 0 1 0 0 1 0 w immediate data 


lOOOOlOw I mod reg r/m | 


1 1 1 1 0 1 1 w mod 0 0 0 r/m immediate data 


1 0 1 0 1 0 0 w immediate data 


0 0 0 0 1 0 d w mod r 


00001 00 w [mod reg r/m| 


0 0001 01 w [mod reg ; :,r/re| 


3 


1 00 


0 0 0 0 w I mod 0 Q t' '^^ir/m | imnriediateMata 


0000 1 1 Ow l.lmnwdiatedata > 




0 01 TM'diy 1 mod reg' < 


O'O-IyI'OOOw I mod reg "4/mt 


0,0 110 01 Imod^g ' T/mf 


1 0 0 0 000 w jmW 1 oL; immediate data 


0 0 1 1 0'l 0 w I imiPh^t^te data 


1 1 S I 0 1 1 w {mod 010 r/m 


1 01 001 1 w 


Cik 

Count 

Virtual 

8086 

Mode 


01 101 lOw 


t29 


1 01 01 1 Ow 


01 1 01 1 1 w 


1 1 1 1 001 1 1 01 001 1 w 
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Table 9-1. Instruction Set Clock Count Summary (Continued) 


I CLOCK COUNT | 

NOTES 1 

Real 


Real 


Address 

Protected 

Address 

Protected 

Mode or 

Virtual 

Mode or 

Virtual 

Virtual 

Address 

Virtual 

Address 

8086 

Mode 

8086 

Mode 

Mode 


Mode 


5 + 9n** 

5+9n** 

b 

h 

13 + 6n* 

7-t-6n*/ 

27-h6n* 

h 

s/t, h, m 

5-f-6n* 


b 

h 

7 + An* J 


b 

h 

' _ 





'^h + 5n*/ 

b 

s/t, h, m 


26 + 5n* 

54- 8n* 

b 

h 






5 - 1 - 80 * 

b 

h 

5 + 5n* 

5 + 5n* 

b 

h 





10 + 3n* 

10-1- 3n** 

b 

h 

10 + 3n* 

10-f3n** 

b 

h 

) 3/6* 

3/6* 

b 

h 

3/12* 

3/12* 

b 

h 

j 6/8* 

6/8* 

b 

h 

6/13* 

6/13* 

b 

h 

j 6/8* 

6/8* 

b 

h 

6/13* 

6/13* 

b 

h 

] 6/8* 

6/8* 

b 

h 

6/13* 

6/13* 

b 

h 

7 + m* 

9-Fm* 

b 

r 

7 + m*/10 + m* 

9 + m/ 

12-fm* 

b 

h, r 

17 + m* 

42-i-m’ 

b 

j.k.r 


INSTRUCTION 


REPEATED STRING MANIPULATION (Continued) 
REPNECMPS = Compare String 

(Find Match) 


REP INS = Input String 

REP LODS = Load String 
REP MOVS = Move String 
REP OUTS = Output String 

REPE SCAS = Scan String 

(Find Non-AL/AX/EAX) 

REPNE SCAS = Scan String 

(FindAL/AX/EAX) 

REPSTOS = Store String 
BIT MANIPULATION 
BSF = Scan Bit Forward 
BSR = Scan Bit Reverse 
BT = Test Bit 
Register/Memory, immediate 
Register/Memory, Register 

BTC = Test Bit and Complement 

Register/Memory, Immediate 

Register/Memory, Register 
BTR = Test Bit and Reset 
Register/Memory, Immediate ' ' 
Register/Memory, Register 
BTS = Test Bit and Set 
Register/Memory, Immediate 
Register/Memory, Register 

CONTROL TRANSFER 
CALL = Call 

Direct Within Segment 
Register/ Memory 
Indirect Within Segment 

Direct Intersegment 


11110010 101001 1 w 


1 1 1 10010 I 01 101 lOw 


1 1 1 1 001 0 1 01 01 1 Ow 


Clk Count 
Virtual 
8086 Mode 


11110010101001 


0^ 


1 1 1 1001 0 01 1 01 1 1 w 



|^13 001111 I 10111010 jmod 110 r/m|immed 8-bit dataj 


D01111 I 10110011 |mod reg r/mj 


00001111 10111010 mod 1 0 1 r/m immed 8-bit date 


31111 I 10101011 |mod reg r/m| 


1 1 1 01 000 I full displacement 


11111111 mod 010 r/m 


10 0110 10 [unsigned full offset, selector 


NOTE: 

t Clock count shown applies if I/O permission allows I/O to the port in virtual 8086 mode. If I/O bit map denies permission 
exception 13 fault occurs; refer to clock counts for INT 3 instruction. 
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Table 9-1. Instruction Set Clock Count Summary (Continued) 



CLOCK COUNT 

NOTES 


Real 


Real 


INSTRUCTION FORMAT 

Address 

Protected 

Address 

Protected 


Mode or 

Virtual 

Mode or 

Virtual 


Virtual 

Address 

Virtual 

Address 


8086 

Mode 

8086 

Mode 


Mode 


Mode 


CONTROL TRANSFER (Continued) 

Protected Mode Only (Direct Intersegment) 





Via Call Gate to Same Privilege Level 

Via Call Gate to Different Privilege Level, 


64 + m 


h.i.k.r 

(No Parameters) 

Via Call Gate to Different Privilege Level, 


98 + m 


h,j,k,r 

(x Parameters) 


106 + 8x + m 


h,j,k,r 

From 286 Task to 286 TSS 


285 


h.i.k.r 

From 286 Task to 386 tm SX CPU TSS 


, :3io 


h.i.k.r 

From 286 Task to Virtual 8086 Task (386 SX CPU TSS) 


A' 


h.j.k.r 

From 386 SX CPU Task to 286 TSS 


285 


h,i,k,r 

From 386 SX CPU Task to 386 SX CPU TSS 


392 


h,j,k,r 

From 386 SX CPU Task to Virtual 8086 Task (386 SX CPU TSS) 


309 


h,j,k,r 

Indirect Intersegment | 11111111 |mod01 1 r/m] \ 

\ 'aoA m 

46 + m 

b 

h,j,k,r 

Protected Mode Only (Indirect Intersegment) . : ^ 

A ^ . 




Via Call Gate to Same Privilege Level v > - " , <; 

Via Call Gate to Different Privilege Level, . ; V" 

VC 

68 + m 


h,i,k,r 

(No Parameters) v' ' 


102 + m 


h,j,k,r 

Via Call Gate to Different Privilege Level, ^ ^ ~ 





(X Parameters) \ ^ * 


110 + 8x + m 


h,j,k,r 

From 286 Task to 286 TSS ^ 




h,j,k,r 

From 286 Task to 386SX CPU TSS 4 " \> 




h.j.k.r 

From 286 Task to Virtual 8086 Task (386SX CPU A?' ^ 




h.j,k,r 

From 386 SX CPU Task to 286 TSS .,AA 




h.j.k.r 

From 386SX CPU Task to 386SX CPU TSS A ^ ^ 


399 


h.j.k.r 

From 386 SX CPU Task to Virtual 8086 Task $X CPU T^^ ^ ^ ^ \ “ 




h.j.k.r 

JMP = UnconditlonalJump ^ >A\ AA' 

Short 1 11 1 0 1 0 1 1 Isfeit d[l^ac§i^3;\:A 

Direct within Segment | 11101 .Q;i64'i|;1ull displ^^i(fi^ 

Register/Memory Indirect within Seg4ehtl 1 1 1 IYV |mod1'06A r/m| 

7 + m 

7 + m 

9 + m/14 + m 

7 + m 

7 + m 

9 + m/14 + m 

b 

r 

r 

h.r 

Direct Intersegment j 1 1 Tjji l 010 [unsigned full offset, selector 

Protected Mode Only (Direct Intef^ig^Wt) 

16+ m 

31 +m 


j.k.r 

Via Call Gate to Same Priv^aLj^f 


53 + m 


h.j.k.r 

From 286 Task to 286 TS#^ A 




h.j.k.r 

From 286 Task to 386 SX CPU TSS 




h.j.k.r 

From 286 Task to Virtual 8086 Task (386 SX CPU TSS) 




h.j.k.r 

From 386 SX CPU Task to 286 TSS 




h.j.k.r 

From 386 SX CPU Task to 386 SX CPU TSS 




h,j,k,r 

From 38aSX CPU Task to Virtual 8086 Task (386 SX CPU TSS) 


395 


h,j,k,r 

Indirect Intersegment [ 1 1 1 1 1 1 1 1 [mod 101 r/m| 

17 + m 

31 +m 

b 

h,j.k.r 

Protected Mode Only (Indirect Intersegment) 





Via Call Gate to Same Privilege Level 


49 + m 


h,j,k,r 

From 286 Task to 286 TSS 




h.j.k.r 

From 286 Task to 386 SX CPU TSS 




h.j.k.r 

From 286 Task to Virtual 8086 Task (386 SX CPU TSS) 




h.j.k.r 

From 386 SX CPU Task to 286 TSS 




h.j.k.r 

From 386 SX CPU Task to 386 SX CPU TSS 


328 


h.j.k,r 

From 386 SX CPU Task to Virtual 8086 Task (386 SX CPU TSS) 




h.j.k.r 
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Table 9-1. Instruction Set Clock Count Summary (Continued) 


INSTRUCTION 


CLOCK COUNT 

NOTES 1 

Real 


Real 


Address 

Protected 

Address 

Protected 

Mode or 

Virtual 

Mode or 

Virtual 

Virtual 

Address 

Virtual 

Address 

8086 

Mode 

8086 

Mode 

Mode 


Mode 



12+m 

b 

g. h, r 


12-l-m 

b 

g, h, r 


36 -t- m 

b 

g. h, j, k, r 


36 + m 

b 

g. h, j, k, r 


I'M'" 


h, j, k, r 


72 


h, j, k, r 

\ s "C'r* 




f+mor3 

7 + m or 3 


r 

7.4-m.or3 

7 + m or 3 


r 

'7+m or3 

7 + m or 3 


r 

7 + m or 3 

7 + m or 3 


r 

7 + m or 3 

7 + m or 3 


r 

7 + m or 3 

7 + m or 3 


r 

7 + m or 3 

7 + m or 3 


r 

y ^ /%r 2 

■7 -L ryi Qj- 3 


r 

7 + m or 3 

7-f-m or3 


r 

7 + m or 3 

7-l-mor3 


r 

7 + m or 3 

7 + m or 3 


r 

7 -F m or 3 

7 + mor3 


r 

7 m or 3 

7 + m or 3 


r 

7 + mor3 

7 + m or 3 


r 

7 + m or 3 

7 + m or 3 


r 

7 + m or 3 

7 + m or 3 


r 

7 + m or 3 

7 + m or 3 


r 

7 + m or 3 

7 + m or 3 


r 


CONTROL TRANSFER (Continued) 

RET = Return from CALL: 

Within Segment 

Within Segment Adding Immediate to SP 

Intersegment 

Intersegment Adding Immediate to SP |~ 

Protected Mode Only (RET): 
to Different Privilege Level 
Intersegment 

Intersegment Adding Immediate to SP 

CONDITIONAL JUMPS 

NOTE: Times Are Jump “Taken or Not Taken” 

JO = Jump on Overflow 

(“ 

8-Bit Displacement 


16-bit dispi. 


11001011 


16-bit dispi 


01 1 10000 


8-bit dispi 


Full Displacement 

JNO = Jump on Not Overflow 

8-Bit Displacement 

Full Displacement 




00001 1 1 1 I 1 oooai%a:Ct;>| fuii 


0111 0001 


1.' 




I"^Vo 0 0 0 q 


JB/JNAE = Jump on Beiow/Not Above or Equal' 

r" 

8-Bit Displacement | 0 1 1 1 0 ' 6 1 0 

8-bit 1^ 

Full Displacement 0 0 1 1 1 1 

i0Q000f|4f 

JNB/JAE = Jump on Not Beiow/AbOve or Equal t 




lisplaclm^ 


8-Bit Displacement 

JE/JZ = Jump on Equal/Zero 

8-Bit Displacement 
Full Displacement 


0 1 X 1 0 0 1'1 I . ii?ft''displ' I 

< I -full 


8-bit dispi 


00001111 


JNE/JNZ = Jump on NotE^I/Not Zero 

8-Bit Displacement |~~0 


8-bit dispi 


Full Displacement 

JBE/JNA = Jump on Below or Equal/N ot Above 

8-Bit Displacement j 0 1 1 1 ( 

I 

Full Displacement 


00001 1111 0000101 


e-bit dispi 


00001 1 1 1 1 00001 1 0 


JNBE/JA = Jump on Not Below or Equal /Above 

8-Bit Displacement | 0111 

I 

Full Displacement 
JS = Jump on Sign 
8-Bit Displacement 

Full Displacement 


8-bit dispi 


00001 1 1 1 1 00001 1 1 


8-bit dispi 


00001 1111 0001000 


full displacement 


full displacement 


full displacement 


full displacement 


full displacement 
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Table 9-1. Instruction Set Clock Count Summary (Continued) 


INSTRUCTION 


CLOCK COUNT 

NOTES 1 

Real 


Real 


Address 

Protected 

Address 

Protected 

Mode or 

Virtual 

Mode or 

Virtual 

Virtual 

Address 

Virtual 

Address 

8086 

Mode 

Mode 

8086 

Mode 

Mode 

7 + mor3 

7 -f m or 3 


r 

7 + m or 3 

7 + m or 3 


r 

7 + m or 3 

7 + m or 3 


r 

7 + m or 3 

7 + m or 3 


r 

7 + mor3 

7 + rp or 3 


r 

7-l-mc«r3 

' 7+ m or 3 


r 

74 ip or 3 

7 + m or 3 


r 

7+mor3 

7+m or 3 


r 

7*!|- rh' or 3 

7 + m or 3 


r 

7 + m or 3 

7 + m or 3 


r 

7+m or3 

7 + m or 3 


r 

7 + m or3 

7 + m or 3 


r 

7 -1- m or 3 

7 + m or 3 


r 

7 + m or 3 

7 + m or 3 


r 

9 + mor5 

9+m orS 


r 

9 + m orS 

9+m or 5 


r 

11 +m 

11 +m 


r 

11 +m 

11+m 


r 

11 +m 

11 +m 


r 

4/5‘ 

4/5* 


h 

4/5* 

4/5* 


h 

4/5* 

4/5* 


h 


CONDITIONAL JUMPS (Continued) 

JNS = Jump on Not Sign 

8-Bit Displacement [ 

Full Displacement [ 

JP/JPE = Jump on Parity/Parity Even 

8-Bit Displacement [ 

Full Displacement [ 


JNP/JPO = Jump on Not Parity/Parity Odd 

8-Bit Displacement 

Full Displacement 


I 01111011 


00001 1 1 1 


JL/JNGE = Jump on Less/Not Greater or Equal 

8-Bit Displacement [ 0 11 1 1 

Full Displacement | 0 0 0 01 


JNL/JGE = Jump on Not Lesa/Greater or Equal 

8-Bit Displacement [ 0 11 1 1 

Full Displacement | 00001 


JLE/JNG = Jump on Less or Equal/No t Greater 

8-Bit Displacement 
Full Displacement 


01 1 




I p o:o:ojt 1 1 


JNLE/JG = Jump on Not Less or Equal /tSiiniiater 

8-Bit Displacement 

Full Displacement 

JCXZ = Jump on CX Zero 
JECXZ = Jump on ECX Zero 


01111 liCV 


00001:11 t; 


1 1 1,01^0 1 1 : 


(Address Size Prefix Differentiated JtSXZIrom JECXZ) 


LOOP = Loop CX Times ‘ 

LOOPZ/LOOPE = Loop with 
Zero/Equal 


LOOPNZ/LOOPNE = Loop While 
Not Zero 

CONDITIONAL BYTE SET 

NOTE: Times Are Register/ Memory 

SETO = Set Byte on Overflow 

To Register/Memory 

SETNO = Set Byte on Not Overflow 

To Register/ Memory 


1 1 1 00000 


SETB/SETNAE = Set Byte on Below/Not Above or Equal 


To Register/Memory | 00001 1 1 1 


?-bit dispi 


8-bit displ 


8-bit dispi 


8-bit dispi 


1 0 1 


P' 8-bit :'vx 'v 


,/8-bitdtsp) 


1 


p-bit dispi 


8-bit dispi 


8-bit dispi 


8-bit dispi 


8-bit dispi 


full displacement 


full displacement 


full displacement 


^tf't^placemenf ' 


full displacement 


mod 0 0 0 r/m 


mod 0 0 0 r/m 


modOOO r/m 
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Table 9-1. Instruction Set Clock Count Summary (Continued) 






CLOCK COUNT 

NOTES 1 





Real 


Real 


INSTRUCTION FORMAT 




Address 

Protected 

Address 

Protected 





Mode or 

Virtual 

Mode or 

Virtual 





Virtual 

Address 

Virtual 

Address 





8086 

Mode 

8086 

Mode 





Mode 


Mode 


CONDITIONAL BYTE SET (Continued) 








SETNB = Set Byte on Not Below/ Above or Equal 








To Register/Memory I 0 0 0 01 1 1 1 I 

10010011 

mod 0 0 0 

r/m 1 

4/5* 

4/5* 


h 

SETE/SETZ = Set Byte on Equal/Zero 





To Register/Memory | 00001 1 1 1 | 

10010100 

mod 0 0 0 

r/m j 

4/5* 

4/s^': 


h 

SETNE/SETNZ == Set Byte on Not Equal/Not Zero 





To Register/ Memory | 00001 1 1 1 | 

10010101 

mod 0 0 0,5 

r/m 1 

4/5* " 

4 / 5 * 


h 









SETBE/SETNA = Set Byte on Below or Equal/Not Above 




)';l "K 




To Register/Memory | 0 0001 1 1 1 ] 

10010110 


r/m 1 


4/5* 


h 

SETNBE/SETA = Set Byte on Not Below or Equal/ Above 



J V- 






To Register/ Memory | 0 0 0 01 1 1 1 | 

10 01 0 0 0 0 


4/5* 


. h 








SETS = Set Byte on Sign 

Vs''- 







To Register/ Memory | 00001 1 1 1 [ 



ifid ' ' 

' ' 4/5* 

4/5* 


h 

SETNS = Set Byte on Not Sign 

... 






To Register/Memory | 0 0 0 0 


^l^od Q 0 

<r/m 1 

4/5* 

4/5* 


h 









SETP/SETPE = Set Byte on Parity/Parity Ev^ > V 








To Register/Memory j 00:001111 [ 

'l:o p 0 1 aj 

too 0 0 

r/m 1 

4/5* 

4/5* 


h 

SETNP/SETPO = Set Byte on Not l^^ity/Pdrlty Odd 














To Register/Memory | 000 01111 |'1 


1 





mod 0 0 0 

r/m 1 

4/5* 

4/5* 


h 

SETL/SETNGE = Set Byte on Less/Not Gre^fi:«r;l®quaK 








To Register/ Memory | o64o i 1 1 1 j 

^T^01 1 1 00 

mod 0 0 0 

r/m 1 

4/5* 

4/5* 


h 

SETNL/SETGE = Set Byte on Not l^aii/G^eater or Equal 








To Register/|!il^(tfbry f 0 0 0 0 1 1 1 1 | 

01111101 

mod 00 0 

r/m 1 

4/5* 

4/5* , 


h 

SETLE/SETNG = Set Byteq^ytse or Equal/Not Greater 





Tn Rfinifstfir'^/MRmnn/ 1 00001111 I 

10011110 

mnH non 

r/m j 

4 / 5 * 

4 / 5 * 


h 

SETNLE/SETG = Set Byte on Not Less or Equal/Greater 





To Register/ Memory | 0 0 0 01 1 1 1 1 

10011111 

mod 0 0 0 

r/m 1 

4/5* 

4/5* 


h 






ENTER = Enter Procedure | 1 1 0 01 0 0 0 | 

16-bit displacement, 8-bit leve 






L = 0 




10 

10 

b 

h 

L = 1 




14 

14 

b 

h 

L> 1 




17 + 

17 + 

b 

h 





8(n - 1) 

8(n - 1) 



LEAVE = Leave Procedure \ 1 1 0 01 0 01 \ 




4 

4 

b 

h 
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Table 9-1. Instruction Set Clock Count Summary (Continued) 



CLOCK COUNT 

NOTES 1 


Real 


Real 


INSTRUCTION FORMAT 

Address 

Protected 

Address 

Protected 


Mode or 

Virtual 

Mode or 

Virtual 


Virtual 

Address 

Virtual 

Address 


8086 

Mode 

8086 

Mode 


Mode 


Mode 


INTERRUPT INSTRUCTIONS 





INT = Interrupt: 





Type Specified | 110 0 110 1 | type | 

Type 3 ‘ ll100110o| 

INTO = Interrupt 4 if Overflow Flag Set | 110 01110 | 

37 

33 


b 

b 


If OF = 1 

35 


b, e 


If OF = 0 

3 

3 

b, e 


Bound = Interrupt 5 If Detect Value { 01 1 0 0 01 0 | mod reg r/m | 


v,>\ 



Out of Range 









If Out of Range 

44 


b, e 

e, Qi h, j, k, r 

If In Range ^ 

10.;^ > 

."X 10 

b, e 

e, g, h, j, k, r 

Protected Mode Only (1 NT) 

INT: Type Specified , 





Via Interrupt or Trap Gate x \ ^ ^ 

Via Interrupt or Trap Gate ^ 





to Same Privilege Level -CK ^ 


71 


g.j. k.r 

to Different Privilege Level ^ 


111 


g. j, k, r 

From 286 Task to 286 TSS via Task Gate 


438 


g.j, k,r 

From 286 Task to 386TM SX CPU TSS via Task Gate ^ 

X 

465 


g. j. k, r 

From 286 Task to virt 8086 md via Task Gate ■:> ^ 

From 386 TM sX CPU Task to 286 TSS via Task Gate^ ^ 

From 386 TM sX CPU Task to 386 tm SX CPU TSS x^^Y^^jSfate 

X' 

382 


g. j. k, r 


440 


g.j. k.r 


467 


g. j, k, r 

From 386TM SX CPU Task to virt 8086 md via T^.G^ ’ 

From virt 8086 md to 286 TSS via T ask Gate ' ' ^ 


384 


g.j. k,r 


445 


g.j. k,r 

From virt 8086 md to 386 tm SX CPU TSSyi^fisR^Gate ^ 


472 


g.j. k.r 

From virt 8086 md to priv level 0 via Tr«|p ^te'or Interrup^'G^ " 

INT: TYPE 3 

Via Interrupt or Trap Gate 
to Same Privilege Level 


275 




71 


g.j. k,r 

Via Interrupt or Trap Gate 





to Different Privilege Level " 


111 


g.j, k.r 

From 286 Task to 286 TSS via Task Gate \' / 


382 


g.j. k.r 

From 286 Task to 386 tm SX CPU ^^V^ Task Gate 


409 


g. j. k, r 

From 286 Task to Virt 8086 md v*a'^^ Gate 


326 


g. j, k. r 

From 386 TM SX CPU Task tb'^ TSS via Task Gate 


384 


g. j. k, r 

From 386 TM sX CPU Ta$k sx CPU TSS via Task Gate 


411 


g. j, k, r 

From 386 TM SX CPU Taskto Virt 8086 md via Task Gate 


328 


g.j, k,r 

From virt 8086 md to 286 TSS via Task Gate 


389 


g. j. k, r 

From virt 8086 md to 386 tm SX CPU TSS via Task Gate 


416 


g. j. k. r 

From virt 8086 md to priv level 0 via Trap Gate or Interrupt Gate 


223 



INTO: 





Via Interrupt or Trap Grate 
to Same Privilege Level 

Via Interrupt or Trap Gate 


71 


g. j. k, r 

to Different Privilege Level 


111 


g.j, k,r 

From 286 Task to 286 TSS via Task Gate 


384 


g. j, k, r 

From 286 Task to 386 tm SX CPU TSS via Task Gate 


411 


g.j. k.r 

From 286 Task to virt 8086 md via Task Gate 


328 


g, j. k, r 

From 386 TM SX CPU Task to 286 TSS via Task Gate 


386 DX 


g. j. k, r 

From 386TM SX CPU Task to 386 tm sX CPU TSS via Task Gate 


413 


g, j. k, r 

From 386 ™ SX CPU Task to virt 8086 md via Task Gate 


329 


g. j. k, r 

From virt 8086 md to 286 TSS via Task Gate 


391 


g.j. k.r 

From virt 8086 md to 386 tm SX CPU TSS via Task Gate 


418 


g.j. k.r 

From virt 8086 md to priv level 0 via Trap Gate or Interrupt Gate 


223 
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Table 9-1. Instruction Set Clock Count Summary (Continued) 

I CLOCK COUNT 


INSTRUCTION 


INTERRUPT INSTRUCTIONS (Continued) 

BOUND: 

Via Interrupt or Trap Gate 
to Same Privilege Level 
Via Interrupt or Trap Gate 
to Different Privilege Level 
From 286 Task to 286 TSS via Task Gate 
From 286 Task to 386 tm SX CPU TSS via Task Gate 
From 268 Task to virt 8086 Mode via Task Gate 
From 386 SX CPU Task to 286 TSS via Task Gate 
From 386 SX CPU Task to 386 SX CPU TSS via Task Gate 
From 386 SX CPU Task to virt 8086 Mode via Task Gate 
From virt 8086 Mode to 286 TSS via Task Gate 
From virt 8086 Mode to 386 SX CPU TSS via Task Gate 
From virt 8086 md to priv level 0 via Trap Gate or Interrupt Gate 

INTERRUPT RETURN 

IRET = Interrupt Return | 11001111 | 


Protected Mode Only (IRET) ^ ^ 

To the Same Privilege Level (within task) 

To Different Privilege Level (within task) . ^ 

From 286 Task to 286 TSS 4®- 3^" 

From 286 Task to 386 SX CPU TSS 
From 286 T ask to Virtual 8086 Task ' r ; ' ^ 

From 286 T ask to Virtual 8086 Mode (wiUih 
From 386 SX CPU Task to 286 TSS ' ^ 

From 386 SX CPU Task to 386 SX ^^U TS^^ ^ 

From 386 SX CPU Task to Virtual 8086 Task V 

From 386 SX CPU Task to Virtual 8086 Mode (wil^JasiT ^ 

PROCESSOR CONTROL 

-n- 

HLT = HALT | 1 1 1 1 0 1 0 0 f 

MOV = Move to and From Co,i|ird|/l^ug/Test Registers 


CR0/CR2/CR3 from regi^,,, | 00001 1 1 1 
Register From CROl-3 [ 00001 1 1 1 

DRO-3 From Register | 00001 1 1 1 

DR6-7 From Register | 00001 1 1 1 

Register from DR6-7 | 00001 1 1 1 

Register from DRO-3 | 00001 1 1 1 

TR8-7 from Register > | 00001 1 1 1 

Register from TR6-7 | 00001 1 1 1 

NOP = No Operation | 10010 000 

WAIT= Walt until BUSY# pin is negated | 10011011 



00001 1 1 11 00100010 
00001 1 1 1 I 00100000 
00001 1 11 I 0010001 1 
00001 1 11 I 00100011 
00001 1 1 1 I 00100001 
00001111 [00100001 
00001111 I 00100110 
00001 111 I 00100100 
10010000 


1 1 eee reg 
1 1 eee reg 
1 1 eee reg 
1 1 eee reg 

I 1 eee reg 

I I eee reg 
1 1 eee reg 
1 1 eee reg 


Real 


Real 


Address 

Protected 

Address 

Protected 

Mode or 

Virtual 

Mode or 

Virtual 

Virtual 

Address 

Virtual 

Address 

8086 

Mode 

Mode 

8086 

Mode 

Mode 
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Table 9-1. instruction Set Clock Count Summary (Continued) 


INSTRUCTION 

FORMAT 




CLOCK COUNT 

NOTES 

Real 
Address 
Mode or 
Virtual 

8086 

Mode 

Protected 

Virtual 

Address 

Mode 

Real 
Address 
Mode or 
Virtual 
8086 
Mode 

Protected 

Virtual 

Address 

Mode 

PROCESSOR EXTENSION INSTRUCTIONS 








Processor Extension Escape [ 

11011 TTT 

1 mod LLL r/m 



See 



h 



TTT and LLL bits are opcode 



387SX 






information for coprocessor. 



data sheet for 










clock counts 




PREFIX BYTES 









Address Size Prefix [ 

01100111 




0 

0 



LOCK 

= Bus Lock Prefix [ 

1 1 1 1 0000 




0 

0 


m 

Operand Size Prefix [ 

01100110 




0 

q \ 



Segment Override Prefix 









CS: 

[ 

00101110 




0 

' 0 



DS: 

[ 

00111110 




O' \ 

0 



ES: 

[ 

00100110 




' 0 . 

0 



FS: 

[ 

01100100 




/ 0 

0 



GS: 

[ 

01 100101 




: 

0 



SS: 

[ 

00110110 




d 

0 



PROTECTION CONTROL 









ARPL 

= Adjust Requested Privilege Level 









From Register/Memory [ 

0 1 1 0 0 0 x:ty 

[modreg r/m 



N/A 

20/21** 

a 

h 

LAR 

= Load Access Rights 










From Register/ Memory [ 

00001 1 1 1 

1 00000010 

modr^' 

r/m 1 

N/A 

. 15/16* 

a 

g. h,j,p 

LGDT 

= Load Global Descriptor 










Table Register [ 

00001 1 1 r 

l.oooooooi 

mod 0 1 0 

r/m 1 

11* 

11* ' 1 

b, c 

h.l 

LIDT 

= Load Interrupt Descriptor 










Table Register [ 

0 0001 t.l 1 

1 00000001 

mod oil 

r/m 1 

11* 

11* 

b, c 

h.l 

LLDT 

= Load Local Descriptor 










Table Register to < r 




1 






Register/Memory ; 

00001111 

1 00000000 

mod 010 

r/m 1 

N/A 

20/24* 

a 

g. h, j. 1 

LMSW 

= Load Machine Statp» Word 









From Register/Memory [ 

00001 1 1 1 

1 00000001 

mod 110 

r/m 1 

10/13 

10/13* 

b, c 

h,l 

LSL 

= Load Segment Limit 










From Register/Memory [ 

00001111 

1 0000001 1 1 

mod reg 

r/m 1 






Byte-Granular Limit 





N/A 

20/21* 

a 

g. h.j.p 


Page-Granular Limit 





N/A 

25/26* 

a 

g. h, j, p 

LTR 

= Load Task Register 










From Register/Memory [ 

00001 1 1 1 

1 00000000 

mod 0 01 

r/m 1 

N/A 

23/27* 

a 

g, h. j. 1 

SGDT 

= Store Global Descriptor 










Table Register [ 

00001111 

1 00000001 

mod 0 0 0 

r/m 1 

9’ 

9* 

b, c 

h 

SIDT 

= Store Interrupt Descriptor 









Table Register [ 

00001 1 1 1 

1 00000001 

mod 0 0 1 

r/m 1 

9* 

9* 

b, c 

h 

SLOT 

== Store Local Descriptor Table Register 









To Register/ Memory 

00001111 

1 00000000 1 

mod 0 0 0 

r/m 1 

N/A 

2/2* 

a 

h 
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Table 9-1. Instruction Set Clock Count Summary (Continued) 








CLOCK COUNT 

NOTES 

INSTRUCTION 

FORMAT 




Real 
Address 
Mode or 
Virtual 
8086 
Mode 

Protected 

Virtual 

Address 

Mode 

Real 
Address 
Mode or 
Virtual 
8086 
Mode 

Protected 

Virtual 

Address 

Mode 

PROTECTION CONTROL (Continued) 

SMSW = Store Machine 

Status Word 

1 00001 1 1 1 

I 00000001 

1 mod 1 0 0 

r/m 1 

2/2* 

2/2* 

b, c 

h,l 

STR 

= Store Task Register 

To Register/Memory 

1 00001 1 1 1 

1 00000000 

1 mod 0 01 

r/m 1 

N/A 

2/2* 

a 

h 

VERR 

= Verify Read Access 

Register/Memory 

1 00001 1 1 1 

1 00000000 

1 mod 10 0 

r/m 1 

N/A 

10/11* 

a 

g, h, j, p 

VERW 

= Verify Write Access 

1 00001 1 1 1 

1 00000000 

1 mod 101 

r/m } 

N/A 

15/16* 

a 

g. h, j. p 


INSTRUCTION NOTES FOR TABLE 9-1 

Notes a through c apply to Real Address Mode only: 

a. This is a Protected Mode instruction. Attempted execution in Real Mode will result in exception 6 (invalid opcode). 

b. Exception 13 fault (general protection) will occur in Real Mode if an operand reference is made that partially or fully 
extends beyond the maximum CS, DS, ES, FS or GS limit, FFFFH. Exception 1 2 fault (stack segment limit violation or not 
present) will occur in Real Mode If an operand reference is made that partially or fully extends beyond the maximum SS limit. 

c. This instruction may be executed in Real Mode. In Real Mode, its purpose is primarily to Initialize the CPU for Protected 
Mode. 

Notes d through g apply to Real Address Mode and Protected Virtual Address Mode: 

d. The 386 SX CPU uses an early-out multiply algorithm. The actual number of clocks depends on the position of the most 
significant bit in the operand (multiplier). 

Clock counts given are minimum to maximum. To calculate actual clocks use the following formula: 

Actual Clock = if m < > 0 then max ([log 2 |m|], 3) + b clocks; 

if m = b then 3 + b clocks 
In this formula, m is the multiplier, and 
b = 9 for register to register, 
b = 12 for memory to register, 
b = 1 0 for register with immediate to register, 
b = 1 1 for memory with Immediate to register. 

e. An exception may occur, depending on the value of the operand. 

f. LOCK# is automatically asserted, regardless of the presence or absence of the LOCK# prefix. 

g. LOCK# is asserted during descriptor table accesses. 

Notes h through r apply to Protected Virtual Address Mode only: 

h. Exception 13 fault (general protection violation) will occur if the memory operand in CS, DS, ES, FS or GS cannot be used 
due to either a segment limit violation or access rights violation. If a stack limit is violated, an exception 12 (stack segment 
limit violation or not present) occurs. 

i. For segment load operations, the CPL, RPL, and DPL must agree with the privilege rules to avoid an exception 1 3 fault 
(general protection violation). The segment’s descriptor must indicate “present” or exception 11 (CS, DS, ES, FS, GS not 
present). If the SS register is loaded and a stack segment not present Is detected, an exception 12 (stack segment limit 
violation or not present) occurs. 

j. All segment descriptor accesses in the GDT or LDT made by this instruction will automatically assert LOCK# to maintain 
descriptor integrity in multiprocessor systems. 

k. JMP, C.ALL, !NT, RET and IRET instructions referring to another code segment will cause an exception 13 (general 
protection violation) if an applicable privilege rule Is violated. 

l. An exception 13 fault occurs if CPL Is greater than 0 (0 Is the most privileged level). 

m. An exception 13 fault occurs if CPL Is greater than lOPL. 

n. The IF bit of the flag register Is not updated If CPL Is greater than lOPL. The lOPL and VM fields of the flag register are 
updated only if CPL = 0. 

o. The PE bit of the MSW (CRO) cannot be reset by this instruction. Use MOV into CRO if desiring to reset the PE bit. 

p. Any violation of privilege rules as applied to the selector operand does not cause a protection exception; rather, the zero 
flag is cleared. 

q. If the coprocessor’s memory operand violates a segment limit or segment access rights, an exception 13 fault (general 
protection exception) will occur before the ESC instruction Is executed. An exception 1 2 fault (stack segment limit violation 
or not present) will occur if the stack limit Is violated by the operand’s starting address. 

r. The destination of a JMP, CALL, INT, RET or IRET must be in the defined limit of a code segment or an exception 13 fault 
(general protection violation) will occur. 

s/t. The instruction will execute in s clocks If CPL ^ lOPL. If CPL > lOPL, the instruction will take t clocks. 
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9.2 INSTRUCTION ENCODING 


9.2.1 Overview 

All instruction encodings are subsets of the general 
instruction format shown in Figure 8-1. Instructions 
consist of one or two primary opcode bytes, possibly 
an address specifier consisting of the “mod r/m” 
byte and “scaled index” byte, a displacement if re- 
quired, and an Immediate data field if required. 

Within the primary opcode or opcodes, smaller en- 
coding fields may be defined. These fields vary ac- 
cording to the class of operation. The fields define 
such information as direction of the operation, size 
of the displacements, register encoding, or sign ex- 
tension. 

Almost all instructions referring to an operand in 
memory have an addressing mode byte following 
the primary opcode byte(s). This byte, the mod r/m 
byte, specifies the address mode to be used. Certain 


encodings of the mod r/m byte indicate a second 
addressing byte, the scale-index-base byte, follows 
the mod r/m byte to fully specify the addressing 
mode. 

Addressing modes can include a displacement im- 
mediately following the mod r/m byte, or scaled in- 
dex byte. If a displacement is present, the possible 
sizes are 8, 1 6 or 32 bits. 

If the Instruction specifies an immediate operand, 
the immediate operand follows any displacement 
bytes. The Immediate operand. If specified, is always 
the last field of the instruction. 

Figure 9-1 Illustrates several of the fields that can 
appear in an instruction, such as the mod field and 
the r/m field, but the Figure does not show all fields. 
Several smaller fields also appear in certain Instruc- 
tions, sometimes within the opcode bytes them- 
selves. Table 9-2 is a complete list of all fields ap- 
pearing in the Instruction set. Further ahead, follow- 
ing Table 9-2, are detailed tables for each field. 


TTTTTTTT 

TTTTTTTT 

mod T T T r/m 

ss index base 

d32 I 1 6 I 8 I none data32 1 1 6 | 8 | none 

^7 

0 

7 

6 5 3 2 0^^7 6 5 3 2 0^^ 

J 


y 

opcode 

(one or two bytes) 

(T represents an 
opcode bit.) 


V 

“mod r/m” 

^ byte 

y 

“s-i-b” 
byte j 

y 

address 
displacement 
(4, 2, 1 bytes 
or none) 

y 

Immediate 

data 

(4, 2, 1 bytes 
or none) 



y 

register and address 
mode specifier 


Figure 9-1. General Instruction Format 


Table 9-2. Fields within Instructions 


Field Name 

Description 

Number of Bits 

w 

Specifies If Data Is Byte or Full Size (Full Size Is either 16 or 32 Bits 

1 

d 

Specifies Direction of Data Operation 

1 

s 

Specifies if an Immediate Data Field Must be Sign-Extended 

1 

reg 

General Register Specifier 

3 

mod r/m 

Address Mode Specifier (Effective Address can be a General Register) 

2 for mod; 

3 for r/m 

ss 

Scale Factor for Scaled Index Address Mode 

2 

index 

General Register to be used as Index Register 

3 

base 

General Register to be used as Base Register 

3 

sreg2 

Segment Register Specifier for CS, SS, DS, ES 

2 

sreg3 

Segment Register Specifier for CS, SS, DS, ES, FS, GS 

3 

tttn 

For Conditional Instructions, Specifies a Condition Asserted 



or a Condition Negated 

4 


Note: Table 9-1 shows encoding of individual instructions. 
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9.2.2 32*Bit Extensions of the 
instruction Set 

With the 386 SX CPU, the 8086/80186/80286 in- 
struction set is extended in two orthogonal direc- 
tions: 32-bit forms of all 16-bit instructions are added 
to support the 32-bit data types, and 32-bit address- 
ing modes are made available for all instructions ref- 
erencing memory. This orthogonal instruction set ex- 
tension is accomplished having a Default (D) bit in 
the code segment descriptor, and by having 2 prefix- 
es to the instruction set. 

Whether the instruction defaults to operations of 1 6 
bits or 32 bits depends on the setting of the D bit in 
the code segment descriptor, which gives the de- 
fault length (either 32 bits or 16 bits) for both oper- 
ands and effective addresses when executing that 
code segment. In the Real Address Mode or Virtual 
8086 Mode, no code segment descriptors are used, 
but a D value of 0 Is assumed internally by the 
386 SX CPU when operating In those modes (for 16- 
bit default sizes compatible with the 8086/80186/ 
80286). 

Two prefixes, the Operand Size Prefix and the Effec- 
tive Address Size Prefix, allow overriding Individually 
the Default selection of operand size and effective 
address size. These prefixes may precede any op- 
code bytes and affect only the Instruction they pre- 
cede. If necessary, one or both of the prefixes may 
be placed before the opcode bytes. The presence of 
the Operand Size Prefix and the Effective Address 
Prefix will toggle the operand size or the effective 
address size, respectively, to the value “opposite” 
from the Default setting. For example, If the default 
operand size is for 32-blt data operations, then pres- 
ence of the Operand Size Prefix toggles the instruc- 
tion to 16-blt data operation. As another example, if 
the default effective address size is 16 bits, pres- 
ence of the Effective Address Size prefix toggles the 
Instruction to use 32-blt effective address computa- 
tions. 

These 32-blt extensions are available in all modes, 
including the Real Address Mode or the Virtual 8086 
Mode. In these modes the default Is always 16 bits, 
so prefixes are needed to specify 32-bit operands or 
addresses. For instructions with more than one pre- 
fix, the order of prefixes is unimportant. 

Unless specified otherwise. Instructions with 8-bit 
and 16-bit operands do not affect the contents of 
the high-order bits of the extended registers. 

9.2.3 Encoding of instruction Fields 

Within the Instruction are several fields indicating 
register selection, addressing mode and so on. The 
exact encodings of these fields are defined immedi- 
ately ahead. 


9.2.3.1 ENCODING OF OPERAND LENGTH (w) 
FIELD 

For any given instruction performing a data opera- 
tion, the Instruction is executing as a 32-bit operation 
or a 16-blt operation. Within the constraints of the 
operation size, the w field encodes the operand size 
as either one byte or the full operation size, as 
shown In the table below. 



Operand Size 

Operand Size 

w Field 

During 15-5it 

r\...iS.%M oo_DSt 


Data Operations 

Data Operations 

0 

8 Bits 

8 Bits 

1 

16 Bits 

32 Bits 


9.2.3.2 ENCODING OF THE GENERAL 
REGISTER (reg) FIELD 

The general register is specified by the reg field, 
which may appear in the primary opcode bytes, or as 
the reg field of the “mod r/m” byte, or as the r/m 
field of the “mod r/m” byte. 


Encoding of reg Field When w Field 
is not Present in Instruction 


reg Field 

Register Selected 
During 16-Bit 
Data Operations 

Register Selected 
During 32-Bit 
Data Operations 

000 

AX 

EAX 

001 

CX 

ECX 

010 . 

DX 

EDX 

oil 

BX 

EBX 

100 

SP 

ESP 

101 1 

BP 

EBP 

101 

SI 

ESI 

101 

Dl 

EDI 


Encoding of reg Field When w Field 
is Present in Instruction 


Register Specified by reg Field 

During 16-Bit Data Operations: 

reg 

Function of w Field 

(when w = 0) 

(when w = 1) 

000 

AL 

AX 

001 

CL 

CX 

010 

DL 

DX 

oil 

BL 

BX 

100 

AH 

SP 

101 

CH 

BP 

110 

DH 

SI 

111 

BH 

Dl 
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Register Specified by reg Field 


During 32-Bit Data Operations 

reg 

Function of w Field 

(when w = 0) 

(when w = 1) 

000 

AL 

EAX 

001 

CL 

ECX 

010 

DL 

EDX 

oil 

BL 

EBX 

100 

AH 

ESP 

101 

CH 

EBP 

110 

DH 

ESI 

111 

BH 

EDI 


9.2.3.3 ENCODING OF THE SEGMENT 
REGISTER (sreg) FIELD 

The sreg field in certain instructions is a 2-bit field 
allowing one of the four 80286 segment registers to 
be specified. The sreg field in other instructions is a 
3-bit field, allowing the 386 SX CPU FS and GS seg- 
ment registers to be specified. 


2-Bit sreg2 Field 


2-Bit 

sreg2 Field 

Segment 

Register 

Selected 

00 

ES 

01 

CS 

10 

SS 

11 

DS 


3-Bit sreg3 Field 


3-Bit 

sreg3 Field 

Segment 

Register 

Selected 

000 

ES 

001 

CS 

010 

SS 

oil 

DS 

100 

FS 

101 

GS 

110 

do not use 

111 

do not use 


9.2.3.4 ENCODING OF ADDRESS MODE 

Except for special instructions, such as PUSH or 
POP, where the addressing mode is pre-determined, 
the addressing mode for the current instruction is 
specified by addressing bytes following the primary 
opcode. The primary addressing byte is the “mod 
r/m“ byte, and a second byte of addressing informa- 
tion, the “s-i-b“ (scale-index-base) byte, can be 
specified. 

The s-i-b byte (scale-index-base byte) is specified 
when using 32-bit addressing mode and the “mod 
r/m“ byte has r/m = 100 and mod = 00, 01 or 10. 
When the sib byte is present, the 32-bit addressing 
mode is a function of the mod, ss, index, and base 
fields. 

The primary addressing byte, the “mod r/m” byte, 
also contains three bits (shown as TTT in Figure 8-1) 
sometimes used as an extension of the primary op- 
code. The three bits, however, may also be used as 
a register field (reg). 

When calculating an effective address, either 16-bit 
addressing or 32-bit addressing is used. 16-bit ad- 
dressing uses 1 6-bit address components to calcu- 
late the effective address, while 32-bit addressing 
uses 32-bit address components to calculate the ef- 
fective address. When 16-bit addressing is used, the 
“mod r/m” byte is interpreted as a 16-bit addressing 
mode specifier. When 32-bit addressing is used, the 
“mod r/m” byte is interpreted as a 32-bit addressing 
mode specifier. 

Tables on the following three pages define all en- 
codings of all 16-bit addressing modes and 32-bit 
addressing modes. 
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Encoding of 16-bit Address Mode with “mod r/m“ Byte 


modr/m 

Effective Address 

00 000 

DS;[BX+SI] 

00 001 

DS:[BX+DI] 

00 010 

SS;[BP+SI1 

00011 

SS:[BP+DI] 

00 100 

DS:[SI] 

00 101 

DS:[DI] 

00110 

DS:d16 

00111 

DS:[BX] 

01 000 

DS;[BX + SI + d8] 

01 001 

DS:[BX + DI+d8] 

01 010 

SS:[BP+SI + d8l 

01 oil 

SS:[BP+Dl + d8] 

01 100 

DS:[SI + d8] 

01 101 

DS:[DI + d8] 

OHIO 

SS:[BP + d8] 

01 111 

DS:[BX + d8] 


mod r/m 

Effective Address 

10 000 

DS:[BX+SI + d16] 

10 001 

DS:[BX+DI + d16] 

10010 

SS:[BP+SI + d16] 

10011 

SS:[BP + DH-d16] 

10100 

DS:[SI + d16] 

10101 

DS:[Dl + d16] 

10110 

SS:[BP + d16] 

10111 

DS:[BX + d16] 

11 000 

register— -see below 

1 1 001 

register — see below 

11 010 

register — see below 

11011 1 

register — see below 

11100 

register~see below 

11 101 

register — see below 

11110 

register — see below 

11111 

register — see below 


Register Specified by r/m 

During 16-Bit Data Operations 

mod r/m 

Function of w Field 

(when w=0) 

(when w =1) 


11 000 

AL 

AX 

11 001 

CL 

CX 

11 010 

DL 

DX 

11 oil 

BL 

BX 

11 100 

AH 

SP 

1 1 lU 1 

^Ll 

1 

SP 

11110 

DH 

SI 

11 111 

BH 

Dl 


Register Specified by r/m 

During 32-Bit Data Operations 

mod r/m 

Function of w Field 

(when w=0) 

(when w = 1) 


11 000 

AL 

cr A V 

LLr\/\ 

11 001 

CL 

ECX 

11 010 

DL 

EDX 

11 oil 

BL 

EBX 

11 100 

AH 

ESP 

11 101 

CH 

EBP 

11 110 

DH 1 

ESI , 

11 111 

BH 

EDI 
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Encoding of 32-bit Address Mode with “mod r/m” byte (no “s-i-b” byte present): 


mod r/m 

Effective Address 

00 000 

DS;[EAX] 

00 001 

DS:[ECX] 

00 010 

DS:[EDX] 

00 011 

DS;[EBX] 

00 100 

s-i-b is present 

00 101 

DS:d32 

00110 

DS:[ESI] 

00111 

DS:[EDI] 

01 000 

DS:[EAX + d8] 

01 001 

DS:[ECX + d8] 

01 010 

DS:[EDX + d8] 

01 oil 

DS:[EBX + d8] 

01 100 

s-i-b is present 

01 101 

SS;[EBP-)-d8] 

01 110 

DS:[ESH-d8] 

01 111 

DS:[EDI-l-d8] 


mod r/m 

Effective Address 

10 000 

DS:[EAX-)-d32] 

10 001 

DS:[ECX-l-d32] 

10010 

DS:[EDX-»-d32] 

10011 

DS;[EBX-l-d32] 

10 100 

S-i-b is present 

10101 

SS:[EBP-i-d32l 

10110 

DS:[ESI-i-d32] 

10111 

DS:[EDI + d32l 

11 000 

register — see below 

11 001 

register — see below 

11 010 

register — see below 

11 oil 

register — see below 

11 100 

register — see below 

11 101 

register — see below 

11 110 

register — see below 

11 111 

register — see below 


Register Specified by reg or r/m 
during 16-Bit Data Operations: 

mod r/m 

function of w field 

(when w = 0) 

(when w= 1) 

11 000 

AL 

AX 

11 001 

CL 

CX 

11 010 

DL 

DX 

11 oil 

BL 

BX 

11 100 

AH 

SP 

11 101 

CH 

BP 

11 110 

DH 

SI 

11 111 

BH 

Dl 


Register Specified by reg or r/m 
during 32-Bit Data Operations: 

mod r/m 

function of w field 

(when w=0) 

(when w= 1) 


11 000 

AL 

EAX 

11 001 

CL 

ECX 

11 010 

DL 

EDX 

11 oil 

BL 

EBX 

11 100 

AH 

ESP 

11 101 

CH 

EBP 

11 110 

DH 

ESI 

11 111 

BH 

EDI 
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Encoding of 32-bit Address Mode (“mod r/m” byte and “s-i-b” byte present): 


mod base 

Effective Address 

00 000 

DS:[EAX + (scaled index)] 

00 001 

DS:[ECX + (scaled index)] 

00 010 

DS:[EDX + (scaled index)] 

00 011 

DS:[EBX + (scaled index)] 

00 100 

SS: [ESP + (scaled index)] 

00 101 

DS;[d32 + (scaled index)] 

00110 

DS:[ES! -f (scaled index)] 

00 111 

DS:[EDI + (scaled index)] 

01 000 

DS: [EAX + (scaled index) + d8] 

01 001 

DS: [ECX + (scaled Index) + d8] 

01 010 

DS: [EDX + (scaled index) + d8] 

01 oil 

DS: [EBX + (scaled Index) + d8] 

01 100 

SS: [ESP + (scaled Index) + d8] 

01 101 

SS: [EBP + (scaled index) + d8] 

01 110 

DS: [ESI + (scaled index) + d8] 

01 111 

DS: [EDI + (scaled index) + d8] 

10 000 

DS: [EAX + (scaled index) + d32] 

10 001 

DS: [ECX + (scaled index) 4- d32] 

10010 

DS: [EDX + (scaled index) + d32] 

10011 

DS: [EBX + (scaled index) + d32] 

10100 

SS: [ESP + (scaled index) + d32] 

10101 

SS: [EBP + (scaled Index) + d32] 

10110 

DS: [ESI + (scaled index) + d32] 

10111 

DS:[EDI + (scaled index) 4- d32] 


ss 

Scale Factor 

00 

Xl 

01 

x2 

10 

x4 

11 

x8 


index 

index Register 

000 

EAX 

001 

ECX 

010 

EDX 

oil 

EBX 

100 

no index reg** 

101 

EBP 

110 

ESI 

111 

EDI 


♦•IMPORTANT NOTE: 

When index field is 100, indicating "no index register,” then 
ss field MUST equal 00. If index is 100 and ss does not 
equal 00, the effective address is undefined. 


NOTE: 

Mod field in “mod r/m” byte; ss, index, base fields in 
“s-i-b” byte. 
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9.2.3.5 ENCODING OF OPERATION DIRECTION 
(d) FIELD 


In many two-operand instructions the d field is pres- 
ent to indicate which operand is considered the 
source and which is the destination. 


d 

Direction of Operation 

0 

Register/ Memory <- - Register 
“reg” Field Indicates Source Operand; 

“mod r/m“ or “mod ss index base” Indicates 
Destination Operand 

1 

Register <- - Register/Memory 
“reg” Field Indicates Destination Operand; 
“mod r/m” or “mod ss index base” Indicates 
Source Operand 


9.2.3.6 ENCODING OF SIGN-EXTEND (s) FIELD 

The s field occurs primarily to instructions with im- 
mediate data fields. The s field has an effect only if 
the size of the immediate data is 8 bits and is being 
placed in a 16-bit or 32-bit destination. 



Effect on 

Effect on 

s 

Immediate Data8 

Immediate Data 16|32 

0 

None 

None 

1 

Sign-Extend Data8 to Fill 

1 6-Bit or 32-Bit Destination 

None 


9.2.3.7 ENCODING OF CONDITIONAL TEST 
(tttn) FIELD 

For the conditional Instructions (conditional jumps 
and set on condition), tttn is encoded with n indicat- 
ing to use the condition (n = 0) or its negation (n = 1 ), 
and ttt giving the condition to test. 


Mnemonic 

Condition 

tttn 

0 

Overflow 

0000 

NO 

No Overflow 

0001 

B/NAE 

Below/Not Above or Equal 

0010 

NB/AE 

Not Below/ Above or Equal 

0011 

E/Z 

Equal/Zero 

0100 

NE/NZ 

Not Equal/Not Zero 

0101 

BE/NA 

Below or Equai/Not Above 

0110 

NBE/A 

Not Below or Equal/Above 

0111 

S 

Sign 

1000 

NS 

Not Sign 

1001 

P/PE 

Parity/ Parity Even 

1010 

NP/PO 

Not Parity/ Parity Odd 

1011 

L/NGE 

Less Than/Not Greater or Equal 

1100 

NL/GE 

Not Less Than/Greater or Equal 

1101 

LE/NG 

Less Than or Equal/Greater Than 

1110 

NLE/G 

Not Less or Equal/Greater Than 

1111 


9.2.3.8 ENCODING OF CONTROL OR DEBUG 
OR TEST REGISTER (eee) FIELD 

For the loading and storing of the Control, Debug 
and Test registers. 


When Interpreted as Control Register Field 


eee Code 

Reg Name 

000 


CRO 

010 


CR2 

oil 


CR3 

Do not use any other encoding 


When Interpreted as Debug Register Field 


eee Code 

Reg Name 

000 

DRO 

001 

DR1 

010 

DR2 

oil 

DR3 

110 

DR6 

111 

DR7 

Do not use any other encoding 


When Interpreted as Test Register Field 


eee Code 

Reg Name 

110 


TR6 

111 


TR7 

Do not use any other encoding 
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DATA SHEET REVISION REVIEW 

The following list represents key differences between this and the -001 version of the 386 tm sX microproces- 
sor data sheet. Please review this summary carefully. 

The section significantly revised since version -002 is: 

Section 1 .0 Figure 1.1 was modified to also give pin names. Table 1 .1 was modified to list pin names 

in alphabetical order. 

The sections significantly revised since version -003 are: 

Table 7.3 modified to show new Iqq values at IS MHz and 20 MHz. 

Add 20 MHz A.C. Specifications in Table 7.5. Modified capacitive derating information in 
Tables 7.8 through 7.11. Modified typical Ice vs. frequency in Table 7.12. 


Section 7.4 
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MATH COPROCESSOR 


■ Interfaces with 386 tm sX 
Microprocessor 

■ Expands 386 SX CPU Data Types to 
Include 32-, 64-, 80-Bit Floating Point, 
32-, 64-Bit Integers and 18-Digit BCD 
Operands 

■ High Performance 80-Bit Internal 
Architecture 

■ Two to Three Times 8087/80287 
Performance at Equivalent Clock Speed 

■ Implements ANSI/IEEE Standard 754- 
1985 for Binary Floating-Point 
Arithmetic 

■ Fully compatible with the 387 'rM Math 
Coprocessor. Implements all 387 NPX 
architectural enhancements over 8087 
and 80287. 


■ Upward Object-Code Compatible from 
8087 and 80287 

■ Directly Extends 386 SX CPU 
Instruction Set to Trigonometric, 
Logarithmic, Exponential, and 
Arithmetic Instructions for All Data 
Types 

■ Full-Range Transcendental Operations 
for SINE, COSINE, TANGENT, 
ARCTANGENT, and LOGARITHM. 

■ Operates Independently of Real, 
Protected, and Virtual-8086 Modes of 
the 386 SX Microprocessor 

■ Eight 80-Bit Numeric Registers, Usable 
as Individually Addressable General 
Registers or as a Register Stack 

■ Available in a 68-pin PLCC Package 
(see Packaging Specs: Order #231369) 


The Intel 387 tm sx Math Coprocessor is an extension to the Intel 386 tm microprocessor architecture. The 
combination of the 387 SX with the 386 tm sX Microprocessor dramatically increases the processing speed of 
computer application software which utilizes mathematical operations. This makes an ideal computer worksta- 
tion platform for applications such as financial modeling and spreadsheets, CAD/CAM, or graphics. 


The 387 SX Math Coprocessor adds over seventy mnemonics to the 386 SX Microprocessor instruction set. 
Specific 387 SX math operations include logarithmic, arithmetic, exponentional, and triginometric functions. 
The 387 SX supports integer, extended integer, floating point and BCD data formats, and fully conforms to the 
ANSI/IEEE floating point standard. 


The 387 SX Math Coprocessor is object code compatible with the 387 tm dx and upward object code compati- 
ble from the 80287 and 8087 Math Coprocessors. The 387 SX is manufactured with Intel’s CHMOS III technol- 
ogy and packaged in a 68-pin PLCC package. A low power consumption option allows use In laptop or 
portable applications. 
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386TM SX Microprocessor Registers 

GENERAL REGISTERS SEGMENT REGISTERS 

15 0 


31 

16 15 0 

EAX 

—I 

< 

X 

< — 
X 
< 

EBX 

BX 

1 BH 1 BL 

ECX 

cx 

1 CH 1 CL 

EDX 

DX 

1 DH 1 DL 

ESI 

1 

EDI 

1 

EBP 

1 

ESP 

1 

1 


CS 


SS 

— I — 
DS 
— I — 

ES 

— I — 

FS 


GS 

— I — 


31 


EIP 
— I — 


EFLAGS 
H 1 


387TM SX NPX Data Registers 

Tag 

Field 

79 78 64 63 0 1 0 

RO 
R1 
R2 
R3 
R4 
R5 
R6 
R7 


79 78 64 63 0 


Sign 

Exponent 

Significand 























15 0 47 0 


Control Register 


Instruction Pointer (in CPU) 

Status Register 


Data Pointer (in CPU) 

Tag Word 



Figure 1-1. 386tm sx Microprocessor and 3877 M sx Math Coprocessor Register Set 


1.0 FUNCTIONAL DESCRIPTION 

The 387TM SX Math Coprocessor Extension (NPX) 
provides arithhietic instructions for a variety of nu- 
meric data types. It also executes numerous built-in 
transcendental functions (e.g. tangent, sine, cosine, 
and log functions). The 387 SX NPX effectively ex- 
tends the register and instruction set of its CPU for 
existing data types and adds several new data types 
as well. Figure 1 -1 shows the model of registers visi- 
ble to 386TM SX Microprocessor and 387 SX Math 
Coprocessor applications programs. Essentially, the 
387 SX Math Coprocessor can be treated as an ad- 
ditional resource or an extension to the 386 SX Mi- 
croprocessor. The 386 SX Microprocessor together 
with a 387 SX NPX can be used as a single unified 
system, the 386 SX Microprocessor and 387 SX 
Math Coprocessor. 

The 387 SX Numerics Coprocessor Extension works 
the same whether the CPU is executing in real-ad- 
dress mode, protected mode, or vlrtual-8086 mode. 
All references to memory for numerics data or status 
information are performed by the CPU, and there- 
fore obey the memory-management and protection 
rules of the CPU mode currently in effect. The 387 
SX Numerics Coprocessor Extension merely oper- 
ates on instructions and values passed to it by the 


CPU and therefore is not sensitive to the processing 
mode of the CPU. 

In real-address mode and virtual-8086 mode, the 

386 SX Microprocessor and 387 SX Math Coproces- 
sor is completely upward compatible with software 
for the 8086/8087 and 80286/80287 real-address 
mode systems. 

In protected mode, the 386 SX Microprocessor and 

387 SX Math Coprocessor is completely upward 
compatible with software for the 80286/80287 pro- 
tected mode system. 

In all modes, the 386 SX Microprocessor and 387 
SX Math Coprocessor is completely compatible with 
software for the 386tm Mlcroprocessor/387TM Math 
Coprocessor system. 

The only differences of operation that may appear 
when 8086/8087 programs are ported to the pro- 
tected-mode 386 SX Microprocessor and 387 SX 
Math Coprocessor system (not using virtual-8086 
mode) is in the format of operands for the adminis- 
trative instructions FLDENV, FSTENV, FRSTOR, 
and FSAVE. These instruction are normally used 
only by exception handlers and operating systems, 
not by applications programs. 
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2.0 PROGRAMMING INTERFACE 

The 387 SX NPX adds to an 386 SX Microprocessor 
system additional data types, registers, instructions, 
and interrupts specifically designed to facilitate high- 
speed numerics processing. To use the 387 SX NPX 
requires no special programming tools, because all 
new instructions and data types are directly support- 
ed by the assembler and compilers for high-level 
languages. All 386 Microprocessor development 
tools that support 387 NPX programs can also be 
used to develop software for the 386 SX Microproc- 
essor and 387 SX Math Coprocessor. All 8086/8088 
development tools that support the 8087 can also 
be used to develop software for the 386 SX Micro- 
processor and 387 SX Math Coprocessor in real-ad- 
dress mode or virtual-8086 mode. All 80286 devel- 
opment tools that support the 80287 can also be 
used to develop software for the 386 SX Microproc- 
essor and 387 SX Math Coprocessor. 

The 387 SX NPX supports all 387 NPX instructions. 
The 386 SX Microprocessor and 387 SX Math Co- 
processor supports all the same programs and gives 
the same results as an 386 Microprocessor and 387 
Math Coprocessor. 

All communication between the CPU and the NPX is 
transparent to applications software. The CPU auto- 
matically controls the NPX whenever a numerics in- 
struction is executed. All physical memory and virtu- 
al memory of the CPU are available for storage of 
the instructions and operands of programs that use 
the NPX. All memory addressing modes, including 
use of displacement, base register. Index register, 
and scaling, are available for addressing numerics 
operands. 

Section 7 at the end of this data sheet lists by class 
the instructions that the 387 SX NPX adds to the 
instruction set of an 386 SX Microprocessor system. 


2.1 Data Types 

Table 2-1 lists the seven data types that the NPX 
supports and presents the format for each type. Op- 
erands are stored in memory with the least signifi- 
cant digit at the lowest memory address. Programs 
retrieve these values by generating the lowest ad- 
dress. For maximum system performance, all oper- 
ands should start at physical-memory addresses 
that correspond to the word size of the CPU; oper- 
ands may begin at any other addresses, but will re- 
quire extra memory cycles to access the entire oper- 
and. 

Internally, the NPX holds all numbers in the extend- 
ed-precision real format. Instructions that load oper- 
ands from memory automatically convert operands 
represented in memory as 16-, 32-, or 64-bit inte- 
gers, 32- or 64-bit floating-point numbers, or 1 8-digit 
packed BCD numbers into extended-precision real 
format. Instructions that store operands in memory 
perform the inverse type conversion. 


2.2 Numeric Operands 

A typical NPX instruction accepts one or two oper- 
ands and produces one (or sometimes two) results. 
In two-operand instructions, one operand is the con- 
tents of an NPX register, while the other may be a 
memory location. The operands of some instructions 
are predefined; for example, FSQRT always takes 
the square root of the number in the top stack ele- 
ment. 
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Table 2-1, 387 tm sx NPX Data Type Representation in Memory 



240225-2 

NOTES: 

(1) S = Sign bit (0 = positive, 1 = negative) 

(2) dn = Decimal digit (two per byte) 

(3) X = Bits have no significance; NPX ignores when loading, zeros when storing 

(4) ^ = Position of implicit binary point 

(5) I = Integer bit of significand; stored in temporary real, implicit in single and double precision 

(6) Exponent Bias (normalized values): 

Single: 127 (7FH) 

Double: 1023 (3FFH) 

Extended REal: 16383 (3FFFH) 

(7) Packed BCD: (-I)S (D17..D0) 

(8) Real: (-I)S ( 2 E-BIAS) (Fq Fi...) 
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2.3 Register Set 

Figure 1-1 shows the 387 SX NPX register set. 
When an NPX is present in a system, programmers 
may use these registers in addition to the registers 
normally available on the CPU. 

2.3.1 DATA REGISTERS 

387 SX NPX computations use the NPX’s data regis- 
ters. These eight 80-bit registers provide the equiva- 
lent capacity of 20 32-bit registers. Each of the eight 
data registers in the NPX is 80 bits wide and is divid- 
ed into “fields” corresponding to the NPX’s extend- 
ed-precision real data type. 

The NPX register set can be accessed either as a 
stack, with instructions operating on the top one or 
two stack elements, or as individually addressable 
registers. The TOP field in the status word identifies 
the current top-of-stack register. A “push” operation 
decrements TOP by one and loads a value into the 
new top register. A “pop” operation stores the value 
from the current top register and then increments 
TOP by one. The NPX register stack grows “down” 
toward lower-addressed registers. 

Instructions may address the data registers either 
implicitly or explicitly. Many instructions operate on 
the register at the TOP of the stack. These instruc- 
tions implicitly address the register at which TOP 
points. Other Instructions allow the programmer to 
explicitly specify which register to use. This explicit 
register addressing is also relative to TOP. 


2.3.2 TAG WORD 

The tag word marks the content of each numeric 
data register, as Figure 2-1 shows. Each two-bit tag 
represents one of the eight data registers. The prin- 
cipal function of the tag word is to optimize the 
NPX’s performance and stack handling by making it 
possible to distinguish between empty and nonemp- 
ty register locations. It also enables exception han- 
dlers to identify special values (e.g. NaNs or denor- 
mals) in the contents of a stack location without the 
need to perform complex decoding of the actual 
data. 


2.3.3 STATUS WORD 

The 1 6-bit status word (in the status register) shown 
in Figure 2-2 reflects the overall state of the NPX. It 
may be read and inspected by programs. 

Bit 15, the B-bit (busy bit) is included for 8087 com- 
patibility only. It always has the same value as the 
ES bit (bit 7 of the status word); it does not indicate 
the status of the BUSY# output of NPX. 

Bits 13-11 (TOP) point to the NPX register that is 
the current top-of-stack. 

The four numeric condition code bits (C 3 -C 0 ) are 
similar to the flags in a CPU; instructions that per- 
form arithmetic operations update these bits to re- 
flect the outcome. The effects of these instructions 
on the condition code are summarized in Tables 2-2 
through 2-5. 


15 0 


TAG (7) 

TAG ( 6 ) 

TAG (5) 

TAG (4) 

TAG (3) 

TAG (2) 

TAG (1) 

TAG (0) 


NOTE: 

The index i of tag(i) is not top-relative. A program typically uses the “top” field of Status Word to determine which tag(i) 
field refers to logical top of stack, 

TAG VALUES; 

00 = Valid 

01 = Zero 

10 = QNaN, SNaN, Infinity, Denormal and Unsupported Formats 

11 = Empty 


Figure 2-1. Tag Word 
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ES is set if any unmasked exception bit is set; cleared otherwise. See Table 2-2 for Interpretation of condition code. 
TOP values: 

000 = Register 0 is Top of Stack 

001 = Register 1 Is Top of Stack 


111= Register 7 Is Top of Stack 

For definitions of exceptions, refer to the section entitled “Exception Handling” 


Figure 2-2. Status Word 


Bit 7 is the error summary (ES) status bit. This bit is 
set if any unmasked exception bit is set; it is clear 
otherwise, if this bit is set, the ERROR# signai is 
asserted. 

Bit 6 is the stack flag (SF). This bit is used to distin- 
guish invalid operations due to stack overflow or un- 
derflow from other kinds of invalid operations. When 
SF is set, bit 9 (Ci) distinguishes between stack 
overflow (Ci = 1) and underflow (Ci =0). 


Note that when a new value Is loaded into the status 
word by the FLDENV or FRSTOR Instruction, the 
value of ES (bit 7) and its refieciion in the B-bii (bit 
15) are not derived from the values loaded from 
memory but rather are dependent upon the values of 
the exception flags (bits 5-0) In the status word and 
their corresponding masks in the control word. If ES 
is set in such a case, the ERROR# output of the 
NPX Is activated immediately. 


Figure 2-2 shows the six exception flags in bits 5-0 
of the status word. Bits 5-0 are set to indicate that 
the NPX has detected an exception while executing 
an instruction. A later section entitled “Exception 
Handling” explains how they are set and used. 
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Table 2-2. Condition Code Interpretation 


Instruction 

CO (S) C3 (Z) 

Cl (A) 

C2(C) 

FPREM, FPREM1 
(see Table 2.3) 

Three least significant bits 
of quotient 

Q2 QO 

01 

or 0/U# 

Reduction 

0 = complete 

1 = incomplete 

FCOM, FCOMP. 
FCOMPP, FTST, 
FUCOM, FUCOMP, 
FUCOMPP, FICOM, 
FICOMP 

Result of comparison 
(see Table 2.4) 

Zero 
or 0/U# 

Operand is not 
comparable 
(Table 2:4) 

FXAM 

Operand class 
(see Table 2.5) 

Sign 

or 0/U# 

Operand class 
(Table 2.5) 

FCHS, FABS, FXCH, 
FINCSTP, FDECSTP, 
Constant loads, 
FXTRACT, FLD, 

FILD, FBLD, 

FSTP (ext real) 

UNDEFINED 

Zero 

or 0/U# 

UNDEFINED 

FIST, FBSTP, 

FRNDINT, FST, 

FSTP, FADD, FMUL, 
FDIV, FDIVR, 

FSUB, FSUBR, 

FSCALE, FSQRT, 
FPATAN, F2XM1, 
FYL2X, FYL2XP1 

UNDEFINED 

Roundup 
or 0/U# 

UNDEFINED 

FPTAN, FSIN 

FCOS, FSINCOS 

/ 

UNDEFINED 

Roundup 
or 0/U#, 
undefined 
if C2 = 1 

Reduction 

0 = complete 

1 = incomplete 

FLDENV, FRSTOR 

Each bit loaded from memory 

FLDCW, FSTENV, 
FSTCW, FSTSW, 
FCLEX, FINIT, 

FSAVE 

UNDEFINED 

0/U# When both IE and SF bits of status word are set, indicating a stack exception, this bit 

distinguishes between stack overflow (Cl = 1) and underflow (C1 =0). 

Reduction If FPREM or FPREM1 produces a remainder that is less than the modulus, reduction Is 

complete. When reduction is incomplete the value at the top of the stack is a partial remain- 
der, which can be used as input to further reduction. For FPTAN, FSIN, FCOS,and FSIN- 
COS, the reudctlon bit is set if the oeprand at the top of the stack is too large. In this case 
the original operand remains at the top of the stack. 

Roundup When the PE bit of the status word is set, this bit indicates whether the last rounding in the 

instruction was upward. 

UNDEFINED Do not rely on finding any specific value in these bits. 
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Table 2-3. Condition Code Interpretation after FPREM and FPREM1 Instructions 



Table 2-4. Condition Code Resulting from Comparison 


Order 

C3 

C2 

CO 

TOP > Operand 

0 

0 

0 

TOP < Operand 

0 

0 

1 

TOP = Operand 

1 

0 

0 

Unordered 

1 

1 

1 


Table 2.5. Condition Code Defining Operand Class 


C3 

C2 

Cl 

CO 

Value at TOP 

0 

0 

0 

0 

+ Unsupported 

0 

0 

0 

1 

+ NaN 

rt 

r» 

A 

r\ 


\j 

\j 

1 

\J 

V^IIOU|^pUI lOU 

0 

0 

1 

1 

- NaN 

0 

1 

0 

0 

+ Normal 

0 

1 

0 

1 

+ Infinity 

0 

1 

1 

0 

- Normal 

0 

1 

1 

1 

- Infinity 

1 

0 

0 

0 

+ 0 

1 

0 

0 

1 

+ Empty 

1 

0 

1 

0 

- 0 

1 

0 

1 

1 

- Empty 

1 

1 

0 

0 

+ Denormal 

1 

1 

1 

0 

- Denormal 
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15 7 0 




m 

m 


p 

U 

0 

Z 

FI 

n 

X 

X 

X 

X 

RC 

PC 

X X 

mJ 

M 

M 

M 

M 

L-J 


L] 


RESERVED 
RESERVED* 
ROUNDING CONTROL 
PRECISION CONTROL 


RESERVED 

EXCEPTION MASKS: 

PRECISION 

UNDERFLOW 

OVERFLOW 

ZERO DIVIDE 

DENORMALIZED OPERAND 

INVALID OPERATION 

Precision Control 

00 — 24 bits (single precision) 

01 — (reserved) 

10 — 53 bits (double precision) 

11 — 64 bits (extended precision) 


•"0” AFTER RESET OR FINIT; 
CHANGEABLE UPON LOADING THE 
CONTROL WORD(CW). PROGRAMS 
MUST IGNORE THIS BIT. 


240225-4 

Rounding Control 

00 — Round to nearest or even 

01 — Round down (toward — oo) 

10 — Round up (toward + «») 

11 — Chop (truncate toward zero) 


Figure 2-3. Control Word 


2.3.4 CONTROL WORD 

The NPX provides several processing options that 
are selected by loading a control word from memory 
into the control register. Figure 2-3 shows the format 
and encoding of fields in the control word. 

The low-order byte of this control word configures 
exception masking. Bits 5-0 of the control word 
contain individual masks for each of the six excep- 
tions that the NPX recognizes. 

The high-order byte of the control word configures 
the NPX operating mode, Including precision, round- 
ing, and infinity control. 

• The “infinity control bit” (bit 12) is not meaningful 
to the 387 SX NPX, and programs must ignore its 
value. To maintain compatibility with the 8087 
and 80287, this bit can be programmed; however, 
regardless of its value, the 387 SX NPX always 
treats infinity in the affine sense (- <» < + oo). 
This bit is initialized to zero both after a hardware 
reset and after the FINIT instruction. 


• The rounding control (RC) bits (bits 11-10) pro- 
vide for directed rounding and true chop, as well 
as the unbiased round to nearest even mode 
specified in the IEEE standard. Rounding control 
affects only those instructions that perform 
rounding at the end of the operation (and thus 
can generate a precision exception); namely, 
FST, FSTP, FIST, all arithmetic instructions (ex- 
cept FPREM, FPREM1, FXTRACT, FABS, and 
FCHS), and all transcendental Instructions. 

• The precision control (PC) bits (bits 9-8) can be 
used to set the NPX internal operating precision 
of the significand at less than the default of 64 
bits (extended precision). This can be useful In 
providing compatibility with early generation arith- 
metic processors of smaller precision. PC affects 
only the Instructions ADD, SUB, DIV, MUL, and 
SORT. For all other instructions, either the preci- 
sion is determined by the opcode or extended 
precision is used. 
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2.3.5 INSTRUCTION AND DATA POINTERS 

Because the NPX operates in parallel with the CPU, 
any exceptions detected by the NPX may be report- 
ed after the CPU has executed the ESC instruction 
which caused it. To allow identification of the falling 
numeric instruction, the 386 SX Microprocessor and 
387 SX Math Coprocessor contains registers that 
aid In diagnosis. These registers supply the address 
of the failing instruction and the address of its nu- 
meric memory operand (if appropriate). 

The instruction and data pointers are provided for 
user-written exception handlers. These registers are 
actually located in the CPU, but appear to be located 
in the NPX because they are accessed by the ESC 
instructions FLDENV, FSTENV, FSAVE, and 


FRSTOR. Whenever the CPU executes a new ESC 
Instruction, it saves the address of the Instruction 
(including any prefixes that may be present), the ad- 
dress of the operand (if present), and the opcode. 

The instruction and data pointers appear in one of 
four formats depending on the operating mode of 
the CPU (protected mode or real-address mode) 
and depending on the operand-size attribute in ef- 
fect (32-blt operand or 16-bit operand). (See Figures 
2-4, 2-5, 2-6, and 2-7.) The ESC Instructions 
cri ncM\/ ircTCMV/ ircA\/c: onri CDCTno or/a 

I ^ V y I W I ^ V ) I W# % V ^1 W4I ISA I I IW I Wl I Ml V4WWM 

to transfer these values between the registers and 
memory. Note that the value of the data pointer Is 
undefined if the prior ESC Instruction did not have a 
memory operand. 


32-BIT PROTECTED MODE FORMAT 


31 23 15 7 0 


^ 

RESERVED 

1 

^ ^ 

CONTROL WORD 

I 

1 

RESERVED 

1 

I 

STATUS WORD 

I 

1 

RESERVED 

1 

I 

TAG WORD 

I 

1 

IP OF 

I 

FS'ET 

I 

00000 OPCODE 10..0 

I 

CS SELECTOR 

I 

DATA OPER/ 
I I 

I 

\ND OFFSET 

I 

I 

RESERVED I 

^ — 1 

I 

OPERAND SELECTOR 

1 : 


Figure 2-4.1nstruction and Data Pointer Image in Memory, 32-bit Protected-Mode Format 
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16-BIT PROTECTED MODE FORMAT 



15 7 0 

1 



1 

CONTROL WORD 

1 

0 


1 

STATUS WORD 

1 

2 


1 

TAG WORD 

1 

4 


1 

IP OFFSET 

1 

6 


1 

CS SELECTOR 

1 

8 


1 

OPERAND OFFSET 

1 

A 


1 

OPERAND SELECTOR 

1 

C 


Figure 2-5. Instruction and Data Pointer Image in Memory, 16-bit Protected-Mode Format 


32-BlT REAL-ADDRESS MODE FORMAT 

31 23 15 7 0 


1 

RESERVED 

1 

1 

CONTROL WORD 

I 

RESERVED 

1 

STATUS WORD 

I 

RESERVED 

1 

TAG WORD 

I 

RESERVED 

1 

INSTRUCTION POINTER 15..0 

0000 

INSTRUCTION POINTER 31.. 16 

1 


0 OPCODE 10..0 

RESERVED 

OPERAND POINTER 15..0 

0000 

OPERAND POINTER 31.. 16 
1 

— 

0000 ' 00000000 
1 ; 


Figure 2-6. Instruction and Data Pointer Image in Memory, 32-bit Real-Mode Format 


16-BIT REAL-ADDRESS MODE AND VIRTUAL 8086 MODE FORMAT 


15 


7 0 

1 



1 

CONTROL WORD 

1 

0 


1 

STATUS WORD 

2 


TAG WORD 

1 

4 


INSTRUCTION POINTER 15..0 

I 

6 


IP19.16 

0 

OPCODE 10..0 

1 

8 


OPERAND POINTER 15..0 

A 


DP 19.16 

0 

0000000000 0 

C 


Figure 2-7. instruction and Data Pointer Image in Memory, 16-bit Real-Mode Format 
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Table 2-6. CPU Interrupt Vectors Reserved for NPX 


Interrupt 

Number 

Cause of Interrupt 

7 

An ESC Instruction was encountered when EM or TS of CPU control register zero (CRO) was 
set. EM = 1 indicates that software emulation of the instruction is required. When TS is set, 
either an ESC or WAIT Instruction causes Interrupt 7. This indicates that the current NPX 
context may not belong to the current task. 

9 

In a protected-mode system, an operand of a coprocessor instruction wrapped around an 
addressing limit (OFFFFH for expand-up segments, zero for expand-down segments) and 
spanned inaccessible addresses^. The failing numerics Instruction is not restartable. The 
address of the failing numerics instruction and data operand may be lost; an FSTENV does not 
return reliable addresses. The segment overrun exception should be handled by executing an 
FNINIT Instruction (i.e. an FI NIT without a preceding WAIT). The exception can be avoided by 
never allowing numerics operands to cross the end of a segment. 

13 

In a protected-mode system, the first word of a numeric operand is not entirely within the limit 
of its segment. The return address pushed onto the stack of the exception handler points at the 
ESC instruction that caused the exception, including any prefixes. The NPX has not executed 
this instruction; the Instruction pointer and data pointer register refer to a previous, correctly 
executed instruction. 

16 

The previous numerics instruction caused an unmasked exception. The address of the faulty 
instruction and the address of its operand are stored in the instruction pointer and data pointer 
registers. Only ESC and WAIT instructions can cause this Interrupt. The CPU return address 
pushed onto the stack of the exception handler points to a WAIT or ESC instruction (including 
prefixes). This Instruction can be restarted after clearing the exception condition in the NPX. 
FNINIT, FNCLEX, FNSTSW, FNSTENV, and FNSAVE cannot cause this interrupt. 


a. An operand may wrap around an addressing limit when the segment limit is near an addressing limit and the operand is 
near the largest valid address in the segment. Because of the wrap-around, the beginning and ending addresses of such an 
operand will be at opposite ends of the segment. There are two ways that such an operand may also span inaccessible 
addresses: 1 ) if the segment limit is not equal to the addressing limit (e.g. addressing limit is FFFFH and segment limit is 
FFFDH) the operand will span addresses that are not within the segment (e.g, an 8-byte operand that starts at valid offset 
FFFCH will span addresses FFFC- FFFFH and 0000-0003H; however addresses FFFEH and FFFFH are not valid, because 
they exceed the limit); 2) if the operand begins and ends in present and accessible segments but intermediate bytes of the 
operand fall In a not-present page or in a segment or page to which the procedure does not have access rights. 


2.4 Interrupt Description 

CPU interrupts are used to report exceptional condi- 
tions while executing numeric programs in either real 
or protected mode. Table 2-6 shows these interrupts 
and their functions. 

2.5 Exception Handling 

The NPX detects six different exception conditions 
that can occur during instruction execution. Table 2- 
7 lists the exception conditions in order of prece- 
dence, showing for each the cause and the default 
action taken by the NPX If the exception is masked 
by Its corresponding mask bit in the control word. 

Any exception that is not masked by the control 
word sets the corresponding exception flag of the 
status word, sets the ES bit of the status word, and 
asserts the ERROR# signal. When the CPU at- 
tempts to execute another ESC instruction or WAIT, 
exception 16 occurs. The exception condition must 
be resolved via an interrupt service routine. The re- 
turn address pushed onto the CPU stack upon entry 


to the service routine does not necessarily point to 
the failing instruction nor to the following instruction. 
The CPU saves the address of the floating-point In- 
struction that caused the exception and the address 
of any memory operand required by that Instruction. 

2.6 Initialization 

After FNINIT or RESET, the control word contains 
the value 037FH (all exceptions masked, precision 
control 64 bits, rounding to nearest) the same values 
as in an 80287 after RESET. For compatibility with 
the 8087 and 80287, the bit that used to indicate 
infinity control (bit 12 ) is set to zero; however, re- 
gardless of its setting, infinity Is treated in the affine 
sense. After FNINIT or RESET, the status word is 
initialized as follows: 

• All exceptions are set to zero. 

• Stack TOP Is zero, so that after the first push the 
stack top will be register seven ( 111 B). 

• The condition code C 3 -C 0 is undefined. 

• The B-bit is zero. 
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Table 2-7. Exceptions 


Exception 

Cause 

Default Action 
(if exception is masked) 

Invalid 

Operation 

Operation on a signalling NaN, unsupported format, 
indeterminate for (O-qo, 0/0, (+ ^) + (- °°), etc.), or 
stack overflow/underflow (SF is also set) 

Result is a quiet NaN, integer 
indefinite, or BCD indefinte 

Denormallzed 

Operand 

At least one of the operands Is denormallzed, i.e., it has 
the smallest exponent but a nonzero significand. 

Normal processing 
continues 

Zero Divisor 

The divisor is zero while the dividend is a noninfinite, 
nonzero number 

Result is 00 

Overflow 

The result is too large in magnitude to fit in the specified 
format 

Result is largest finite 
value or 00 

Underflow 

The true result is nonzero but too small to be 
represented in the specified format, and, if underflow 
exception is masked, denormalization causes the loss of 
accuracy. 

Result is denormallzed 

or zero 

Inexact 

Result 

(Precision 

The true result Is not exactly representable in the 
specified format (e.g. 1 /3); the result is rounded 
according to the rounding mode. 

Normal processing 
continues 


The tag word contains FFFFH (all stack locations 
are empty). 

The 386 SX Microprocessor and 387 SX Math Co- 
processor Initialization software must execute an 
FNINIT instruction (i.e an FINIT without a preceding 
WAIT) after RESET. The FNINIT Is not strictly re- 
quired for the 80287 software, but Intel recommends 
its use to help ensure upward compatibility with oth- 
er processors. After a hardware RESET, the ER- 
ROR# output is asserted to indicate that a 387 SX 
NPX is present. To accomplish this, the IE and ES 
bits of the status word are set, and the IM bit in the 
control word is cleared. After FNINIT, the status 
word and the control word have the same values as 
in an 80287 after RESET. 


2.7 8087 and 80287 Compatibility 

This section summarizes the differences between 
the 387 SX NPX and the 80287. Any migration from 
the 8087 directly to the 387 SX NPX must also take 
into account the differences between the 8087 and 
the 80287 as listed in Appendix A. 

Many changes have been designed into the 387 SX 
NPX to directly support the IEEE standard in hard- 
ware. These changes result in increased perform- 
ance by eliminating the need for software that sup- 
ports the standard. 


2.7.1 GENERAL DIFFERENCES 

The 387 SX NPX supports only affine closure for 
infinity arithmetic, not projective closure. 

Operands for FSCALE and FPATAN are no longer 
restricted in range (except for ±oo); F2XM1 and 
FPTAN accept a wider range of operands. 

Rounding control is In effect for FLD constant. 

Software cannot change entries of the tag word to 
values (other than empty) that differ from actual reg- 
ister contents. 

After reset, FINIT, and incomplete FPREM, the 387 
SX NPX resets to zero the condition code bits C 3 - 
Cq of the status word. 

In conformance with the IEEE standard, the 387 SX 
NPX does not support the special data formats 
pseudozero, pseudo-NaN, pseudoinfinity, and un- 
normal. 

The denormal exception has a different purpose on 
the 387 SX NPX. A system that uses the denormal- 
exception handler solely to normalize the denormal 
operands, would better mask the denormal excep- 
tion on the 387 SX NPX. The 387 SX NPX automati- 
cally normalizes denormal operands when the de- 
normal exception is masked. 
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2.7.2 EXCEPTIONS 


A number of differences exist due to changes in the 
IEEE standard and to functional improvements to 
the architecture of the 387 SX NPX: 

1 . When the overflow or underflow exception is 
masked, the 387 SX NPX differs from the 80287 
in rounding when overflow or underflow occurs. 
The 387 SX NPX produces results that are con- 
sistent with the rounding mode. 

2. When the underflow exception is masked, the 
387 SX NPX sets its underflow flag only if there 
is also a loss of accuracy during denormaliza- 
tion. 

3. Fewer invalid-operation exceptions due to de- 
normal operands, because the instructions 
FSQRT, FDIV, FPREM, and conversions to BCD 
or to integer normalize denormal operands be- 
fore proceeding. 

4. The FSQRT, FBSTP, and FPREM instructions 
may cause underflow, because they support de- 
normal operands. 

5. The denormal exception can occur during the 
transcendental instructions and the EXTRACT 
instruction. 

6. The denormal exception no longer takes prece- 
dence over all other exceptions. 

7. When the denormal exception Is masked, the 
387 SX NPX automatically normalizes denormal 
operands. The 8087/80287 performs unnormal 
arithmetic, which might produce an unnormal re- 
sult. 


8. When the operand is zero, the EXTRACT in- 
struction reports a zero-divide exception and 
leaves - oo in ST(1). 


9. The status word has a new bit (SF) that signals 


stack underflow or overflow. 


10. FLD extended precision no longer reports denor- 
mal exceptions, because the Instruction is not 
numeric. 


1 1 . FLD single/double precision when the operand 
is denormal converts the number to extended 
precision and signals the denormalized operand 
exception. When loading a signalling NaN, FLD 
single/double precision signals an invalid-oper- 
and exception. 

12. The 387 SX NPX only generates quiet NaNs (as 
on the 80287); however, the 387 SX NPX distin- 
guishes between quiet NaNs and signaling 
NaNs. Signaling NaNs trigger exceptions when 
they are used as operands; quiet NaNs do not 
(except for FCOM, FIST, and FBSTP which also 
raise IE for quiet NaNs). 

13. When stack overflow occurs during FPTAN and 
overflow is masked, both ST(0) and ST(1) con- 


tain quiet NaNs. The 80287/8087 leaves the 
original operand in ST(1) intact. 

14. When the scaling factor Is ±oo, the FSCALE 
(ST(0), ST(1)) instruction behaves as follows 
(ST(0) and ST(1) contain the scaled and scaling 
operands respectively): 

• FSCALE(0,oo) generates the Invalid operation 
exception. 

♦ FSCALE(flnite, - generates zero with the 
same Sign as the scaled operand. 

* FSCALE(nniie, -i-<j^) generates «« with the 
same sign as the scaled operand: 

The 8087/80287 returns zero in the first case 
and raises the invalid-operation exception in the 
other cases. 

1 5. The 387 SX NPX returns signed infInIty/zero as 
the unmasked response to massive overflow/ 
underflow. The 8087 and 80287 support a limit- 
ed range for the scaling factor; within this range 
either massive overflow/underiflow do not occur 
or undefined results are produced. 


3.0 HARDWARE INTERFACE 

In the following description of hardware Interface, 
the # symbol at the end of a signal name indicates 
that the active or asserted state occurs when the 
signal is at a low voltage. When no # is present after 
the signal name, the signal is asserted when at the 
high voltage level. 


3.1 Signal Description 

In the following signal descriptions, the 387 SX NPX 
pins are grouped by function as shown by Table 3-1. 
Table 3-1 lists every pin by its identifier, gives a brief 
description of its function, and lists some of Its char- 
acteristics (Refer to Figure 5-1 and Table 5-1 for pin 
configuration). 











1 







INTERFACE 

SYNCHRONOUS 




BUS 



CPUCLK2 -J 











NUMERIC 

CORE 

ASYNCHRONOUS 


CPU 

1 587'^SX NPX 





240225-21 


Figure 3.1. Asynchronous Operation 
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Table 3-1. Pin Summary 


Pin 

Function 

Active 

Input/ 

Referenced 

Name 

State 

Output 

To... 

Execution Control | 

CPUCLK2 

386TM SX Microprocessor CLocK 2 


1 


NUMCLK2 

NPX CLOCK 2 


1 


CKM 

NPX ClocKing Mode 


1 


RESETIN 

System reset 

High 

1 

CPUCLK2 

NPX Handshake | 

PEREQ 

Processor Extension REQuest 

High 

0 

STEN/CPUCLK2 

BUSY# 

Busy status 

Low 

0 

STEN/CPUCLK2 

ERROR# 

Error status 

Low 

0 

STEN/NUMCLK2 

Bus Interface 

D15-D0 

Data pins 

High 

I/O 

CPUCLK2 

W/R# 

Write/Read bus cycle 

Hi/Lo 

1 

CPUCLK2 

ADS# 

ADdress Strobe 

Low 

1 

CPUCLK2 

READY# 

Bus ready input 

Low 

1 

CPUCLK2 

READYO# 

Ready output 

Low 

0 

STEN/CPUCLK2 

Chip/Port Select | 

STEN 

STatus ENable 

High 

1 

CPUCLK2 

NPS1# 

NPX select #1 

Low 

1 

CPUCLK2 

NPS2 

NPX select #2 

High 

1 

CPUCLK2 

CMDO# 

CoMmanD 

Low 

1 

CPUCLK2 

Power and Ground | 

Vcc 

System power 




Vss 

System ground 





All output signals are tristate; they leave floating 
state only when STEN is active. The output buffers 
.of the bidirectional data pins D15-D0 are also tri- 
state; they leave floating state only during cycles 
when the NPX is selected (i.e. when STEN, NPS1 #, 
and NPS2 are all active). 


3.1.1 386TM SX CPU CLOCK 2 (CPUCLK2) 

This input uses the CLK2 signal of the CPU to time 
the bus control logic. Several other NPX signals are 
referenced to the rising edge of this signal. When 
CKM = 1 (synchronous mode) this pin also clocks 
the data Interface and control unit and the floating- 
point unit of the NPX. This pin requires MOS-level 
input. The signal on this pin Is divided by two to pro- 
duce the internal clock signal CLK. 


3.1.2 387 TM SX NPX CLOCK 2 (NUMCLK2) 

When CKM = 0 (asynchronous mode) this pin pro- 
vides the clock for the data interface and control unit 
and the floating-point unit of the NPX. In this case, 
the ratio of the frequency of NUMCLK2 to the fre- 
quency of CPUCLK2 must lie within the range 10:16 
to 14:10. When CKM = 1 (synchronous mode) sig- 
nals on this pin are ignored; CPUCLK2 Is used in- 
stead for the data interface and control unit and the 
floating-point unit. This pin requires MOS-level input. 


3.1.3 CLOCKING MODE (CKM) 

This pin is a strapping option. When it is strapped to 
Vcc (HIGH), the NPX operates in synchronous 
mode; when strapped to Vss (LOW), the NPX oper- 
ates in asynchronous mode. These modes relate to 
clocking of the data interface and control unit and 
the floating-point unit only; the bus control logic al- 
ways operates synchronously with respect to the 
CPU. 

3.1.4 SYSTEM RESET (RESETIN) 

A LOW to HIGH transition on this pin causes the 
NPX to terminate Its present activity and to enter a 
dormant state. RESETIN must remain actlye (HIGH) 
for at least 40 NUMCLK2 periods. 

The HIGH to LOW transitions of RESETIN must be 
synchronous with CPUCLK2, so that the phase of 
the internal clock of the bus control logic (which is 
the CPUCLK2 divided by two) is the same as the 
phase of the internal clock of the CPU. After RESE- 
TIN goes LOW, at least 50 NUMCLK2 periods must 
pass before the first NPX instruction Is written into 
the NPX. This pin should be connected to the CPU 
RESET pin. Table 3-1 shows the status of the output 
pins during the reset sequence. After a reset, all out- 
put pins return to their Inactive states. 


4-521 




387 TM SX MATH COPROCESSOR 


APMKl©! 0(f!flF®[^(i!tlATD©[r!fl 


inl^ 


Table 3-2. Output Pin Status during Reset 


Pin Value 

Pin Name 

HIGH 

LOW 

Tri-State OFF 

READYO#, BUSY# 
PEREQ, ERROR# 
D15-D0 


3.1.5 PROCESSOR EXTENSION REQUEST 
(PEREQ) 

When active, this pin signals to the CPU that the 
NPX Is ready for data transfer to/from its data FIFO. 
When all data is written to or read from the data 
FIFO, PEREQ is deactivated. This signal always 
goes Inactive before BUSY# goes inactive. This sig- 
nal is referenced to CPUCLK2. It should be connect- 
ed to the CPU PEREQ input. 


3.1.6 BUSY STATUS (BUSY#) 

When active, this pin signals to the CPU that the 
NPX is currently executing an instruction. This signal 
is referenced to CPUCLK2. It should be connected 
to the CPU BUSY# pin. 


3.1.7 ERROR STATUS (ERROR#) 

This pin reflects the ES bit of the status register. 
When active, it indicates that an unmasked excep- 
tion has occurred. This signal can be changed to 
inactive state only by the following instructions (with- 
out a preceding WAIT): FNINIT, FNCLEX, 
FNSTENV, FNSAVE, FLDCW, FLDENV, and 
FRSTOR. This pin is referenced to CPUCLK2. It 
should be connected to the ERROR# pin of the 
CPU. 


3.1.8 DATA PINS (D15-D0) 

These bidirectional pins are used to transfer data 
and opcodes between the CPU and NPX. They are 
normally connected directly to the corresponding 
CPU data pins. HIGH state Indicates a value of one. 
DO is the least significant data bit. Timings are refer- 
enced to CPUCLK2. 


3.1.9 WRITE/READ BUS CYCLE (W/R#) 

This signal indicates to the NPX whether the CPU 
bus cycle in progress is a read or a write cycle. This 
pin should be connected directly to the CPU’s 
W/R# pin. HIGH indicates a write cycle; LOW a 
read cycle. This input Is ignored if any of the signals 
STEN, NPS1 #, or NPS2 is inactive. Setup and hold 
times are referenced to CPUCLK2. 


3.1.10 ADDRESS STROBE (ADS#) 

This input, in conjunction with the READY# Input, 
Indicates when the NPX bus-control logic may sam- 
ple W/R# and the chip-select signals. Setup and 
hold times are referenced to CPUCLK2. This pin 
should be connected to the ADS# pin of the CPU. 

3.1.11 BUS READY INPUT (READY#) 

This input indicates to the NPX when a CPU bus 
cycle Is to be terminated. It is used by the bus-con- 
trol logic to trace bus activities. Bus cycles can be 
extended indefinitely until terminated by READY#. 
This input should be connected to the same signal 
that drives the CPU’s READY# input. Setup and 
hold times are referenced to CPUCLK2. 

3.1.12 READY OUTPUT (READYO#) 

This pin is activated at such a time that write cycles 
are terminated after two clocks (except FLDENV 
and FRSTOR) and read cycles after three clocks. In 
configurations where no extra wait states are re- 
quired, this pin must directly or indirectly drive the 
READY# input of the CPU. Refer to the section enti- 
tled “Bus Operation” for details. This pin is activated 
only during bus cycles that select the NPX. This sig- 
nal Is referenced to CPUCLK2. 

3.1.13 STATUS ENABLE (STEN) 

This pin serves as a chip select for the NPX. When 
Inactive, this pin forces, BUSY#, PEREQ#, ER- 
ROR#, and READYO# outputs into floating state. 
D15-D0 are normally floating; they leave floating 
state only if STEN is active and additional conditions 
or-Q STEM also causes the chip to roccgnizs its 
other chip-select inputs. STEN makes it easier to do 
on-board testing (using the overdrive method) of 
other chips In systems containing the NPX. STEN 
should be pulled up with a resistor so that it can be 
pulled down when testing. In boards that do not use 
on-board testing. STEN should be connected to 
Vcc- Setup and hold times are relative to CPUCLK2. 
Note that STEN must maintain the same setup and 
hold times as NPS1#, NPS2, and CMDO# (i.e. if 
STEN changes state during an NPX bus cycle, it 
must change state during the same CLK period as 
the NPS1 #, NPS2, and CMDO# signals). 

3.1.14 NPX SELECT 1 (NPS1#) 

When active (along with STEN and NPS2) in the first 
period of a CPU bus cycle, this signal Indicates that 
the purpose of the bus cycle is to communicate with 
the NPX. This pin should be connected directly to 
the M/IO# pin of the CPU, so that the NPX is select- 
ed only when the CPU performs I/O cycles. Setup 
and hold times are referenced to CPUCLK2. 
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3.1.15 NPX SELECT 2 (NPS2) 

When active (along with STEM and NPS1 #) in the 
first period of a CPU bus cycle, this signal indicates 
that the purpose of the bus cycle is to communicate 
with the NPX. This pin should be connected directly 
to the A23 pin of the CPU, so that the NPX is select- 
ed only when the CPU issues one of the I/O ad- 
dresses reserved for the NPX (8000F8H, 8000FCH 
or 8000FEH which is treated as 8000FCH by the 
NPX). Setup and hold times are referenced to 
CPUCLK2. 


3.1.17 SYSTEM POWER (Vcc) 

System power provides the +5V DC supply input. 
All Vcc pins should be tied together on the circuit 
board and local decoupling capacitors should be 
used between Vcc and Vss- 

3.1.18 SYSTEM GROUND (Vss) 

All Vss pins should be tied together on the circuit 
board and local decoupling capacitors should be 
used between Vcc and Vss- 


3.1.16 COMMAND (CMDO#) 

During a write cycle, this signal indicates whether an 
opcode (CMDO# active) or data (CMDO# inactive) 
is being sent to the NPX. During a read cycle, it indi- 
cates whether the control or status register (CMDO# 
active) or a data register (CMDO# Inactive) is being 
read. CMDO# should be connected directly to the 
A2 output of the CPU. Setup and hold times are ref- 
erenced to CPUCLK2. 


3.2 System Configuration 

The 387 SX Math Coprocessor is designed to inter- 
face with the 386 SX Microprocessor as shown by 
Figure 3-1. A dedicated communication protocol 
makes possible high-speed transfer of opcodes and 
operands between the CPU and NPX. The 387 SX 
NPX is designed so that no additional components 
are required for interface with the CPU. Most control 
pins of the NPX are connected directly to pins of the 
CPU. 
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Figure 3 - 1 . 386tm sx CPU and 387tm sx NPX System Configuration 
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The interface between the NPX and the CPU has 

these characteristics: 

• The NPX shares the local bus of the 386 SX Mi- 
croprocessor. 

• The CPU and NPX share the same reset signals. 
They may also share the same clock input; how- 
ever, for greatest performance, an external oscil- 
lator may be needed. 

• The corresponding BUSY#, ERROR#, and PER- 
EQ pins are connected together. 

• The NPX NPS1 # and NP32 inputs are connect- 
ed to the latched CPU M/IO# and A23 outputs 
respectively. For coprocessor cycles, M/IO# is 
always LOW and A23 always HIGH. 

• The NPX input CM DO is connected to the latched 
A 2 output. The 386 SX Microprocessor generates 
address 8000F8H when writing a command and 
address 8000FCH or 800bFEH (treated as 
8000FCH by the 387 SX NPX) when writing or 
reading data. It does not generate any other ad- 
dresses during NPX bus cycles. 


3.3 Processor Architecture 

As shown by the block diagram on the front page, 
the 387 SX NPX is internally divided into three sec- 
tions: the bus control logic (BCL), the data interface 
and control unit, and the floating point unit (FPU). 
The FPU (with the support of the control unit which 
contains the sequencer and other support units) ex- 
ecutes all numerics instructions. The data interface 
and control unit is responsible for the data flow to 
and from the FPU and the control registers, for re- 
ceiving the instructions, decoding them, and se- 
quencing the microinstructions, and for handling 
some of the administrative instructions. The BCL is 
responsible for CPU bus tracking and interface. The 
BCL is the only unit in the NPX that must run syn- 
chronously with the CPU; the rest of the NPX can 
run asynchronously with respect to the CPU. 

3.3.1 BUS CONTROL LOGIC 

The BCL communicates solely with the CPU using 
I/O bus cycles. The BCL appears to the CPU as a 
special peripheral device. It is special in two re- 


spects: the CPU initiates I/O automatically when it 
encounters ESC instructions, and the CPU uses re- 
served I/O addresses to communicate with the BCL. 
The BCL does not communicate directly with memo- 
ry. The CPU performs all memory access, transfer- 
ring Input operands from memory to the NPX and 
transferring outputs from the NPX to memory. 

3.3.2 DATA INTERFACE AND CONTROL UNIT 

The data Interface and control unit latches the data 
and, subject to BCL control, directs the data to the 
FIFO or the instruction decoder. The instruction de- 
coder decodes the ESC instructions sent to It by the 
CPU and generates controls that direct the data flow 
in the FIFO. It also triggers the microinstruction se- 
quencer that controls execution of each instruction. 
If the ESC instruction is FINIT, FCLEX, FSTSW, 
FSTSW AX, FSTCW, FSETPM, or FRSTPM, the 
control executes it independently of the FPU and the 
sequencer. The data interface and control unit is the 
one that generates the BUSY#, PEREQ, and ER- 
ROR# signals that synchronize NPX activities with 
the CPU. 


3.3.3 FLOATING-POINT UNIT 

The FPU executes all instructions that Involve the 
register stack. Including arithmetic, logical, transcen- 
dental, constant, and data transfer instructions. The 
data path in the FPU is 84 bits wide (68 significant 
bits, 15 exponent bits, and a sign bit) which allows 
Internal operand transfers to be performed at very 
high speeds. 


3.4 Bus Cycles 

The pins StEN, NPS1 #, NPS2, GMDO, and W/R# 
identify bus cycles for the NPX. Table 3-3 defines 
the types of NPX bus cycles. 

3.4.1 387 TM SX NPX ADDRESSING 

The NPS1#, NPS2, and CMDO signals allow the 
NPX to identify which bus cycles are intended for the 
NPX. The NPX responds to I/O cycles when the I/O 
address is 8000F8H, 8000FCH or 8000FEH (treated 


Table 3-3. Bus Cycle Definition 


STEN 

NPS1# 

NPS2 

CMDO# 

W/R# 

Bus Cycle Type 

0 

X 

X 

X 

X 

NPX not selected and all outputs in floating state 

1 

1 

X 

X 

X 

NPX not selected 

1 

X 

0 

X 

X 

NPX not selected 

1 

0 

1 

0 

0 

CW or SW read from NPX 

1 

0 

1 

0 

1 

Opcode write to NPX 

1 

0 

1 

1 

0 

Data read from NPX 

1 

0 

1 

1 

1 

Data write to NPX 


4-524 




387TM SX MATH COPROCESSOR 



as 8000FCH by the 387 SX NPX). The NPX re- 
sponds to I/O cycles when bit 23 of the I/O address 
is set. In other words, the NPX acts as an I/O device 
in a reserved I/O address space. 

Because A23 Is used to select the 387 SX Numerics 
Coprocessor Extension for data transfers, it is not 
possible for a program running on the CPU to ad- 
dress the NPX with an I/O instruction. Only ESC in- 
structions cause the CPU to communicate with the 
NPX. 


3.4.2 CPU/NPX SYNCHRONIZATION 

The pins BUSY#, PEREQ, and ERROR# are used 
for various aspects of synchronization between the 
CPU and the NPX. 

BUSY# is used to synchronize instruction transfer 
from the CPU to the NPX. When the NPX recognizes 
an ESC Instruction, it asserts BUSY#. For most ESC 
instructions, the CPU waits for the NPX to deassert 
BUSY# before sending the new opcode. 

The NPX uses the PEREQ pin of the CPU to signal 
that the NPX is ready for data transfer to or from its 
data FIFO. The NPX does not directly access mem- 
ory; rather, the CPU provides memory access serv- 
ices for the NPX. (For this reason, memory access 
on behalf of the NPX always obeys the protection 
rules applicable to the current CPU mode.) Once the 
CPU initiates an NPX instruction that has operands, 
the CPU waits for PEREQ signals that indicate when 
the NPX is ready for operand transfer. Once all oper- 
ands have been transferred (or if the instruction has 
no operands) the CPU continues program execution 
while the NPX executes the ESC Instruction. 

In 8086/8087 systems, WAIT instructions may be 
required to achieve synchronization of both com- 
mands and operands. In the 386 SX Microprocessor 
and 387 SX Math Coprocessor systems, however, 
WAIT Instructions are required only for operand syn- 
chronization; namely, after NPX stores to memory 
(except FSTSW and FSTCW) or load from memory. 
(In 80286/80287 systems, WAIT is required before 
FLDENV and FRSTOR; with the 386 SX Microproc- 
essor and 387 SX Math Coprocessor, WAIT is not 
required in these cases.) Used this way, WAIT en- 
sures that the value has already been written or read 
by the NPX before the CPU reads or changes the 
value. 

Once it has started to execute a numerics instruction 
and has transferred the operands from the CPU, the 
NPX can process the instruction In parallel with and 
independent of the host CPU. When the NPX de- 
tects an exception, it asserts the ERROR# signal, 
which causes a CPU interrupt. 


3.4.3 SYNCHRONOUS OR ASYNCHRONOUS 
MODES 

The internal logic of the NPX (the FPU) can operate 
either directly from the CPU clock (synchronous 
mode) or from a separate clock (asynchronous 
mode). The two configurations are distinguished by 
the CKM pin. In either case, the bus control logic 
(BCL) of the NPX is synchronized with the CPU 
clock. Use of asynchronous mode allows the CPU 
and the FPU section of the NPX to run at different 
speeds. In this case, the ratio of the frequency of 
NUMCLK2 to the frequency of CPUCLK2 must lie 
within the range 10:16 to 14:10. Use of synchronous 
mode eliminates one clock generator from the board 
design. 

3.4.4 AUTOMATIC BUS CYCLE TERMINATION 

In configurations where no extra wait states are re- 
quired, READYO# can drive the CPU’s READY# 
input. If this pin is used, it should be connected to 
the logic that ORs all READY outputs from peripher- 
als on the CPU bus. READYO# is asserted by the 
NPX only during I/O cycles that select the NPX. Re- 
fer to Section 4.0 “Bus Operation” for details. 


4.0 BUS OPERATION 

With respect to bus interface, the 387 SX NPX is 
fully synchronous with the CPU. Both operate at the 
same rate, because each generates its Internal CLK 
signal by dividing CPUCLK2 by two. Furthermore, 
both internal CLK signals are in phase, because they 
are synchronized by the same RESETIN signal. 

A bus cycle for the NPX starts when the CPU acti- 
vates ADS# and drives new values on the address 
and cycle-definition lines. The NPX examines the ad- 
dress and cycle-definition lines in the same CLK pe- 
riod during which ADS# is activated. This CLK peri- 
od is considered the first CLK of the bus cycle. 
During this first CLK period, the NPX also examines 
the R/W# input signal to determine whether the cy- 
cle is a read or a write cycle and examines the 
CMDO Input to determine whether an opcode, oper- 
and, or control /status register transfer Is to occur. 

The 387 SX NPX supports both pipelined (i.e. over- 
lapped) and nonpipelined bus cycles. A nonpipelined 
cycle is .one for which the CPU asserts ADS# when 
no other NPX bus cycle is in progress. A pipelined 
bus cycle is one for which the CPU asserts ADS# 
and provides valid next-address and control signals 
before the prior NPX cycle terminates. The CPU may 
do this as early as the second CLK period after as- 
serting ADS# for the prior cycle. Pipelining increas- 
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es the availability of the bus by at least one CLK 
period. The 387 SX NPX supports pipelined bus cy- 
cles In order to optimize address pipelining by the 
CPU for memory cycles. 

Bus operation Is described in terms of an abstract 
state machine. Figure 4-1 illustrates the states and 
state transitions for NPX bus cycles: 

• T| is the idle state. This is the state of the bus 
logic after RESET, the state to which bus logic 
returns after every nonpipelined bus cycle, and 
the state to which bus logic returns after a series 
of pipelined cycles. 

• Trs is the READY# -sensitive state. Different 
types of bus cycles may require a minimum of 
one or two successive Trs states. The bus logic 
remains in Trs state until READY# Is sensed, at 
which point the bus cycle terminates. Any number 
of wait states may be implemented by delaying 
READY#, thereby causing additional successive 
Trs states. 

• Tp is the first state for every pipelined bus cycle. 
This state is not used by nonpipelined cycles. 

Note that the bus logic tracks bus state regardless 
of the values on the chip/port select pins. 

The READYO# output of the NPX indicates when 
an NPX bus cycle may be terminated if no extra wait 
states are required. For all write cycles (except 
those for the instructions FLDENV and FRSTOR), 
READYO# Is always asserted during the first Trs 
state, regardless of the number of wait states. For all 
read cycles and write cycles for FLDENV and 



FRSTOR, READYO# is always asserted in the sec- 
ond Trs state, regardless of the number of wait 
states. These rules apply to both pipelined and non- 
pipelined cycles. Systems designers may use 
READYO# In one of the following ways: 

1 . Connect it (directly or through logic that ORs 
READY# signals from other devices) to the 
READY# Inputs of the CPU and NPX. 

2. Use it as one input to a wait-state generator. 

The following sections illustrate different types of 
387 SX NPX bus cycles. Because different Instruc- 
tions have different amounts of overhead before, be- 
tween, and after operand transfer cycles, it is not 
possible to represent In a few diagrams all of the 
combinations of successive operand transfer cycles. 
The following bus-cycle diagrams show memory cy- 
cles between NPX operand-transfer cycles. Note 
however that, during FRSTOR, some consecutive 
accesses to the NPX do not have intervening memo- 
ry accesses. For the timing relationship between op- 
erand transfer cycles and opcode write or other 
overhead activities, see the figure “Other Parame- 
ters” in section 6. 


4.1 Nonpipelined Bus Cycles 

Figure 4-2 Illustrates bus activity for consecutive 
nonpipelined bus cycles. 

At the second clock of the bus cycle, the NPX enters 
the Trs state. During this state, It samples the 
READY# input and stays in this state as long as 
READY# is Inactive. 


4.1.1 Wni 1 1 cycle: 

, in write cycles, the NPX drives the READYO# signal 
for one CLK period during the second CLK period of 
the cycle (i.e. the first Trs state); therefore, the fast- 
est write cycle takes two CLK periods (see cycle 2 of 
Figure 4-2). For the instructions FLDENV and 
FRSTOR, however, the NPX forces a wait state by 
delaying the activation of READYO# to the second 
Trs state (not shown in Figure 4-2). 

The NPX samples the D15— DO inputs into data 
latches at the falling edge of CLK as long as it stays 
in Trs state. 

When READY# Is asserted, the NPX returns to the 
idle state. Simultaneously with the NPX’s entering 
the idle state, the CPU may assert ADS# again, sig- 
naling the beginning of yet another cycle. 
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Cycles 1 & 2 represent part of the operand transfer cycle for instructions involving either 4-byte or 8-byte operand loads. 
Cycles 3 & 4 represent part of the operand transfer cycle for a store operation. 

*Cycles 1 & 2 could repeat here or T| states for various non-operand transfer cycles and overhead. 


Figure 4-2. Nonpipeiined Read and Write Cycles 


4.1.2 READ CYCLE 

At the rising edge of CLK in the second CLK period 
of the cycle (i.e. the first Trs state), the NPX starts 
to drive the D15-D0 outputs and continues to drive 
them as long as It stays In Trs state. 

At least one wait state must be inserted to ensure 
that the CPU latches the correct data. Because the 
NPX starts driving the data bus only at the rising 
edge of CLK in the second clock period of the bus 
cycle, not enough time is left for the data signals to 
propagate and be latched by the CPU before the 
next falling edge of CLK. Therefore, the NPX does 
not drive the READYO# signal until the third CLK 
period of the cycle. Thus, if the READYO# output 
drives the CPU’s READY# input, one wait state is 
automatically inserted. 


When READY# is asserted, the NPX returns to the 
idle state. Simultaneously with the NPX’s entering 
the idle state, the CPU may assert ADS# again, sig- 
naling the beginning of yet another cycle. The tran- 
sition from Trs state to idle state causes the NPX to 
put the tristate D15-D0 outputs into the floating 
state, allowing another device to drive the data bus. 


4.2 Pipelined Bus Cycles 

Because all the activities of the NPX bus interface 
occur either during the Trs state or during the tran- 
sitions to or from that state, the only difference be- 
tween a pipelined and a nonpipeiined cycle is the 
manner of changing from one state to another. The 
exact activities during each state are detailed in the 
previous section “Nonpipeiined Bus Cycles”. 


Because one wait state is required for NPX reads. When the CPU asserts ADS# before the end of a 

the minimum length of an NPX read cycle is three bus cycle, both ADS# and READY# are active dur- 

CLK periods, as cycle 3 of Figure 4-2 shows. 
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Cycle 1 -Cycle 4 represent the operand transfer cycle for an instruction involving a transfer of two 32-bit loads in total. 
The opcode write cycles and other overhead are not shown. 

Note that the next cycle will be a pipelined cycle if both READY# and ADS# are sampled active at the end of a Trs 
state of the current cycle. 

Figure 4-3. Fastest Transitions to and from Pipelined Cycles 


ing a Toe state. This condition causes the .NPX to 
change to a different state named Tp. One clock 
period after a Tp state, the NPX always returns to 
Trs state. In consecutive pipelined cycles, the NPX 
bus logic uses only the Trs and Tp states. 

Figure 4-3 shows the fastest transitions into and out 
of the pipelined bus cycles. Cycle 1 in the figure rep- 
resents a nonpipelined cycle. (Nonpipelined write 
cycles with only one Trs state (i.e. no wait states) 
are always followed by another nonpipelined cycle, 
because READY# is asserted before the earliest 
possible assertion of ADS# for the next cycle.) 


Figui'e 4-4 shows pipelined write and read cycles 
with one additional Trs state beyond the minimum 
required. To delay the assertion of READY# re- 
quires external logic. 


4.3 Bus Cycles of Mixed Type 

When the NPX bus logic is In the Trs state. It distin- 
guishes between nonpipelined and pipelined cycles 
according to the behavior of ADS# and READY#. 
In a nonpipelined cycle, only READY # is activated, 
and the transition is from Trs state to idle state. In a 
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NOTE: 

1. Cycles between operand write to the NPX and storing result. 


Figure 4-4. Pipelined Cycles with Wait States 


pipelined cycle, both READY# and ADS# are ac- 
tive, and the transition is first from Trs state to Tp 
state, then, after one clock period, back to Trs 
state. 


4.4 BUSY# and PEREQ Timing 
Relationship 

Figure 4-5 shows the activation of BUSY# at the 
beginning of instruction execution and its deactiva- 


tion upon completion of the instruction. PEREQ is 
activated within this interval. If ERROR# (not shown 
in the figure) is ever asserted, it would be asserted at 
least six CPUCLK2 periods after the deactivation of 
PEREQ and would be deasserted at least six 
CPUCLK2 periods before the deactivation of 
BUSY#. Figure 4-5 also shows that STEM is activat- 
ed at the beginning of an NPX bus cycle. 
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5.0 PACKAGE THERMAL 
SPECIFICATIONS 

The 387 SX Math Coprocessor is specified for oper- 
ation when case temperature is within the range of 
0®C“100®C. The case iemperaiure may be mea- 
sured in any environment, to determine whether the 
387 SX Math Coprocessor is within specified operat- 
ing range. The case temperature should be mea- 
sured at the center of the top surface opposite the 
pins. 

The ambient temperature is guaranteed as long as 
Tc is not violated. The ambient temperature can be 
calculated from the ^jc and 0ja from the following 
equations: 


Tj = Tc + P * ^jc 
Ta = Tj - P * 0ja 
Tc == Ta + P * [Oja “■ ^jcl 

Values for dja and 0jc are given in Table 5-1 for the 
6S-pin PLCC. vja is given at various airflows. Table 
5-2 shows the maximum Tg allowable (without ex- 
ceeding Tc) at various airflows. Note that can be 
Improved further by attaching ‘fins’ or a ‘heat sink’ to 
the package. P is calculated by using the maximum 
hot ice- 
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Table 5-2. Maximum Ta at Various Airflows 



TaCC) versus Airflow - ft/min (m/sec) 

Package 

0 

(0) 

200 

(1.01) 

400 

(2.03) 

600 

(3.04) 

800 

(4.06) 

1000 

(5.07) 

68-Pin PLCC 

54.7 

61.6 

68.5 

74.6 

78.1 

79.5 


Max. Ta calculated at Max Vcc and Max Ice- 


Figure 5-1 shows the locations of pins on the chip package. Table 5-3 helps to locate pin identifiers in 
Figure 5-1. 
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The term “top view” means “as viewed when mounted in a printed-circuit board”. 



Figure 5-1. PLCC Pin Configuration 


Tabie 5-3. Pin Cross-Reference 


1 

— n.c. 

18 — 

n.c. 

35 

— ERROR# 

52 

— n.c. 

2 

— D07 

19 — 

DOO 

36 

— BUSY# 

53 

— NUMCLK2 

3 

— D06 

20 — 

D01 

37 

— Vcc 

54 

— CPUCLK2 

4 

— Vcc 

21 — 

Vss 

38 

-Vss 

55 

— Vss 

5 

— Vss 

22 — 

Vcc 

39 

— Vcc 

56 

— PEREQ 

6 

— D05 

23 — 

D02 

40 

-STEM 

57 

— READYO# 

7 

— D04 

24 

-D08 

41 

— W/R# 

58 

— Vcc 

8 

— D03 

25 — 

Vss 

42 

— Vss 

59 

— CKM 

9 

— Vcc 

26 — 

Vcc 

43 

— Vcc 

60 

— Vss 

10 

— n.c. 

27 — 

Vss 

44 

— NPS1 # 

61 

— Vss 

11 

--D15 

28 — 

D09 

45 

— NPS2 

62 

— Vcc 

12 

— D14 

29 — 

D10 

46 

-—Vcc 

63 

— Vss 

13 

— Vcc 

30 — 

D11 

47 

— ADS# 

64 

— Vcc 

14 

— Vss 

31 — 

Vcc 

48 

— CMDO# 

65 

— n.c. 

15 

— D13 

32 — 

Vss 

49 

— READY# 

66 

— Vss 

16 

— D12 

33 — 

Vcc 

50 

— Vcc 

67 

— n.c. 

17 

— n.c. 

34 — 

Vss 

51 

— RESETIN 

68 

— n.c. 


n.c. — ^The corresponding pins of the 387 tm sX NPX are left unconnected. 
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6.0 ELECTRICAL DATA 


6.1 Absolute Maximum Ratings 

NOTE: 

Stresses above those listed may cause permanent 
damage to the device. This is a stress rating only 
and functional operation of the device at these or 
any other conditions above those indicated in the 


operational sections of this specification is not im- 
plied. Exposure to absolute maximum rating condi- 
tions for extended periods may affect device reliabili- 
ty. 

Case temperature Tq under bias O^C to 1 00°C 

Storage temperature -65°C to + 150°C 

Voltage on any pin with respect to ground -0.5 to 
VCC+0.5V 

Power dissipation 1.5 Watt 


6.2 D.C. Characteristics 


Table 6-1. D.C. Specifications Tc = 0° to lOO^C, Vcc = 5V ± 10% 


Symbol 

Parameter 

Min 

Max 

Units 

Test Conditions 

V|L 

Input LO Voltage 

-0.3 

+ 0.8 

V 

See note 1 

V|H 

Input HI Voltage 

2.0 

Vcc + 0.3 

V 

See note 1 

VcL 

CPUCLK2 and NUMCLK2 

-0.3 

+ 0.8 

V 



Input LO Voltage 





VCH 

CPUCLK2 and NUMCLK2 

< 

o 

o 

I 

o 

bo 

Vcc + 0.3 

V 



Input HI Voltage 





VoL 

Output LO Voltage 


0.45 

V 

See note 2 

VoH 

Output HI Voltage 

2.4 


V 

See note 3 

VoH 

Output HI Voltage 

00 

d 

I 

o 

o 

> 


V 

See note 4 

•cc 

Power Supply Current 






NUMCLK2 = 32 MHz(5) 


250 

mA 

•cefyp. = 150 mA 


NUMCLK2 = 2 MHz(5) 


100 

mA 


III 

Input Leakage Current 


±15 

jjbA 

OV ^ V|N ^ Vcc 

*LO 

I/O Leakage Current 


+ 15 

/xA 

0.45V ^ Vo ^ Vcc 

C|N 

Input Capacitance 


10 

pF 

fc = 1MHz 

Co 

I/O or Output Capacitance 


12 

PF 

fc = 1MHz 

CcLK 

Clock Capacitance 


20 

pF 

fc = 1MHz 


NOTES: 

1 . This parameter is for all inputs, excluding the clock inputs. 

2. This parameter is measured at Iql as follows: 
data = 4.0mA 

READYO#, ERROR#, BUSY#, PEREQ = 2.5mA 

3. This parameter is measured at Iqh as follows: 
data = 1.0mA 

READYO#, ERROR#, BUSY#, PEREQ = 0.6mA 

4. This parameter is measured at Iqh as follows: 
data = 0.2mA 

READYO#, ERROR#, BUSY#, PEREQ = 0.12mA 

5. Ice is measured at steady state, maximum capacitive loading on the outputs, and worst-case D.C. level at the inputs; 
CPUCLK2 at the same freguency as NUMCLK2. 


6.3 A.C. Characteristics 

Table 6-2a. Combinations of Bus Interface and Execution Speeds 


Functional Block 

80387SX-16 

Bus Interface Unit (MHz) 

16 

Execution Unit (MHz) 

16 


4-532 





387 TM SX MATH COPROCESSOR 



Table 6-2b. Timing Requirements of Execution Unit Tc = 0“ to 100° C, Vcc = 5V ± 10% 


Pin 

Symbol 

Parameter 

16 MHz 

Test 

Conditions 

Refer to 
Figure 

Min (ns) 

Max (ns) 

NUMCLK2 

t1 

Period 

31.25 

500 

2.0V 

6.2 

NUMCLK2 

t2b 

High Time 

5 


Vcc -0.8V 


NUMCLK2 

t3b 

Low Time 

7 


0.8V 


NUMCLK2 

t4 

Fall Time 


8 

From Vcc -0.8 to 0.8V 

(Note 1) 

NUMCLK2 

t5 

Rise Time 


8 

From 0.8 to Vcc -0.8V 



Note: 

1 . If not used (CKM 


1), tie LOW. 


Table 6-2c. Timing Requirements of Bus Interface Unit Tq - 0° to 100° C, Vcc = 5V ± 10% 


Pin 


Symbol Parameter 


16 MHz (1.5V) 

Min (ns) 

Max (ns) 

31.25 

500 

5 

7 

8 


8 


Test 

Condil^ns 


Refer to 
Figure 


CPUCLK2 

CPUCLK2 

CPUCLK2 

CPUCLK2 

CPUCLK2 


Period 
High Time 
Low Time 
Fail Time 
Rise Time 



NOTES: 

* Float condition occurs when maximum output current becomes less the Ilo in magnitude. Float delay is not tested. 
**Not tested at 25 pf. 
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inter 


Typical* Output 
Delay (ns) 
@1.5V 



50 75 100 125 150 


Load Capacitonce, Cl (pf) 


240225-12 


NOTES: 

Graphs are not linear outside the Cl range shown, 
nom = nominal value given in the AC timing table 
*Typical part under worst-case conditions 


Figure 6- la. Typical Output Valid Delay vs. Load Capacitance at Max Operating Temperature 



Load Capacitance, Cl (pf) 



50 75 100 125 150 


Load Capacitance, Cl (pf) 

240225-13 


NOTES: 

Graphs are not linear outside the Cl range shown. 
^Typical part under worst-case conditions 


Figure 6-1 b. Typical Output Slew Time vs. Load Capacitance at Max Operating Temperature 
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Figure 6-2. CPUCLK2/NUMCLK2 Waveform and Measurement Points for Input/Output 
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iny 



NOTE: 

The second internal processor phase following RESET high to low transition is PH2. 


Figure 6-5. RESET Signal 



Table 6-3. Other Parameters 


Pin 

Symbol 

Parameter 

Min 

Max 

Units 

RESETIN 

t30 

Duration 

40 


NUMCLK2 

RESETIN 

t31 

RESETIN inactive to 1st opcode write 

50 


NUMCLK2 

BUSY# 

t32 

Duration 

6 


CPUCLK2 

BUSY#, ERROR# 

t33 

ERROR# (In)activeto BUSY# inactive 

6 


CPUCLK2 

PEREQ, ERROR# 

t34 

PEREQ inactive to ERROR# active 

6 


CPUCLK2 

READY#, BUSY# 

t35 

READY# active to BUSY# active 

4 

4 

CPUCLK2 

READY# 

t36 

Minimum time from opcode write to 
opcode/operand write 

4 


CPUCLK2 

READY# 

t37 

Minimum time from operand write to 
operand write 

4 


CPUCLK2 
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fll?!fllF®l^DiiilAf B©l?!a 


CPUCLK2 

(CLK) 

L ♦_.* J 

r n 

RESET 

r~\ 

w 

iSTo 

w 

.in 

V 

PCODE 

RITE 

.m 

\r 

m 

vr 

NOTE 1 

in 

\j 

.m 

V 

OP 

WR 

m 

ERAND 

TE 

in 

2ND OP 
WRITE ( 

.m 

- t 

ERAND 

N0TE1) 

in 

V/ 

.m 

m 

V/ 



ff 



^36 

ff ff 


ff 


ff 


ADS# 

READY# _ 

BUSY# 

PEREQ 

ERROR# 

* In NUMCLK2’s 
** or last operand 

ff 


ff 



ff ff- 

\ 




ft 


“ir— 

■\ 

p 



ff ff- 

r 

—XU 


r 

-uXU. 

ff 

ff 

— fC . 


ff 

r 


' 

ff ff 

\ 


.r 

ff 

J 




5^ 




•XU 


— XU. 


"njr“ 


— 5H- 

J 




\ 





^ 




-55- 

txo 




OD 

1 




'■32 


o 

225-20 


NOTE: 

1. Memory read (operand) cycle is not shown. 


Figure 6-7. Other Parameters 


7.0 387 TM SX NPX EXTENSIONS TO 
THE CPU’S INSTRUCTION SET 

Instructions for the 387 SX NPX assume one of the 
five forms shown in Table 7-1. In all cases, instruc- 
tions are at least two bytes long and begin with the 
bit pattern 110116, which identifies the ESCAPE 
class of instruction. Instructions that refer to memory 
operands specify addresses using the CPU’s ad- 
dressing modes. 

MOD (Mode field) and R/M (Register/ Memory spec- 
ifier) have the same interpretation as the corre- 
sponding fields of CPU instructions (refer to Pro- 
grammer’s Reference Manual for the CPU). SIB 


(Scale Index Base) byte and DISP (displacement) 
are optionally present in instructions that have MOD 
and R/M fields. Their presence depends on the val- 
ues of MOD and R/M, as for instructions of the CPU. 

The instruction summaries that follow assume that 
the instruction has been prefetched, decoded, and is 
ready for execution; that bus cycles do not require 
wait states; that there are no local bus HOLD re- 
quests delaying processor access to the bus; and 
that no exceptions are detected during instruction 
execution. If the instruction has MOD and R/M fields 
that call for both base and index registers, add one 
clock. 
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inl^ 


Table 7-1. Instruction Formats 



15-11 10 9 8 7 6 5 43210 

OP = Instruction opcode, possibly split into two fields OPA and OPB 
MF = Memory Format 

00— 32-bit real 

01 — 32-bit integer 

1 0— 64-bit real 

11— 16-bit integer 
d = Destination 

0 — Destination is ST(0) 

1— Destination is ST(i) 

R XOR d = 0 — Destination (op) Source 
R XOR d = 1 — Source (op) Destination 

*ln FSUB and FDIV, the low-order bit of OPB is the R (reversed) bit 
P = POP 

0— Do not pop stack 

1— Pop stack after operation 
ESC = 11011 

ST(i) = Register stack element i 

000 = Stack top 

001 = Second stack element 


111= Eighth stack element 
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387TM SX NPX Extension to the 386 tm sx Microprocessor Instruction Set 



Encoding 

Clock Count Range 

Instruction 

Byte 

Byte 

Optional 

32-Bit 

32-Blt 

64-Blt 

16-Bit 


0 

1 

Bytes 2-6 

Real 

Integer 

Real 

integer 


DATA TRANSFER 

FLD = Loads 

Integer/real memory to ST(0) 

Lon.g integer memory to ST(0) 
Extended real memory to ST(0) 
BCD memory to ST(0) 

ST(i) to ST(0) 

FST = Store 

ST(0) to integer/real memory 
ST(0) to ST(i) 

FSTP = Store and Pop 
ST(0) to integer/real memory 
ST(0) to long integer memory 
ST(0) to extended real 
ST(0) to BCD memory 
ST(0) to ST(i) 

FXCH = Exchange 
ST(i) and ST(0) 

COMPARISON 
FCOM = Compare 
Integer/ real memory to ST(0) 

ST(i) to ST(0) 

FCOMP = Compare and pop 
Integer/ real memory to 

ST(i) to ST(0) 

FCOMPP = Compare and pop twice 
ST(1) to ST(0) 

FTST = Test ST(0) 

FiJCOM “ Unordered oompare 

PUOOMF ” Unordered compare 
and pop 

FUCOMPP Unordered compare 
and pop twice 

FXAM = Examine ST(0) 

CONSTANTS 

FLDZ = Load + 0.0 into ST(0) 

FLD1 = Load + 1 .0 into ST(0) 
FLDPI = Load pi into ST(0) 

FLDL2T = Load Iog2(10) into ST(0) 


ESC MF 1 


ESC 111 


ESC oil 


ESC 1 1 1 


ESC 001 


ESC MF 1 


ESC 101 


ESC MF 1 


ESC 111 


ESC 01 1 


ESC 111 


ESC 101 


ESC 001 


ESC 000 


ESC MF 0 


ESC 000 


ESC 001 


ESC 101 


ESC 101 


ESC 010 


ESC 001 


ESC 001 


ESC 001 


ESC 001 


ESC 001 


MOD 000 R/M 


MOD 101 R/M 


MOD 101 R/M 


MOD 100 R/M 


IIOOOST(i) 


MOD 010 R/M 


IIOIOST(i) 


MOD oil R/M 


MOD 111 R/M 


MOD 111 R/M 


MOD 110 R/M 


11011 ST(i) 


11001 ST(i) 


MOD 010 R/M 


11010 ST(i) 


MOD 011 R/M 


11011 ST(i) 


11 too ST# 


11 101 ST# 


11101001 


11101110 


11101000 


11101011 


11101001 


SIB/DISP 


SIB/DISP 


SIB/DISP 


SIB/DISP 


SIB/DISP 


SIB/DISP 


SIB/DISP 


SIB/DISP 


SIB/DISP 


SIB/DISP 


24 


49-56 33 

64-75 
52 

274-283 

14 

84-98 55 

11 

84-98 55 

90-107 
63 

522-544 

12 


30 60-67 39 

24 

30 60-67 39 

26 

26 

28 

■ / V ' ' ■ 

26 . 

'■ ':26 

30-38 

20 

24 

40 

40 


61-65 


82-95 


Shaded areas indicate instructions not available in 8087/80287. 

NOTE: 

a. When loading single- or double-precision zero from memory, add 5 clocks. 
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387TM SX NPX Extension to the 386 tm SX Microprocessor Instruction Set (Continued) 



Encoding 

Clock Count Range 

Instruction 

Byte 

Byte 

Optional 

32-Blt 

32-Blt 

64-Blt 

16-Bit 


0 

1 

Bytes 2-6 

Real 

Integer 

Real 

Integer 


CONSTANTS (Continued) 


FLDL2E = Load log 2 (e) into ST(0) 

ESC 001 

11101010 1 

40 

FLDLG2 - Load logio(2) into ST(0) 

ESC 001 

11101100 1 

41 

FLDLN2 = Load loge(2) into ST(0) 

ESC 001 

11101101 1 

41 

ARITHMETIC 




FADD = Add 




integer/real memory with ST(0) 

ESC MF 0 

MOD 000 R/M 

SIB/DISP 

28-36 61-76 37-45 71-85 

ST(i) and ST(0) 

ESC d P 0 

IIOOOST(i) 1 

23-3lb 

FSUB = Subtract 




Integer/real memory with ST(0) 

ESC MF 0 

MOD 10 R R/M 

SIB/DISP 

28-36 61-76 36-44 71-83^ 

ST(i) and ST(0) 

ESC d P 0 

1110RR/M I 

26-34d 

FMUL = Multiply 




Integer/real memory with ST(0) 

ESC MF 0 

MOD 001 R/M 

SIB/DISP 

31-39 65-86 40-65 76-87 

ST(i) and ST(0) 

ESCdPO 

11001 R/M I 

29-57e 

FDIV = Divide 




Integer/ real memory with ST(0) 

ESC MF 0 

MOD 11 R R/M 

SIB/DISP 

93 124-13lf 102 136-1409 

ST(i) and ST(0) 

ESC d P 0 

1111 RR/M 1 

88h 

FSQRTi = Square root 

ESC 001 

11111010 1 

122-129 

FSCALE = Scale ST(0) by ST(1) 

ESC 001 

11111101 1 

67-86 

FPREM = Partial remainder 

1 ESC 001 

1111 1000 1 

74-155 

FPREM1 »» Partial remainder 




(IEEE) 

1 ESC 001 1 

11110101 1 

05-r18§ 

FRNDINT = Round ST(0) 

ESC 001 

1111 1100 


66-80 

to integer 





FXTRACT = Extract components 




of ST(0) 

I ESC 001 

11110100 1 

70-76 

FABS = Absolute value of ST(0) 

1 ESC 001 

1110 0001 1 

22 

FCHS = Change sign of ST{0) 

ESC 001 

1110 0000 i 

24-25 


Shaded areas indicate instructions not available in 8087/80287. 

NOTES: 

b. Add 3 clocks to the range when d = 1 . 

c. Add 1 clock to each range when R = 1 . 

d. Add 3 clocks to the range when d = 0. 

e. typical = 52 (When d = 0, 46-64, typical = 49). 

f. Add 1 clock to the range when R = 1 . 

g. 135-141 when R = 1. 

h. Add 3 clocks to the range when d = 1. 

i. -0 ^ ST(0) ^ +O0. 
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38 ?™ SX NPX Extension to the 386 tm sx Microprocessor instruction Set (Continued) 



Encoding 


Instruction 

Byte 

Byte 

Optional 

Clock Count Range 


0 

1 

Bytes 2-6 



TRANSCENDENTAL 

FPTANk = Partial tangent of ST(0) 
FPATAN == Partial arctangent 
PSlP«SlneofSTCO) ; 

F2XM1I = 2ST(0) - 1 
FYL 2 Xm = ST(1) * log2(ST(0)) 
FYL2XPin = ST(1) * log2(ST(0) + 1.0) 
PROCESSOR CONTROL 
FINIT = Initialize NPX 
FSTSW AX = Store status word 
FLDCW = Load control word 
FSTCW = Store control word 
FSTSW = Store status word 
FCLEX = Clear exceptions 
FSTENV = Store environment 
FLDENV = Load environment 
FSAVE = Save state 
FRSTOR = Restore state 
FINCSTP = Increment stack pointer 
FDECSTP = Decrement stack pointer 
FFREE = Free ST(i) 

FNOP = No operations 


. .isc.oot'' 


ESC 001 


ESC 001 


iSOOOl 


ESC 001 


ESC 001 


ESC 001 


ESC 001 


ESC oil 


ESC 111 


ESC 001 


ESC 101 


ESC 101 


ESC oil 


ESC 001 


ESC 001 


ESC 101 


ESC 101 


ESC 001 


ESC 001 


ESC 101 


ESC 001 


1111 1111 ^ 


11110010 


1111 0011 


11111110 


1111 1011 


1111 0000 


1111 0001 


11100011 


1110 0000 


MOD 101 R/M 


MOD 111 R/M 


MOD 111 R/M 


MOD 110 R/M 


MOD 100 R/M 


MOD 110 R/M 


MOD 100 R/M 


1111 0111 


1111 0110 


IIOOOST(i) 


1101 0000 


SIB/DISP 


SIB/DISP 


SIB/DISP 


SIB/DISP 


SIB/DISP 


SIB/DISP 


SIB/DISP 


,1^3, -77^ • 

191-4971 

314-487 

211-476 

120-538 

257-547 

33 

13 

19 

15 

15 

11 

103-104 

71 

475-476 

388 

21 

22 

18 

12 


Shaded areas indicate instructions not available in 8087/80287. 


NOTES: 

j. These timings hold for operands In the range |x| < tt/A. For operands not in this range, up to 76 additional clocks may be 
needed to reduce the operand. 

k. 0 ^ I ST(0) 1 < 263. 

l. -1.0 ^ ST(0) ^1.0. 

m. 0 ^ ST(0) < oo, -oo < ST(1) < +00. 

n. 0 ^ 1ST(0)| < (2 - SQRT(2))/2, -oo < ST(1) < +oo. 
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APPENDIX A 

COMPATIBILITY BETWEEN 
THE 80287 AND THE 8087 


The 80286/80287 operating in Real-Address mode 
will execute 8086/8087 programs without major 
modification. However, because of differences in the 
handling of numeric exceptions by the 80287 NPX 
and the 8087 NPX, exception-handling routines may 
need to be changed. 

This appendix summarizes the differences between 
the 80287 NPX and the 8087 NPX, and provides 
details showing how 8086/8087 programs can be 
ported to the 80286/80287. 

1 . The NPX signals exceptions through a dedicated 
ERROR# line to the 80286. The NPX error signal 
does not pass through an interrupt controller (the 
8087 INT signal does). Therefore, any interrupt- 
controller-oriented Instructions in numeric excep- 
tion handlers for the 8086/8087 should be delet- 
ed. 

2. The 8087 instructions FENI/FNENI and FDISI/ 
FNDISI perform no useful function in the 80287. If 
the 80287 encounters one of these opcodes in Its 
instruction stream, the Instruction will effectively 
be Ignored — none of the 80287 internal states will 
be updated. While 8086/8087 containing these 
instructions may be executed on the 
80286/80287, it is unlikely that the exception- 
handling routines containing these instructions 
will be completely portable to the 80287. 

3. Interrupt vector 16 must point to the numeric ex- 
ception handling routine. 

4. The ESC instruction address saved In the 80287 
includes any leading prefixes before the ESC op- 
code. The corresponding address saved in the 
8087 does not include leading prefixes. 

5. In Protected-Address mode, the format of the 
80287’s saved Instruction and address pointers is 
different than for the 8087. The instruction op- 
code is not saved in Protected mode — exception 
handlers will have to retrieve the opcode from 
memory if needed. 

6. Interrupt 7 will occur in the 80286 when executing 
ESC instructions with either TS (task switched) or 
EM (emulation) of the 80286 MSW set (TS = 1 or 
EM = 1). If TS is set, then a WAIT instruction will 


also cause interrupt 7. An exception handler 
should be included In 80286/80287 code to han- 
dle these situations. 

7. Interrupt 9 will occur if the second or subsequent 
words of a floating-point operand fall outside a 
segment’s size. Interrupt 13 will occur if the start- 
ing address of a numeric operand falls outside a 
segment’s size. An exception handler should be 
included in 80286/80287 code to report these 
programming errors. 

8. Except for the processor control Instructions, all 
of the 80287 numeric instructions are automati- 
cally synchronized by the 80286 CPU— the 80286 
automatically tests the BUSY# line from the 
80287 to ensure that the 80287 has completed its 
previous instruction before executing the next 
ESC Instruction. No explicit WAIT Instructions are 
required to assure this synchronization. For the 
8087 used with 8086 and 8088 processors, ex- 
plicit WAITS are required before each numeric in- 
struction to ensure synchronization. Although 
8086/8087 programs having explicit WAIT In- 
structions will execute perfectly on the 
80286/80287 without reassembly, these WAIT in- 
structions are unnecessary. 

9. Since the 80287 does not require WAIT instruc- 
tions before each numeric instruction, the 
ASM286 assembler does not automatically gener- 
ate these WAIT instructions. The ASM86 assem- 
bler, however, automatically precedes every ESC 
Instruction with a WAIT instruction. Although nu- 
meric routines generated using the ASM86 as- 
sembler will generally execute correctly on the 
80286/80287, reassembly using ASM286 may re- 
sult in a more compact code image. 

The processor control Instructions for the 80287 
may be coded using either a WAIT or No-WAIT 
form of mnemonic. The WAIT forms of these In- 
structions cause ASM286 to precede the ESC in- 
struction with a CPU WAIT instruction, in the iden- 
tical manner as does ASM86. 
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82385SX 

HIGH PERFORMANCE CACHE CONTROLLER 



■ Improves 386 tm sX System 
Performance 

— Reduces Average CPU Wait States to 
Nearly Zero 

— Zero Walt State Read Hit 
— Zero Wait State Posted Memory 
Writes 

== Allows Other Masters to Access the 
System Bus More Readily 

■ Hit Rates up to 99% 

■ Optimized as 386 SX Companion 
— Simple 386 SX Interface 

— Part of lntel386TM-Based Compute 
Engine Including 387^1^ SX Math 
Coprocessor and 82370 Integrated 
System Peripheral 
— 16 MHz Operation 


■ Software Transparent 

■ Synchronous Dual Bus Architecture 
— Bus Watching Maintains Cache 

Coherency 

■ Maps Full 386 SX Address Space 

■ Flexible Cache Mapping Policies 

Direct Mapped or 2=vyay Set 
Associative Cache Organization 
— Supports Non-Cacheable Memory 
Space 

— Unified Cache for Code and Data 

■ Integrates Cache Directory and Cache 
Management Logic 

■ High Speed CHMOS Technology 
— 132-Pin PGA and 132-Lead PQFP 


The 82385SX Cache Controller is a high performance peripheral for Intel’s 386 tm sX Microprocessor. It stores 
a copy of frequently accessed code and data from main memory in a zero wait state local cache memory. The 
82385SX allows the 386 SX Microprocessor to run near its full potential by reducing the average number of 
CPU wait states to nearly zero. The dual bus architecture of the 82385SX allows other masters to access 
system resources while the 386 SX CPU operates locally out of its cache. In this situation, the 82385SX’s “bus 
watching” mechanism preserves cache coherency by monitoring the system bus address lines at no cost to 
system or local throughput. 


The 82385SX is completely software transparent, protecting the integrity of system software. High perform- 
ance and board space savings are achieved because the 82385SX integrates a cache directory and all cache 
management logic on one chip. 


82385SX LOCAL 
BUS CONTROL 

BUS 

ARBITRATION 


SX LOCAL 
BUS CONTROL 

3S6^^ SX LOCAL 
BUS DECODES 



386‘'’^ SX 
ADDRESS BUS 

SNOOP BUS 


CACHE 

CONTROL BUS 


290222-1 


82385SX Internal Block Diagram 


Intel386™, 386™, 386™ SX, and 38?™ SX are trademarks of Intel Corporation. 
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1.0 82385SX FUNCTIONAL 
OVERVIEW 

The 82385SX Cache Controller is a high perform- 
ance peripheral for Intel’s 386 tm sx microproces- 
sor. This chapter provides an overview of the 
82385SX, and of the basic architecture and opera- 
tion of a 386 SX CPU/82385SX system. 


1.1 82385SX Overview 

The main function of a cache memory system is to 
provide fast local storage for frequently accessed 
code and data. The cache system intercepts 386 SX 
memory references to see if the required data re- 
sides in the cache. If the data resides in the cache (a 
hit), it is returned to the 386 SX without incurring wait 
states. If the data Is not cached (a miss), the refer- 
ence is forwarded to the system and the data re- 
trieved from main memory. An efficient cache will 
yield a high “hit rate” (the ratio of cache hits to total 
386 SX accesses), such that the majority of access- 
es are serviced with zero wait states. The net effect 
is that the wait states incurred in a relatively infre- 
quent miss are averaged over a large number of ac- 
cesses, resulting in an average of nearly zero wait 
states per access. Since cache hits are serviced lo- 
cally, a processor operating out of its local cache 
has a much lower “bus utilization” which reduces 
system bus bandwidth requirements, making more 
bandwidth available to other bus masters. 

The 82385SX Cache Controller integrates a cache 
directory and all cache management logic required 
to support an external 16 kbyte cache. The cache 
directory structure is such that the entire physical 
address range of the 386 SX is mapped into the 
cache. Provision is made to allow areas of memory 
to be set aside as non-cacheable. The user has two 
cache organization options: direct mapped and 2- 
way set associative. Both provide the high hit rates 
necessary to make a large, relatively slow main 
memory array look like fast, zero wait state memory 
to the 386 SX. 

A good hit rate is an essential ingredient of a suc- 
cessful cache implementation. Hit rate is the mea- 
sure of how efficient a cache is in maintaining a copy 
of the most frequently requested code and data. 
However, efficiency is not the only factor for per- 
formance consideration. Just as essential are sound 
cache management policies. These policies refer to 
the handling of 386 SX writes, preservation of cache 
coherency, and ease of system design. The 
82385SX’s “posted write” capability allows the ma- 
jority of 386 SX writes, including most non-cache- 
able cycles, to run with zero wait states, and the 
82385SX’s “bus watching” mechanism preserves 


cache coherency with no Impact on system perform- 
ance. Physically, the 82385SX ties directly to the 
386 SX with virtually no external logic. 


1.2 System Overview I: Bus Structure 

A good grasp of bus structure of a 386 SX CPU/ 
82385SX system is essential in understanding both 
the 82385SX and its role in a 386 SX system. The 
following is a description of this structure. 


1.2.1 386TM SX LOCAL BUS/82385SX LOCAL 
BUS/SYSTEM BUS 

Figure 1-1 depicts the bus structure of a typical 
386 SX system. The “386 SX Local Bus” consists of 
the physical 386 SX address, data, and control bus- 
ses. The local address and data busses are buffered 
and/or latched to become the “system” address 
and data busses. The local control bus is decoded 
by bus control logic to generate the various system 
bus read and write commands. 

The addition of an 82385SX Cache Controller caus- 
es a separation of the 386 SX bus into two distinct 
busses: the actual 386 SX local bus and the 
“82385SX Local Bus” (Figure 1-2). The 82385SX lo- 
cal bus is designed to look like the front end of a 
386 SX by providing 82385SX local bus equivalents 
to all appropriate 386 SX signals. The system ties to 
this “386 SX-like” front end just as it would to an 
actual 386 SX. The 386 SX simply sees a fast sys- 
tem bus, and the system sees a 386 SX front end 
with low bus bandwidth requirements. The cache 
subsystem is transparent to both. Note that the 
82385SX local bus is not simply a buffered version 
of the 386 SX bus, but rather is distinct from, and 
able to operate in parallel with the 386 SX bus. Oth- 
er masters residing on either the 82385SX local bus 
or system bus are free to manage system resources 
while the 386 SX operates out of its cache. 


1.2.2 BUS ARBITRATION 

The 82385SX presents the “386 SX-like” interface 
which is called the 82385SX local bus. Whereas the 
386 SX provides a Hold Request/ Hold Acknowl- 
edge bus arbitration mechanism via its HOLD and 
HLDA pins, the 82385SX provides an equivalent 
mechanism via its BHOLD and BHLDA pins. (These 
signals are described In Section 3.7. ) When another 
master requests the 82385SX local bus, it issues the 
request to the 82385SX via BHOLD. Typically, at the 
end of the current 82385SX local bus cycle, the 
82385SX will release the 82385SX local bus and ac- 
knowledge the request via BHLDA. The 386 SX is of 
course free to continue operating on the 386 SX lo- 
cal bus while another master owns the 82385SX lo- 
cal bus. 
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Figure 1-1. 386™ SX System Bus Structure 
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1.2.3 MASTER/SLAVE OPERATION 

The above 82385SX local bus arbitration discussion 
is true when the 82385SX is programmed for “Mas- 
ter” mode operation. The user can, however, config- 
ure the 82385SX for “Slave” mode operation. (Pro- 
gramming is done via a hardware strap option.) The 
roles of BHOLD and BHLDA are reversed for an 
82385SX In slave mode; BHOLD becomes an output 
indicating a request to control the bus, and BHLDA 
becomes an input indicating that a request has been 
granted. .An 82385S.X programmed in slave mode 
drives the 82385SX local bus only when it has re- 
quested and subsequently been granted bus control. 
This allows multiple 386 SX CPU/82385SX subsys- 
tems to reside on the same 82385SX local bus (Fig- 
ure 1-3). 

1.2.4 CACHE COHERENCY 

Ideally, a cache contains a copy of the most heavily 
used portions of main memory. To maintain cache 
“coherency” is to make sure that this local copy is 
identical to main memory. In a system where multi- 
ple masters can access the same memory, there is 


always a risk that one master will alter the contents 
of a memory location that is duplicated in the local 
cache of another master. (The cache is said to con- 
tain “stale” data.) One rather restrictive solution is to 
not allow cache subsystems to cache shared memo- 
ry. Another simple solution is to flush the cache any- 
time another master writes to system memory. How- 
ever, this can seriously degrade system perform- 
ance as excessive cache flushing will reduce the hit 
rate of what may otherwise be a highly efficient 
cache. 

The 82385SX preserves cache coherency via “bus 
watching” (also called snooping), a technique that 
neither impacts performance nor restricts memory 
mapping. An 82385SX that Is not currently bus mas- 
ter monitors system bus cycles, and when a write 
cycle by another master is detected (a snoop), the 
system address is sampled and used to see If the 
referenced location is duplicated in the cache. If so 
(a snoop hit), the corresponding cache entry is inval- 
idated, which will force the 386 SX to fetch the up- 
to-date data from main memory the next time It ac- 
cesses this modified location. Figure 1-4 depicts the 
general form of bus watching. 
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Figure 1-4. 82385SX Bus Watching — Monitor System Bus Write Cycles 
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1.3 System Overview II: 

Basic Operation 

This discussion is an overview of the basic operation 
of a 386 SX CPU/82385SX system. Items discussed 
include the 82385SX’s response to all 386 SX cy- 
cles, including interrupt acknowledges, halts, and 
shutdowns. Also discussed are non-cacheable and 
local accesses. 

1.3.1 386 TM SX MEMORY CODE AND DATA 
READ CYCLES 

1.3.1. 1 Read Hits 

When the 386 SX initiates a memory code or data 
read cycle, the 82385SX compares the high order 
bits of the 386 SX address bus with the appropriate 
addresses (tags) stored in its on-chip directory. (The 
directory structure is described in Section 2.1.1) If 
the 82385SX determines that the requested data is 
in the cache, it issues the appropriate control signals 
that direct the cache to drive the requested data 
onto the 386 SX data bus, where it is read by the 
386 SX. The 82385SX terminates the 386 SX cycle 
without inserting any wait states. 


1.3.1. 2 Read Misses 

If the 82385SX determines that the requested data 
is not in the cache, the request is forwarded to the 
82385SX local bus and the data retrieved from main 
memory. As the data returns from main memory, it is 
directed to the 386 SX and also written into the 
cache. Concurrently, the 82385SX updates the 
cache directory such that the next time this particu- 
lar piece of information is requested by the 386 SX, 
the 82385SX will find it in the cache and return it 
with zero wait states. 

The basic unit of transfer between main memory and 
cache memory in a cache subsystem is called the 
line size. In an 82385SX system, the line size is one 
16-bit word. During a read miss, both 82385SX local 
bus byte enables are active. This insures that the 
16-bit entry is written into the cache. (The 386 SX 
simply ignores what it did not request.) In any other 
type of 386 SX cycle that is forwarded to the 
82385SX local bus, the logic levels of the 386 SX 
byte enables are duplicated on the 82385SX local 
bus. 

The 82385SX does not actively fetch main memory 
data independently of the 386 SX. The 82385SX is 
essentially a passive device which only monitors the 
address bus and activates control signals. The read 
miss is the only mechanism by which main memory 
data is copied into the cache and validated in the 
cache directory. 


In an isolated read miss, the number of wait states 
seen by the 386 SX is that required by the system 
memory to respond with data plus the cache com- 
parison cycle (hit/miss decision). The cache system 
must determine that the cycle is a miss before it can 
begin the system memory access. However, since 
misses most often occur consecutively, the 
82385SX will begin 386 SX address pipelined cycles 
to effectively “hide” the comparison cycle beyond 
the first miss (refer to Section 4.1.3). 

The 82385SX can execute a memory access on the 
82385SX local bus only if it currently owns the bus. If 
not, an 82385SX in master mode will run the cycle 
after the current master releases the bus. An 
82385SX In slave mode will issue a hold request, 
and will run the cycle as soon as the request is ac- 
knowledged. (This is true for any read or write cycle 
that needs to run on the 82385SX local bus.) 

1.3.2 386 TM SX MEMORY WRITE CYCLES 

The 82385SX’s “posted write” capability allows the 
majority of 386 SX memory write cycles to run with 
zero wait states. The primary memory update policy 
implemented in a posted write is the traditional 
cache “write through” technique, which implies that 
main memory is always updated in any memory write 
cycle. If the referenced location also happens to re- 
side in the cache (a write hit), the cache is updated 
as well. 

Beyond this, a posted write latches the 386 SX ad- 
dress, data, and cycle definition signals, and the 386 
SX local bus is terminated without any wait states, 
even though the corresponding 82385SX local bus 
cycle is not yet completed, or perhaps not even 
started. A posted write is possible because the 
82385SX’s bus state machine, which is almost Iden- 
tical to the 386 SX bus state machine, is able to run 
82385SX local bus cycles independently of the 
386 SX. The only time the 386 SX sees write cycle 
wait states is when a previously latched (posted) 
write has not yet been completed on the 82385SX 
local bus or during an I/O write (which is not post- 
ed). An 386 SX write can be posted even if the 
82385SX does not currently own the 82385SX local 
bus. In this case, an 82385SX in master mode will 
run the cycle as soon as the current master releases 
the bus, and an 82385SX In slave mode will request 
the bus and run the cycle when the request is ac- 
knowledged. The 386 SX is free to continue operat- 
ing out of its cache (on the 386 SX local bus) during 
this time. 


1.3.3 NON-CACHEABLE CYCLES 

Non-cacheable cycles fall into one of two catego- 
ries: cycles decoded as non-cacheable, and cycles 
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that are by default non-cacheable according to the 
82385SX’s design. All non-cacheable cycles are for- 
warded to the 82385SX local bus. Ndn-cacheable 
cycles have no effect on the cache or cache directo- 
ry. 

The 82385SX allows the system designer to define 
areas of main memory as non-cacheable. The 
386 SX address bus is decoded and the decode out- 
put is connected to the 82385SX’s non-cacheable 
access (NCA#) input. This decoding is done in the 
first 386 SX bus state in which the non-cacheable 
cycle address becomes available. Non-cacheable 
read cycles resemble cacheable read miss cycles, 
except that the cache and cache directory are unaf- 
fected. NCA# defined non-cacheable writes, like 
most writes, are posted. 

The 82385SX defines certain cycles as non-cache- 
able without using its non-cacheable access input. 
These include I/O cycles, interrupt acknowledge cy- 
cles, and halt/shutdown cycles. I/O reads and inter- 
rupt acknowledge cycles execute as any other non- 
cacheable read. I/O write cycles are not posted. The 
386 SX is not allowed to continue until a ready signal 
Is returned from the system. Halt/Shutdown cycles 
are posted. During a halt/shutdown condition, the 
82385SX local bus duplicates the behavior of the 
386 SX, including the ability to recognize and re- 
spond to a BHOLD request. (The 82385SX’s bus 
watching mechanism is functional in this condition.) 

1.3.4 386 TM SX LOCAL BUS CYCLES 

386 SX Local Bus Cycles are accesses to resources 
on the 386 SX local bus other than to the 82385SX 
itself. The 82385SX simply ignores these accesses: 
they are neither forwarded to the system nor do they 
affect the cache. The designer sets aside memory 
and/or I/O space for local resources by decoding 
the 386 SX address bus and feeding the decode to 
the 82385SX’s local bus access (LBA#) Input. The 
designer can also decode the 386 SX cycle defini- 
tion signals to keep specific 386 SX cycles from be- 
ing forwarded to the system. For example, a multi- 
processor design may wish to capture and remedy a 
386 SX shutdown locally without having it detected 
by the rest of the system. Note that In such a design, 
the local shutdown cycle must be terminated by lo- 
cal bus control logic. The 387 SX Math Coprocessor 
is considered a 386 SX local bus resource, but it 
need not be decoded as such by the user since the 
82385SX Is able to internally recognize 387 SX ac- 
cesses via the M/IO# and A23 pins. 


1.3.5 SUMMARY OF 82385SX RESPONSE TO 
ALL 386 TM SX CYCLES 

Table 1-1 summarizes the 82385SX response to all 
386 SX bus cycles, as conditioned by whether or not 
the cycle Is decoded as local or non-cacheable. The 
table describes the impact of each cycle on the 
cache and on the cache directory, and whether or 
not the cycle Is forwarded to the 82385SX local bus. 
Whenever the 82385SX local bus is marked “IDLE”, 
it implies that this bus is available to other masters. 

1.3.6 BUS WATCHING 

As previously discussed, the 82385SX “qualifies” a 
386 SX bus cycle in the first bus state in which the 
address and cycle definition signals of the cycle be- 
come available. The cycle Is qualified as read or 
write, cacheable or non-cacheable, etc. Cacheable 
cycles are further classified as hit or miss according 
to the results of the cache comparison, which ac- 
cesses the 82385SX directory and compares the ap- 
propriate directory location (tag) to the current 
386 SX address. If the cycle turns out to be non- 
cacheable or a 386 SX local bus access, the hit/ 
miss decision is ignored. The cycle qualification re- 
quires one 386 SX state. Since the fastest 386 SX 
access Is two states, the second state can be used 
for bus watching. 

When the 82385SX does not own the system bus, it 
monitors system bus cycles. If another master writes 
into main memory, the 82385SX latches the system 
address and executes a cache look-up to see if the 
altered main memory location resides in the cache. 
If so (a snoop hit), the cache entry is marked invalid 
In the cache directory. Since the directory Is at most 
only being used every other state io qualify 366 SX 
accesses, snoop look-ups are interleaved between 
386 SX local bus look-ups. The cache directory is 
time multiplexed between the 386 SX address and 
the latched system address. The result is that all 
snoops are caught and serviced without slowing 
down the 386 SX, even when runnliig zero wait state 
hits on the 386 SX local bus. 

1.3.7 CACHE FLUSH 

The 82385SX offers a cache flush input. When acti- 
vated, this signal causes the 82385SX to Invalidate 
all data which had previously been cached. Specifi- 
cally, all tag valid bits are cleared. (Refer to the 
82385SX directory structure in Section 2.1.1.) There- 
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Table 1-1. 82385SX Response to 386 tm SX Cycles 



386 SX Bus Cycle 

Definition 


82385SX Response 
when Decoded 
as Cacheable 

82385SX Response 
when Decoded 
as Non-Cacheable 

82385SX Response when 
Decoded as a 386SX 
Local Bus Access 

M/IO# 

D/C# 

W/R# 

386 SX 
Cycle 


Cache 

Cache 

Directory 

82385SX 
Local Bus 

Cache 

Cache 

Directory 

82385SX 
Local Bus 

Cache 

Cache 

Directory 

82385SX 
Local Bus 

0 

0 

0 

INTACK 

N/A 

— • 

— 

INT ACK 

— 

— 

INT ACK 

— 

— 

IDLE 

0 

0 

1 

UNDEFINED 

N/A 



UNDEFINED 



UNDEFINED 



IDLE 

0 

1 

0 

I/O READ 

N/A 

■— 

— 

I/O READ 

— 

— 

I/O READ 

— 

— 

IDLE 

0 

1 

1 

I/O WRITE 

N/A 

— 

— 

I/O WRITE 

— 

— 

I/O WRITE 

— 

— 

IDLE 

1 

0 

0 

MEM CODE 
READ 

HIT 

CACHE 

READ 

— 

IDLE 

— 

— 

MEM 

CODE 

— 

— 

IDLE 





MISS 

CACHE 

WRITE 

DATA 

VALIDATION 

MEM CODE 
READ 



READ 







HALT/ 

SHUTDOWN 

N/A 

— 

— 

HALT/ 

SHUTDOWN 

— 

— 

HALT/ 

SHUTDOWN 

m 

— 

IDLE 

1 

1 

0 

MEM DATA 
READ 

HIT 

CACHE 

READ 

— 

IDLE 

_ 

■— 

MEM 

DATA 

■ 

— 

IDLE 




- 

MISS 

CACHE 

WRITE 

DATA 

VALIDATION 

MEM DATA 
READ 



READ 

■ 



1 




HIT 

CACHE 

WRITE 

— 

MEM DATA 
WRITE 

— 

— 

MEM 

DATA 

■ 

— 

IDLE 





MISS 

— 

— 

MEM DATA 
WRITE 



WRITE 

■ 




NOTES: 

• A dash (— ) indicates that the cache and cache directory are unaffected. This table does not reflect how an access affects the LRU bit. 

• An “IDLE” 82385SX Local Bus implies that this bus is available to other masters. 

• The 82385SX’s response to 387 tm sx accesses is the same as when decoded as a 386 SX Local Bus Access. 

• The only other operations that affect the cache directory are: 

1. RESET or Cache Flush— all tag valid bits cleared. 

2. Snoop Hit — corresponding line valid bit cleared. 
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fore, the cache is empty and subsequent cycles are 
misses until the 386 SX begins repeating the new 
accesses (hits). The primary use of the FLUSH input 
is for diagnostics and multi-processor support. 

NOTE: 

The use of this pin as a coherency mechanism may 
impact software transparency. 


2.0 82385SX CACHE ORGANIZATION 

The 82385SX supports two cache organizations: a 
simple direct mapped organization and a slightly 
more complex, higher performance two way set as- 
sociative organization. The choice is made by strap- 
ping an 82385SX input (2W/D#) either high or low. 
This chapter describes the structure and operation 
of both organizations. 


2.1 Direct Mapped Cache 

2.1.1 DIRECT MAPPED CACHE STRUCTURE 
AND TERMINOLOGY 

Figure 2-1 depicts the relationship between the 
82385SX’s internal cache directory, the external 
cache memory, and the 386 SX’s physical address 
space. The 386 SX address space can conceptually 


be thought of as cache “pages” each being 8K 
words (16 Kbytes) deep. The page size matches the 
cache size. The cache can be further divided into 
1024 (0 thru 1023) sets of eight words (8x16 bits). 
Each 16-bit word is called a “line”. The unit of trans- 
fer between the main memory and cache is one line. 

Each block in the external cache has an associated 
1 9-bit entry in the 82385SX’s internal cache directo- 
ry. This entry has three components: a 10-bit “tag”, 
a “tag valid” bit, and eight “line valid” bits. The tag 
acts as a main memory page number (10 tag bits 
support 210 pages). For example, if line 9 of page 2 
currently resides in the cache, then a binary 2 is 
stored in the Set 1 tag field. (For any 82385SX direct 
mapped cache page In main memory. Set 0 consists 
of lines 0-7, Set 1 consists of lines 8-15, etc. Line 9 
is shaded in Figure 2-1 .) An Important characteristic 
of a direct mapped cache is that line 9 of any page 
can only reside in line 9 of the cache. All identical 
page offsets map to a single cache location. 

The data in a cache set is considered valid or Invalid 
depending on the status of its tag valid bit. If clear, 
the entire set Is considered Invalid. If true, an Individ- 
ual line within the set is considered valid or Invalid 
depending on the status of its line valid bit. 

The 82385SX sees the 386 SX address bus (A1- 
A23) as partitioned into three fields: a 10-bit “tag” 



Figure 2-1. Direct Mapped Cache Organiztion 
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field (A14-A23), a 10-bit “set address” field (A4- 
A13), and a 3-blt “line select” field (A1-A3). (See 
Figure 2-2.) The lower 13 address bits (A1-A13) 
also serve as the “cache address” which directly 
selects one of 8K words in the external cache. 

2.1.2 DIRECT MAPPED CACHE OPERATION 

The following is a description of the interaction be- 
tween the 386 SX, cache, and cache directory. 


2.1.2.1 Read Hits 

When the 386 SX initiates a memory read cycle, the 
82385SX uses the 1 0-bit set address to select one 
of 1024 directory entries, and the 3-blt line select 
field to select one of eight line valid bits within the 
entry. The 13-bit cache address selects the corre- 
sponding word in the cache. The 82385SX com- 
pares the 10-bit tag field (A14-A23 of the 386 SX 
access) with the tag stored in the selected directory 
entry. If the tag and upper address bits match, and if 
both the tag and appropriate line valid bits are set, 
the result Is a hit, and the 82385SX directs the 
cache to drive the selected word onto the 386 SX 
data bus. A read hit does not alter the contents of 
the cache or directory. 

2.1.2.2 Read Misses 

A read miss can occur In two ways. The first is 
known as a “line” miss, and occurs when the tag 
and upper address bits match and the tag valid bit is 
set, but the line valid bit is clear. The second is 
called a “tag” miss, and occurs when either the tag 
and upper address bits do not match, or the tag valid 
bit is clear. (The line valid bit Is a “don’t care” in a 
tag miss.) In both cases, the 82385SX forwards the 
386 SX reference to the system, and as the return- 
ing data is fed to the 386 SX, It is written Into the 
cache and validated In the cache directory. 

In-a line miss, the incoming data is validated simply 
by setting the previously clear line valid bit. In a tag 
miss, the upper address bits overwrite the previously 


stored tag, the tag valid bit is set, the appropriate 
line valid bit is set, and the other seven line valid bits 
are cleared. Subsequent tag hits with line misses will 
only set the appropriate line valid bit. (Any data as- 
sociated with the previous tag is no longer consid- 
ered resident in the cache.) 

2.1.2.3 Other Operations That Affect the Cache 
and Cache Directory 

The other operations that affect the cache and/or 
directory are write hits, snoop hits, cache flushes, 
and 82385SX resets. In a write hit, the cache is up- 
dated along with main memory, but the directory is 
unaffected. In a snoop hit, the cache is unaffected, 
but the affected line is Invalidated by clearing its line 
valid bit In the directory. Both an 82385SX reset and 
cache flush clear all tag valid bits. 

When a 386 SX CPU/82385SX system “wakes up” 
upon reset, all tag valid bits are clear. At this point, a 
read miss is the only mechanism by which main 
memory data is copied into the cache and validated 
In the cache directory. Assume an early 386 SX 
code access seeks (for the first time) line 9 of page 
2. Since the tag valid bit is clear, the access is a tag 
miss, and the data is fetched from main memory. 
Upon return, the data is fed to the 386 SX and simul- 
taneously written into line 9 of the cache. The set 
directory entry is updated to show this line as valid. 
Specifically, the tag and appropriate line valid bits 
are set, the remaining seven line valid bits cleared, 
and binary 2 written Into the tag. Since code is se- 
quential in nature, the 386 SX will likely next want 
line 10 of page 2, then line 11, and so on. If the 
386 SX sequentially fetches the next six lines, these 
fetches will be line misses, and as each is fetched 
from main memory and written into the cache, its 
corresponding line valid bit is set. This is the basic 
flow of events that fills the cache with valid data. 
Only after a piece of data has been copied Into the 
cache and validated can it be accessed in a zero 
wait state read hit. Also, a cache entry must have 
been validated before It can be subsequently altered 
by a write hit, or invalidated by a snoop hit. 
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An extreme example of “trashing” is if line 9 of page 
two is an instruction to jump to line 9 of page one, 
which is an instruction to jump back to line 9 of page 
two. Trashing results from the direct mapped cache 
characteristic that all identical page offsets map to a 
single cache location. In this example, the page one 
access overwrites the cached page two data, and 
the page two access overwrites the cached page 
one data. As long as the code jumps back and forth 
the hit rate is zero. This Is of course an extreme 
case. The effect of trashing is that a direct mapped 
cache exhibits a slightly reduced overall hit rate as 
compared to a set associative cache of the same 
size. 


2.2 Two Way Set Associative Cache 

2.2.1 TWO WAY SET ASSOCIATIVE CACHE 
STRUCTURE AND TERMINOLOGY 

Figure 2-3 illustrates the relationship between the 
directory, cache, and 386 SX address space. Where- 
as the direct mapped cache is organized as one 
bank of 8K words, the two way set associative 
cache is organized as two banks (A and B) of 4K 
words each. The page size is halved, and the num- 
ber of pages doubled. (Note the extra tag bit.) The 
cache now has 512 sets in each bank. (Two banks 
times 512 sets gives a total of 1024. The structure 
can be thought of as two half-sized direct mapped 
caches in parallel.) The performance advantage 
over a direct mapped cache is that all identical page 
offsets map to two cache locations instead of one, 
reducing the potential for thrashing. The 82385SX’s 
partitioning of the 386 SX address bus is depicted in 
Figure 2-4. 

2.2.2 LRU REPLACEMENT ALGORITHM 

The two way set associative directory has an addi- 
tional feature: the “least recently used” or LRU bit. 
In the event of a read miss, either bank A or bank B 
will be updated with new data. The LRU bit flags the 
candidate for replacement. Statistically, of two 
blocks of data, the block most recently used is the 
block most likely to be needed again in the near 
future. By flagging the least recently used block, the 
82335SX ensures that the cache block replaced is 
the least likely to have data needed by the CPU. 

2.2.3 TWO WAY SET ASSOCIATIVE CACHE 
OPERATION 

2.2.3. 1 Read Hits 

When the 386 SX Initiates a memory read cycle, the 
82385SX uses the 9-bit set address to select one of 


512 sets. The two tags of this set are simultaneously 
compared with A13-A23, both tag valid bits 
checked, and both appropriate line valid bits 
checked. If either comparison produces a hit, the 
corresponding cache bank is directed to drive the 
selected word onto the 386 SX data bus. (Note that 
both banks will never concurrently cache the same 
main memory location.) If the requested data resides 
In bank A, the LRU bit is pointed toward B. If B pro- 
duces the hit, the LRU bit is pointed toward A. 

^ 
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As in direct mapped operation, a read miss can be 
either a line or tag miss. Let’s start with a tag miss 
example. Assume the 386 SX seeks line 9 of page 2, 
and that neither the A or B directory produces a tag 
match. Assume also, as Indicated In Figure 2-3, that 
the LRU bit points to A. As the data returns from 
main memory, It is loaded Into offset 9 of bank A. 
Concurrently, this data is validated by updating the 
set 1 directory entry for bank A. Specifically, the up- 
per address bits overwite the previous tag, the tag 
valid bit is set, the appropriate line valid bit is set, 
and the other seven line valid bits cleared. Since this 
data is the most recently used, the LRU bit is turned 
toward B. No change to bank B occurs. 

If the next 386 SX request is line 1 0 of page two, the 
result will be a line miss. As the data returns from 
main memory, it will be written into offset 1 0 of bank 
A (tag hit/line miss In bank A), and the appropriate 
line valid bit will be set. A line miss in one bank will 
cause the LRU bit to point to the other bank. In this 
example, however, the LRU bit has already been 
turned toward B. 


2.2.3.3 Other Operations That Affect the Cache 
and Cache Directory 

Other operations that affect the cache and cache 
directory are write hits, snoop hits, cache flushes, 
and 82385SX resets. A write hit updates the cache 
along with main memory. If directory A detects the 
hit, bank A is updated. If directory B detects the hit, 
bank B is updated. If one bank is updated, the LRU 
bit is pointed towards the other. 

If a snoop hit invalidates an entry, for example, in 
cache bank A, the corresponding LRU bit Is pointed 
toward A. This Insures that invalid data Is the prime 
candidate for replacement In a read miss. Finally, 
resets and flushes behave just as they do In a direct 
mapped cache, clearing all tag valid bits. 


3.0 82385SX PIN DESCRIPTION 

The 82385SX creates the 82385SX local bus, which 
is a functional 386 SX Interface. To facilitate under- 
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Standing, 82385SX local bus signals go by the same 
name as their 386 SX equivalents, except that they 
are preceded by the letter “B”. The 82385SX local 
bus equivalent to ADS# is BADS#, the equivalent 
to NA# is BNA#, etc. Thrs convention applies to 
bus states as well. For example, BT1P is the 
82385SX local bus state equivalent to the 386 SX 
T1P state. 


3.1 386 TM SX CPU/82385SX Interface 
Signals 

These signals form the direct interface between the 
386 SX and the 82385SX. 


3.1.1 386TM SX CPU/82385SX Clock (CLK2) 

CLK2 provides the fundamental timing for a 386 SX 
CPU/82385SX system, and is driven by the same 
source that drives the 386 SX CLK2 input. The 


82385SX, like the 386 SX, divides CLK2 by two to 
generate an internal “phase indication” clock. (See 
Figure 3-1.) The CLK2 period whose rising edge 
drives the internal clock low is called PHI1, and the 
CLK2 period that drives the internal clock high is 
called PHI2. A PHI1-PHI2 combination (in that or- 
der) is known as a “T” state, and Is the basis for 
386 SX bus cycles. 


3.1.2 386 TM SX CPU/82385SX RESET (RESET) 

This input resets the 82385SX, bringing it to an initial 
known state, and Is driven by the same source that 
drives the 386 SX RESET input. A reset effectively 
flushes the cache by clearing all cache directory tag 
valid bits. The falling edge of RESET is synchronized 
to CLK2, and used by the 82385SX to properly es- 
tablish the phase of Its Internal clock. (See Figure 
3-2.) Specifically, the second Internal phase follow- 
ing the falling edge of RESET Is PHI2. 
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Figure 3-2. Reset/ Internal Phase Relationship 


3.1.3 386 TM SX CPU/82385SX ADDRESS BUS 
(A1-A23), BYTE ENABLES (BHE#, BLE#), 
AND CYCLE DEFINITION SIGNALS 
(M/IO#, D/C#, W/R#, LOCK#) 

The 82385SX directly connects to these 386 SX out- 
puts. The 386 SX address bus is used in the cache 
directory comparison to see if data referenced by 
386 SX resides in the cache, and the byte enables 
inform the 82385SX as to which portions of the data 
bus are involved in a 386 SX cycle. The cycle defini- 
tion signals are decoded by the 82385SX to deter- 
mine the type of cycle the 386 SX is executing. 


3.1.4 386 TM SX CPU/82385SX ADDRESS 
STATUS (ADS#) AND READY INPUT 
(READYI#) 

ADS#, a 386 SX output, tells the 82385SX that new 
address and cycle definition information is available. 
READYI#, an input to both the 386 SX (via the 
386 SX READY# input pin) and 82385SX, indicates 
the completion of a 386 SX bus cycle, ADS# and 
READYI# are used to track the 386 SX bus state. 


3.1.5 386 TM SX NEXT ADDRESS REQUEST 
(NA#) 

This 82385SX output controls 386 SX pipelining. It 
can be tied directly to the 386 SX NA# input, or it 
can be logically “AND”ed with other 386 SX local 
bus next address requests. 


3.1.6 READY OUTPUT (READYO#) AND BUS 
READY ENABLE (BRDYEN#) 

The 82385SX directly terminates all but two types of 
386 SX bus cycles with its READYO# output. 
386 SX local bus cycles must be terminated by the 
local device being accessed. This includes devices 
decoded using the 82385SX LBA# signal and 387 
accesses. The other cycles not directly terminated 
by the 82385SX are 82385SX local bus reads, spe- 


cifically cache read misses and non-cacheable 
reads. (Recall that the 82385SX forwards and runs 
such cycles on the 82385SX bus.) In these cycles 
the signal that terminates the 82385SX local bus ac- 
cess is BREADY# which Is gated through to the 
386 SX local bus such that the 386 SX and 82385SX 
local bus cycles are concurrently terminated. 
BRDYEN# is used to gate the BREADY# signal to 
the 386 SX. 


3.2 Cache Control Signals 

These 82385SX outputs control the external 16 KB 
cache data memory. 

3.2.1 CACHE ADDRESS LATCH ENABLE 
(CALEN) 

This signal controls the latch (typically an F or AS 
series 74373) that resides between the low order 
386 SX address bits and the cache SRAM address 
inputs. (The outputs of this latch are the “cache ad- 
dress” described in the previous chapter.) When 
CALEN is high the latch is transparent. The falling 
edge of CALEN latches the current inputs which re- 
main applied to the cache data memory until CALEN 
returns to an active high state. 

3.2.2 CACHE TRANSMIT/RECEIVE (CT/R#) 

This signal defines the direction of an optional data 
transceiver (typically an F or AS series 74245) be- 
tween the cache and 386 SX data bus. When high, 
the transceiver is pointed towards the 386 SX local 
data bus (the SRAMs are output enabled). When 
low, the transceiver points towards the cache data 
memory. A transceiver is required If the cache Is de- 
signed with SRAMs that lack an output enable con- 
trol. A transceiver may also be desirable in a system 
that has a heavily loaded 386 SX local data bus. 
These devices are not necessary when using 
SRAMs which incorporate an output enable. 
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3.2.3 CACHE CHIP SELECTS (CSO#, CS1#) 

These active low signals tie to the cache SRAM chip 
selects, and individually enable both bytes of the 1 6- 
bit wide cache. CSO# enables D0-D7 and CS1 # 
enables D8-D15. During read hits, both bytes are 
enabled regardless of whether or not the 386 SX 
byte enables are active. (The 386 SX ignores what It 
did not request.) Also, both cache bytes are enabled 
in a read miss so as to update the cache with a 
complete line (word). In a write hit, only the cache 

K\/tAC thof /^r\rroor\r\nH K\/f^ 
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lected. This prevents cache data from being corrupt- 
ed in a partial word write. 

3.2.4 CACHE OUTPUT ENABLES 
(COEA#, COEB#) 

AND WRITE ENABLES 
(CWEA#, CWEB#) 

COEA# and COEB# are active low signals which 
tie to the cache SRAM or Transceiver output en- 
ables and respectively enable cache bank A or B. 
The state of DEFOE# (define cache output enable), 
an 82385SX configuration input, determines the 
functional definition of COEA# and COEB#. 

If DEFOE# = V|L, in a two-way set associative 
cache, either COEA# or COEB# is active during 
read hit cycles only, depending on which bank is 
selected. In a direct mapped cache, both are activat- 
ed during read hits, so the designer is free to use 
either one. This COEx# definition best suits cache 
SRAMs with output enables. 

If DEFOE# = V|H, COEx# is active during a read 
hit, read miss (cache update) and write hit cycles 
only. This COtx# definition best suits cache 
SRAMs without output enables. In such systems, 
transceivers are needed and their output enables 
must be active for writing, as well as reading, the 
cache SRAMs. 

CWEA# and CWEB# are active low signals which 
tie to the cache SRAM write enables, and respec- 
tively enable cache bank A or B to receive data from 
the 386 SX data bus (386 SX write hit or read miss 
update). In a two-way set associative cache, one or 
the other is enabled in a read miss or write hit. In a 
direct mapped cache, both are activated, so the de- 
signer is free to use either one. 

The various cache configurations supported by the 
82385SX are described in Section 4.2.1. 


3.3 386TM SX Local Bus Decode Inputs 

These 82385SX inputs are generated by decoding 
the 386 SX address and cycle definition lines. These 


active low inputs are sampled at the end of the first 
state in which the address of a new 386 SX cycle 
becomes available. (T1 or first T2P.) 


3.3.1 386TM SX LOCAL BUS ACCESS (LBA#) 

This input identifies a 386 SX access as directed to 
a resource (other than the cache) on the 386 SX 
local bus. (The 387 SX Math Coprocessor is consid- 
ered a 386 SX local bus resource, but LBA# need 
not be generated as the 82385SX internally decodes 
387 SX accesses.) The 82385SX simply ignores 
these cycles. They are neither forwarded to the sys- 
tem nor do they affect the cache or cache directory. 
Note that LBA# has priority over ail other types of 
cycles. If LBA# is asserted, the cycle Is interpreted 
as a 386 SX local bus access, regardless of the cy- 
cle type or status of NCA#. This allows any 386 SX 
cycle (memory, I/O, interrupt acknowledge, etc.) to 
be kept on the 386 SX local bus If desired. 


3.3.2 NON-CACHE ABLE ACCESS (NCA#) 

This active low input identifies a 386 SX cycle as 
non-cacheable. The 82385SX forwards non-cache- 
able cycles to the 82385SX local bus and runs them. 
The cache and cache directory are unaffected. 

NCA# allows a designer to set aside a portion of 
main memory as non-cacheable. Potential applica- 
tions include memory-mapped I/O and systems 
where multiple masters access dual ported memory 
via different busses. Another possibility makes use 
of the 386 SX D/C# output. The 82385SX by de- 
fault implements a unified code and data cache, but 
driving NCA# directly by D/C# creates a data only 
cache. !f D/C# Is inverted first, the result is a code 
only cache. 


3.4 82385SX Local Bus Interface 
Signals 

The 82385SX presents an “386 SX-like” front end to 
the system, and the signals discussed in this section 
are 82385SX local bus equivalents to actual 386 SX 
signals. These signals are named with respect to 
their 386 SX counterparts, but with the letter “B” 
appended to the front. 

Note that the 82385SX itself does not have equiva- 
lent output signals to the 386 SX data bus (D0-D15) 
address bus (A1 -A23), and cycle definition signals 
(M/IO#, D/C#, W/R#). The 82385SX data bus 
(BD0-BD15) is actually the system side of a latching 
transceiver, and the 82385SX address bus and cycle 
definition signals (BA1-BA23, BM/IO#, BD/C#, 
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BW/R#) are the outputs of an edge-triggered latch. 
The signals that control this data transceiver and ad- 
dress latch are discussed in Section 3.5. 


3.4.1 82385SX BUS BYTE ENABLES 
(BBHE#, BBLE#) 

BBHE# and BBLE# are the 82385SX local bus 
equivalents to the 386 SX byte enables. In a cache 
read miss, the 82385SX drives both signals low, re- 
gardless of whether or not the 386 SX byte enables 
are active. This Insures that a complete line (word) Is 
fetched from main memory for the cache update. In 
all other 82385SX local bus cycles, the 82385SX du- 
plicates the logic levels of the 386 SX byte enables. 
The 82385SX tri-states these outputs when it is not 
the current bus master. 


3.4.2 82385SX BUS LOCK (BLOCK#) 

BLOCK# is the 82385SX local bus equivalent to the 
386 SX LOCK# output, and distinguishes between 
locked and unlocked cycles. When the 386 SX runs 
a locked sequence of cycles (and LBA# is negated), 
the 82385SX forwards and runs the sequence on 
the 82385SX local bus, regardless of whether any 
locations referenced in the sequence reside in the 
cache. A read hit will be run as if it Is a read miss, but 
a write hit will update the cache as well as being 
completed to system memory. In keeping with 
386 SX behavior, the 82385SX does not allow an- 
other master to interrupt the sequence. BLOCK# is 
tri-stated when the 82385SX Is not the current bus 
master. 


3.4.3 82385SX BUS ADDRESS STATUS 
(BADS#) 

BADS# is the 82385SSX local bus equivalent of 
ADS#, and Indicates that a valid address (BA1- 
BA23, BBHE#, BBLE#) and cycle definition (BM/ 
10#, BW/R#, BD/C#) are available. It is asserted 
in BT 1 and BT2P states, and is tri-stated when the 
82385SX does not own the bus. 


3.4.4 82386SX BUS READY INPUT (BREADY#) 

82385SX local bus cycles are terminated by 
BREADY#, ]ust as 386 SX cycles are terminated by 
the 386 SX READY# input. In 82385SX local bus 
read cycles, BREADY# is gated by BRDYEN# onto 
the 386 SX local bus, such that it terminates both 
the 386 SX and 82385SX local bus cycles. 


3.4.5 82385SX BUS NEXT ADDRESS REQUEST 
(BNA#) 

BNA# is the 82385SX local bus equivalent to the 
386 SX NA# input, and indicates that the system is 


prepared to accept a pipelined address and cycle 
definition. If BNA# is asserted and the new cycle 
information is available, the 82385SX begins a pipe- 
lined cycle on the 82385SX local bus. 


3.5 82385SX Bus Data Transceiver and 
Address Latch Control Signals 

The 82385SX data bus is the system side of a latch- 
ing transceiver (typically for F or AS series 74646), 
and the 82385SX address bus and cycle definition 
signals are the outputs of an edge-triggered latch (F 
or AS series 74374). The following is a discussion of 
the 82385SX outputs that control these devices. An 
important characteristic of these signals and the de- 
vices they control is that they ensure that BDO- 
BD15, BA1-BA23, BM/IO#, BD/C# and BW/R# 
reproduce the functionality and timing behavior of 
their 386 SX equivalents. 


3.5.1 LOCAL DATA STROBE (LDSTB), DATA 
OUTPUT ENABLE (DOE#), AND BUS 
TRANSMIT/RECEIVE (BT/R#) 

These signals control the latching data transceiver. 
BT/R# defines the transceiver direction. When 
high, the transceiver drives the 82385SX data bus in 
write cycles. When low, the transceiver drives the 
386 SX data bus in 82385SX local bus read cycles. 
DOE# enables the transceiver outputs. 

The rising edge of LDSTB latches the 386 SX data 
bus in all write cycles. The interaction of this signal 
and the latching transceiver is used to perform the 
82385SX’s posted write capability. 

3.5.2 BUS ADDRESS CLOCK PULSE (BACP) 

AND BUS ADDRESS OUTPUT ENABLE 
(BAOE#) 

These signails control the latch that drives BA1- 
BA23, BM/IO#, BW/R#, and BD/C#. In any 
386 SX cycle that is forwarded to the 82385SX local 
bus, the rising edge of BACP latches the 386 SX 
address and cycle definition signals. BAOE# en- 
ables the latch outputs when the 82385SX is the 
current bus master and disables them otherwise. 


3.6 Status and Control Signals 

3.6.1 CACHE MISS INDICATION (MISS#) 

This output accompanies cacheable read and write 
miss cycles. This signal transitions to its active low 
state when the 82385SX determines that a cache- 
able 386 SX access is a miss. Its timing behavior 
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follows that of the 82385SX local bus cycle defini- 
tion signals (BM/IO#, BD/C#, BW/R#) so that it 
becomes available with BADS# in BT1 or the first 
BT2P. MISS# Is floated when the 82385SX does 
not own the bus, such that multiple 82385SX’s can 
share the same node in multi-cache systems. (As 
discussed in Chapter 7, this signal also serves a re- 
served function in testing the 82385SX.) 


3.6.2 WRITE BUFFER STATUS (WBS) 

The latching data transceiver is also known as the 
“posted write buffer”. WBS indicates that this buffer 
contains data that has not yet been written to the 
system even though the 386 SX may have begun its 
next cycle. It is activated when 386 SX data is 
latched, and deactivated when the corresponding 
82385SX local bus write cycle is completed 
(BREADY#). (As discussed in Chapter 7, this signal 
also serves a reserved function In testing the 
82385SX.) 

WBS can serve several functions. In multi-processor 
applications, it can act as a coherency mechanism 
by informing a bus arbiter that it should let a write 
cycle run on the system bus so that main memory 
has the latest data. If any other 82385SX cache sub- 
systems are on the bus, they will monitor the cycle 
via their bus watching mechanisms. Any 82385SX 
that detects a snoop hit will invalidate the corre- 
sponding entry in its local cache. 

3.6.3 CACHE FLUSH (FLUSH) 

When activated, this signal causes the 82385SX to 
clear all of its directory tag valid bits, effectively 
flushing the cache. (As discussed in Chapter 7, this 
signal also serves a reserved function in testing the 
82385SXc) The primary use of the FLUSH input is for 
diagnostics and multi-processor support. The use of 
this pin as a coherency mechanism may impact soft- 
ware transparency. 

The FLUSH input must be held active for at least 4 
CLK (8 CLK2) cycles to complete the flush se- 
quence. If FLUSH is still active after 4 CLK cycles, 
any accesses to the cache will be misses and the 
cache will not be updated (since FLUSH is active). 


3.7 Bus Arbitration Signais 
(BHOLD and BHLDA) 

In master mode, BHOLD is an input that indicates a 
request by a slave device for bus ownership. The 


82385SX acknowledges this request via its BHLDA 
output. (These signals function identically to the 
386 SX HOLD and HLDA signals.) 

The roles of BHOLD and BHLDA are reversed for an 
82385SX In slave mode. BHOLD is now an output 
indicating a request for bus ownership, and BHLDA 
an input indicating that the request has been grant- 
ed. 


3.8 Gohererscy (Bus Watching) 

Support Signals 
(SA1-SA23, SSTB#, SEN) 

These signals form the 82385SX’s bus watchirig in- 
terface. The Snoop Address Bus (SA1 ^SA23) con- 
nects to the system address lines If masters reside 
at both the system and 82385SX local bus levels, or 
the 82385SX local bus address lines if masters re- 
side only at the 82385SX local bus level. Snoop 
Strobe (SSTB#) indicates that a valid address is on 
the snoop address inputs. Snoop Enable (SEN) indi- 
cates that the cycle is a write. In a system with mas- 
ters only at the 82385SX local bus level, SA1 -SA23, 
SSTB#, and SEN can be driven respectively by 
BA1-BA23, BADS#, and BW/R# without any sup- 
port circuitry. 


3.9 Configuration Inputs 

(2W/D#, M/S#, DEFOE#) 

These signals select the configurations supported 
by the 82385SX. They are hardware strap options 
and must not be changed dynamically. 2W/D# (2- 
Way/ Direct Mapped Select) selects a two-way set 
aQcnr'iotK/o r'ci/'hia twhon tied .hich. or s diroct 
mapped cache when tied low. M/S# (Master/Slave 
Select) chooses between master mode (M/S# high) 
and slave mode (M/S# low). DEFOE# defines the 
functionality of the 82385SX cache output enables 
(COEA# and COEB#). DEFOE# allows the 
82385SX to interface to SRAMs with output enables 
(DEFOE# low) or to SRAMs requiring transceivers 
(DEFOE# high). 


3. 10 Reserved Pins (RES) 

Some pins on the 82385SX are reserved for internal 
testing and future cache features. To assure com- 
patibility and functionality, these reserved pins must 
be configured as shown in Table 3.10.1. 
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Table 3.10.1. Reserved Pin Connections 


PGA 

Pin Location 

PQFP 

Pin Location 

Logic Level 

A12 

1 

High 

A13 

131 

High 

BIO 

7 

High 

B11 

3 

High 

B12 

132 

High 

CIO 

4 

High 

C11 

2 

High 

G13 

117 

High 

H12 

110 

High 

J3 

60 

High 

J14 

109 

High 

K1 

58 

High 

K2 

59 

High 

K3 

62 

High 

L1 

61 

High 

L2 

63 

High 

L3 

64 

High 

LI 2 

100 

No Connect 

LI 4 

102 

High 

M13 

101 

No Connect 

N6 

75 

No Connect 

P5 

76 

No Connect 


4.0 386 SX LOCAL BUS INTERFACE 

The following is a detailed description of how the 
82385SX interfaces to the 386 SX and to 386 SX 
local bus resources. Items specifically addressed 
are the Interfaces to the 386 SX, the cache SRAMs, 
and the 387 SX Math Coprocessor. 

The many timing diagrams in this and the next chap- 
ter provide insight Into the dual pipelined bus struc- 
ture of a 386 SX CPU/82385SX system. It’s Impor- 
tant to realize, however, that one need not know 
every possible cycle combination to use the 
82385SX. The Interface is simple, and the dual bus 
operation invisible to the 386 SX and system. To 
facilitate discussion of the timing diagrams, several 
conventions have been adopted. Refer to Figure 
4-2A, and note that 386 SX bus cycles, 386 SX bus 
states, and 82385SX bus states are identified along 
the top. All states can be Identified by the “frame 
numbers” along the bottom. The cycles in Figure 
4-2A include a cache read hit (CRDH), a cache read 
miss (CRDM), and a write (WT). WT represents any 
write, cacheable or not. When necessary to distin- 
guish cacheable writes, a write hit goes by CWTH 
and a write miss by CWTM. Non-cacheable system 
reads go by SBRD. Also, it is assumed that system 
bus pipelining occurs even though the BNA# signal 
is not shown. When the system pipeline begins Is a 
function of the system bus controller. 


386 SX bus cycles can be tracked by ADS# and 
READYI#, and 82385SX cycles by BADS# and 
BREADY#. These four signals are thus a natural 
choice to help track parallel bus activity. Note in the 
timing diagrams that 386 SX cycles are numbered 
using ADS# and READYI#, and 82385SX cycles 
using BADS# and BREADY#. For example, when 
the address of the first 386 SX cycle becomes avail- 
able, the corresponding assertion of ADS# is 
marked “1”, and the READYI# pulse that termi- 
nates the cycle is marked “1” as well. Whenever a 
386 SX cycle Is forwarded to the system, its number 
is forwarded as well so that the corresponding 
82385SX bus cycle can be tracked by BADS# and 
BREADY#. 

The “N” value in the timing diagrams is the assumed 
number of main memory wait states Inserted in a 
non-pipelined 82385SX bus cycle. For example, a 
non-pipelined access to N = 2 memory requires a to- 
tal of four bus states, while a pipelined access re- 
quires three. (The pipeline advantage effectively hid- 
es one main memory wait state.) 


4.1 Processor Interface 

This section presents the 386 SX CPU/82385SX 
hardware Interface and discusses the Interaction 
and timing of this interface. Also addressed is how to 
decode the 386 SX address bus to generate the 
82385SX Inputs LBA# and NCA#. (Recall that 
LBA# allows memory and/or I/O space to be set 
aside for 386 SX local bus resources; and NCA# 
allows system memory to be set aside as non- 
cacheable.) 

4.1.1 HARDWARE INTERFACE 

Figure 4-1 Is a diagram of a 386 SX CPU/82385SX 
system, which can be thought of as three distinct 
interfaces. The first Is the 386 SX CPU/82385SX In- 
terface (including the Ready Logic). The second is 
the cache interface, as depicted by the cache con- 
trol bus in the upper left corner of Figure 4-1 . The 
third is the 82385SX bus interface, which includes 
both direct connects and signals that control the 
74374 address/cycle definition latch and 74646 
latching data transceiver. (The 82385SX bus inter- 
face Is the subject of the next chapter.) 

As seen in Figure 4-1, the 386 SX CPU/82385SX 
interface is a straightforward connection. The only 
necessary support logic Is that required to sum all 
ready sources. 
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4.1.2 READY GENERATION 

Note in Figure 4-1 that the ready logic consists of 
two gates. The upper three-input AND gate (shown 
as a negative logic OR) sums all 386 SX local bus 
ready sources. One such source is the 82385SX 
READYO# output, which terminates read hits and 
posted writes. The output of this gate drives the 
386 SX READY# input and is monitored by the 
82385SX (via READYI#) to track the 386 SX bus 
state. 

When the 82385SX forwards a 386 SX read cycle to 
the 82385SX bus (cache read miss or non-cache- 
able read), it does not directly terminate the cycle via 
READYO#. Instead, the 386 SX and 82385SX bus 
cycles are concurrently terminated by a system 
ready source. This is the purpose of the additional 
two-input OR gate (negative logic AND) in Figure 
4-1. When the 82385SX forwards a read to the 
82385SX bus, it asserts BRDYEN# which enables 
the system ready signal (BREADY#) to directly ter- 
minate the 386 SX bus cycle. 

Figure 4-2A and 4-2B illustrate the behavior of the 
signals involved in ready generation. Note in cycle 1 
of Figure 4-2A that the 82385SX READYO# directly 
terminates the hit cycle. In cycle 2, READYO# is not 
activated. Instead the 82385SX BRDYEN# Is acti- 
vated In BT2, BT2P, or BT2I states such that 
BREADY# can concurrently terminate the 386 SX 
and 82385SX bus cycles (frame 6). Cycle 3 Is a post- 
ed write. The write data becomes available in TIP 
(frame 7), and the address, data, and cycle definition 
of the write are latched in T2 (frame 8). The 386 SX 
cycle is terminated by READYO# in frame 8 with no 
wait states. The 82385SX, however, sees the write 
cycle through to completion on the 82385SX bus 
where it is terminated In frame 10 by BREADY#. In 
this case, the BREADY# signal is not gated through 
to the 386 SX. Refer to Figures 4-2A and 4-2B for 
clarification. 


4.1.3 NA# AND 386 SX LOCAL BUS 
PIPELINING 

Cycle 1 of Figure 4-2A Is a typical cache read hit. 
The 386 SX address becomes available In T1, and 
the 82385SX uses this address to determine if the 
referenced data resides in the cache. The cache 
look-up Is completed and the cycle qualified as a hit 
or miss in T1 . If the data resides in the cache, the 
cache is directed to drive the 386 SX data bus, and 
the 82385SX drives its READYO# output so the cy- 
cle can be terminated at the end of the first T2 with 
no wait states. 

Although cycle 2 starts out like cycle 1 , at the end of 
T1 (frame 3), it is qualified as a miss and forwarded 
to the 82385SX bus. The 82385SX bus cycle begins 


one state after the 386 SX bus cycle, implying a one 
wait state overhead associated with cycle 2 due to 
the look-up. When the 82385SX encounters the 
miss, it Immediately asserts NA#, which puts the 
386 SX into pipelined mode. Once In pipelined 
mode, the 82385SX Is able to qualify a 386 SX cycle 
using the 386 SX pipelined address and control sig- 
nals. The result is that the cache look-up state is 
hidden in all but the first of a contiguous sequence 
of read misses. This is shown in the first two cycles, 
both read misses, of Figure 4-2B. The CPU sees the 
look-up state in the first cycle, but not in the second. 
In fact, the second miss requires a total of only two 
states, as not only does 386 SX pipelining hide the 
look-up state, but system pipelining hides one of the 
main memory wait states. (System level pipelining 
via BN A# Is discussed In the next chapter.) Several 
characteristics of the 82385SX’s pipelining of the 
386 SX are as follows: 

— The above discussion applies to all system 
reads, not just cache read misses. 

— The 82385SX provides the fastest possible 
switch to pipelining, T1-T2-T2P. The exception to 
this is when a system read follows a posted 
write. In this case, the sequence Is T1-T2-T2- 
T2P. (Refer to cycle 4 of Figure 4-2A.) The num- 
ber of T2 states is dependent on the number of 
main memory wait states. 

— Refer to the read hit In Figure 4-2A (cycle 1), and 
note that NA# is actually asserted before the 
end of T1, before the hit/miss decision Is made. 
This is of no consequence since even though 
NA# is sampled active in T2, the activation of 
READYO# in the same T2 renders NA# a 
“don’t care”. NA# is asserted in this manner to 
meet 386 SX timing requirements and to insure 
the fastest possible switch to pipelined mode. 

— All read hits and the majority of writes can be 
serviced by the 82385SX with zero wait states In 
non-pipellned mode, and the 82385SX accord- 
ingly attempts to run all such cycles in non-pipe- 
lined mode. An exception Is seen in the hit cycles 
(cycles 3 and 4) of Figure 4-2B. The 82385SX 
does not know soon enough that cycle 3 is a hit, 
and thus sustains the pipeline. The result is that 
three sequential hits are required before the 
386 SX Is totally out of pipelined mode. (The 
three hits look like T1P-T2P, T1P-T2, T1-T2.) 
Note that this does not occur if the number of 
main memory wait states is equal to or greater 
than two. 

As far as the design is concerned, NA# is generally 
tied directly to the 386 SX NA# input. However, oth- 
er local NA# sources may be logically “AND”ed 
with the 82385SX NA# output if desired. It is essen- 
tial, however, that no device other than the 82385SX 
drive the 386 SX NA# input unless that device re- 
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Figure 4-2A. READYO#, BRDYEN#, and NA# (N = 1) 
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Figure 4-2B. READYO#, BRDYEN#, and NA# (N = 1) 
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sides on the 386 SX local bus in space decoded via 
LBA#. If desired, the 82385SX NA# output can be 
ignored and the 386 SX NA# input tied high. The 
386 SX NA# input should never be tied low, which 
would always keep it active. 


4.1.4 LBA# AND NCA# GENERATION 

The 82385SX Inputs signals LBA# and NCA# are 
generated by decoding the 386 SX address (A1- 
A23) and cycle definition (W/R#, D/G#, M/!0#) 
lines. The 82385SX samples them at the end of the 
first state in which they become available, which Is 
either T1 or the first T2P cycle. The decode configu- 
ration and timings are illustrated respectively in Fig- 
ures 4-3A and 4-3B. 


4.2 Cache Interface 

The following is a description of the external data 
cache and 82385SX cache interface. 


4.2.1 CACHE CONFIGURATIONS 

The 82385SX controls the cache memory via the 
control signals shown in Figure 4-1. These signals 
drive one of four ppssible cache configurations, as 
depicted in Figures 4-4A through 4-4D. Figure 4-4A 
shows a direct mapped cache organized as 8K 
words. The likely design choice is two 8K x 8 
SRAMs. Figure 4-4B depicts the same cache memo- 
ry but with a data transceiver between the cache 
and 386 SX data bus. In this configuration, CT/R# 
controls the transceiver direction, COEA# drives the 
transceiver output enable (COEB# could also be 
used), and DEFOE# is strapped high. A data buffer 
is required if the chosen SRAM does not have a 
separate output enable. Additionally, buffers may be 
used to ease SRAM timing requirements or in a sys- 
tem with a heavily loaded data bus. (Guidelines for 
SRAM selection are included In Chapter 6.) 

Figure 4-4C depicts a two-way set associative cache 
organized as two banks (A and B) of 4K words each. 
The likely design choice is eight 4K x 4 SRAMs. Fi- 
nally, Figure 4-4D depicts the two-way organization 
with data buffers between the cache memory and 
data bus. 



A. Decode Configuration 
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B. Decode Timing 


Figure 4-3. NCA#, LBA# Generation 
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Figure 4-4A. Direct Mapped Cache without Data Buffers 



Figure 4-4B. Direct Mapped Cache with Data Buffers 
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Figure 4-4C. Two-Way Set Associative Cache without Data Buffers 
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Figure 4-4D. Two-Way Set Associative Cache with Data Buffers 


4.2.2 CACHE CONTROL . . . DIRECT MAPPED 

Figure 4-5A illustrates the timing of cache read and 
write hits, while Figure 4-5B illustrates cache up- 
dates. In a read hit, the cache output enables are 
driven from the beginning of T2 (cycle 1 of Figure 
4-5A). If at the end of T1 the cycle is qualified as a 
cacheable read, the output enables are asserted on 
the assumption that the cycle will be a hit. (Driving 
the output enables before the actual hit/miss deci- 
sion is made eases SRAM timing requirements.) 


Cycle 1 of Figure 4-5B illustrates what happens 
when the assumption of a hit turns out to be wrong. 
Note that the output enables are asserted at the be- 
ginning of of T2, but then disabled at the end of T2. 
Once the output enables are inactive, the 82385SX 
turns the transceiver around (via CT/R#) and drives 
the write enables to begin the cache update cycle. 
Note in Figure 4-5B that once the 386 SX Is in pipe- 
lined mode, the output enables need not be driven 
prior to a hit/miss decision, since the decision is 
made earlier via the pipelined address information. 
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Figure 4-5 A. Cache Read and Write Cycles — Direct Mapped (N = 1) 
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Figure 4-5B. Cache Update Cycles — Direct Mapped (N = 1) 
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One consequence of driving the output enables low 
in a miss before the hit/miss decision is made is that 
since the cache starts driving the 386 SX data bus, 
the 82385SX cannot enable the 74646 transceiver 
(Figure 4-1) until after the cache outputs are dis- 
abled. (The timing of the 74646 control signals is 
described in the next chapter.) The result is that the 
74646 cannot be enabled soon enough to support 
N = 0 main memory (“N” was defined in Section 4.0 
as the number of non-pipelined main memory wait 
states). This means that memory which can run with 
zero wait states in a non-pipelined cycle should not 
be mapped into cacheable memory. This should not 
present a problem, however, as a main memory sys- 
tem built with N = 0 memory has no need of a cache. 
(The main memory is as fast as the cache.) Zero 
wait state memory can be supported if it is decoded 
as non-cacheable. The 82385SX knows that a cycle 
is non-cacheable in time not to drive the cache out- 
put enables, and can thus enable the 74646 sooner. 

In a write hit, the 82385SX only updates the cache 
bytes that are meant to be updated as directed by 
the 386 SX byte enables. This prevents corrupting 
cache data in partial doubleword writes. Note in Fig- 
ure 4-5A that the appropriate bytes are selected via 
the cache byte select lines CSO# and CS1#. In a 
read hit, both select lines are driven as the 386 SX 
will simply ignore data it does not need. Also, in a 
cache update (read miss), both selects are active in 
order to update the cache with a complete line 
(word). 

4.2.3 CACHE CONTROL . . . 

TWO-WAY SET ASSOCIATIVE 

Figures 4-6A and 4-6B illustrate the timing of cache 
read hits, write hits, and updates for a two-way set 
associative cache. (Note that the cycle sequences 
are the same as those In Figure 4-5A and 4-5B.) In a 
cache read hit, only one bank on the other is en- 
abled to drive the 386 SX data bus, so unlike the 
control of a direct mapped cache, the appropriate 
cache output enable cannot be driven until the out- 
come of the hit/miss decision is known. (This im- 
plies stricter SRAM timing requirements for a two- 
way set associative cache.) In write hits and read 
misses, only one bank or the other Is updated. 


4.3 387 SX Interface 

The 387 SX Math Coprocessor interfaces to the 386 
SX just as it would In a system without an 82385SX. 
The 387 SX READYO# output is logically “AND”ed 
along with all other 386 SX local bus ready sources 
(Figure 4-1), and the output is fed to the 387 SX 
READY#, 82385SX READYI#, and 386 SX 
READY# inputs. 


The 386 SX uniquely addresses the 387 SX by driv- 
ing M/IO# low and A23 high. The 82385SX de- 
codes this internally and treats 387 SX accesses in 
the same way it treats 386 SX cycles in which LBA# 
is asserted. It ignores them. 


5.0 82385SX LOCAL BUS AND 
SYSTEM INTERFACE 

The 82385SX system interface is the 82385SX Lo- 
cal Bus, which presents a “386 SX-llke“ front end to 
the system. The system ties to It just as it would to a 
386 SX. Although this 386 SX-like front end is func- 
tionally equivalent to a 386 SX, there are timing dif- 
ferences which can easily be accounted for In a sys- 
tem design. 

The following is a description of the 82385SX sys- 
tem Interface. After presenting the 82385SX bus 
state machine, the 82385SX bus signals are de- 
scribed, as are techniques for accommodating any 
differences between the 82385SX bus and 386 SX 
bus. Following this is a discussion of the 82385SX’s 
condition upon reset. 


5.1 The 82385SX Bus State Machine 

5.1.1 MASTER MODE 

Figure 5-1 A illustrates the 82385SX bus state ma- 
chine when the 82385SX Is programmed in master 
mode. Note that it Is almost identical to the 386 SX 
bus state machine, only the bus states are 82385SX 
bus states (BT1P, BTH, etc.) and the state tran- 
sitions are conditioned by 82385SX bus inputs 

/riKiA JL r>i I/-M nt \ 

\DiNy-X7r ui iwt-L./, ciu.;. vviic;ix;3ao a ivjii 

to the 386 SX state machine Indicates that the 
386 SX execution or prefetch unit needs bus access, 
a pending request to the 82385SX state machine 
indicates that a 386 SX bus cycle needs to be for- 
warded to the system (read miss, non-cacheable 
read, write, etc.). The only difference between the 
state machines is that the 82385SX does not Imple- 
ment a direct BT1P-BT2P transition. If BNA# is as- 
serted in BT1P, the resulting state sequence is 
BT1 P-BT2I-BT2P. The 82385SX’s ability to sustain a 
pipeline is not affected by the lack of this transition. 

5.1.2 SLAVE MODE 

The 82385SX’s slave mode state machine (Figure 
5-1 B) is similar to the master mode machine except 
that now transitions are conditioned by BHLDA rath- 
er than BHOLD. (Recall that in slave mode, the roles 
of BHOLD and BHLDA are reversed from their mas- 
ter mode roles.) Figure 5-2 clarifies slave mode state 
machine operation. Upon reset, a slave mode 


4-572 



Figure 4-6 A. Cache Read and Write Cycles— Two Way Associative (N = 1) 
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82385SX enters the BTH state. When the 386 SX of 
the slave 82385SX subsystem has a cycle that 
needs to be forwarded to the system, the 82385SX 
moves to BTI and issues a hold request via BHOLD. 
It is important to note that a slave mode 82385SX 
does not drive the bus in a BTI state. When the mas- 
ter or bus arbiter returns BHLDA, the slave 82385SX 
enters BT1 and runs the cycle. When the cycle Is 
completed, and if no additional requests are pend- 
ing, the 82385SX moves back to BTH and disables 
BHOLD. 


If, while a slave 82385SX is running a cycle, the 
master or arbiter drops BHLDA (Figure 5-2B), the 
82385SX will complete the current cycle, move to 
BTH and remove the BHOLD request. If the 
82385SX still had cycles to run when It was kicked 
off the bus, it will immediately assert a new BHOLD 
and move to BTI to await bus acknowledgement. 
Note, however, that it will only move to BTI If BHLDA 
is negated, insuring that the handshake sequence is 
completed. 


BHOLD ASSERTED 



Figure 5-1 A. 82385SX Local Bus State Machine — Master Mode 
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Figure 5-1 B. 82385SX Local Bus State Machine — Slave Mode 
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A. Normal Slave Mode Sequence 


BHOLD 

BTH 

BTI 

BTI 

BT1 

BT2 

BT2 

BTI 

BT2 

BT2 

BTH 

BTI 

BTI 

BTI 

BTI 

BT1 

nr 









nr 

SERTS 




BHLDA 



JTQCCV 

rr 

Dr_ AC 

nr 





BHOLD 

nr 






t 







ARBITER 
DROPS BHLDA 


290222-28 


B. Sequence of Events if Master or Arbiter Drops BHLDA 


Figure 5-2. BHOLD/BHLDA— Slave Mode 


There are several cases in which a slave 82385SX 
will not immediately release the bus if BHLDA is 
dropped. For example, if BHLDA is dropped during a 
BT2P state, the 82385SX has already committed to 
the next system bus pipelined cycle and will execute 
it before releasing the bus. Also, the 82385SX will 
complete a sequence of locked cycles before re- 
leasing the bus. This should not present any prob- 
lems, as a properly designed arbiter will not assume 
that the 82385SX has released the bus until It sees 
BHOLD become inactive. 


5.2 The 82385SX Local Bus 

The 82385SX bus can be broken up into two groups 
of signals: those which have direct 386 SX counter- 
parts, and additional status and control signals pro- 
vided by the 82385SX. The operation and Interaction 
of all 82385SX bus signals are depicted in Figures 
5-3A through 5-3L for a wide variety of cycle se- 
quences. These diagrams serve as a reference for 
the 82385SX bus discussion and provide insight into 
the dual bus operation of the 82385SX. 
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Figure 5-3C. SBRD, CRDM, SBRD— (N = 2) 
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Figure 5-3D. SBRD Cycles Interleaved with BTH States— (N = 1) 
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Figure 5-31. WT, WT, SBRD—(N = 1) 
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Figure 5-3 J. Consecutive Write Cycles— (N = 1) 
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Figure 5-3K. LOCK# /BLOCK# in Non-Cacheable or Miss Cycles— (N = 1) 
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5.2.1 82385SX BUS COUNTERPARTS TO 
386TM SX SIGNALS 

The following sections discuss the signals presented 
on the 82385SX local bus which are functional 
equivalents to the signals present at the 386 SX lo- 
cal bus. 


5.2.1. 1 Address Bus (BA1-BA23) 

and Cycle Definition Signals 
(BM/IO#, BD/C#, BW/R#) 

These signals are not driven directly by the 
82385SX, but rather are the outputs of the 74374 
address/cycle definition latch. (Refer to Figure 4-1 
for the hardware interface.) This latch is controlled 
by the 82385SX BACP and BAOE# outputs. The 
behavior and timing of these outputs and the latch 
they control (typically F or AS series TTL) ensure 
that BA1-BA23, BM/IO#, BW/R#, and BD/C# are 
compatible in timing and function to their 386 SX 
counterparts. 


The behavior of BACP can be seen in Figure 5-3B, 
where the rising edge of BACP latches and forwards 
the 386 SX address and cycle definition signals in a 
BT1 or first BT2P state. However, the 82385SX 
need not be the current bus master to latch the 
386 SX address, as evidenced by cycle 4 of Figure 
5-3A. In this case, the address is latched in frame 8, 
but not forwarded to the system (via BAOE#) until 
frame 1 0. (The latch and output enable functions of 
the 74374 are independent and invisible to one an- 
other.) 

Note that in frames 2 and 6 the BACP pulses are 
marked “False”. The reason is that BACP is issued 
and the address latched before the hit/miss deter- 
mination is made. This ensures that should the cycle 
be a miss, the 82385SX bus can move directly into 
BT1 without delay. In the case of a hit, the latched 
address is simply never qualified by the assertion of 
BADS#. The 82385SX bus stays in BTI if there is no 
access pending (new cycle is a hit) and no bus activ- 
ity. It will move to and stay In BT2I if the system has 
requested a pipelined cycle and the 82385SX does 
not have a pending bus access (new cycle is a hit). 
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5.2.1.2 Data Bus (BD0-BD15) 

The 82385SX data bus is the system side of the 
74646 latching transceiver. (See Figure 4-1.) This 
device is controlled by the 82385SX outputs LDSTB, 
DOE#, and BT/R#. LDSTB latches data in write 
cycles, DOE# enables the transceiver outputs, and 
BT/R# controls the transceiver direction. The inter- 
action of these signals and the transceiver is such 
that BD0-BD15 behave just like their 386 SX coun- 
terparts. The transceiver is configured such that 
data flow in write cycles (A to B) is latched, and data 
flow In read cycles (B to A) is flow-through. 

Although BD0-BD15 function just like their 386 SX 
counterparts, there is a timing difference that must 
be accommodated for in a system design. As men- 
tioned above, the transceiver is transparent during 
read cycles, so the transceiver propagation delay 
must be added to the 386 SX data setup. In addition, 
the cache SRAM setup must be accommodated for 
In cache read miss cycles. 

For non-cacheable reads the data setup is given by: 

MinBD0-BD15 ^ 386SXMin , 74646B-to-A 

Read Data Setup DataSetup Max Propagation Delay 

The required BD0-BD15 setup in a cache read miss 
is given by: 

MinBD0-BD15 ^ 74646 B-to-A , CacheSRAMMin 

Read DataSetup Max Propagation Delay Write Setup 

, OneCLK2 _ 82385SXCWEA# or 
Period CWEB# Min Delay 

If a data buffer is located between the 386 SX data 
bus and the cache SRAMs, then its maximum propa- 
gation delay must be added to the above formula as 
well. A design analysis should be completed for ev- 
ery new design to determine actual margins. 

A design can accommodate the increased data set- 
up by choosing appropriately fast main memory 
DRAMs and data buffers. Alternatively, a designer 
may deal with the longer setup by inserting an extra 
wait state into cache read miss cycles. If an addition- 
al state is to be inserted, the system bus controller 
should sample the 82385SX MISS# output to distin- 
guish read misses from cycles that do not require 
the longer setup. Tips on using the 82385SX MISS# 
signal are presented later In this chapter. 

The behavior of LDSTB, DOE#, and BT/R# can be 
understood via Figures 5-3A through 5-3L. Note that 
in cycle 1 of Figure 5-3A (A non-cacheable system 
read), DOE# is activated midway through BT1, but 
in cycle 1 of Figure 5-3B (a cache read miss), DOE# 
is not activated until midway through BT2. The rea- 


son is that in a cacheiable read cycle, the cache 
SRAMs are enabled to drive the 386 SX data bus 
before the outcome of the hit/miss decision (in an- 
ticipation of a hit.) In cycle 1 of Figure 5-3B, the as- 
sertion of DOE# must be delayed until after the 
82385SX has disabled the cache output buffers. The 
result Is that N = 0 main memory should not be 
mapped into the cache. 


5.2.1.3 Byte Enables (BBHE#, BBLE#) 

These outputs are driven directly by the 82385SX, 
and are completely compatible in timing and function 
with their 386 SX counterparts. When a 386 SX cy- 
cle is forwarded to the 82385SX bus, the 386 SX 
byte enables are duplicated on BBHE# and 
BBLE#. The one exception is a cache read miss, 
during which BBHE# and BBLE# are both active 
regardless of the status of the 386 SX byte enables. 
This ensures that the cache is updated with a valid 
16-bit entry. 


5.2.1.4 Address Status (BADS#) 

BADS# is Identical In function and timing to Its 
386 SX counterpart. It is asserted in BT 1 and BT2P 
states, and indicates that valid address and cycle 
definition (BA1-BA23, BBHE#, BBLE#, BM/IO#, 
BW/R#, BD/C#) information is available on the 
82385SX bus. 


5.2. 1.5 Ready (BREADY#) 

The 82385SX BREADY# input terminates 82385SX 
bus cycles just as the 386 SX READY # input termi- 
nates 386 SX bus cycles. The behavior of 
BHEADY# is the same as that of READY#, but 
note in the A.C timing specifications that a cache 
read miss requires a longer BREADY# setup than 
do other cycles. This must be accommodated for in 
ready logic design. 

5.2.1.6 Next Address (BNA#) 

BNA# is Identical in function and timing to Its 
386 SX counterpart. Note that in Figures 5-3A 
through 5-3L, BNA# is assumed asserted in every 
BT1P or first BT2 state. Along with the 82385SX’s 
pipelining of the 386 SX, this ensures that the timing 
diagrams accurately reflect the full pipelined nature 
of the dual bus structure. 


5.2.1.7 Bus Lock (BLOCK#) 

The 386 SX flags a locked sequence of cycles by 
asserting LOCK#. During a locked sequence, the 
386 SX does not acknowledge hold requests, so the 
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sequence executes without interruption by another 
master. The 82385SX forces all locked 386 SX cy- 
cles to run on the 82385SX bus (unless LBA# Is 
active), regardless of whether or not the referenced 
location resides in the cache. In addition, a locked 
sequence of 386 SX cycles Is run as a locked se- 
quence on the 82385SX bus; BLOCK# is asserted 
and the 82385SX does not allow the sequence to be 
interrupted. Locked writes (hit or miss) and locked 
read misses affect the cache and cache directory 
just as their unlocked counterparts do. A locked read 
hit, however, is handled differently. The read is nec- 
essarily forced to run on the 82385SX local bus, and 
as the data returns from main memory, It is “re-cop- 
ied” Into the cache. (See Figure 5-3L.) The directory 
is not changed as it already indicates that this loca- 
tion exists in the cache. This activity is invisible to 
the system and ensures that semaphores are prop- 
erly handled. 

BLOCK# is asserted during locked 82385SX bus 
cycles just as LOCK# is asserted during locked 
386 SX cycles. The BLOCK# maximum valid delay, 
however, differs from that of LOCK#, and this must 
be accounted for In any circuitry that makes use of 
BLOCK#. The difference is due to the fact that 
LOCK#, unlike the other 386 SX cycle definition sig- 
nals, is not pipelined. The situation is clarified in Fig- 
ure 5-3 K. In cycle 2 the state of LOCK# is not 
known before the corresponding system read starts 
(Frame 4 and 5). In this case, LOCK# Is asserted at 
the beginning of T1 P, and the delay for BLOCK# to 
become active is the delay of LOCK# from the 
386 SX plus the propagation delay through the 
82385SX. This occurs because T1 P and the corre- 
sponding BT 1 P are concurrent (Frame 5). The result 
is that BLOCK# should not be sampled at the end 
of BT 1 P. The first appropriate sampling point Is mid- 
way through the next state, as shown in Frame 6. In 


Figure 5-3L, the maximum delay for BLOCK# to be- 
come valid In Frame 4 Is the same as the maximum 
delay for LOCK# to become valid from the 386 SX. 
This Is true since the pipelining issue discussed 
above does not occur. 

The 82385 should negate BLOCK# after: 
BREADY# of the last 82385 Locked Cycle was as- 
serted AND LOCK# turns inactive. 

This means that in a sequence of cycles which be- 
gins with a 82385 Locked Cycle and goes on with all 
the possible Locked Cycles (other 82385 cycles. 
Idles, and local cycles), while LOCK# is continuous- 
ly active, the 82385 will maintain BLOCK# active 
continuously. Another implication is that in a Locked 
Posted Write Cycle followed by non-locked se- 
quence, BLOCK# Is negated one CLK after 
BREADY# of the write cycle. In other 82385 Locked 
Cycles, followed by non-locked sequences, 
BLOCK# is negated one CLK after LOCK# Is nega- 
ted, which occurs two CLKs after BREADY# is as- 
serted. In the last case BLOCK# active moves by 
one CLK to the non-locked sequence. 

The arbitration rules of Locked Cycles are: 


MASTER MODE: 

BHOLD Input signal is ignored when BLOCK# or 
Internal lock (16-bit non-aligned cycle) are active. 
BHLDA output signal remains inactive, and BAOE# 
output signal remains active at that time interval. 

SLAVE MODE: 

The 82385 does not relinquish the system bus if 
BLOCK# or Internal lock are active. The BHOLD 
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output signal remains active when BLOCK# or inter- 
nal lock is active plus one CLK. The BHLDA Input 
signal Is ignored when BLOCK# or the internal lock 
is active plus one CLK. This means the 82385 slave 
does not respond to BHLDA Inactivation. The 
BAOE# output signal remains active during the 
same time interval. 


5.2.2 ADDITIONAL 82385SX BUS SIGNALS 

The 82385SX bus provides two status outputs and 
one control input that are unique to cache operation 
and thus have no 386 SX counterparts. The outputs 
are MISS# and WBS, and the input is FLUSH. 

5.2.2. 1 Cache Read/ Write Miss Indication 
(MISS#) 

MISS# can be thought of as an extra 82385SX bus 
cycle definition signal similar to BM/IO#, BW/R#, 
and BD/C#, that distinguishes cacheable read and 
write misses from other cycles. MISS#, like the oth- 
er definition signals, becomes valid with BADS# 
(BT1 or first BT2P). The behavior of MISS# is illus- 
trated in Figures 5-3B, 5-3C, and 5-3J. The 82385SX 
floats MISS# when another master owns the bus, 
allowing multiple 82385SXs to share the same node 
in multi-cache systems. MISS# should thus be light- 
ly pulled up (~20K) to keep it negated during hold 
(BTH) states. 

MISS# can serve several purposes. As discussed 
previously, the BD0-BD15 and BREADY# setup 
times in a cache read miss are longer than in other 
cycles. A bus controller can distinguish these cycles 
by gating MISS# with BW/R#. MISS# may also 
prove useful in gathering 823S5SX system perform 
ance data. 


5.2.2.2 WRITE BUFFER STATUS (WBS) 

WBS is activated when 386 SX write cycle data is 
latched Into the 74676 latching transceiver (via 
LDSTB). It is deactivated upon completion of the 
write cycle on the 82385SX bus when the 82385SX 
sees the BREADY# signal. WBS behavior Is illus- 
trated In Figures 5-3F through 5-3J, and potential 
applications are discussed in Chapter 3. 


5.2.2.3 Gac.he Flush (FLUSH) 

FLUSH Is an 82385SX Input which Is used to reset 
all tag valid bits within the cache directory. The 
FLUSH input must be kept active for at least 4 CLK 
(8 CLK2) periods to complete the directory flush. 
Flush Is generally used in diagnostics but can also 
be used in applications where snooping cannot 
guarantee coherency. 


5.3 Bus Watching (Snoop) interface 

The 82385SX’s bus watching Iriterface consists of 
the snoop address (SA1-SA23), snoop strobe 
(SSTB#), and snoop enable (SEN) inputs. If mas- 
ters reside at the system bus level, then the SA1 - 
SA23 inputs are connected to the system address 
lines and SEN to the system bus memory write com- 
mand. SSTB# Indicates that a valid address Is pres- 
ent on the system bus. Note that the snoop bus in- 
puts are synchronous, so care must be taken to en- 
sure that they are stable during their sample win- 
dows. If no master resides beyond the 82385SX bus 
level, then SA1~SA23, SEN and SSTB# can re- 
spectively tie directly to BA1-BA23, BW/R#, and 
BADS#. However, it is recommended that SEN be 
driven by the logical “AND” of BW/R# and BM/ 
lO# so as to prevent I/O writes from unnecessarily 
invalidating cache data. 
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When the 82385SX detects a system write by anoth- 
er master, it internally latches SA1 -SA23 and runs a 
cache look-up to see if the altered main memory 
location is duplicated in the cache. If yes (a snoop 
hit), the line valid bit associated with that cache en- 
try is cleared. An important feature of the 82385SX 
is that even if the 386 SX is running zero wait state 
hits out of the cache, all snoops are serviced. This is 
accomplished by time multiplexing the cache direc- 
tory between the 386 SX address and latched sys- 
tem address. If the SSTB# signal occurs during an 
82385SX comparison cycle (for the 386 SX), the 
386 SX cycle has the highest priority in accessing 
the cache directory. This takes the first of the two 
386 SX states. The other state is then used for the 
snoop comparison. This worst case example, depict- 
ed in Figure 5-4, shows the 386 SX running zero wait 
state hits on the 386 SX local bus, and another mas- 
ter running zero wait state writes on the 82385SX 
bus. No snoops are missed, and no performance 
penalty incurred. 


5.4 Reset Definition 

Table 5-1 summarizes the states of all 82385SX out- 
puts during reset and initialization. A slave mode 
82385SX tri-states its “386 SX-like” front end. A 
master mode 82385SX emits a pulse stream on its 
BACP output. As the 386 SX address and cycle defi- 
nition lines reach their reset values, this stream will 
latch the reset values through to the 82385SX bus. 


Table 5-1. Pin State during RESET and Initialization 


Output 

Signal Level during 

RESET and Initialization 

Name 

Master Mode 

Slave Mode 

NA# 

High 

High 

READYO# 

High 

High 

BRDYEN# 

High 

High 

CALEN 

High 

High 

CWEA#-CWEB# 

High 

High 

CSO#, CS1# 

Low 

Low 

CT/R# 

High 

High 

COEA#-COEB# 

High 

High 

BAbS# 

High 

HighZ 

BBHE#, BBLE# 

386 BE# 

HighZ 

BLOCK# 

High 

HighZ 

MISS# 

High 

HighZ 

BACP 

Pulse(i) 

Pulse 

BAOE# 

Low 

High 

BT/R# 

Low 

Low 

DOE# 

High 

High 

LDSTB 

Low 

Low 

BHOLD 


Low 

BHLDA 

Low 

— 

WBS 

Low 

Low 


NOTE: 

1. In Master Mode, BAOE# is low and BACP emits a pulse 
stream during reset. As the 386 SX address and cycle defi- 
nition signals reach their reset values, the pulse stream on 
BACP will latch these values through to the 82385 SX local 
bus. 
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Figure 5.4. Interleaved Snoop and 80386 Accesses to the Cache Directory 
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6.0 82385SX SYSTEM DESIGN 
CONSIDERATIONS 


6.1 Introduction 


This chapter discusses techniques which should be 
implemented in an 82385SX system. Because of the 
high frequencies and high performance nature of the 
386 SX CPU/82385SX system, good design and lay- 
out techniques are necessary. It Is always recom- 


new system designs. 


6.2 Power and Grounding 

6.2.1 POWER CONNECTIONS 

The 82385SX utilizes 8 power (Vcc) and 1 0 ground 
(Vss) pins. All Vcc and Vss pins must be connected 
to their appropriate plane. On a printed circuit board, 
all Vcc pins must be connected to the power plane 
and all Vss Pins must be connected to the ground 
plane. 


6.2.2 POWER DECOUPLING 

Although the 82385SX itself is generally a “passive” 
device in that it has a few output signals, the cache 
subsystem as a whole Is quite active. Therefore, 
many decoupling capacitors should be placed 
around the 82385SX cache subsystem. 

Low inductance capacitors and interconnects are 
recommended for best high frequency electrical per- 
formance. Inductance can be reduced by -shorteninn 
circuit board traces between the decoupling capaci- 
tors and their respective devices as much as possi- 
ble. Capacitors specifically for PGA packages are 
also commercially available, for the lowest possible 
inductance. 


6.2.3.2 82835SX Local Bus 

Pullup resistor recommendations for the 82385SX 
Local Bus signals are shown in Table 6-2. Design 
analysis is necessary to determine if deviations to 
the typical values given are needed. 


Table 6-1. Recommended Resistor Puilups 
to Vcc (386TM SX Local Bus) 


Pin and 
Signal 

Pullup 

Value 

Purpose 

ADS# 

PGA El 3 
PQFP123 

20 KH ±10% 

Lightly Pull ADS# 
Negated for 386 SX 
Hold States 

LOCK# 
PGA FI 3 
PQFP118 

20 Kn ±10% 

Lightly Pull LOCK# 
Negated for 386 SX 
Hold States 


Table 6-2. Recommended Resistor Puilups 
to Vcc (82385SX Local Bus) 


Signal 
and Pin 

Puiiup 

Value 

Purpose 

BADS# 
PGA N9 
PQFP 89 

20 Kn ±10% 

Lightly Pull BADS# 
Negated for 

82385SX Hold 

States 

BLOCK# 
PGA P9 
PQFP 86 

20 Kn ±10% 

Lightly Pull 

BLOCK# Negated 
for 82385SX Hold 
States 

MISS# 
PGA N8 
PQFP 85 

20 Kn ±10% 

Lightly Pull MISS# 
Negated for 

82385SX Hold 

States 


6.3 82385SX Signal Connections 


6.2.3 RESISTOR RECOMMENDATIONS 

Because of the dual structure of the 82385SX sub- 
system (386 SX Local Bus and 82385SX Local Bus), 
any signals which are recommended to be pulled up 
will be respective to one of the busses. The follow- 
ing sections will discuss signals for both busses. 

6.2.3.1 386 SX LOCAL BUS 

For typical designs, the pullup resistors shown in Ta- 
ble 6-1 are recommended. This table correlates to 
Chapter 7 of the 386 SX Data Sheet. However, par- 
ticular designs may have a need to differ from the 
listed values. Design analysis Is recommended to 
determine specific requirements. 


6.3.1 CONFIGURATION INPUTS 

The 82835 configuration signals (M/S#, 2W/D#, 
DEFOE#) must be connected (pulled up) to the ap- 
propriate logic level for the system design. There is 
also a reserved 82385SX input which must be tied to 
the appropriate level. Refer to Table 6-3 for the sig- 
nals and their required logic level. 
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Table 6-3. 82385SX Configuration 
Inputs Logic Levels 


Pin and 
Signal 

Logic 

Level 

Purpose 

M/S# 

High 

Master Mode Operation 

PGAB13 

PQFP124 

Low 

Slave Mode Operation 

2W/D# 

High 

2-Way Set Associative 

PGA D12 
PQFP127 

Low 

Direct Mapped 

Reserved 
PGA LI 4 
PQFP102 

High 

Must be tied to Vcc via 
a pull-up for proper 
functionality 

DEFOE# 

PGAA14 

PQFP128 

N/A 

Define Cache Output 
Enable. Allows use of 
any SRAM. 


NOTE: 

The listed 82385SX pins which need to be tied high should 
use a pull-up resistor in the range of 5 Kft to 20 KH. 


6.3.2 CLK2 and RESET 

The 82385SX has two inupts to which the 386 SX 
CLK2 signal must be connected. One is labeled 
CLK2 (82385SX pin C13) and the other is labeled 
BCLK2 (82385SX pin L13). These two inputs must 
be tied together on the printed circuit board. 

The 82385SX also has two reset inputs. RESET 
(82385SX pin D13) and BRESET (82385SX pin K12) 
must be connected on the printed circuit board. 


6.4 Unused Pin Requirements 

For reliable operation, ALWAYS connect unused in- 
puts to a valid logic level. As is the case with most 
other CMOS processes, a floating input will increase 
the current consumption of the component and give 
an Indeterminate state to the component. 


6.5 Cache SRAM Requirements 

The 82385SX offers the option of using SRAMs with 
or without an output enable pin. This is possible by 
inserting a transceiver between the SRAMs and the 
386 SX local data bus and strapping DEFOE# to the 
appropriate logic level for a given system configura- 
tion. This transceiver may also be desirable in a sys- 
tem which has a very heavily loaded 386 SX local 
data bus. The following sections discuss the SRAM 
requirements for ail cache configurations. 

6.5.1 CACHE MEMORY WITHOUT 
TRANSCEIVERS 

As discussed in Section 3.2, the 82385SX presents 
all of the control signals necessary to access the 
cache memory. The SRAM chip selects, write en- 
ables, and output enables are driven directly by the 
82385SX. Table 6-4 lists the required SRAM specifi- 
cations. These specifications allow for zero margins. 
They should be used as guides for the actual system 
design. 


Table 6-4. SRAM Specs for Non-Buffered Cache Memory 



Read Cycle Requirements 

Address Access (MAX) 

Chip Select Access (MAX) 

OE# to Data Valid (MAX) 

OE# to Data Float (MAX) 

Write Cycle Requirements 

Chip Select to End of Write (MIN) 
Address Valid to End of Write (MIN) 
Write Pulse Width (MIN) 

Data Setup (MAX) 

Data Hold (MIN) 
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6.5.2 CACHE MEMORY WITH TRANSCEIVERS 

To impjement an 82385SX subsystem using cache 
memory transceivers, COEA# or COEB# must be 
used as output enable signals for the transceivers 
and DEFOE# must be appropriately strapped for 
proper COEx# functionality (since the cache SRAM 
transceivers must be enabled for writes as well as 
reads). DEFOE# must be tied high when using 
cache SRAM transceivers. In a 2-way set associa- 
tive organization, COEA# enables the transceiver 
for bank A and COEB# enables the bank B trans- 
ceiver. A direct mapped cache may use either 
COEA# or COEB# to enable the transceiver. Table 
6-5 lists the required SRAM specifications. These 
specifications allow for zero margin. They should be 
used as guides for the actual system design. 

7.0 SYSTEM TEST CONSiDERATIONS 


7.1 Introduction 

Power On Self Testing (POST) is performed by most 
systems after a reset. This chapter discusses the 
requirements for properly testing an 82385SX based 
system after power up. 


7.2 Main Memory (DRAM) Testing 

Most systems perform a memory test by writing a 
data pattern and then reading and comparing the 


data. This test may also be used to determine the 
total available memory within the system. Without 
properly taking into account the 82385SX cache 
memory, the memory test can give erroneous re- 
sults. This will occur if the cache responds with read 
hits during the memory test routine. 

7.2.1 MEMORY TESTING ROUTINE 

In order to properly test main memory, the test rou- 
tine must not read from the same block consecutive- 
ly. For instance, if the test routine writes a data pat- 
tern to the first 16 Kbytes of memory (0000- 
3FFFH), reads from the same block, writes a new 
pattern to the same locations (0000-3FFFH), and 
read the new pattern, the second pattern tested 
would have had data returned from the 82385SX 
cache memory. Therefore, it is recommended that 
the test routine work with a memory block of at least 
32 Kbytes. This will guarantee that no 16 Kbyte 
block will be read twice consecutively. 


7.3 82385SX Cache Memory Testing 

With the addition of SRAMs for the cache memory, it 
may be desirable for the system to be able to test 
the cache SRAMs during system diagnostics. This 
requires the test routine to access only the cache 
memory. The requirements for this routine are based 
on where it resides within the memory map. This can 


Table 6-5. SRAM Specs for Buffered Cache Memory 


SRAM Spec Requirements 


Direct Mapped 

: : i 

2-way set Associative 


16 MHz 

20 MHz 

16 MHz 

20 MHz 

Read Cycle Requirements 

Address Access (MAX) 

57 ns 

37 ns 

55 ns 

35 ns 

Chip Select Access (MAX) 

68 

48 

68 

48 

OE# to Data Valid (MAX) 

N/A 

N/A 

N/A 

N/A 

OE# to Data Float (MAX) 

N/A 

N/A 

N/A 

N/A 

Write Cycle Requirements 

Chip Select to End of Write (MIN) 

40 

30 

40 

30 

Address Valid to End of Write (MIN) 

58 

42 

56 

40 

Write Pulse Width (MIN) 

40 

30 

40 

30 

Data Setup (MAX) 

25 

15 

25 

15 

Data Hold (MIN) 

3 

3 

3 

3 
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be broken into two areas: the routine residing in 
cacheable memory space or the routine residing in 
either non-cacheable memory or on the 386 SX lo- 
cal bus (using the LBA# input). 

7.3.1 TEST ROUTINE IN THE NCA# OR LBA# 
MEMORY MAP 

In this configuration, the test routine will never be 
cached. The recommended method Is code which 
will access a single 16 Kbyte block during the test. 
Initially, a 16 Kbyte read (assume 0000-3FFFH) 
must be executed. This will fill the cache directory 
with the address information which will be used In 
the diagnostic procedure. Then, a 16 Kbyte write to 
the same address locations (0000-3FFFH) will load 
the cache with the desired test pattern (due to write 
hits). The comparison can be made by completing 
another 16 Kbyte read (same locations, 0000- 
3FFFH), which will be cache read hits. Subsequent 
writes and reads to the same addresses will enable 
various patterns to be tested. 

7.3.2 TEST ROUTINE IN CACHEABLE MEMORY 

In this case, it must be understood that the diagnos- 
tic routine must reside in the cache memory before 
the actual data testing can begin. Otherwise, when 
the 386 SX performs a code fetch, a location within 
the cache memory which is to be tested will be al- 
tered due to the read miss (code fetch) update. 

The first task Is to load the diagnostic routine into 
the top of the cache memory. It must be known how 
much memory Is required for the code as the rest of 
the cache memory will be tested as In the earlier 
method. Once the diagnostics have been cached 
(via read updates), the code will perform the same 
type of read/write/read/compare as In the routine 
explained in the above section. The difference Is 
that now the amount of cache memory to be tested 
is 16 Kbytes minus the length of the test routine. 


7.4 82385SX Cache Directory Testing 

Since the 82385SX does not directly access the 
data bus, it is not possible to easily complete a com- 
parison of the cache directory. (The 82385SX can 
serially transmit its directory contents. See Section 
7.5.) However, the cache memory tests described in 
Section 7.3 will indicate if the directory is working 
properly. Otherwise, the data comparison within the 
diagnostics will show locations which fail. 

There Is a slight possibility that the cache memory 
comparison could pass even if locations within the 
directory gave false hit/mIss results. This could 
cause the comparison to always be performed to 
main memory instead of the cache and give a proper 


comparison to the 386 SX. The solution here is to 
use the MISS# output of the 82385SX as an Indica- 
tor to a diagnostic port which can be read by the 
386 SX. It could also be used to flag an interrupt If a 
failure occurs. 

The implementation of these techniques in the diag- 
nostics will assure proper functionality of the 
82385SX subsystem. 


7.5 Special Function Pins 

As mentioned in Chapter 3, there are three 82385SX 
pins which have reserved functions in addition to 
their normal operational functions. These pins are 
MISS#, WBS, and FLUSH. 

As discussed previously, the 82385SX performs a 
directory flush when the FLUSH input is held active 
for at least 4 CLK (8 CLK2) cycles. However, the 
FLUSH pin also serves as a diagnostic input to the 
82385SX. The 82385SX will enter a reserved mode 
if the FLUSH pin is high at the falling edge of RE- 
SET. 

If, during normal operation, the FLUSH input is ac- 
tive for only one CLK (2 CLK2) cycle/s, the 82385SX 
will enter another reserved mode. Therefore It must 
be guaranteed that FLUSH is active for at least the 4 
CLK (8 CLK2) cycle specification. 

WBS and MISS# serve as outputs in the 82385SX 
reserved modes. 


8.0 MECHANICAL DATA 

8.1 Introduction 

This chapter discusses the physical package and its 
connections In detail. 


8.2 Pin Assignment 

The 82385SX PGA pinout as viewed from the top 
side of the component is shown by Figure 8-1. Its 
pinout as viewed from the Pin side of the component 
is shown in Figure 8-2. 

The 82385SX Plastic Quad Flat Pack (PQFP) pinout 
from the top side of the component is shown by Fig- 
ure 8-3. 

Vcc and Vss connections must be made to multiple 
Vcc and Vss (GND) pins. Each Vcc and Vss nnust 
be connected to the appropriate voltage level. The 
circuit board should include Vcc and GND planes for 
power distribution and all Vcc and Vss Pins must be 
connected to the appropriate plane. 
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Figure 8-1. 82385SX PGA Pinout— View from TOP Side 
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Figure 8-2. 82385SX PGA Pinout— View from PIN Side 
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Figure 8-3. 82385SX PQFP Pinout— View from TOP Side 
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Table 8-1. 82385SX Pinout — Functional Grouping 
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8.3 Package Dimensions and 
Mounting 

The 82385SX PGA package is a 132-pin ceramic 
Pin Grid Array. The pins are arranged 0.100 inch 
(2.54 mm) center-to-center, in a 14 x 14 matrix, 
three rows around. 

A wide variety of available PGA sockets allow low 
Insertion force or zero insertion force mounting. 


These come in a choice of terminals such as solder- 
tail, surface mount, or wire wrap. 

The 82385SX PQFP is a 132-)ead Plastic Quad 
Flat Pack. The pins are “fine pitch”, 0.025 inches 
(0.635 mm) center to center. 

The PQFP device is intended to be surface mounted 
directly to the printed board although sockets are 
available for this device. 
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Figure 8-3.1. 132-Pin PGA Package Dimensions 
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Figure 8-3.2. Principal Dimensions and Datums 



Figure 8-3.3. Molded Details 



Figure 8-3.4. Terminal Details 
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Figure 8-3.5. Typical Lead 



Figure 8-3.6. Detail M 


PLASTIC QUAD FLAT PACK 

Table 8-3.1. Symbol List 


Letter or 
Symbol 

Description of Dimensions 

A 

Package height: distance 
from seating plane to 
highest point of body 

A1 

Standoff: Distance from 
seating plane to base plane 

D/E 

Overall package dimension: 
lead tip to lead tip 

D1/E1 

Plastic body dimension 

D2/E2 

Bumper Distance 

D3/E3 

Footprint 

L1 

Foot length 

N 

Total number of leads 


for Plastic Quad Fiat Pack 

NOTES: 

1. All dimensions and tolerances conform to ANSI Y14.5M- 
1982. 

2. Datum plane -H> located at the mold parting line and 
coincident with the bottom of the lead where lead exits 
plastic body. 

3. Datums A-B and -D- to be determined where center 
leads exit plastic body at datum plane -H-. 

4. Controlling Dimension, Inch. 

5. Dimensions D1, D2, El and E2 are measured at the 
mold parting line and do not include mold protrusion. Al- 
lowable mold protrusion of 0.18 mm (0.007 in) per side. 

6. Pin 1 identifier is located within one of the two zones 
Indicated. 

7. Measured at datum plane -H-. 

8. Measured at seating plane datum -C-. 
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Table 8-3.2. PQFP Dimensions and Tolerances 


Intel Case Outline Drawings Intel Case Outline Drawings 

Plastic Quad Flat Pack Plastic Quad Flat Pack 

0.025 Inch Pitch 0.64 mm Pitch 


Symbol 

Description 

Min 

Max 

N 

Leadcount 

132 

A 

Package Height 

0.160 

0.170 

A1 

Standoff 

0.020 

0.030 

D, E 

Terminal Dimension 

1.075 

1.085 

D1,E1 

Package Body 

0.947 

0.953 

D2, E2 

Bumper Distance 

1.097 

1.103 

D3, E3 

Lead Dimension 

0.800 REF 

LI 

Foot Length 

0.020 

0.030 

issue 

IWS Preliminary 1/15/87 


Symbol 

Description 

Min 

Max 

N 

Leadcount 

132 

A 

Package Height 

4.06 

4.32 

A1 

Standoff 

0.51 

0.76 

D,E 

Terminal Dimension 

27.31 

27.56 

D1. El 

Package Body 

24.05 

24.21 

D2, E2 

Bumper Distance 

27.86 

28.02 

D3, E3 

Lead Dimension 

20.32 REF 

LI 

Foot Length 

0.51 

0.76 

Issue 

IWS Preliminary 1/15/87 
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Table 8-3.3. 82385SX PGA Package Typical Thermal Characteristics 


Thermal Resistance— X/Watt 

Parameter 

Airflow — f3/min {m3/sec] 


0 

(0) 

so 

(0.25) 

100 

(0.50) 

200 

(1.01) 

400 

(2.03) 

600 

(3.04) 

800 

(4.06) 

0 Junction-to-Case 

(Case Measured as Figure 8-3.7) 

2 

2 

m 





0 Cass-to-AiTibJsrit 
(No Heatsink) 

19 

■ 

H 

15 

12 

10 

9 

$ Case-to-Ambient 

(with Omnidirectional Heatsink) 

16 

15 

B 


9 

B 


0 Case-to-Ambient 

(with Unidirectional Heatsink) 

15 

14 

13 

11 

8 

B 



NOTES: 

1. Table 8-3.4 applies to 82385SX PGA plugged into socket or soldered directly onto board. 
2- 0JA = ^JC + ^CA- 
3. ^j-CAP = 4“C/W (approx.) 

^J-PIN == 4‘’C/W (inner pins) (approx.) 

^J-PIN = 8°C/W (outer pins) (approx.) 
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Table 8-3.3. 82385 PQFP Package Typical Thermal Characteristics 


ifimiiiiaii nodio&aiivo — w/ watt 

Parameter 


0 

(0) 

so 

(0.25) 

100 

(0.50) 

200 

400 

(2.03) 

600 

(3.04) 

800 

(4.06) 




IBB 

nn 




0 Case-to-Ambient 
(No Heatsink) 








0 Case-to-Ambient 

(with Omnidirectional Heatsink) 


■dp'' 






6 Case-to-Ambient 

(with Unidirectional Heatsink) 


m 







NOTES: 

1. Table 8-3.3 applies to 82385SX PQFP plugged into socket or soldered directly onto board. 

2. ^JA = ^JC + ^CA- 

3. 8j.cap = 4“C/W (approx.) 

^J-PIN = 4‘’C/W (inner pins) (approx.) 

^J-PIN = 8‘’C/W (outer pins) (approx.) 
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8.4 Package Thermal Specification 

The case temperature should be measured at the 
center of the top surface as in Figure 8-3.7 for PGA 
or Table 8-3.3 for PQFP. The case temperature may 
be measured in any environment to determine 
whether or not the 82385SX is within the specified 
operating range. 


9.0 ELECTRICAL DATA 


9.1 introduction 

This chapter presents the A.C. and D.C specifica- 
tions for the 82385SX. 


9.2 Maximum Ratings 

Storage Temperature to -MSO^C 

Case Temperature under Bias . . . -eS^C to + 1 10®C 


Supply Voltage 

with Respect to Vss -0.5V to + 6.5V 

Voltage on Any Other Pin — -0.5V to Vcc + 0.5V 

NOTE: 

Stress above those listed may cause permanent 
damage to the device. This is a stress rating only 
and functional operation at these or any other con- 
ditions above those listed in the operational sec- 
tions of this specification is not implied. 

Exposure to absolute maximum rating conditions for 
extended periods may affect device reliability. Al- 
though the 82385SX contains protective circuitry to 
resist damage from static electric discharges, al- 
ways take precautions against high static voltages 
or electric fields. 


9.3 D.C. Specifications Tcase = o^c to + 65°C; Vcc = 5V + 5%; Vss = ov 


Table 9-1. D.C. Specifications (16 MHz and 20 MHz) 


Symbol 

Parameter 

Min 

Max 

Unit 

Test Condition 

V|L 

Input Low Voltage 

-0.3 

0.8 

V 

(Noe 1) 

V|H 

Input High Voltage 

2.0 

Vcc + 0.3 

V 


VCL 

CLK2, BCLK2 Input Low 

-0.3 

0.8 

V 

(Note 1) 

VcH 

CLK2, BCLK2 Input High 

00 

d 

I 

o 

o 

> 

Vcc + 0.3 

V 


VoL 

Output Low Voltage 


0.45 

V 

Iql = 4 niA 

VOH 

Output High Voltage 

2.4 


V 

IqH = -1 mA 

Ice 

Power Supply Current 


275 

mA 

(Note 2) 

III 

Input Leakage Current 


±15 

jllA 

OV < VjN < Vcc 

•lo 

Output Leakage Current 


±15 

jllA 

0.45V < VouT < Vcc 

C|N 

Input Capacitance 


10 

PF 

(Note 3) 

CcLK 

CLK2 Input Capacitance 


20 

PF 

(Note 3) 


NOTES: 

1. Minimum value is not 100% tested. 

2. Ice is specified with inputs driven to CMOS levels. Ice may be higher if driven to TTL levels. , 

3. Sampled only. 
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9.4 A.C. Specifications 

The A.C. specifications given in the following tables 
consist of output delays and input setup require- 
ments. The A.C. diagram’s purpose is to illustrate 
the clock edges from which the timing parameters 
are measured. The reader should not infer any other 
timing relationships from them. For specific informa- 
tion on timing relationships between signals, refer to 
the appropriate functional section. 

A r*. cnan nriAoci irAmAnt ic riafinarl in Pint irA Q-i In. 

# W* • • IWW4S/V4I WlllWIIb IW V9WIII IWV8 III I I^VII W W ••Ilf 

puts must be driven to the levels shown when A.C. 
specifications are measured. 82385SX output delays 


are specified with minimum and maximum limits, 
which are measured as shown. 82385SX input setup 
and hold times are specified as minimums and de- 
fine the smallest acceptable sampling window. With- 
in the sampling window, a synchronous input signal 
must be stable for correct 82385SX operation. 

9.4.1 FREQUENCY DEPENDENT SIGNALS 

The 82385SX has signals whose output valid delays 
are dependent on the clock frequency. These sig- 
nals are marked in the A.C. Specification Tables with 
a Note 1 . 



290222-47 


LEGEND: 

A — rvlaxiiTium oulpUl delay specification 
B — Minimum output delay specification 
C — Minimum input setup specification 
D — Minimum input hold specification 

NOTES: 

1 . Under rated loading 82385SX output (tr and tf) is typically ^ 4.0 ns from 0.8V to 2.0V. 

2. Input waveforms have V ^ 2.0 ns from 0.8V to 2.0V. . 


Figure 9-1. Drive Levels and Measurement Points for A.C. Specification 
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A.C. SPECIFICATION TABLES 

Functional operating range: Vcc = 5V ±5%; Tcase == to +85“C 


Table 4.1. A.C. Specifications at 16 MHz 


Symbol 

Parameter 

Min 

Max 

Units 

Notes 

t1 

Operating Frequency 

15.4 

16 

MHz 


t2 

CLK2, BCLK2 Period 

31.25 

32.5 

ns 


t3a 

CLK2, BCLK2 High Time @ 2V 

10 


ns 


t3b 


7 


ns 

3 

t4a 


10 


ns 


t4b 


7 


ns 

3 

t5 

CLK2, BCLK2 Fall Time 


8 

ns 

3,9 

t6 

CLK2, BCLK2 Rise Time 


8 

ns 

3,9 

t7a 

A4-A12 Setup Time 

30 


ns 

1 

t7b 

LOCK# Setup Time 

19 


ns 

1 

t7c 

BLE#, BHE# Setup Time 

21 


ns 

1 

t7d 

A1 -A3, A13-A23 Setup Time 

23 


ns 

1 

t8 

A1-A23, BLE#, BHE#, LOCK# Hold 

3 


ns 


t9a 

M/IO#, D/C# Setup Time 

30 


ns 

1 

t9b 

W/R# Setup Time 

30 


ns 

1 

t9c 

ADS # Setup Time 

30 


ns 

1 

tio 

M/IO#, D/C#, W/R#, ADS# Hold Time 

5 


ns 


t11 

READYI# Setup Time 

19 


ns 

1 

t12 

READYI# Hold Time 

4 


ns 


t13a1 

NCA# Setup Time (See t55b2) 

27 


ns 

6 

t13a2 

NCA# Setup Time (See t55b3) 

20 


ns 

6 

t13b 

LBA# Setup Time 

16 


ns 


t14a 

NCA# Hold Time 

4 


ns 


t14b 

LBA# Hold Time 

4 


ns 


t15 

RESET, BRESET Setup Time 

13 


ns 


t16 

RESET, BRESET Hold Time 

4 


ns 


t17 

NA# Valid Delay 

12 

42 

ns 

1 (25 pF Load) 

t18 

READYO# Valid Delay 

3 

31 

ns 

1 (25 pF Load) 

t19 

BRDYEN# Valid Delay 

3 

31 

ns 


t21a1 

CALEN Rising, PHI1 

3 

30 

ns 


t21a2 

CALEN Falling, PHI1 

3 

30 

ns 


t21a3 

CALEN Falling in T1P,PHI2 

3 

30 

ns 


t21b 

CALEN Rising Following CWTH 

3 

39 

ns 

1 

t21c 

CALEN Pulse Width 

10 


ns 


t21d 

CALEN Rising to CS# Falling 

13 


ns 
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A.C. SPECIFICATION TABLES (Continued) 

Functional operating range: Vcc = 5V ±5%; Tcase = to +85®C 


Table 4.1. A.C. Specifications at 16 MHz (Continued) 


Symbol 

Parameter 

Min 

Max 

Units 

Notes 

t22a1 

CWEx# Falling, PHI1 (CWTH) 

4 

31 

ns 

1 

t22a2 

CWEx# Falling, PHI2 (CRDM) 

4 

31 

ns 

1 

t22b 

CWEx# Pulse Width 

40 


ns 

1,2 

t22ci 

CWEx# Rising, PHil (CWTH) 

4 

31 

ns 

1 

t22c2 

CWEx# Rising, PHI2 (CRDM) 

4 

31 

ns 

1 

t23a1 

CS1 #, CS2# Rising, PHI1 (CRDM) 

6 

41 

ns 

1 


CS1 #, CS2# Rising, PHI2 (CWTH) 

6 

41 

ns 

1 


CS1 #, CS2# Falling, PHI1 (CWTH) 

6 

41 

ns 

1 

^^^jlllllll 

CS1 #, CS2# Falling, PHI2 (CRDM) 

6 

41 

ns 

1 

t24a1 

CT/R# Rising, PHI2 (CRDH) 

6 

43 

mm 

1 

t24a2 

CT/R# Falling, PHI1 (CRDH) 

6 


mm 

1 

t24a3 

CT/R# Falling, PHI2 (CRDH) 

6 


ns 

1 

t25a 

COEA#, COEB# Falling (Direct) 

4 

33 

ns 

(25 pF Load) 

t25b 

COEA#, COEB# Falling (2-Way) 

4 

34 

ns 

1 (25 pF Load) 

t25c1 

COEx# Rising Delay @ Tcase = OC 

4 

20 

ns 

(25 pF Load) 

t25c2 

COEx# Rising Delay @ Tqase = Tmax 

4 

20 

ns 

(25 pF Load) 

t23b 

COEx# Falling to CSx# Rising 

0 


ns 


t25d 

CWEx# Falling to COEx# Falling or 
CWEx# Rising to COEx# Rising 

0 

10 

ns 

(25 pF Load) 

t26 

CSO#, CS1 # Falling to CWEx# Rising 

40 


ns 

1.2 

t27 

CWEx# Failing to CSO#, CS i # Failing 

0 


ns 


i.e.uci 

^\A/r:wJt 4-^ cm 

wvvl-att I lion lu W/-VUI-IN iiioiii^ 

n 

\j 


ns 


t28b 


0 


ns 


t31 




ns 


t32 


3 




Mmm 

BADS# Valid Delay 

4 


ns 

1 

t34 

BADS# Float Delay 

4 

33 

ns 

3 

t35 

BN A# Setup Time 

11 


ns 


t36 

BN A# Hold Time 

15 


ns 


t37 

BREADY# Setup Time 

31 


ns 

1 

t38 

BREADY# Hold Time 

4 


ns 


t40a 

BACP Rising Delay 

0 

26 

ns 


t40b 

BACP Falling Delay 

0 

28 

ns 


t41 

BAOE# Valid Delay 

3 

23 

ns , 
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A.C. SPECIFICATION TABLES (Continued) 

Functional operating range: Vcc = 5V ±5%; Tcase = 0°^ to +85‘’C 


Table 4.1. A.C. Specifications at 16 MHz (Continued) 


Symbol 

Parameter 

Min 

Max 

Units 

Notes 

t43a 

BT/R# Valid Delay 

2 

27 

ns 


t43b1 

DOE# Falling Delay 

2 

30 

ns 


t43b2 

DOE# Rising Delay @ Tcase ~ OC 

3 

23 

ns 


t43b3 

DOE# Rising Delay @ Tcase = Tmax 

3 

26 

ns 


t43c 

LDSTB Valid Delay 

2 

33 

ns 



SEN Setup Time 

15 


ns 


t44b 

SSTB# Setup Time 

15 


ns 


t45 

SEN, SSTB# Hold Time 

5 


ns 


t46 

BHOLD Setup Time 

26 


ns 


t47 

BHOLD Hold Time 

5 


ns 


t48 

BHLDA Valid Delay 

3 

33 

ns 


t55a 

BLOCK# Valid Delay 

3 

36 

ns 

1,5 

t55b1 

BBxE# Valid Delay 

3 

36 

ns 

1.7 

t55b2 

BBxE# Valid Delay 

3 

36 

ns 

1,7 

t55b3 

BBxE# Valid Delay 

3 

43 

ns 

1,7 

t55c 

LOCK# Falling to BLOCK# Falling 

0 

36 

ns 

1,5 

t56 

MISS# Valid Delay 

3 

43 

ns 

1 

t57 

MISS#, BBxE#, BLOCK# Float Delay 

4 

40 

ns 

3 

t58 

WBS Valid Delay 

3 

39 

ns 

1 

t59 

FLUSH Setup Time 

21 


ns 


t60 

FLUSH Hold Time 

5 


ns 


t61 

FLUSH Setup to RESET Low 

31 


ns 


t62 

FLUSH Hold from RESET Low 

31 


ns 
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A.C. SPECIFICATION TABLES 

Functional operating range: Vcc = 5V ±5%; Tcase == to +85°C 


A.C. Specifications at 20 MHz 


Symbol 

Parameter 

Min 

Max 

Units 

Notes 

t1 

Operating Frequency 

15.4 

20 

MHz 


t2 

CLK2. BCLK2 Period 

25 

32.5 

ns 


t3a 

CLK2, BCLK2 High Time @ 2V 

10 


ns 


t3b 

CLK2, BCLK2 High Time @ 3.7V 

7 


ns 

3 

t4a 

CLK2, BCLK2 Low Time @ 2V 

10 


ns 


t4b 

CLK2. BCLK2 Low Time @ 0.8V 

7 


ns 

3 

t5 

CLK2, BCLK2 Fall Time 


8 

ns 

3,9 

t6 

CLK2, BCLK2 Rise Time 


8 

ns 

3,9 

t7a1 

A4-A12 Setup Time 

20 


ns 

1 

t7a2 

A1 -A3, A1 3-A1 9, A21 -A23 Setup Time 

18 


ns 

1 

t7a3 

A20 Setup Time 

16 


ns 

1 

t7b 

LOCK# Setup Time 

16 


ns 

, 1 

t7c 

BLE#, BHE# Setup Time 

18 


ns 

1 

t8 

A1-A23. BLE#, BHE#, LOCK# Hold 

3 


ns 


t9a 

M/IO#, D/C# Setup Time 

20 


ns 

1 

t9b 

W/R# Setup Time 

20 


ns 

1 

t9c 

ADS# Setup Time 

22 


ns 

1 

t10 

M/IO#, D/C#, W/R#, ADS# Hold Time 

5 


ns 


t11 

READYI# Setup Time 

12 


ns 

1 

t12 

READYI# Hold Time 

4 


ns 


t13a1 

NCA# Setup Time (See t55b2) 

21 


ns 

6 

t13a2 

NCA# Setup Time (See t55b3) 

16 


ns 

6 

t13b 

LBA# Setup Time 

10 


ns 


t14a 

NCA# Hold Time 

4 


ns 


t14b 

LBA# Hold Time 

4 


ns 


t15 

RESET, BRESET Setup Time 

12 


ns 


t16 

RESET, BRESET Hold Time 

4 


ns 

> 

t17 

NA# Valid Delay 


■■ 

ns 

1 (25 pF Load) 

t18 

READYO# Vaiid Deiay 

3 


ns 

1 (25 pF Load) 

t19 

BRDYEN# Valid Delay 

3 

26 

ns 


t21a1 

CALEN Rising, PHI1 

3 

24 

ns 


t21a2 

CALEN Falling, PHI1 

3 

24 

ns 


t21a3 

CALEN Falling in T1P, PHI2 

3 

24 

ns 


t2lb 

CALEN Rising Following CWTH 

3 

34 

ns 

1 

t21c 

CALEN Pulse Width 

10 


ns 
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A-C. SPECIFICATION TABLES (Continued) 

Functional operating range: Vcc = 5V ±5%; Tcase = 0*"^ to +85°C 


A.C. Specifications at 20 MHz (Continued) 


Symbol 

Parameter 

Min 

Max 

Units 

Notes 

t21d 

CALEN Rising to CS# Falling 

13 


ns 


t22a1 

CWEx# Falling. PHI1 (CWTH) 

4 

27 

ns 

1 

t22a2 

CWEx# Falling, PHI2 (CRDM) 

4 

27 

ns 

1 

t22b 

CWEx# Pulse Width 

30 


ns 

1,2 

t22c1 

CWEx# Rising. PHI1 (CWTH) 

4 

27 

ns 

1 

t22c2 

CWEx# Rising, PHI2 (CRDM) 

4 

27 

ns 

1 

t23a1 

CS1 #, CS2# Rising, PHil (CRDM) 

6 

37 

ns 

1 

t23a2 

CS1 #, CS2# Rising, PHI2 (CWTH) 

6 

37 

ns 

1 

t23a3 

CS1 #, CS2# Falling, PHI1 (CWTH) 

6 

37 

ns 

1 

t23a4 

CS1 #, CS2# Falling, PHI2 (CRDM) 

6 


ns 

1 

t24a1 

CT/R# Rising, PHI2 (CRDH) 

6 


ns 

1 

t24a2 

CT/R# Falling, PHI1 (CRDH) 

6 

|||H||[|| 

ns 

1 

t24a3 

CT/R# Falling, PHI2 (CRDH) 

6 

38 

ns 

1 

t25a 

COEA#, COEB# Falling (Direct) 

4 

22 

ns 

(25 pF Load) 

t25b 

COEA#, COEB# Falling (2-Way) 

4 

24.5 

ns 

1 (25 pF Load) 

t25c 

COEx# Rising Delay 

5 

17 

ns 

(25 pF Load) 

CACHE SRAM WRITE CYCLES 

t23b 

COEx# Falling to CSx# Rising 

0 


ns 

8 

t25d 

CWEx# Falling to COEx# Falling or 
CWEx# Rising to COEx# Rising 

0 

10 

ns 

8 (25 pF Load) 

t26 

CSO#, CS1 # Falling to CWEx# Rising 

30 


ns 

1,2 

t27 

CWEx# Falling to CSO#, CS1 # Falling 

0 


ns 


t28a 

CWEx# Rising to CALEN Rising 

0 


ns 


t28b 

CWEx# Rising to CSO#, CS1 # Falling 

0 


ns 


t31 

SA(1 -23) Setup Time 

19 


ns 


t32 

SA(1-23) Hold Time 

3 


ns 


t33 

BADS# Valid Delay 

4 

28 

ns 

1 

t34 

BADS# Float Delay 

4 

30 

ns 

3 

t35 

BNA# Setup Time 

9 


ns 


t36 

BNA# Hold time 

15 


ns 


t37 

BREADY # Setup Time 

26 


ns 

1 

t38 

BREADY# Hold Time 

'4 


ns 


t40a 

BACP Rising Delay 

0 

20 

ns 


t40b 

BACP Falling Delay 

0 

22 

ns 
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A.C. SPECIFICATION TABLES (Continued) 

Functional operating range: Vcc = 5V ±5%; Tqase = to +85°C 


A.C. Specifications at 20 MHz (Continued) 


Symbol 

Parameter 

Min 

Max 

Units 

Notes 

t41 

BAOE# Valid Delay 

3 

18 

ns 


t43a 

BT/R# Valid Delay 

2 

19 

ns 


t43b1 

DOE# Falling Delay 

2 

23 

ns 


t43b2 

DOE# Rising Delay @ Tcase = 0^ 

4 

17 

ns 



DOE# Rising belay @ Tcase = Tmax 

4 

19 

ns 


t43c 

LDSTB Valid Delay 

2 

26 

ns 


t44a 

SEN Setup Time 

11 


ns 


t44b 

SSTB# Setup Time 

11 


ns 


t45 

SEN, SSTB# Hold Time 

5 


ns 


t46 

BHOLD Setup Time 

17 


ns 


t47 

BHOLD Hold Time 

5 


ns 


t48 

BHLDA Valid Delay 

3 

28 

ns 


t55a 

BLOCK# Valid Delay 

3 

30 

ns 

1.5 

t55b1 

BBxE# Valid Delay 

3 

30 

ns 

1.7 

t55b2 

BBxE# Valid Delay 

3 

30 

ns 

1.7 

t55b3 

BBxE# Valid Delay 

3 

36 

ns 

1.7 


LOCK# Falling to BLOCK# Falling 

0 

30 

ns 

1,5 


MISS# Valid Delay 

3 

35 

ns 

1 

t57 

MISS#, BBxE#, BLOCK# Float Delay 

4 

32 

ns 

3 

t58 

WBS Valid Delay 

3 

37 

ns 

1 

t59 

FLUSH Setup Time 

16 


ns 


t60 

FLUSH Hold Time 

5 


ns 


t61 

FLUSH Setup to RESET Low 

26 


ns 


t62 

FLUSH Hold from RESET Low 

26 


ns 



82385SX A.C. Specification Notes: 

1 . Frequency dependent specifications. 

2. Used for cache data rnemory (SRAM) specifications. 

3. This parameter is sampled, not 100% tested. Guaranteed by design. 

5. BLOCK# delay is either from BPRH or from 388 LOCK#. Refer to Figures 5-3K and 5-3L in the S2385SX data sheet. 

6. NCA# setup time is now specified to the rising edge of BPHI2 in the state after 386 SX addresses become valid (either 
the state after the first T2 or after the first T2P). 

7. BBxE# Valid Delay Is a function of NCA# setup. 

BBxE# valid delay: 

t55b1 For cacheable system bus accesses 

t56b2 For NCA# setup < t13a1 

t55b3 Fort13a2 < NCA# setup < t13a1 

8. t23b and t25d are only valid specifications when DEFOE# = Vcc- Otherwise, if DEFOE# = Vss. COEx# Is never 
asserted during cache SRAM write cycles. If DEFOE# = Vss. t23b and t25d are Not Applicable. 

9. t5 is measured from 0.8V to 3.7V. t6 Is measured from 3.7V to 0.8V. 
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APPENDIX A 


82385 SX Signal Summary 


Signal 

Group/Name 

Signal Function 

Active 

State 

Input/ 

Output 

Tri-State 

Output? 

366 3a in I ERFACt 

RESET 

386 SX Reset 

High 

1 

— 

A1 -A23 

386 SX Address Bus 

High 

1 

— 

BHE#, BLE# 

386 SX Byte Enables 

Low 

1 

— 

CLK2 

386 SX Clock 

— 

1 

— 

READYO# 

Ready Output 

Low 

0 

No. 

BRDYEN# 

Bus Ready Enable 

Low 

0 

No 

READYI# 

386 SX Ready Input 

Low 

1 

— 

ADS# 

386 SX Address Status 

Low 

1 

— 

M/IO# 

386 SX Memory / I/O Indication 

— 

1 

— 

W/R# 

386 SX Write/ Read Indication 

— 

1 

— 

D/C# 

386 SX Data/Control Indication 

— 

1 

— 

LOCK# 

386 SX Lock Indication 

Low 

1 


NA# 

386 SX Next Address Request 

Low 

0 

No 

CACHE CONTROL 

CALEN 

Cache Address Latch Enable 

High 

0 

No 

CT/R# 

Cache Transmit/ Receive 


0 

No 

CS0#,CS1# 

Cache Chip Selects 

Low 

0 

No 

COEA#,COEB# 

Cache Output Enables 

Low 

0 

No 

CWEA#,CWEB# 

Cache Write Enables 

Low 

0 

No 

LOCAL DECODE 

LBA# 

386 SX Local Bus Access 

Low 

1 

— 

NCA# 

Non-Cacheable Access 

Low 

1 

— 

STATUS AND CONTROL 

MISS# 

Cache Miss Indication 

Low 

0 

Yes 

WBS 

Write Buffer Status 

High 

0 

No 

FLUSH 

Cache Flush 

High 

1 

— 
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82385SX Signal Summary (Continued) 


Signal 

Group/Name 

Signal Function 

Active 

State 

Input/ 

Output 

Tri-State 

Output? 

82385SX INTERFACE 

BREADY# 

82385SX Ready Input 

Low 

I 

•— 

BNA# 

82385SX Next Address Request 

Low 

I 

— 

BLOCK# 

82385SX Lock Indication 

Low 

0 

Yes 

BADS# 

82385SX Address Status 

Low 

0 

Yes 

BBHE#.BBLE# 

82385SX Byte Enables 

Low 

0 

yes 

DATA/ADDR CONTROL 

LDSTB 

Local Data Strobe 

Pos. Edge 

0 

No 

DOE# 

Data Output Enable 

Low 

0 

No 

BT/R# 

Bus Transmit/Receive 

— 

0 

No 

BACP 

Bus Address Clock Pulse 

Pos. Edge 

0 

No 

BAOE# 

Bus Address Output Enable 

Low 

0 

No 

CONFIGURATION 

2W/D# 

2-Way/Direct Map Select 

— ■ 

I 

— 

M/S# 

Master/Slave Select 

— 

I 

— 

DEFOE# 

Define Cache Output Enable 

— 

I 

— 

COHERENCY 

SA1-SA23 

Snoop Address Bus 

High 

I 

— 

SSTB# 

Snoop Strobe 

Low 

I 


SEN 

Snoop Enable 

High 

I 

— 

ARBITRATION 

BHOLD 

Hold 

High - 

I/O 

No 

BHLDA 

Hold Acknowledge 

High 

I/O 

No 
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82380 

HIGH PERFORMANCE 32-BIT DMA CONTROLLER WITH 
INTEGRATED SYSTEM SUPPORT PERIPHERALS 


■ High Performance 32-Bit DMA 
Controiier 

— 50 MBytes/sec Maximum Data 
Transfer Rate at 25 MHz 

— 8 Independentiy Programmabie 
Channeis 

■ 20-Source Interrupt Controller 

— Individually Programmable Interrupt 
Vectors 

— 15 External, 5 Internal Interrupts 

— 82C59A Superset 

■ Four 16-Bit Programmable Interval 
Timers 

— 82C54 Compatible 


■ Programmable Wait State Generator 

— 0 to 15 Walt States Pipelined 

— 1 to 16 Wait States Non-Pipelined 

■ DRAM Refresh Controller 

■ 80386 Shutdown Detect and Reset 
Control 

— Software/Hardware Reset 

■ High Speed CHMOS III Technology 

■ 132-Pln PGA Package 

■ Optimized for use with the 80386 
Microprocessor 

— Resides on Local Bus for Maximum 
Bus Bandwidth 


The 82380 is a multi-function support peripheral that integrates system functions necessary in an 80386 
environment. It has eight channels of high performance 32-bit DMA with the most efficient transfer rates 
possible on the 80386 bus. System support peripherals integrated into the 82380 provide Interrupt Control, 
Timers, Wait State generation, DRAM Refresh Control, and System Reset logic. 


The 82380’s DMA Controller can transfer data between devices of different data path widths using a single 
channel. Each DMA channel operates independently in any of several modes. Each channel has a temporary 
data storage register for handling non-aligned data without the need for external alignment logic. 


80386 LOCAL BUS 



^ - I •• 290128-1 

82380 Internal Block Diagram 
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1.0 FUNCTIONAL OVERVIEW 

The 82380 contains several independent functional 
modules. The following is a brief discussion of the 
components and features of the 82380. Each mod- 
ule has a corresponding detailed section later in this 
data sheet. Those sections should be referred to for 
design and programming information. 


1.1 82380 Architecture 

The 82380 is comprised of several computer system 
functions that are normally found in separate LSI 
and VLSI components. These include: a high-per- 
formance, eight-channel, 32-blt Direct Memory Ac- 
cess Controller; a 20-level Programmable Interrupt 
Controller which is a superset of the 82C59A; four 
16-bit Programmable Interval Timers which are func- 
tionally equivalent to the 82C54 timers; a DRAM Re- 
fresh Controller; a Programmable Walt State Gener- 
ator; and system reset logic. The interface to the 
82380 is optimized for high-performance operation 
with the 80386 microprocessor. 

The 82380 operates directly on the 80386 bus. In 
the Slave mode, It monitors the state of the proces- 


sor at all times and acts or idles according to the 
commands of the host. It monitors the address pipe- 
line status and generates the programmed number 
of wait states for the device being accessed. The 
82380 also has logic to reset the 80386 via hard- 
ware or software reset requests and processor shut- 
down status. 

After a system reset, the 82380 Is in the Slave 
mode. It appears to the system as an I/O device. It 
becomes a bus master when it is performing DMA 
transfers. 

To maintain compatibility with existing software, the 
registers within the 82380 are accessed as bytes. If 
the internal logic of the 82380 requires a delay be- 
fore another access by the processor, wait states 
are automatically inserted into the access cycle. 
This allows the programmer to write initialization rou- 
tines, etc. without regard to hardware recovery 
tirnes. 

Figure 1-1 shows the basic architectural compo- 
nents of the 82380. The following sections briefly 
discuss the architecture and function of each of the 
distinct sections of the 82380. 


80386 LOCAL BUS 
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Figure 1-1. Architecture of the 82380 
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1.1.1 DMA CONTROLLER 

The 82380 contains a high-performance, 8-channel, 
32-bit DMA controller. It is capable of transferring 
any combination of bytes, words, and double words. 
The addresses of both source and distination can be 
Independently Incremented, decremented or held 
constant, and cover the entire 32-bit physical ad- 
dress space of the 80386. It can disassemble and 
assemble misaligned data via a 32-blt internal tem- 
porary data storage register. Data transferred be- 
tween devices of different data pain widihs can also 
be assembled and disassembled using the internal 
temporary data storage register. The DMA Controller 
can also transfer aligned data between I/O and 
memory on the fly, allowing data transfer rates up to 
32 megabytes per second for an 82380 operating at 
16 MHz. Figure 1-2 illustrates the functional compo- 
nents of the DMA Controller. 

There are twenty-four general status and command 
registers in the 82380 DMA Controller. Through 
these registers any of the channels may be pro- 
grammed into any of the possible modes. The oper- 
ating modes of any one channel are independent of 
the operation of the other channels. 

Each channel has three programmable registers 
which determine the location and amount of data to 
be transferred: 


Byte Count Register — Number of bytes to trans- 
fer. (24-blts) 

Requester Register — Address of memory or pe- 
ripheral which is requesting DMA service. (32- 
bits) 

Target Register — Address of peripheral or mem- 
ory which will be accessed. (32-blts) 

There are also port addresses which, when ac- 
cessed, cause the 8238G to perform specific func- 
tions. The actual data written does not matter, the 
act of writing to the specific address causes the 
command to be executed. The commands which op- 
erate in this mode are: Master Clear, Clear Terminal 
Count Interrupt Request, Clear Mask Register, and 
Clear Byte Pointer Flip-Flop. 

DMA transfers can be done between all combina- 
tions of memory and I/O; memory-to-memory, mem- 
ory-to-l/0, l/O-to-memory, and l/O-to-l/0. DMA 
service can be requested through software and/or 
hardware. Hardware DMA acknowledge signals are 
available for all channels (except channel 4) through 
an encoded 3-bit DMA acknowledge bus 
(EDACKO-2). 


EDACKO ◄- 
EDACKI ^ 
EDACK2 ◄- 
EOP#^- 
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Figure 1-2. 82380 DMA Controller 
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The 82380 DMA controller transfers blocks of data 
(buffers) in three modes: Single Buffer, Buffer Auto- 
Initlalize, and Buffer Chaining. In the Single Buffer 
Process, the 82380 DMA Controller is programmed 
to transfer one particular block of data. Successive 
transfers then require reprogramming of the DMA 
channel. Single Buffer transfers are useful In sys- 
tems where it is known at the time the transfer be- 
gins what quantity of data is to be transferred, and 
there is a contiguous block of data area available. 

The Buffer Auto-lnitialize Process allows the same 
data area to be used for successive DMA transfers 
without having to reprogram the channel. 

The Buffer Chaining Process allows a program to 
specify a list of buffer transfers to be executed. The 
82380 DMA Controller, through interrupt routines, is 
reprogrammed from the list. The channel is repro- 
grammed for a new buffer before the current buffer 
transfer is complete. This pipelining of the channel 
programming process allows the system to allocate 
non-contiguous blocks of data storage space, and 
transfer all of the data with one DMA process. The 
buffers that make up the chain do not have to be In 
contiguous locations. 

Channel priority can be fixed or rotating. Fixed priori- 
ty allows the programmer to define the priority of 
DMA channels based on hardware or other fixed pa- 
rameters. Rotating priority is used to provide periph- 
erals access to the bus on a shared basis. 

With fixed priority, the programmer can set any 
channel to have the current lowest priority. This al- 


lows the user to reset or manually rotate the priority 
schedule without reprogramming the command reg- 
isters. 

1.1.2 PROGRAMMABLE INTERVAL TIMERS 

Four 16-bit programmable interval timers reside 
within the 82380. These timers are identical in func- 
tion to the timers in the 82C54 Programmable Inter- 
val Timer. All four of the timers share a common 
clock input which can be Independent of the system 
clock. The timers are capable of operating in six dif- 
ferent modes. In all of the modes, the current count 
can be latched and read by the 80386 at any time, 
making these very versatile event timers. Figure 1-3 
shows the functional components of the Program- 
mable Interval Timers. 

The outputs of the timers are directed to key system 
functions, making system design simpler. Timer 0 is 
routed directly to an interrupt input and is not avail- 
able externally. This timer would typically be used to 
generate time-keeping interrupts. 

Timers 1 and 2 have outputs which are available for 
general timer/counter purposes as well as special 
functions. Timer 1 is routed to the refresh control 
logic to provide refresh timing. Timer 2 Is connected 
to an interrupt request input to provide other timer 
functions. Timer 3 is a general purpose timer/coun- 
ter whose output is available to external hardware. It 
is also connected internally to the interrupt request 
which defaults to the highest priority (IRQO). 



TOUTO (INTERNAL) 


TOUT1 


TOUT2# 

TOUT3# 


Figure 1-3. Programmable Interval Timers — Block Diagram 
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1.1.3 INTERRUPT CONTROLLER 

The 82380 has the equivalent of three enhanced 
82C59A Programmable Interrupt Controllers. These 
controllers can all be operated in the Master mode, 
but the priority is always as if they were cascaded. 
There are 15 interrupt request Inputs provided for 
the user, ail of which can be inputs from external 
slave interrupt controllers. Cascading 82C59As to 
these request inputs allows a possible total of 120 
external interrupt requests. Figure 1 -4 is a block dia- 
giaiii ui lilt; o^oou iiiit;iiu(Ji v./uiiuuiic;i. 

Each of the interrupt request inputs can be individu- 
ally programmed with its own interrupt vector, allow- 
ing more flexibility in interrupt vector mapping than 
was available with the 82C59A. An interrupt is pro- 
vided to alert the system that an attempt is being 


made to program the vectors in the method of the 
82C59A. This provides compatibility of existing soft- 
ware that used the 82C59A or 8259A with new de- 
signs using the 82380. 

In the event of an unrequested or otherwise errone- 
ous interrupt acknowledge cycle, the 82380 Interrupt 
Controller issues a default vector. This vector, pro- 
grammed by the system software, will alert the sys- 
tem of unsolicited interrupts of the 80386. 

-ri X x: xu^ nnnnr\ 

I lie; luiiuiiuiia ui me; u£.ou\j iiiiciiupi wuiiiiuiici aic 

identical to the 82C59A, except in regards to pro- 
gramming the interrupt vectors as mentioned above. 
Interrupt request inputs are programmable as either 
edge or level triggered and are software maskable. 
Priority can be either fixed or rotating and interrupt 
requests can be nested. 


IRQO# 

IRQ1# 

IRQ2# 

IRQ3# 

IRQ4# 

IRQ5# 

IRQ6# 

IRQ7# 
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Figure 1-4. 82380 Interrupt Controller— Block Diagram 
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Enhancements are added to the 82380 for cascad- 
ing external interrupt controllers. Master to Slave 
handshaking takes place on the data bus, Instead of 
dedicated cascade lines. 


1.1.4 WAIT STATE GENERATOR 

The Wait State Generator is a programmable 
READY generation circuit for the 80386 bus. A pe- 
ripheral requiring wait states can request the Wait 
State Generator to hold the processor’s READY in- 
put inactive for a predetermined number of bus 
states. Six different wait state counts can be pro- 
grammed Into the Wait State Generator by software; 
three for memory accesses and three for I/O ac- 
cesses. A block diagram of the 82380 Wait State 
Generator is shown In Figure 1-5. 

The peripheral being accessed selects the required 
wait state count by placing a code on a 2-bit wait 
state select bus. This code along with the M/IO# 
signal from the bus master is used to select one of 
six internal 4-bit wait state registers which has been 
programmed with the desired number of wait states. 
From zero to fifteen wait states can be programmed 
Into the wait state registers. The Wait State Genera- 
tor tracks the state of the processor or current bus 
master at ail times, regardless of which device Is the 
current bus master and regardless of whether or not 
the Walt State Generator is currently active. 

The 82380 Wait State Generator is disabled by mak- 
ing the select Inputs both high. This allows hardware 
which is intelligent enough to generate its own ready 
signal to be accessed without penalty. As previously 


mentioned, deselecting the Wait State Generator 
does not disable Its ability to determine the proper 
number of wait states due to pipeline status in sub- 
sequent bus cycles. 

The number of wait states inserted into a pipelined 
bus cycle Is the value In the selected wait state reg- 
ister. If the bus master is operating in the non-pipe- 
llned mode, the Wait State Generator will increase 
the number of wait states inserted into the bus cycle 
by one. 

On reset, the Wait State Generator’s registers are 
loaded with the value FFH, giving the maximum 
number of wait states for any access In which the 
wait state select inputs are active. 

1.1.5 DRAM REFRESH CONTROLLER 

The 82380 DRAM Refresh Controller consists of a 
24-bit refresh address counter and bus arbitration 
logic. The output of Timer 1 is used to periodically 
request a refresh cycle. When the controller re- 
ceives the request. It requests access to the system 
bus through the HOLD signal. When bus control is 
acknowledged by the processor or current bus mas- 
ter, the refresh controller executes a memory read 
operation at the address currently in the Refresh Ad- 
dress Register. At the same time, it activates a re- 
fresh signal (REF#) that the memory uses to force a 
refresh Instead of a normal read. Control of the bus 
is transferred to the processor at the completion of 
this cycle. Typically a refresh cycle will take six clock 
cycles to execute on an 80386 bus. 
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Figure 1-5. 82380 Wait State Generator — Block Diagram 
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The 82380 DRAM Refresh Controller has the high- 
est priority when requesting bus access and will In- 
terrupt any active DMA process. This allows large 
blocks of data to be moved by the DMA controller 
without affecting the refresh function. Also the DMA 
controller is not required to completely relinquish the 
bus, the refresh controller simply steals a bus cycle 
between DMA accesses. 

The amount by which the refresh address is Incre- 
mented is programmable to allow for different bus 
widths and memory^ bank arrangements. 


1.1.6 CPU RESET FUNCTION 

The 82380 contains a special reset function which 
can respond to hardware reset signals from the 
82384, as well as a software reset command. The 
circuit will hold the 80386’s RESET line active while 
an external hardware reset signal is present at its 
RESET input. It can also reset the 80386 processor 
as the result of a software command. The software 
reset command causes the 82380 to hold the proc- 
essor’s RESET line active for a minimum of 62 CLK2 
cycles; enough time to allow an 80386 to re-initialize. 

The 82380 can be programmed to sense the shut- 
down detect code on the status lines from the 
80386. If the Shutdown Detect function is enabled, 
the 82380 will automatically reset the processor. A 
diagnostic register is available which can be used to 
determine the cause of reset. 


1.1.7 REGISTER MAP RELOCATION 


After a hardware reset, the internal registers of the 
82380 are located In I/O space beginning at port 
address OOOOH. The map of the 82380’s registers is 


mapping places the 82380 between I/O addresses 
OOOOH and OODBH. The relocation register allows 
this map to be moved to any even 256-byte bounda- 
ry in the processor’s 16-bit I/O address space or any 
even 16-Mbyte boundary In the 32-bit memory ad- 
dress space. 


1.2 Host Interface 

The 82380 is designed to operate efficiently on the 
local bus of an 80386 microprocessor. The control 


signals of the 82380 are identical In function to 
those of the 80386. As a slave, the 82380 operates 
with all of the features available on the 80386 bus. 
When the 82380 is in the Master mode, it looks iden- 
tical to the 80386 to the connected devices. 


The 82380 monitors the bus at all times, and deter- 
mines whether the current bus cycle Is a pipelined or 
non-pipelined access. All of the status signals of the 
processor are monitored. 


82380 are located at fixed addresses relative to 
each other, but the group can be relocated to either 
memory or I/O space and to different locations with- 
in those spaces. 


As a Slave device, the 82380 monitors the control/ 
status lines of the CPU. The 82380 will generate all 
of the wait states It needs whenever it Is accessed. 
This allows the programmer the freedom of access- 
ing 82380 registers without having to Insert NOPs in 
the program to wait for slower 82380 Internal regis- 
ters. 


The 82380 can determine if a current bus cycle is a 
pipelined or a non-pipelined cycle. It does this by 
monitoring the ADS# and READY# signals and 
thereby keeping track of the current state of the 
80386. 


As a bus master, the 82380 looks like an 80386 to 
the rest of the system. This enables the designer 
greater flexibility in systems which include the 
82380. The designer does not have to alter the inter- 
faces of any peripherals designed to operate with 
the 80386 to accommodate the 82380. The 82380 
wi!! access any peripherals on the bus in the same 
manner as the 80386, including recognizing pipe- 
ilned bus cyoies. 

The 82380 is accessed as an 8-blt peripheral. This is 
done to maintain compatibility with existing system 
architectures and software. The 80386 places the 
data of all 8-blt accesses either on D (0~7) or D (8- 
1 5). The 82380 will only accept data on these lines 
when in the Slave mode. When in the Master mode, 
the 82380 is a full 32-blt machine, sending and re- 
ceiving data in the same manner as the 80386. 
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1.3 IBM PC* System Compatibility 

The 82380 is an 80386 companion device designed 
to provide an enhancement of the system functions 
common to most small computer systems. It is mod- 
eled after and Is a superset of the Intel peripheral 
products found in the IBM PC, PC-AT, and other 
popular small computers. 


2.0 80386 HOST INTERFACE 

The 82380 contains a set of interface signals to op- 
erate efficiently with the 80386 host processor. 
These signals were designed so that minimal hard- 
ware is needed to connect the 82380 to the 80386. 

Figure 2-1 depicts a typical system configuration 
with the 80386 processor. As shown in the diagram, 
the 82380 is designed to interface directly with the 
80386 bus. 

*IBM PC and IBM PC-AT are registered trademarks of Inter- 
national Business Machines Inc. 


Since the 82380 is residing on the opposite side of 
the data bus transceiver (with respect to the rest of 
the peripherals in the system), It is Important to note 
that the transceiver should be controlled so that 
contention between the data bus transceiver and 
the 82380 will not occur. In order to do this, port 
address decoding logic should be included in the di- 
rection and enable control logic of the transceiver. 
When any of the 82380 internal registers is read, the 
data bus transceiver should be disabled so that only 
the 82380 will drive the local bus. 

This section describes the basic bus functions of the 
82380 to show how this device Interacts with the 
80386 processor. Other signals which are not direct- 
ly related to the host Interface will be discussed in 
their associated functional block description. 


FROM OTHER 
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Figure 2-1. 80386/82380 System Configuration 
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2.1 Master and Slave Modes 


2.2.1 CLOCK (CLK2) 


At any time, the 82380 acts as either a Slave device 
or a Master device in the system. Upon reset, the 
82380 will be In the Slave Mode. In this mode, the 
80386 processor can read/write Into the 82380 In- 
ternal registers. Initialization information may be pro- 
grammed into the 82380 during Slave Mode. 


When DMA service (Including DRAM Refresh Cycles 
generated by the 82380) is requested, the 82380 will 


local bus. This is done through the HOLD and HLDA 
(Hold Acknowledge) signals. When the 80386 proc- 
essor responds by asserting the HLDA signal, the 
82380 will switch into Master Mode and perform 
DMA transfers. In this mode, the 82380 Is the bus 
master of the system. It can read/write data from/to 
memory and peripheral devices. The 82380 will re- 
turn to the Slave Mode upon completion of DMA 
transfers, or when HLDA is negated. 


2.2 80386 Interface Signals 

As mentioned in the Architecture section, the Bus 
Interface module of the 82380 (see Figure 1-1) con- 
tains signals that are directly connected to the 
80386 host processor. This module has separate 
32-bit Data and Address busses. Also, It has addi- 
tional control signals to support different bus opera- 
tions on the system. By residing on the 80386 local 
bus, the 82380 shares the same address, data and 
control lines with the processor. The following sub- 
sections discuss the signals which interface to the 
80386 host processor. 


The CLK2 input provides fundamental timing for the 
82380. It Is divided by two internally to generate the 
82380 internal clock. Therefore, CLK2 should be 
driven with twice the 80386’s frequency. In order to 
maintain synchronization with the 80386 host proc- 
essor, the 82380 and the 80386 should share a 
common clock source. 

The Internal clock consists of two phases: PHI1 and 

DLJIO nr<a/^h 1^0 to n -fKrk 

I I I f^\^tt\^KJt t%^ M ^1 ^1 aw IIIVWIIIG4I 

clock. PHI2 Is usually used to sample input and set 
up internal signals and PH II is for latching internal 
data. Figure 2-2 illustrates the relationship of CLK2 
and the 82380 internal clock signals. The CPURST 
signal generated by the 82380 guarantees that the 
80386 will wake up in phase with PHI1. 


2.2.2 DATA BUS (D0-D31) 

This 32-bit three-state bidirectional bus provides a 
general purpose data path between the 82380 and 
the system. These pins are tied directly to the corre- 
sponding Data Bus pins of the 80386 local bus. The 
Data Bus is also used for interrupt vectors generated 
by the 82380 In the Interrupt Acknowledge cycle. 

During Slave I/O operations, the 82380 expects a 
single byte to be written or read. When the 80386 
host processor writes into the 82380, either D0-D7 
or D8-D15 will be latched into the 82380, depend- 
ing upon how the Byte Enable (BE0#-BE#3) sig- 
nals are driven. The 82380 does not need to look at 
D16-D31 since the 80386 duplicates the single byte 



Figure 2-2. CLK2 and 82380 Internal Clock 
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data on both halves of the bus. When the 80386 
host processor reads from the 82380, the single 
byte data will be duplicated four times on the Data 
Bus; i.e., on D0-D7, D8-D15. D16-D23 and D24~ 
D31. 

During Master Mode, the 82380 can transfer 32-, 16-, 
and 8-bit data between memory (or I/O devices) and 
I/O devices (or memory) via the Data Bus. 

2.2.3 ADDRESS BUS (A31-A2) 

These three-state bidirectional signals are connect- 
ed directly to the 80386 Address Bus. In the Slave 
Mode, they are used as Input signals so that the 
processor can address the 82380 internal ports/reg- 
isters. In the Master Mode, they are used as output 
signals by the 82380 to address memory and periph- 
eral devices. The Address Bus is capable of ad- 
dressing 4 G-bytes of physical memory space 
(OOOOOOOOH to FFFFFFFFH), and 64 K-bytes of I/O 
addresses (OOOOOOOOH to OOOOFFFFH). 


2.2.4 BYTE ENABLE (BE3#-BE0#) 

These bidirectional pins select specific byte(s) in the 
double word addressed by A31~A2. Similar to the 
Address Bus function, these signals are used as in- 
puts to address Internal 82380 registers during 
Slave Mode operation. During Master Mode opera- 
tion, they are used as outputs by the 82380 to ad- 
dress memory and I/O locations. 

NOTE: 

In addition to the above function, BE3# is used 
to enable a production test mode and must be 
LOW during reset. The 80386 processor will au- 
tomatically hold BE3# LOW during RESET. 

The definitions of the Byte Enable signals depend 
upon whether the 82380 is in the Master or Slave 
Mode. These definitions are depicted in Table 2-1. 


Table 2-1. Byte Enable Signals 


As INPUTS (Slave Mode): 


BE3#-BE0# 

Implied A1, AO 

Data Bits Written 
to 82380" 

. xxxo 

00 

P0-D7 

XX01 

01 

D8-D15 

X011 

10 

D0-D7 

X111 

11 

D8-D15 


X-DONT CARE 

’During READ, data will be duplicated on D0-D7, D8-D15, D16-D23, and D24-D31. 

During WRITE, the 80386 host processor duplicates data on D0-D15, and D.16-D31, so that the 82380 
is concerned only with the lower half of the Data Bus. 

As OUTPUTS (Master Mode): 


BE3#-BE0# 

Byte to be Accessed 
Relative to A31-A2 

Logical Byte Presented On 
Data Bus During WRITE Only" 
D24-31 D16-23 D8-15 DO-7 

1110 

0 

U 

U 

U 

A 

1101 

1 

U 

U 

A 

A 

1011 

2 

u 

A 

U 

A 

0111 

3 

A 

U 

A 

A 

1001 

1.2 

U 

B 

A 

A 

1100 

0, 1 

U. 

U 

B 

A 

0011 

2,3 

B 

A 

B 

A 

1000 

0, 1,2 

U 

C 

B 

A 

0001 

1,2,3 

C 

B 

A 

A 

0000 

0, 1,2,3 

D 

C 

B 

A 


U = Undefined 
A = Logical D0-D7 
B = Logical D8-D15 
C = Logical D16-D23 
D = Logical D24-D31 

’Actual number of bytes accessed depends upon the programmed data path width. 
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2.2.5 BUS CYCLE DEFINITION SIGNALS (D/C#, 
W/R#, M/IO#) 

These three-state bidirectional signals define the 
type of bus cycle being performed. W/R# distin- 
guishes between write and read cycles. D/C# dis- 
tinguishes between processor data and control cy- 
cles. M/IO# distinguishes between memory and I/O 
cycles. 

During Slave Mode, these signals are driven by the 
80386 host processor; during Master Mode, they are 
driven by the 82380. In either mode, these signals 
will be valid when the Address Status (ADS#) is 
driven LOW. Exact bus cycle definitions are given in 
Table 2-2. Note that some combinations are recog- 
nized as inputs, but not generated as outputs. In the 
Master Mode, D/C# is always HIGH. 


nal indicates the end of a DMA bus cycle. In the 
Slave Mode, the 82380 monitors this input and 
ADS# to detect a pipelined address cycles. This sig- 
nal should be tied directly to the READY# input of 
the 80386 host processor. 

2.2.8 NEXT ADDRESS REQUEST (NA#) 

This input is used to indicate to the 82380 in the 
Master Mode that the system Is requesting address 
pipelining. When driven LOW by either memory or 
peripheral devices during Master Mode, It Indicates 
that the system is prepared to accept a new address 
and bus cycle definition signals from the 82380 be- 
fore the end of the current bus cycle. If this input is 
active when sampled by the 82380, the next address 
is driven onto the bus, provided a bus request Is 
already pending internally. 


2.2.6 ADDRESS STATUS (ADS#) 

This bidirectional signal indicates that a valid ad- 
dress (A2-A31, BE0#-BE3#) and bus cycle defini- 
tion (W/R#, D/C#, M/IO#) is being driven on the 
bus. In the Master Mode, it Is driven by the 82380 as 
an output. In the Slave Mode, this signal is moni- 
tored as an Input by the 82380. By the current and 
past status of ADS# and the READY# input, the 
82380 is able to determine, during Slave Mode, if the 
next bus cycle Is a pipelined address cycle. ADS# is 
asserted during T1 and T2P bus states (see Bus 
State Definition). 

Note that during the Idle states at the beginning and 
the end of a DMA process, neither the 80386 nor the 
82380 is driving the ADS# signal; i.e., the signal is 
left floated. Therefcre, it is important to use a pu!!-up 
resistor (approximately 10 Kfl) on the ADS# signal. 

2.2.7 TRANSFER ACKNOWLEDGE (READY#) 

This Input indicates that the current bus cycle Is 
complete. In the Master Mode, assertion of this slg- 


This input pin is monitored only in the Master Mode. 
In the Slave Mode, the 82380 uses the ADS# and 
READY# signals to determine address pipelining 
cycles, and NA# will be Ignored. 

2.2.9 RESET (RESET, CPURST) 

RESET 

This synchronous Input suspends any operation in 
progress and places the 82380 in a known initial 
state. Upon reset, the 82380 will be In the Slave 
Mode Vi/aiting to be initialized by the 80386 host 
processor. The 82380 Is reset by asserting RESET 
for 15 or more CLK2 periods. When RESET Is as- 
serted, all other input pins are ignored, and all other 
bus pins are driven to an Idle bus state as shown in 
I able 2-3. Trie 52380 will deteriTiine the phase of its 
internal clock following RESET going inactive. 


Table 2-2. Bus Cycle Definition 


M/iO# 

D/C# 

W/R# 

As INPUTS 

As OUTPUTS 

0 

0 

0 

Interrupt 

Acknowledge 

NOT GENERATED 

0 

0 

1 

UNDEFINED 

NOT GENERATED 

0 

1 

0 

I/O Read 

I/O Read 

0 

1 

1 

I/O Write 

I/O Write 

1 

0 

0 

UNDEFINED 

NOT GENERATED 

1 

0 

1 

HALT if 

BE(3-0) # = X01 1 
SHUTDOWN if 

BE (3-0)# = XXXO 

NOT GENERATED 

1 

1 

0 

Memory Read 

Memory Read 

1 

1 

1 

1 

Memory Write 

Memory Write 
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Table 2-3. Output Signals Following RESET 


Signal 

Level 

A2-A31, D0-D31, BE0#-BE3# 

D/C#, W/R#, M/IO#, ADS# 

READYO# 

EOP# 

EDACK2-EDACK0 

HOLD 

INT 

TOUT1/REF#, TOUT2#/IRQ3#, TOUT3# 
CPURST 

Float 

Float 

‘1’ 

‘1’(Weak Pull-UP) 

‘100’ 

‘0’ 

UNDEFINED* 

UNDEFINED* 

‘0’ 


*The Interrupt Controller and Programmable Interval Timer are initialized by software commands. 


RESET is level-sensitive and must be synchronous 
to the CLK2 signal. Therefore, this RESET input 
should be tied to the RESET output of the Clock 
Generator. The RESET setup and hold time require- 
ments are shown in Figure 2.3. 

CPURST 

This output signal Is used to reset the 80386 host 
processor. It will go active (HIGH) whenever one of 
the following events occurs: a) 82380’s RESET input 
is active; b) a software RESET command is Issued 
to the 82380; or c) when the 82380 detects a proc- 
essor Shutdown cycle and when this detection fea- 
ture is enabled (see CPU Reset and Shutdown De- 
tect). When activated, CPURST will be held active 
for 62 CLK2 periods. The timing of CPURST is such 
that the 80386 processor will be in synchronization 
with the 82380. This timing is shown in Figure 2-4. 


2.2.10 INTERRUPT OUT (INT) 

This output pin is used to signal the 80386 host 
processor that one or more interrupt requests (either 
internal or external) are pending. The processor Is 
expected to respond with an Interrupt Acknowledge 
cycle. This signal should be connected directly to 
the Maskable Interrupt Request (INTR) input of the 
80386 host processor. 


2.3 82380 Bus Timing 

The 82380 Internally divides the CLK2 signal by two 
to generate Its internal clock. Figure 2-2 shows the 
relationship of CLK2 and the Internal clock. The In- 
ternal clock consists of two phases: PHI1 and PHI2. 
Each CLK2 period is a phase of the internal clock. In 
Figure 2-2, both PH II and PH 12 of the 82380 internal 
clock are shown. 
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In the 82380, whether it is in the Master or Slave 
Mode, the shortest time unit of bus activity is a bus 
state. A bus state, which is also referred as a 
T-state’, is defined as one 82380 PHI2 clock period 
(i.e., two CLK2 periods). Recall in Table 2-2, there 
are six different types of bus cycles in the 82380 as 
defined by the M/IO#, D/C# and W/R# signals. 
Each of these bus cycles is composed of two or 
more bus states. The length of a bus cycle depends 
on when the READY# input is asserted (i.e., driven 
LOW). 

2.3.1 ADDRESS PIPELINING 

The 82380 supports Address Pipelining as an option 
in both the Master and Slave Mode. This feature typ- 
ically allows a memory or peripheral device to oper- 
ate with one less wait state than would otherwise be 
required. This is possible because during a pipelined 
cycle, the address and bus cycle definition of the 
next cycle will be generated by the bus master while 
waiting for the end of the current cycle to be ac- 
knowledged. The pipelined bus is especially weii 
suited for Interleaved memory environment. For 16 
MHz interleaved memory designs with 100 ns ac- 
cess time DRAMs, zero wait state memory accesses 
can be achieved when pipelined addressing Is se- 
lected. 

In the Master Mode, the 82380 is capable of initiat- 
ing, on a cycle-by-cycle basis, either a pipelined or 
non-pipelined access depending upon the state of 
the NA# input. If a pipelined cycle Is requested (indi- 
cated by NA# being driven LOW), the 82380 will 


drive the address and bus cycle definition of the next 
cycle as soon as there is an internal bus request 
pending. 

In the Slave Mode, the 82380 is constantly monitor- 
ing the ADS# and READY# signals on the proces- 
sor local bus to determine if the current bus cycle is 
a pipelined cycle. If a pipelined cycle Is detected, the 
82380 will request one less wait state from the proc- 
essor if the Wait State Generator feature is selected. 
On the other hand, during an 82380 internal register 
access In a pipelined cycle, it will make use of the 
advance address and bus cycle information. In all 
cases. Address Pipelining will result in a savings of 
one wait state. 


2.3.2 MASTER MODE BUS TIMING 

When the 82380 is In the Master Mode, it will be in 
one of six bus states. Figure 2-5 shows the complete 
bus state diagram of the Master Mode, Including 
pipelined address states. As seen in the figure, the 
82380 state diagram is very similar to that of the 
80386. The major difference is that in the 82380, 
there is no Hold state. Also, in the 82380, the condi- 
tions for some state transitions depend upon wheth- 
er it is the end of a DMA process*. 

NOTE: 

*The term ‘end of a DMA process’ Is loosely de- 
fined here. It depends on the DMA modes of oper- 
ation as well as the state of the EOP# and DREQ 
inputs. This is explained in detail in section 3 — DMA 
Controller. 
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The 82380 will enter the idle state, Ti, upon RESET 
and whenever the internal address is not available at 
the end of a DMA cycle or at the end of a DMA 
process. When address pipelining is not used (NA# 
is not asserted), a new bus cycle always begins with 
state T 1 . During T 1 , address and bus cycle definition 
signals will be driven on the bus. T1 is always fol- 
lowed by T2. 

If a bus cycle is not acknowledged (with READY#) 
during T2 and NA# is negated, T2 will be repeated. 
When the end of the bus cycle Is acknowledged dur- 
ing T2, the following state will be T1 of the next bus 
cycle (if the Internal address latch is loaded and if 
this is not the end of the DMA process). Otherwise, 
the Ti state will be entered. Therefore, If the memory 
or peripheral accessed is fast enough to respond 
within the first T2, the fastest non-pipelined cycle will 
take one T1 and one T2 state. 


Use of the address pipelining feature allows the 
82380 to enter three additional bus states: T1P, 
T2P, and T2i. T1 P is the first bus state of a pipelined 
bus cycle. T2P follows T1P (or T2) If NA# is assert- 
ed when sampled. The 82380 will drive the bus with 
the address and bus cycle definition signals of the 
next cycle during T2P. From the state diagram, it can 
be seen that after an Idle state Ti, the first bus cycle 
must begin with T1, and is therefore a non-pipelined 
bus cycle. The next bus cycle can be pipelined if 
NA# is asserted and the previous bus cycle ended 
in a T2P state. Once the 82380 is in a pipelined 
cycle and provided that NA# is asserted in subse- 
quent cycles, the 82380 will be switching between 
T1P and T2P states. If the end of the current bus 
cycle is not acknowledged by the READY# input, 
the 82380 will extend the cycle by adding T2P 
states. The fastest pipelined cycle will consist of one 
T1 P and one T2P state. 



NOTE: 

ADAV — Internal Address Available 

Figure 2-5. Master Mode State Diagram 
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The 82380 will enter state T2i when NA# is assert- 
ed and when one of the following two conditions 
occurs. The first condition is when the 82380 is in 
state T2. T2i will be entered if READY# is not as- 
serted and there is no next address available. This 
situation is similar to a wait state. The 82380 will stay 
in T2i for as long as this condition exists. The sec- 
ond condition which will cause the 82380 enter T2i is 
when the 82380 is in state T1P. Before going to 


state T2P, the 82380 needs to wait in state T2i until 
the next address Is available. Also, In both cases, if 
the DMA process is complete, the 82380 will enter 
the T2I state in order to finish the current DMA cycle. 

Figure 2-6 is a timing diagram showing non-pipelined 
bus accesses in the Master Mode. Figure 2-7 shows 
the timing of pipelined accesses in the Master Mode. 
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2.3.3 SLAVE MODE BUS TIMING 

Figure 2-8 shows the Slave Mode bus tinning in both 
pipelined and non-pipelined cycles when the 82380 
Is being accessed. Recall that during Slave Mode, 
the 82380 will constantly monitor the ADS# and 
READY# signals to determine if the next cycle is 
pipelined. In Figure 2-8, the first cycle is non-pipe- 
lined and the second cycle is pipelined. In the pipe- 
lined cycle, the 82380 will start decoding the ad- 


dress and bus cycle signals one bus state earlier 
than in a non-pipelined cycle. 

The READY# input signal is sampled by the 80386 
host processor to determine the completion of a bus 
cycle. This occurs during the end of every T2 and 
T2P state. Normally, the output of the 82380 Wait 
State Generator, READYO#, is directly connected 
to the READY# Input of the 80386 host processor 
and the 82380. In such case, READYO# and 
READY# will be identical (see Walt State Genera- 
tor). 
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3.0 DMA Controller 

The 82380 DMA Controller is capable of transferring 
data between any combination of memory and/or 
I/O, with any combination (8-. 16-, or 32-bits) of data 
path widths. Bus bandwidth is optimized through the 
use of an internal temporary register which can dis- 
assemble or assemble data to or from either an 
aligned or a non-aligned destination or source. Fig- 


ure 3-1 Is a block diagram of the 82380 DMA Con- 
troller. 

The 82380 has eight channels of DMA. Each chan- 
nel operates independently of the others. Within the 
operation of the individual channels, there are many 
different modes of data transfer available. Many of 
the operating modes can be Intermixed to provide a 
very versatile DMA controller. 


HOLD^- 
HLDA — 


DREQO- 
DREQ1- 
DREQ2- 
DREQ3 - 
DREQ4- 
DREQ5 - 
DREQ6 - 
DREQ7- 




CONTROL/STATUS REGISTERS 


CHANNEL REGISTERS 


DMA 

REQUEST 

ARBITRATION 

LOGIC 


COMMAND REGISTER I 


COMMAND REGISTER H 


MODE REGISTER I 


MODE REGISTER H 


SOFTWARE REQUEST 
REGISTER 


MASK REGISTER 


STATUS REGISTER 


BUS SIZE REGISTER 


CHAINING REGISTER 



BASE 

BYTE COUNT 


BASE 

REQUESTER 

ADDRESS 


BASE 

TARGET 

ADDRESS 


CURRENT 
BYTE COUNT 


CURRENT 

REQUESTER 

ADDRESS 


CURRENT 

TARGET 

ADDRESS 


TEMPORARYl 

REGISTER 


CHANNEL 1 (SAME AS CH 0) 


CHANNEL 2 (SAME AS CH 0) 


CHANNEL 3 (SAME AS CH 0) 


"LOWER” GROUP OF CHANNELS 


1 . "UPPER" GROUP OF CHANNELS 


CONTROL/STATUS 
(SAME AS 
LOWER GROUP) 


CHANNEL 4 (SAME AS CH 0) 


CHANNEL 5 (SAME AS CH 0) 


CHANNEL 6 (SAME AS CH 0) 


CHANNEL 7 (SAME AS CH 0) 


CHANNEL 0 




Figure 3-1. 8235G DMA Coiiiruiier BluCk Diagram 
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3.1 Functional Description 

In describing the operation of the 82380’s DMA Con- 
troller, close attention to terminology is required. Be- 
fore entering the discussion of the function of the 
82380 DMA Controller, the following explanations of 
some of the terminology used herein may be of ben- 
efit. First, a few terms for clarification: 

DMA PROCESS— A DMA process is the execution 
of a programmed DMA task from beginning to end. 
Each DMA process requires initial programming by 
the host 80386 microprocessor. 

BUFFER — A contiguous block of data. 

BUFFER TRANSFER— The action required by the 
DMA to transfer an entire buffer. 

DATA TRANSFER— The DMA action in which a 
group of bytes, words, or double words are moved 
between devices by the DMA Controller. A data 
transfer operation may involve movement of one or 
many bytes. 

BUS CYCLE — Access by the DMA to a single byte, 
word, or double word. 

Each DMA channel consists of three major compo- 
nents. These components are identified by the con- 
tents of programmable registers which define the 
memory or I/O devices being serviced by the DMA. 
They are the Target, the Requester, and the Byte 
Count. They will be defined generically here and in 
greater detail in the DMA register definition section. 

The Requester is the device which requires service 
by the 82380 DMA Controller, and makes the re- 
quest for service. All of the control signals which the 
DMA monitors or generates for specific channels 
are logically related to the Requester. Only the Re- 
quester is considered capable of initiating or termi- 
nating a DMA process. 

The Target Is the device with which the Requester 
wishes to communicate. As far as the DMA process 
is concerned, the Target is a slave which is Incapa- 
ble of control over the process. 

The direction of data transfer can be either from Re- 
quester to Target or from Target to Requester; i.e., 
each can be either a source or a destination. 

The Requester and Target may each be either I/O 
or memory. Each has an address associated with it •* 
that can be incremented, decremented, or held con- 
stant. The addresses are stored in the Requester 
Address Registers and Target Address Registers, 


respectively. These registers have two parts: one 
which contains the current address being used in the 
DMA process (Current Address Register), and one 
which holds the programmed base address (Base 
Address Register). The contents of the Base Regis- 
ters are never changed by the 82380 DMA Control- 
ler. The Current Registers are Incremented or decre- 
mented according to the progress of the DMA pro- 
cess. 

The Byte Count is the component of the DMA pro- 
cess which dictates the amount of data which must 
be transferred. Current and Base Byte Count Regis- 
ters are provided. The Current Byte Count Register 
is decremented once for each byte transferred by 
the DMA process. When the register is decremented 
past zero, the Byte Count Is considered ‘expired’ 
and the process is terminated or restarted, depend- 
ing on the mode of operation of the channel. The 
point at which the Byte Count expires is called ‘Ter- 
minal Count’ and several status signals are depen- 
dent on this event. 

Each channel of the 82380 DMA Controller also 
contains a 32-blt Temporary Register for use in as- 
sembling and disassembling non-aligned data. The 
operation of this register is transparent to the user, 
although the contents of it may affect the timing of 
some DMA handshake sequences. Since there is 
data storage available for each channel, the DMA 
Controller can be interrupted without loss of data. 

The 82380 DMA Controller is a slave on the bus until 
a request for DMA service is received via either a 
software request command or a hardware request 
signal. The host processor may access any of the 
control/status or channel registers at any time the 
82380 is a bus slave. Figure 3-2 shows the flow of 
operations that the DMA Controller performs. 

At the time a DMA service request Is received, the 
DMA Controller issues a bus hold request to the 
host processor. The 82380 becomes the bus master 
when the host relinquishes the bus by asserting a 
hold acknowledge signal. The channel to be serv- 
iced will be the one with the highest priority at the 
time the DMA Controller becomes the bus master. 
The DMA Controller will remain in control of the bus 
until the hold acknowledge signal is removed, or un- 
til the current DMA transfer is complete. 

While the 82380 DMA Controller has control of the 
bus, it will perform the required data transfer(s). The 
type of transfer, source and destination addresses, 
and amount of data to transfer are programmed in 
the control registers of the DMA channel which re- 
ceived the request for service. 
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J 


290128-17 

Figure 3-2. Flow of DMA Controller Operation 


At completion of the DMA process, the 82380 will 
remove the bus hold request. At this time the 82380 
becomes a slave again, and the host returns to be- 
ing a master. If there are other DMA channels with 
requests pending, the controller will again assert the 
hold request signal and restart the bus arbitration 
and switching process. 


3.2 Interface Signals 

There are fourteen control signals dedicated to the 
DMA process. They include eight DMA Channel Re- 
quests (DREQn), three Encoded DMA Acknowledge 
signals (EDACKn), Processor Hold and Hold Ac- 
knowledge (HOLD, HLDA), and End-Of-Process 
(EOP#). The DREQn inputs and EDACK(0-2) out- 
puts are handshake signals to the devices requiring 
DMA service. The HOLD output and HLDA input are 
handshake signals to the host processor. Figure 3-3 
shows these signals and how they Interconnect be- 
tween the 82380 DMA Controller, and the Requester 
and Target devices. 



290128-18 

Figure 3-3. Requester, Target, and DMA Controller Interconnection 
(2-Cycle Configuration) 
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3.2.1 DREQn and EDACK(0-2) 

These signals are the handshake signals between 
the peripheral and the 82380. When the peripheral 
requires DMA service, it asserts the DREQn signal 
of the channel which is programmed to perform the 
service. The 82380 arbitrates the DREQn against 
other pending requests and begins the DMA pro- 
cess after finishing other higher priority processes. 

When the DMA service for the requested channel is 
in progress, the EDACK(0-2) signals represent the 
DMA channel which is accessing the Requester. 
The 3-bit code on the EDACK(0-2) lines indicates 
the number of the channel presently being serviced. 
Table 3-2 shows the encoding of these signals. Note 
that Channel 4 does not have a corresponding hard- 
ware acknowledge. 

The DMA acknowledge (EDACK) signals indicate 
the active channel only during DMA accesses to the 
Requester. During accesses to the Target, 
EDACK(0-2) has the idle code (100). EDACK(0-2) 
can thus be used to select a Requester device dur- 
ing a transfer. 

Table 3-2. EDACK Encoding During 
a DMA Transfer 


EDACK2 

EDACK1 

EDACKO 

Active Channel 

0 

0 

0 

0 

0 

0 

1 

1 

0 

1 

0 

2 

0 

1 

1 

3 

1 

0 

0 

Target Access 

1 

0 

1 

5 

1 

1 

0 

6 

1 

1 

1 

7 


DREQn can be programmed as either an Asynchro- 
nous or Synchronous input. See section 3.4.1 for de- 
tails on synchronous versus asynchronous operation 
of this pin. 

The EDACKn signals are always active. They either 
indicate ‘no acknowledge’ or they indicate a bus ac- 
cess to the requester. The acknowledge code is ei- 
ther 100, for an idle DMA or during a DMA access to 
the Target, or ‘n’ during a Requester access, where 
n is the. binary value representing the channel. A 
simple 3-line to 8-line decoder can be used to pro- 
vide discrete acknowledge signals for the peripher- 
als. 


3.2.2 HOLD and HLDA 

The Hold Request (HOLD) and Hold Acknowledge 
(HLDA) signals are the handshake signals between 


the DMA Controller and the host processor. HOLD is 
an output from the 82380 and HLDA is an input. 
HOLD is asserted by the DMA Controller when there 
Is a pending DMA request, thus requesting the proc- 
essor to give up control of the bus so the DMA pro- 
cess can take place. The 80386 responds by assert- 
ing HLDA when it is ready to relinquish control of the 
bus. 

The 82380 will begin operations on the bus one 
clock cycle after the HLDA signal goes active. For 
this reason, other devices on the bus should be in 
the slave mode when HLDA is active. 

HOLD and HLDA should not be used to gate or se- 
lect peripherals requesting DMA service. This Is be- 
cause of the use of DMA-like operations by the 
DRAM Refresh Controller. The Refresh Controller is 
arbitrated with the DMA Controller for control of the 
bus, and refresh cycles have the highest priority. A 
refresh cycle will take place between DMA cycles 
without relinquishing bus control. See section 3.4.3 
for a more detailed discussion of the interaction be- 
tween the DMA Controller and the DRAM Refresh 
Controller. 


3.2.3 EOF# 

EOF# is a bi-directional signal used to Indicate the 
end of a DMA process. The 82380 activates this as 
an output during the T2 states of the last Requester 
bus cycle for which a channel is programmed to exe- 
cute. The Requester should respond by either with- 
drawing its DMA request, or Interrupting the host 
processor to indicate that the channel needs to be 
programmed with a new buffer. As an input, this sig- 
nal is used to tell the DMA Controller that the periph- 
eral being serviced does not require any more data 
to be transferred. This indicates that the current 
buffer Is to be terminated. 

EOF# can be programmed as either an Asynchro- 
nous or a Synchronous Input. See section 3.4.1 for 
details on synchronous versus asynchronous opera- 
tion of this pin. 


3.3 Modes of Operation 

The 82380 DMA Controller has many independent 
operating functions. When designing peripheral In- 
terfaces for the 82380 DMA Controller, all of the 
functions or modes must be considered. All of the 
channels are independent of each other (except in 
priority of operation) and can operate in any of the 
modes. Many of the operating modes, though inde- 
pendently programmable, affect the operation of 
other modes. Because of the large number of com- 
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binations possible, each programmable mode is dis- 
cussed here with its affects on the operation of other 
modes. The entire list of possible combinations will 
not be presented. 

Table 3-1 shows the categories of DMA features 
available In the 82380. Each of the five major cate- 
gories is independent of the others. The sub-catego- 
ries are the available modes within the major func- 
tion or mode category. The following sections 
explain each mode or function and its relation to oth- 

0r f0afijr0e_ 

Table 3-1. DMA Operating Modes 

I. Target/Requester Definition 

a. Data Transfer Direction 

b. Device Type 

c. Increment/Decrement/Hold 

II. Buffer Processes 

a. Single Buffer Process 

b. Buffer Auto-lnitialize Process 

c. Buffer Chaining Process 

III. Data Transfer/Handshake Modes 

a. Single Transfer Mode 

b. Demand transfer Mode 

c. Block Transfer Mode 

d. Cascade Mode 

IV. Priority Arbitration 

a. Fixed 

b. Rotating 

c. Programmable Fixed 

v. Bus Operation 

Q PI\/.R\/ r.Qinnlo_^'.\/r'ln^/TlA#n-^\yr^l^i 

. .J . ...» 

b. Data Path Width 

c. Read, Write, or Verify Cycles 

3.3.1 TARGET/REQUESTER DEFINiTION 

All DMA transfers involve three devices: the DMA 
Controller, the Requester, and the Target. Since the 
devices to be accessed by the DMA Controller vary 
widely, the operating characteristics of the DMA 
Controller must be tailored to the Requester and 
Target devices. 

The Requester can be defined as either the source 
or the destination of the data to be transferred. This 
is done by specifying a Write or a Read transfer, 
respectively. In a Read transfer, the Target is the 
data source and the Requester Is the destination for 


the data. In a Write transfer, the Requester is the 
source and the Target in the destination. 

The Requester and Target addresses can each be 
independently programmed to be incremented, dec- 
remented, or held constant. As an example, the 
82380 is capable of reversing a string or data by 
having a Requester address Increment and the Tar- 
get address decrement in a memory-to-memory 
transfer. 

3.3.2 BUFFER TRANSFER PROCESSES 

The 82380 DMA Controller allows three programma- 
ble Buffer Transfer Processes. These processes de- 
fine the logical way in which a buffer of data is ac- 
cessed by the DMA. 

The three Buffer Transfer Processes include the Sin- 
gle Buffer Process, the Buffer Auto-lnitiallze Pro- 
cess, and the Buffer Chaining Process. These pro- 
cesses require special programming considerations. 
See the DMA Programming section for more details 
on setting up the Buffer Transfer Processes. 


Single Buffer Process 

The Single Buffer Process allows the DMA channel 
to transfer only one buffer of data. When the buffer 
has been completely transferred (Current Byte 
Count decremented past zero or EOP# input ac- 
tive), the DMA process ends and the channel be- 
comes idle. In order for that channel to be used 
again, it must be- reprogrammed. 

The single Buffer Process Is usually used when the 
arnount of data to be transferred is kncwn exactly, 
and it is also known that there Is not likely to be any 
data to follow before the operating system can 
reprogram the channel. 


Buffer Auto-lnitialize Process 

The Buffer Auto-lnitialize Process allows multiple 
groups of data to be transferred to or from a single 
buffer. This process does not require reprogram- 
ming. The Current Registers are automatically repro- 
grammed from the Base Registers when the current 
process is terminated, either by an expired Byte 
Count or by an external EOP# signal. The data 
transferred will always be between the same Target 
and Requester. 

The auto-initialization/process-execution cycle is re- 
peated, with a HOLD/HLDA re-arbitration, until the 
channel is either disabled or re-programmed. 
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Buffer Chaining Process 

The Buffer Chaining Process is useful for transfer- 
ring large quantities of data into non-contiguous 
buffer areas. In this process, a single channel is 
used to process data from several buffers, while 
having to program the channel only once. Each new 
buffer is programmed in a pipelined operation that 
provides the new buffer information while the old 
buffer is being processed. The chain Is created by 
loading new buffer information while the 82380 DMA 
Controller is processing the Current Buffer. When 
the Current Buffer expires, the 82380 DMA Control- 
ler automatically restarts the channel using the new 
buffer Information. 

Loading the new buffer information is done by an 
interrupt routine which is requested by the 82380. 
Interrupt Request 1 (IRQ1) is tied internally to the 
82380 DMA Controller for this purpose. 1RQ1 is gen- 
erated by the 82380 when the new buffer informa- 
tion is loaded into the channel’s Current Registers, 
leaving the Base Registers ‘empty’. The interrupt 
service routine loads new buffer information into the 
Base Registers. The host processor is required to 
load the information for another buffer before the 
current Byte Count expires. The process repeats un- 
til the host programs the channel back to single buff- 
er operation, or until the channel runs out of buffers. 

The channel runs but of buffers when the Current 
Buffer expires and the Base Registers have not yet 
been loaded with new buffer information. When this 
occurs, the channel must be reprogrammed. 

If an external EOP# is encountered while executing 
a Buffer Chaining Process, the current buffer is con- 
sidered expired and the new buffer information is 
loaded into the Current Registers. If the Base Regis- 
ters are ‘empty’, the chain is terminated. 

The channel uses the Base Target Address Register 
as an Indicator of whether or not the Base Registers 
are full. When the most significant byte of the Base 
Target Register is loaded, the channel considers ail 
of the Base Registers loaded, and removes the In- 
terrupt request. This requires that the other Base 
Registers (Base Requester Address, Last Byte 
Count) must be loaded before the Base Target Ad- 
dress Register. The reason for implementing the re- 


loading process this way is that, for most applica- 
tions, the Byte Count and the Requester will not 
change from one buffer to the next, and therefore do 
not need to be reprogrammed. The details of pro- 
gramming the channel for the Buffer Chaining Pro- 
cess can be found in the section of DMA program- 
ming. 

3.3.3 DATA TRANSFER MODES 

Three Data Transfer modes are available in the 
82380 DMA Controller. They are the Single Transfer, 
Block Transfer, and Demand Transfer Modes. 
These transfer modes can be used in conjunction 
with any one of three Buffer Transfer modes: Single 
Buffer, Auto-Initialized Buffer, and Buffer Chaining. 
Any Data Transfer Modes can be used under any of 
the Buffer Transfer Modes. These modes are inde- 
pendently available for all DMA channels. 

Different devices being serviced by the DMA Con- 
troller require different handshaking sequences for 
data transfers to take place. Three handshaking 
modes are available on the 82380, giving the de- 
signer the opportunity to use the DMA Controller as 
efficiently as possible. The speed at which data can 
be presented or read by a device can affect the way 
a DMA controller uses the host’s bus, thereby affect- 
ing not only data throughput during the DMA pro- 
cess, but also affecting the host’s performance by 
limiting its access to the bus. 


Single Transfer Mode 

In the Single Transfer Mode, one data transfer to or 
from the Requester is performed by the DMA Con- 
troller at a time. The DREQn input is arbitrated and 
the HOLD/HLDA sequence is executed for each 
transfer. Transfers continue in this manner until the 
Byte Count expires, or until EOP# is sampled active. 
If the DREQn input is held active continuously, the 
entire DREQ-HOLD-HLDA-DACK sequence is re- 
peated over and over until the programmed number 
of bytes has been transferred. Bus control is re- 
leased to the host between each transfer. Figure 3-4 
shows the logical flow of events which make up a 
buffer transfer using the Single Transfer Mode. Re- 
fer to section 3.4 for an explanation of the bus con- 
trol arbitration procedure. 
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END OF BUFFER 
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Figure 3-4. Buffer Transfer in 
Singie Transfer Mode 


The Single Transfer Mode is used for devices which 
require complete handshake cycles with each data 
access. Data is transferred to or from the Requester 
only when the Requester is ready to perform the 
transfer. Each transfer requires the entire DREQ- 
HOLD-HLDA-DACK handshake cycle. Figure 3-5 
shows the timing of the Single Transfer Mode cy- 
cles. 


Block Transfer Mode 

In the Block Transfer Mode, the DMA process Is ini- 
tiated by a DMA request and continues until the Byte 
count expires, or until EOF# is activated by the Re- 
quester. The DREQn signal need only be held active 
until the first Requester access. Only a refresh cycle 
will Interrupt the block transfer process. 

Figure 3-6 illustrates the operation of the DMA dur- 
ing the Block Transfer Mode. Figure 3-7 shows the 
timing of the handshake signals during Block Mode 
Transfers. 
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Figure 3-6. Buffer Transfer In 
Block Transfer Mode 


Demand Transfer Mode 

The Demand Transfer Mode provides the most flex- 
ible handshaking procedures during the DMA pro- 
cess. A Demand Transfer is initiated by a DMA re- 
quest. The process continues until the Byte Count 
expires, or an external EOP# is encountered. If the 
device being serviced (Requester) desires, it can in- 
terrupt the DMA process by de-activatIng the 
DREQn line. Action Is taken on the condition of 
DREQn during Requester accesses only. The ac- 
cess during which DREQn Is sampled inactive is the 
last Requester access which will be performed dur- 
ing the current transfer. Figure 3-8 shows the flow of 
events during the transfer of a buffer in the Demand 
Mode. 
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Figure 3-7. Block Mode Transfers 
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The Requester can restart the transfer process by 
reasserting DREQn. The 82380 will arbitrate the re- 
quest with other pending requests and begin the 
process where it left off. Figure 3-9 shows the timing 
of handshake signals during Demand Transfer Mode 
operation. 

Using the Demand Transfer Mode allows peripherals, 
to access memory in small, irregular bursts without 
wasting bus control time. The 82380 is designed to 
give the best possible bus control latency in the De- 
mand Transfer Mode. Bus conirol laiency is defined 
here as the time from the last active bus cycle of the 
previous bus master to the first active bus cycle of 
the new bus master. The 82380 DMA Controller will 
perform its first bus access cycle two bus states af- 
ter HLDA goes active. In the typical configuration, 
bus control is returned to the host one bus state 
after the DREQn goes inactive. 

There are two cases where there may be more than 
one bus state of bus control latency at the end of a 
transfer. The first is at the end of an Auto-lnitialize 
process, and the second is at the end of a process 
where the source is the Requester and Two-Cycle 
transfers are used. 

When a Buffer Auto-lnitialize Process is complete, 
the 82380 requires seven bus states to reload the 




Figure 3-8. Buffer Transfer in 
Demand Transfer Mode 


When the DREQn line goes inactive, the DMA con- 
troller will complete the current transfer, including 
any necessary accesses to the Target, and relin- 
quish control of the bus to the host. The current pro- 
cess Information is saved (byte count. Requester 
and Target addresses, and Temporary Register). 
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Current Registers from the Base Registers of the 
Auto-Initialized channel. The reloading is done while 
the 82380 is still the bus master so that it is prepared 
to service the channel immediately after relinquish- 
ing the bus, if necessary. 

In the case where the Requester is the source, and 
Two-Cycle transfers are being used, there are two 
extra idle states at the end of the transfer process. 
This occurs due to housekeeping in the DMA’s inter- 
nal pipeline. These two idle states are present only 
after the very last Requester access, before the 
DMA Controller de-activates the HOLD signal. 


3.3.4 CHANNEL PRIORITY ARBITRATION 

DMA channel priority can be programmed into one 
of two arbitration methods: Fixed or Rotating. The 
four lower DMA channels and the four upper DMA 
channels operate as if they were two separate DMA 
controllers operating in cascade. The lower group of 
four channels (0-3) is always prioritized between 
channels 7 and 4 of the upper group of channels (4- 
7). Figure 3-10 shows a pictorial representation of 
the priority grouping. 

The priority can thus be set up as rotating for one 
group of channels and fixed for the other, or any 
other combination. While in Fixed Priority, the pro- 
grammer can also specify which channel has the 
lowest priority. 



Figure 3-10. DMA Priority Grouping 


The 82380 DMA Controller defaults to Fixed Priority. 
Channel 0 has the highest priority, then 1 , 2, 3, 4, 5, 
6, 7. Channel 7 has the lowest priority. Any time the 
DMA Controller arbitrates DMA requests, the re- 
questing channel with the highest priority will be 
serviced next. 

Fixed Priority can be entered Into at any time by a 
software command. The priority levels in effect 


after the mode switch are determined by the current 
setting of the Programmable Priority. 

Programmable Priority is available for fixing the prior- 
ity of the DMA channels within a group to levels oth- 
er than the default. Through a software command, 
the channel to have the lowest priority in a group 
can be specified. Each of the two groups of four 
channels can have the priority fixed in this way. The 
other channels In the group will follow the natural 
Fixed Priority sequence. This mode affects only the 
priority levels while operating with Fixed Priority. 

For example, if channel 2 is programmed to have the 
lowest priority in its group, channel 3 has the highest 
priority. In descending order, the other channels 
would have the following priority: (3, 0, 1, 2), 4, 5, 6, 
7 (channel 2 lowest, channel 3 highest). If the upper 
group were programmed to have channel 5 as the 
lowest priority channel, the priority would be (again, 
highest to lowest): 6, 7, (3, 0, 1 , 2), 4, 5. Figure 3-1 1 
shows this example pictorially. The lower group Is 
always prioritized as a fifth channel of the upper 
group (between channels 4 and 7). 


CHANNEL 6 


CHANNEL 7 

PHANTOM 

L 

CHANNEL 4 

1 CHANNEL 5 


CHANNEL 3 
CHANNEL 0 
CHANNEL 1 
CHANNEL 2 


High Priority 


Low Priority 
290128-26 


Figure 3-11. Example of Programmed Priority 


The DMA Controller will only accept Programmable 
Priority commands while the addressed group is op- 
erating in Fixed Priority. Switching from Fixed to Ro- 
tating Priority preserves the current priority levels. 
Switching from Rotating to Fixed Priority returns the 
priority levels to those which were last programmed 
by use of Programmable Priority. 

Rotating Priority allows the devices using DMA to 
share the system bus more evenly. An individual 
channel does not retain highest priority after being 
serviced, priority is passed to the next highest priori- 
ty channel in the group. The channel which was 
most recently serviced inherits the lowest priority. 
This rotation occurs each time a channel is serviced. 
Figure 3-12 shows the sequence of events as priori- 
ty Is passed between channels. Note that the lower 
group rotates within the upper group, and that serv- 
icing a channel within the lower group causes rota- 
tion within the group as well as rotation of the upper 
group. 


4-643 




82380 




n: 




4 



7 

—default (highest to lowest) 

DREQ2 and DREQ6 — process channel 2 


4 

5 

6 

7 


3 

0 

1 

2 

— channel 2 drops to lowest priority within group. 

Lower group drops to lowest priority within upper group. 
2(Double Rotation) 

DREQ6 (still) and DREQ7— process channel 6 



3 

0 I 1 2 

U 

4 

5 

6 

— channel 6 drops to lowest priority within group 

DREQ7 (still) and DREQO — process channel 7 

3 

0 




4 

5 

0 

7 

— channel 7 drops to lowest priority within group 

DREQO (still) and DREQ1— process channel 0 

0 

5 

6 7 

] 

rn 

2 G 

I 0 

- 

■channel 0 drops to lowest priority within group (Double Rotation) 

DREQ1 (still) — process channel 1 





0 





1 1 1 — channel 1 drops to lowest priority within group 


Figure 3-12. Rotating Channel Priority. Lower and Upper 
groups are programmed for the Rotating Priority Mode. 
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3.3.5 COMBINING PRIORITY MODES 

Since the DMA Controller operates as two four- 
channel controllers in cascade, the overall priority 
scheme of all eight channels can take on a variety of 


ity modes between the two groups of channels: 
Fixed Priority only (default), Fixed Priority upper 
group/ Rotating Priority lower group. Rotating Priority 
upper group/FIxed Priority lower group, and Rotating 
Priority only. Figure 3-13 illustrates the operation of 


forms. There are four possible combinations of prior- 

the two combined priority methods. 
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CASE 2 0-3 Rotating Priority, 4-7 Fixed Priority 


Figure 3-13. Combining Priority Modes 
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3.3.6 BUS OPERATION 

Data may be transferred by the DMA Controller us- 
ing two different bus cycle operations; Fly-By (one- 
cycle) and Two-Cycle. These bus handshake meth- 
ods are selectable independently for each channel 
through a command register. Device data path 
widths are independently programmable for both 
Target and Requester. Also selectable through soft- 
ware is the direction of data transfer. All of these 
parameters affect the operation of the 82380 on a 

l>>i 

3.3.6. 1 Fly-By Transfers 

The Fly-By Transfer Mode Is the fastest and most 
efficient way to use the 82380 DMA Controller to 
transfer data. In this method of transfer, the data is 
written to the destination device at the same time it 
Is read from the source. Only one bus cycle is used 
to accomplish the transfer. 

In the Fly-By Mode, the DMA acknowledge signal is 
used to select the Requester. The DMA Controller 
simultaneously places the address of the Target on 
the address bus. The state of M/IO# and W/R# 
during the Fly-By transfer cycle indicate the type of 
Target and whether the target is being written to or 
read from. The Target’s Bus Size is used as an in- 
crementer for the Byte Count. The Requester ad- 
dress registers are ignored during Fly-By transfers. 

Note that memory-to-memory transfers cannot be 
done using the Fly-By Mode. Only one memory or 
I/O address is generated by the DMA Controller at a 
time during Fly-By transfers. Only one of the devices 
being accessed can be selected by an address. 
Also, the Fly-By method of data transfer limits the 
hardware to accesses of devices with the same data 
bus width. The Temporary Registers are not affect- 
ed in the Fly-By Mode. 

Fly-By transfers also require that the data paths of 
the Target and Requester be directly connected. 
This requires that successive Fly-By accesses be to 
doubleword boundaries, or that the Requester be 
capable of switching its connections to the data bus. 

3.3.6.2 Two-Cycle Transfers 

Two-Cycle transfers can also be performed by the 
82380 DMA Controller. These transfers require at 
least two bus cycles to execute. The data being 
transferred Is read Into the DMA Controller’s Tempo- 
rary Register during the first bus cycle(s). The sec- 
ond bus cycle is used to write the data from the 
Temporary Register to the destination. 


If the addresses of the data being transferred are 
not word or doubleword aligned, the 82380 will rec- 
ognize the situation and read and write the data in 
groups of bytes, placing them always at the proper 
destination. This process of collecting the desired 
bytes and putting them together is called ‘byte as- 
sembly’. The reverse process (reading from aligned 
locations and writing to non-aligned locations) is 
called ‘byte disassembly’. 

The assembly/disassembly process takes place 

u cii lopai ^1 u iv..* iMc o\./i ivvcii uui ucim uo 

while using the Two-Cycle transfer method. The 
82380 will always perform the assembly/disassem- 
bly process as necessary for the current data trans- 
fer. Any data path widths for either the Requester or 
Target can be used in the Two-Cycle Mode. This Is 
very convenient for interfacing existing 8- and 16-bit 
peripherals to the 80386’s 32-bit bus. 

The 82380 DMA Controller always attempts to fill 
the Temporary Register from the source before writ- 
ing any data to the destination. If the process Is ter- 
minated before the Temporary Register is filled (TC 
or EOF#), the 82380 will write the partial data to the 
destination. If a process is temporarily suspended 
(such as when DREQn is de-activated during a de- 
mand transfer), the contents of a partially filled Tem- 
porary Register will be stored within the 82380 until 
the process is restarted. 

For example, if the source is specified as an 8-bit 
device and the destination as a 32-bit device, there 
will be four reads as necessary from the 8-bit source 
to fill the Temporary Register. Then the 82380 will 
write the 32-blt contents to the destination. This cy- 
cle will repeat until the process is terminated or sus- 
pondod 

Note that for a Single-Cycie transfer mode of opera- 
tion (see section 3.3.3), the internal circuitry of the 
DMA Controller actually executes single transfers by 
removing the DREQ from the internal arbitration. 
Thus single transfers from an 8-blt requester to a 32- 
blt target will consist of four complete and indepen- 
dent 8-blt requester cycles, between which bus con- 
trol is released and re-requested. Finally, the 32-blt 
data will be transferred to the target device from the 
temporary register before the fifth requester cycle. 

With Two-Cycle transfers, the devices that the 
82380 accesses can reside at any address within 
I/O or memory space. The device must be able to 
decode the byte-enables (BEn#). Also, if the device 
cannot accept data in byte quantities, the program- 
mer must take care not to allow the DMA Controller 
to access the device on any address other than the 
device boundary. 
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3.3.6.3 Data Path Width and Data Transfer Rate 
Considerations 

The number of bus cycles used to transfer a single 
‘word’ of data is affected by whether the Two-Cycle 
or the Fly-By (Single-Cycle) transfer method is used. 

The number of bus cycles used to transfer data di- 
rectly affects the data transfer rate. Inefficient use of 
bus cycles will decrease the effective data transfer 
rate that can be obtained. Generally, the data trans- 
fer rate is halved by using Two-Cycle transfers in- 
stead of Fly-By transfers. 

The choice of data path widths of both Target and 
Requester affects the data transfer rate also. During 
each bus cycle, the largest pieces of data possible 
should be transferred. 

The data path width of the devices to be accessed 
must be programmed into the DMA controller. The 
82380 defaults after reset to 8-bit-to-8-bit data trans- 
fers, but the Target and Requester can have differ- 
ent data path widths. Independent of each other and 
independent of the other channels. Since this is a 
software programmable function, more discussion of 
the uses of this feature are found in the section on 
programming. 

3.3.6.4 Read, Write, and Verify Cycles 

Three different bus cycle types may be used in a 
data transfer. They are the Read, Write, and Verify 
cycles. These cycle types dictate the way In which 
the 82380 operates on the data to be transferred. 

A Read Cycle transfers data from the Target to the 
Requester. A Write Cycle transfers data from the 
Requester to the target. In a Fly-By transfer, the ad- 
dress and bus status signals indicate the access 
(read or write) to the Target; the access to the Re- 
quester is assumed to be the opposite. 

The Verify Cycle is used to perform a data read only. 
No write access is indicated or assumed in a Verify 
Cycle. The Verify Cycle is useful for validating block 
fill operations. An external comparator must be pro- 
vided to do any comparisons on the data read. 


3.4 Bus Arbitration and Handshaking 

Figure 3-14 shows the flow of events in the DMA 
request arbitration process. The arbitration se- 


quence starts when the Requester asserts a DREQn 
(or DMA service is requested by software). Figure 
3-15 shows the timing of the sequence of events 
following a DMA request. This sequence is executed 
for each channel that is activated. The DREQn sig- 
nal can be replaced by a software DMA channel re- 
quest with no change In the sequence. 
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Figure 3-14. Bus Arbitration and DMA Sequence 

After the Requester asserts the service request, the 
82380 will request control of the bus via the HOLD 
signal. The 82380 will always assert the HOLD sig- 
nal one bus state after the service request Is assert- 
ed. The 80386 responds by asserting the HLDA sig- 
nal, thus releasing control of the bus to the 82380 
DMA Controller. 

Priority of pending DMA service requests is arbitrat- 
ed during the first state after HLDA is asserted by 
the 80386. The next state will be the beginning of 
the first transfer access of the highest priority pro- 
cess. 
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When the 82380 DMA Controller is finished with its 
current bus activity, it returns control of the bus to 
the host processor. This is done by driving the 
HOLD signal inactive. The 82380 does not drive any 
address or data bus signals after HOLD goes low. It 
enters the Slave Mode until another DMA process is 
requested. The processor acknowledges that it has 
regained control of the bus by forcing the HLDA sig- 
nal inactive. Note that the 82380’s DMA Controller 
will not re-request control of the bus until the entire 
HOLD/HLDA handshake sequence is complete. 

The 82380 DMA Controller will terminate a current 
DMA process for one of three reasons: expired byte 
count, end-of-process command (EOP# activated) 
from a peripheral, or de-activated DMA request sig- 
nal. In each case, the controller will de-assert HOLD 
immediately after completing the data transfer in 
progress. These three methods of process termina- 
tion are illustrated in Figures 3-16, 3-19, and 3-18, 
respectively. 


An expired byte count indicates that the current pro- 
cess is complete as programmed and the channel 
has no further transfers to process. The channel 
must be restarted according to the currently pro- 
grammed Buffer Transfer Mode, or reprogrammed 
completely, including a new Buffer Transfer Mode. 

If the peripheral activates the EOP# signal. It Is indi- 
cating that it will not accept or deliver any more data 
for the current buffer. The 82380 DMA Controller 
considers this as a completion of the channel’s cur- 
rent process and interprets the condition the same 
way as if the byte count expired. 

The action taken by the 82380 DMA Controller in 
response to a de-activated DREQn signal depends 
on the Data Transfer Mode of the channel. In the 
Demand Mode, data transfers will take place as long 
as the DREQn is active and the byte count has not 
expired. In the Block Mode, the controller will com- 
plete the entire block transfer without relinquishing 
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NOTE: 

Channel priority resolution takes place during the bus state before HLDA is asserted, allowing the DMA Controller to 
respond to HLDA without extra idle bus states. 


Figure 3-15. Beginning of a DMA process 
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the bus, even if DREQn goes inactive before the 
transfer is complete. In the Single Mode, the control- 
ler will execute single data transfers, relinquishing 
the bus between each transfer, as long as DREQn is 
active. 

Normal termination of a DMA process due to expira- 
tion of the byte count (Terminal Count-TC) is shown 


In Figure 3-16. The condition of DREQn Is Ignored 
until after the process is terminated. If the channel is 
programmed to auto-initlalize, HOLD will be held ac- 
tive for an additional seven clock cycles while the 
auto-initlallzation takes place. 

Table 3-3 shows the DMA channel activity due to 
EOP# or Byte Count expiring (Terminal Count). 


Buffer Process: 

Single 
or Chaining- 
Base Empty 

Auto- 

Initiaiize 

Chaining- 
Base Loaded 

Event 

Terminal Count 

True X 

True 

X 

True 

X 

EOP# Input 

X 0 

X 

0 

X 

0 

Resuits 






Current Registers 

— — 

Load 

Load 

Load Load 

Channel Mask 

Set Set 

— 

— 

— 

— 

EOP# Output 

0 X 

0 

X 

1 

X 

Terminal Count Status 

Set Set 

Set 

Set 

— 

— 

Software Request 

CLR CLR 

CLR 

CLR 

— 

— 


Table 3-3. DMA Channel Activity Due to Terminal Count or External EOP# 



Figure 3-16. Termination of a DMA Process Due to Expiration of Current Byte Count 
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The 82380 always relinquishes control of the bus 
between channel services. This allows the hardware 
designer the flexibility to externally arbitrate bus hold 
requests, If desired. If another DMA request is pend- 
ing when a higher priority channel service is com- 
pleted, the 82380 will relinquish the bus until the 
hold acknowledge is inactive. One bus state after 
the HLDA signal goes inactive, the 82380 will assert 
HOLD again. This is illustrated in Figure 3-17. 

3AA SYNCHRONOUS AND ASYNCHRONOUS 
SAMPLING OF DREQn AND EOP# 

As an indicator that a DMA service is to be started, 
DREQn Is always sampled asynchronously. It Is 
sampled at the beginning of a bus state and acted 
upon at the end of the state. Figure 3-15 illustrates 
the start of a DMA process due to a DREQn input. 

The DREQn and EOP# inputs can be programmed 
to be sampled either synchronously or asynchro- 
nously to signal the end of a transfer. 

The synchronous mode affords the Requester one 
bus state of extra time to react to an access. This 
means the Requester can terminate a process on 
the current access, without losing any data. The 
asynchronous mode requires that the input signal be 
presented prior to the beginning of the last state of 
the Requester access. 


The timing relationships of the DREQn and EQP# 
signals to the termination of a DMA transfer are 
shown In Figures 3-18 and 3-19, Figure 3-18 shows 
the termination of a DMA transfer due to inactive 
DREQn. Figure 3-19 shows the termination of a 
DMA process due to an active EQP# input. 

In the Synchronous Mode, DREQn and EQP# are 
sampled at the end of the last state of every Re- 
quester data transfer cycle. If EQP# is active or 
DREQn is Inactive at this time, the 82380 recognizes 
this access to the Requester as the last transfer. At 
this point, the 82380 completes the transfer in prog- 
ress, if necessary, and returns bus control to the 
host. 

In the asynchronous mode, the inputs are sampled 
at the beginning of every state of a Requester ac- 
cess. The 82380 waits until the end of the state to 
act on the input. 

DREQn and EQP# are sampled at the latest possi- 
ble time when the 82380 can determine If another 
transfer is required. In the Synchronous Mode, 
DREQn and EQP# are sampled on the trailing edge 
of the last bus state before another data access cy- 
cle begins. The Asynchronous Mode requires that 
the signals be valid one clock cycle earlier. 



Figure 3-17. Switching between Active DMA Channels 
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While in the Pipeline Mode, jf the NA# signal is sam- 
pled active during a transfer, the end of the state 
where NA# was sampled active is when the 82380 
decides whether to commit to another transfer. The 
device must de-assert DREQn or assert EOP# be- 
fore NA# is asserted, otherwise the 82380 will com- 
mit to another, possibly undesired, transfer. 

Synchronous DREQn and EOP# sampling allows 
the peripheral to prevent the next transfer from oc- 
curring by de-activating DREQn or asserting EOP# 
during the current Requester access, before the 
82380 DMA Controller commits itself to another 
transfer. The DMA Controller will not perform the 
next transfer if it has not already begun the bus cy- 
cle. Asynchronous sampling allows less stringent 
timing requirements than the Synchronous Mode, 
but requires that the DREQn signal be valid at the 
beginning of the next to last bus state of the current 
Requester access. 

Using the Asynchronous Mode with zero wait states 
can be very difficult. Since the addresses and con- 
trol signals are driven by the 82380 near half-way ' 


through the first bus state of a transfer, and the 
Asynchronous Mode requires that DREQn be active 
before the end of the state, the peripheral being ac- 
cessed is required to present DREQn only a few 
nanoseconds after the control information is avail- 
able. This means that the peripheral’s control logic 
must be extremely fast (practically non-causal). An 
alternative Is the Synchronous Mode. 

3.4.2 ARBITRATION OF CASCADED MASTER 
REQUESTS 

The Cascade Mode allows another DMA-type de- 
vice to share the bus by arbitrating its bus accesses 
with the 82380’s. Seven of the eight DMA channels 
(0~3 and 5-7) can be connected to a cascaded de- 
vice. The cascaded device requests bus control 
through the DREQn line of the channel which is pro- 
grammed to operate in Cascade Mode. Bus hold ac- 
knowledge is signaled to the cascaded device 
through the EDACK lines. When the EDACK lines 
are active with the code for the requested cascade 
channel, the bus is available to the cascaded master 
device. 



Figure 3-20. Cascaded Bus Master 
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A Cascade cycle begins the same way a regular 
DMA cycle begins. The requesting bus master as- 
serts the DREQn line on the 82380. This bus control 
request arbitrated as any other DMA request would 
be. If any channel receives a DMA request, the 
82380 requests control of the bus. When the host 
acknowledges that it has released bus control, the 
82380 acknowledges to the requesting master that it 
may access the bus. The 82380 enters an idle state 
until the new master relinquishes control. 

A cascade cycle will be terminated by one of two 
events: DREQn going inactive, or HLDA going inac- 
tive. The normal way to terminate the cascade cycle 


is for the cascaded master to drop the DREQn sig- 
nal. Figure 3-21 shows the two cascade cycle termi- 
nation sequences. 

The Refresh Controller may interrupt the cascaded 
master to perform a refresh cycle. If this occurs, the 
82380 DMA Controller will de-assert the EDACK sig- 
nal (hold acknowledge to cascaded master) and wait 
for the cascaded master to remove its hold request. 
When the 82380 regains bus control, it will perform 
the refresh cycle in its normal fashion. After the re- 
fresh cycle has been completed, and if the cascad- 
ed device has re-asserted its request, the 82380 will 
return control to the cascaded master which was in- 
terrupted. 
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The 82380 assumes that it is the only device moni- 
toring the HLDA signal. If the system designer 
wishes to place other devices on the bus as bus 
masters, the HLDA from the processor must be in- 
tercepted before presenting it to the 82380. Using 
the Cascade capability of the 82380 DMA Controller 
offers a much better solution. 


3.4.3 ARBITRATION OF REFRESH REQUESTS 

The arbitration of refresh requests by the DRAM Re- 
fresh Controller is slightly different from normal DMA 
channel request arbitration. The 82380 DRAM Re- 
fresh Controller always has the highest priority of 
any DMA process. It also can interrupt a process in 
progress. Two types of processes in progress may 
be encountered: normal DMA, and bus master cas- 
cade. 

In the event of a refresh request during a normal 
DMA process, the DMA Controller will complete the 
data transfer In progress and then execute the re- 
fresh cycle before continuing with the current DMA 
process. The priority of the interrupted process is 
not lost. If the data transfer cycle Interrupted by the 
Refresh Controller is the last of a DMA process, the 
refresh cycle will always be executed before control 
of the bus is transferred back to the host. 

When the Refresh Controller request occurs during 
a cascade cycle, the Refresh Controller must be as- 
sured that the cascaded master device has relin- 
quished control of the bus before it can execute the 
refresh cycle. To do this, the DMA Controller drops 
the EDACK signal to the cascaded master and waits 
for the corresponding DREQn input to go inactive. 
By dropping the DREQn signal, the cascaded mas- 
ter relinquishes the bus. The Refresh Controller then 
performs the refresh cycle. Control of the bus Is re- 
turned to the cascaded master if DREQn returns to 
an active state before the end of the refresh cycle, 
otherwise control is passed to the processor and the 
cascaded master loses its priority. 


3.5 DMA Controller Register Overview 

The 82380 DMA Controller contains 44 registers 
which are accessable to the host processor. Twen- 
ty-four of these registers contain the device ad- 
dresses and data counts for the individual DMA 
channels (three per channel). The remaining regis- 
ters are control and status registers for initiating and 
monitoring the operation of the 82380 DMA Control- 
ler. Table 3-4 lists the DMA Controller’s registers 
and their accessability. 


Register Name 

Access 

Control/Status Register— One Each Per 

Group 


Command Register I 

Write Only 

Command Register 1 1 

Write Only 

Mode Register I 

Write Only 

Mode Register II 

Write Only 

Software Request Register 

Read/Write 

Mask Set-Reset Register 

Write Only 

Mask Read-Write Register 

Read/Write 

Status Register 

Read Only 

Bus Size Register 

Write Only 

Chaining Register 

Read/Write 

Channel Registers— One Each Per Channel 

Base Target Address 

Write Only 

Current Target Address 

Read Only 

Base Requester Address 

Write Only 

Current Requester Address 

Read Only 

Base Byte Count 

Write Only 

Current Byte Count 

Read Only 


Table 3-4. DMA Controller Registers 


3.5.1 CONTROL/STATUS REGISTERS 

The following registers are available to the host 
processor for programming the 82380 DMA Control- 
ler into Its various modes and for checking the oper- 
ating status of the DMA processes. Each set of four 
DMA channels has one of each of these registers 
associated with it. 

Command Register I 

Enables or disables the DMA channels as a group. 
Sets the Priority Mode (Fixed or Rotating) of the 
group. This write-only register is cleared by a hard- 
ware reset, defaulting to all channels enabled and 
Fixed Priority Mode. 

Command Register II 

Sets the sampling mode of the DREQn and EOP# 
inputs. Also sets the lowest priority channel for the 
group in the Fixed Priority Mode. The functions pro- 
gramrtied through Command Register II default after 
a hardware reset to: asynchronous DREQn and 
EOP#, and channels 3 and 7 lowest priority. 

Mode Register I 

Mode Register I is identical In function to the Mode 
register of the 8237A. It programs the following func- 
tions for an individually selected channel: 


4-654 




82380 




Type of Transfer— read, write, verify 
Auto — Initialize — enable or disable 
Target Address Count — increment or 
decrement 

Data Transfer Mode — demand, single, block, 
cascade 

Mode Register I functions default to the following 
after reset: verify transfer, Auto-lnitiallze disabled. In- 
crement Target address. Demand Mode. 

Mode Register II 

Programs the following functions for an Individually 
selected channel: 

Target Address Hold — enable or disable 
Requester Address Count — increment or 
decrement 

Requester Address Hold — enable or disable 
Target Device Type — I/O or Memory 
Requester Device Type — I/O or Memory 
Transfer Cycles — ^Two-Cycle or Fly-By 

Mode Register II functions are defined as follows 
after a hardware reset: Disable Target Address Hold, 
Increment Requester Address, Target (and Re- 
quester) in memory, Fly-By Transfer Cycles. Note: 
Requester’ Device Type ignored in Fly-By Transfers. 

Software Request Register 

The DMA Controller can respond to service requests 
which are initiated by software. Each channel has an 
internal request status bit associated with it. The 
host processor can write to this register to set or 
reset the request bit of a selected channel. 

The status of the group’s software DMA service re- 
quests can be read from this register as well. Each 
request bit is cleared upon Terminal Count or exter- 
nal EOP#. 

The software DMA requests are non-maskable and 
subject to priority arbitration with all other software 
and hardware requests. The entire register is 
cleared by a hardware reset. 

Mask Registers 

Each channel has associated with it a mask bit 
which can be set/reset to disable/enable that chan- 
nel. Two methods are available for setting and clear- 
ing the mask bits. The Mask Set/ Reset Register is a 
write-only register which allows the host to select an 
individual channel and either set or reset the mask 
bit for that channel only. The Mask Read/Write Reg- 
ister is available for reading the mask bit status and 
for writing mask bits In groups of four. 


The mask bits of a group may be cleared in one step 
by executing the Clear Mask Command. See the 
DMA Programming section for details. A hardware 
reset sets all of the channel mask bits, disabling all 
channels. 

Status Register 

The Status register is a read-only register which con- 
tains the Terminal Count (TC) and Service Request 
status for a group. Four bits Indicate the TC status 
and four bits Indicate the hardware request status 
for the four channels In the group. The TC bits are 
set when the Byte Count expires, or when an exter- 
nal EOP# is asserted. These bits are cleared by 
reading from the Status Register. The Service Re- 
quest bit for a channel Indicates when there is a 
hardware DMA request (DREQn) asserted for that 
channel. When the request has been removed, the 
bit is cleared. 

Bus Size Register 

This write-only register is used to define the bus size 
of the Target and Requester of a selected channel. 
The bus sizes programmed will be used to dictate 
the sizes of the data paths accessed when the DMA 
channel is active. The values programmed into this 
register affect the operation of the Temporary Regis- 
ter. Any byte-assembly required to make the trans- 
fers using the specified data path widths will be done 
in the Temporary Register. The Bus Size register of 
the Target is used as an Increment/decrement value 
for the Byte Counter and Target Address when in 
the Fly-By Mode. Upon reset, all channels default to 
8-bit Targets and 8-bit Requesters. 

Chaining Register 

As a command or write register, the Chaining regis- 
ter Is used to enable or disable the Chaining Mode 
for a selected channel. Chaining can either be dis- 
abled or enabled for an individual channel, indepen- 
dently of the Chaining Mode status of other chan- 
nels. After a hardware reset, all channels default to 
Chaining disabled. 

When read by the host, the Chaining Register pro- 
vides the status of the Chaining Interrupt of each of 
the channels. These Interrupt status bits are cleared 
when the new buffer information has been loaded. 


3.5.2 CHANNEL REGISTERS 

Each channel has three Individually programmable 
registers necessary for the DMA process; they are 
the Base Byte Count, Base Target Address, and 
Base Requester Address registers. The 24-bit Base 
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Byte Count register contains the number of bytes to 
be transferred by the channel. The 32-bit Base Tar- 
get Address Register contains the beginning ad- 
dress (memory or I/O) of the Target device. The 32- 
bit Base Requester Address register contains the 
base address (memory or I/O) of the device which is 
to request DMA service. 

Three more registers for each DMA channel exist 
within the DMA Controller which are directly related 
to the registers mentioned above. These registers 
contain the current status of the DMA process. They 
are the Current Byte Count register, the Current Tar- 
get Address, and the Current Requester Address. It 
is these registers which are manipulated (increment- 
ed, decremented, or held constant) by the 82380 
DMA Controller during the DMA process. The Cur- 
rent registers are loaded from the Base registers. 

The Base registers are loaded when the host proc- 
essor writes to the respective channel register ad- 
dresses. Depending on the mode in which the chan- 
nel is operating, the Current registers are typically 
loaded In the same operation. Reading from the 
channel register addresses yields the contents of 
the corresponding Current register. 

To maintain compatibility with software which ac- 
cesses an 8237A, a Byte Pointer Flip-Flop Is used to 
control access to the upper and lower bytes of some 
words of the Channel Registers. These words are 
accessed as byte pairs at single port addresses. The 
Byte Pointer Flip-Flop acts as a one-bit pointer 
which is toggled each time a qualifying Channel 
Register byte Is accessed. It always points to the 
next logical byte to be accessed of a pair of bytes. 


3.5.3 TEMPORARY REGISTERS 

Each channel has a 32-blt Temporary Register used 
for temporary data storage during two-cycle DMA 
transfers. It is this register in which any necessary 
byte assembly and disassembly of non-aligned data 
is performed. Figure 3-22 shows how a block of data 
will be moved between memory locations with differ- 
ent boundaries. Note that the order of the data does 
not change. 


SOURCE 

DESTINATION 

20H 

A 

50H 


21H 

B 

51 H 


22H 

C 

52H 


23H 

D 

53H 

A 

24H 

E 

54H 

B 

25H 

F 

55H 

C 

26H 

G 

56H 

D 

27H 


57H 

E 



58H 

F 



59H 

G 



5AH 



Target = source = 00000020H 
Requester = destination = 00000053H 
Byte Count = 000006H 

Figure 3-22. Transfer of Data between Memory 
Locations with Different Boundaries. This wiii be 
the resuit, independent of data path width. 


words, each pair with its own port address. Address- 
ing the port with the Byte Pointer Fiip-Fiop reset ac- 
cesses the least significant byte of the pair. The 
most significant byte is accessed when the Byte 
Pointer is set. 


For compatibility with existing 8237A designs, there 
Is one exception to the above statements about the 
Byte Pointer Flip-Flop. The third byte (bits 16-23) of 
the Target Address is accessed through its own port 
address. The Byte Pointer Flip-Flop is not affected 
by any accesses to this byte. 

The upper eight bits of the Byte Count Register are 
cleared when the least significant byte of the regis- 
ter is loaded. This provides compatibility with soft- 
ware which accesses an 8237A. The 8237A has 
16-bit Byte Count Registers. 


If the destination is the Requester and an early pro- 
cess termination has been indicated by the EOP# 
signal or DREQn inactive in the Demand Mode, the 
Temporary Register Is not affected. If data remains 
in the Temporary Register due to differences in data 
path widths of the Target and Requester, it will not 
be transferred or otherwise lost, but will be stored for 
later transfer. 

If the destination is the Target and the EOP# signal 
is sensed active during the Requester access of a 
transfer, the DMA Controller will complete the trans- 
fer by sending to the Target whatever Information is 
in the Temporary Register at the time of process 
termination. This implies that the Target could be 
accessed with partial data. For this reason it is ad- 
visable to have an I/O device designated as a Re- 
quester, unless It Is capable of handling partial data 
transfers. 
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3.6 DMA Controller Programming 

Programming a DMA Channel to perform a needed 
DMA function is in general a four step process. First 
the global attributes of the DMA Controller are pro- 
grammed via the two Command Registers. These 
global attributes include: priority levels, channel 
group enables, priority mode, and DREQn/EOP# in- 
put sampling. 

The second step involves setting the operating 
modes of the particular channel. The Mode Regis- 
ters are used to define the type of transfer and the 
handshaking modes. The Bus Size Register and 
Chaining Register may also need to be programmed 
in this step. 

The third step is setting up the channel Is to load the 
Base Registers in accordance with the needs of the 
operating modes chosen in step two. The Current 
Registers are automatically loaded from the Base 
Registers, if required by the Buffer Transfer Mode In 
effect. The information loaded and the order in 
which it is loaded depends on the operating mode. A 
channel used for cascading, for example, needs no 
buffer Information and this step can be skipped en- 
tirely. 

The last step is to enable the newly programmed 
channel using one of the Mask Registers. The chan- 
nel is then available to perform the desired data 
transfer. The status of the channel can be observed 
at any time through the Status Register, Mask Reg- 
ister, Chaining Register, and Software Request reg- 
ister. 

Once the channel Is programmed and enabled, the 
DMA process may be initiated In one of two ways, 
either by a hardware DMA request (DREQn) or a 
software request (Software Request Register). 

Once programmed to a particular Process/ Mode 
configuration, the channel will operate in that config- 
uration until programmed otherwise. For this reason, 
restarting a channel after the current buffer expires 
does not require complete reprogramming of the 
channel. Only those parameters which have 
changed need to be reprogrammed. The Byte Count 


Register is always changed and must be repro- 
grammed. A Target or Requester Address Register 
which Is incremented or decremented should be re- 
programmed also. 

3.6.1 BUFFER PROCESSES 

The Buffer Process is determined by the Auto-lnitial- 
Ize bit of Mode Register I and the Chaining Register. 
If Auto-lnitlalize is enabled, Chaining should not be 
used. 


3.6.1. 1 Single Buffer Process 

The Single Buffer Process Is programmed by dis- 
abling Chaining via the Chaining Register and pro- 
gramming Mode Register I for non-Auto-lnitialize. 

3.6. 1.2 Buffer Auto-lnitialize Process 

Setting the Auto-lnitialize bit in Mode Register I Is all 
that is necessary to place the channel In this mode. 
Buffer Auto-lnitialize must not be enabled simulta- 
neous to enabling the Buffer Chaining Mode as this 
will have unpredictable results. 

Once the Base Registers are loaded, the channel Is 
ready to be enabled. The channel will reload its Cur- 
rent-Registers from the Base Registers each time 
the Current Buffer expires, either by an expired Byte 
Count or an external EOP#. 


3.6. 1.3 Buffer Chaining Process 

The Buffer Chaining Process is entered into from the 
Single Buffer Process. The Mode Registers should 
be programmed first, with all of the Transfer Modes 
defined as if the channel were to operate In the Sin- 
gle Buffer Process. The channel’s Base and Current 
Registers are then loaded. When the channel has 
been set up in this way, and the chaining Interrupt 
service routine is In place, the Chaining Process can 
be entered by programming the Chaining Register. 
Figure 3.23 illustrates the Buffer Chaining Process. 

An interrupt (IRQ1) will be generated immediately af- 
ter the Chaining Process Is entered, as the channel 
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then perceives the Base Registers as empty and in 
need of reloading. It Is important to have the Inter- 
rupt service routine In place at the time the Chaining 
Process is entered into. The interrupt request is re- 
moved when the most significant byte of the Base 
Target Address is loaded. 

The interrupt will occur again when the first buffer 
expires and the Current Registers are loaded from 
the Base Registers. The cycle continues until the 
Chaining Process is disabled, or the host fails to re- 
spond to 1RQ1 before the Current Buffer expires. 



290128-36 


Figure 3-23. Flow of Events in the 
Buffer Chaining Process 


Exiting the Chaining Process can be done by reset- 
ting the Chaining Mode Register. If an interrupt Is 
pending for the channel when the Chaining Register 
is reset, the Interrupt request will be removed. The 
Chaining Process can be temporarily disabled by 
setting the channel’s Mask bit in the Mask Register. 

The interrupt service routine for IRQ1 has the re- 
sponsibility of reloading the Base Register as neces- 
sary. It should check the status of the channel to 
determine the cause of channel expiration, etc. It 
should also have access to operating system infor- 
mation regarding the channel, if any exists. The 
IRQ1 service routine should be capable of determin- 
ing whether the chain should be continued or termi- 
nated and act on that information. ' 


3.6.2 DATA TRANSFER MODES 

The Data Transfer Modes are selected via Mode 
Register I. The Demand, Single, and Block Modes 
are selected by bits D6 and 07. The individual trans- 
fer type (Fly-By vs Two-Cycle, Read-Write-Verify, 
and I/O vs Memory) is programmed through both of 
the Mode registers. 


3.6.3 CASCADED BUS MASTERS 

The Cascade Mode is set by writing ones to D7 and 
D6 of Mode Register I. When a channel is pro- 
grammed to operate in the Cascade Mode, all of the 
other modes associated with Mode Registers I and II 
are ignored. The priority and DREQn/EOP# defini- 
tions of the Command Registers will have the same 
effect on the channel’s operation as any other 
mode. 


3.6.4 SOFTWARE COMMANDS 

There are five port addresses which, when written 
to, command certain operations to be performed by 
the 82380 DMA Controller. The data written to these 
locations is not of consequence, writing to the loca- 
tion is all that Is necessary to command the 82380 to 
perform the indicated function. Following are de- 
scriptions of the command function. 


4-658 




82380 


inter 


Clear Byte Pointer Flip-Flop — location OOOCH 

Resets the Byte Pointer Flip-Flop. This command 
should be performed at the beginning of any access 
to the channel registers in order to be assured of 
beginning at a predictable place in the register pro- 
gramming sequence. 

Master Clear—location OOODH 

All DMA functions are set to their default states. This 
command Is the equivalent of a hardware reset to 
the DMA Controller. Functions other than those in 
the DMA Controller section of the 82380 are not af- 
fected by this command. 

Clear Mask 

Register -—Channels 0-3 — location OOOEH 
Channels 4-7 — location OOCEH 


This command simultaneously clears the Mask Bits 
of all channels in the addressed group, enabling ail 
of the channels in the group. 

Clear TC Interrupt Request — location 001 EH 

This command resets the Terminal Count Interrupt 
Request Flip-Flop. It Is provided to allow the pro- 
gram which made a software DMA request to ac- 
knowledge that it has responded to the expiration of 
the requested channel(s). 


3.7 Register Definitions 

The following diagrams outline the bit definitions and 
functions of the 82380 DMA Controller’s Status and 
Control Registers. The function and programming of 
the registers is covered in the previous section on 
DMA Controller Programming. An entry of ‘X’ as a bit 
value Indicates “don’t care.’’ 


Channel Registers 
Channel 

Register Name 

(Read Current, Write Base) 
Address Byte 

(Hex) Pointer 

Bits 

Accessed 

Channel 0 

Target Address 

00 

0 

0-7 




1 

8-15 



87 

X 

16-23 



10 

0 

24-31 


Byte Count 

01 

0 

0-7 




1 

8-15 



11 

0 

16-23 


Requester Address 

90 

0 

0-7 




1 

8-15 



91 

0 

16-23 




1 

24-31 

Channel 1 

Target Address 

02 

0 

0-7 




1 

8-15 



83 

X 

16-23 



12 

0 

24-31 


Byte Count 

03 

0 

0-7 




1 

8-15 



13 

0 

16-23 


Requester Address 

92 

0 

0-7 




1 

8-15 



93 

0 

16-23 




1 

24-31 
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Channel Registers 
Channel 

Channel 2 


Register Name 


Target Address 


(Read Current, Write Base) 

Address Byte Bits 

(Hex) Pointer Accessed 


Byte Count 


Requester Address 


Channel 3 


Target Address 


Byte Count 


Requester Address 


Channel 4 


Target Address 


Byte Count 


Requester Address 


Channel 5 


Target Address 


Byte Count 


Requester Address 
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Channel Registers 
Channel 

Register Name 

(Read Current, Write Base) 
Address Byte 

(Hex) Pointer 

Bits 

Accessed 

Channel 6 

Target Address 

C4 

0 

0-7 




1 

8-15 



89 

X 

16-23 



D4 

0 

24-31 


Byte Count 

C5 

0 

0-7 




1 

8-15 



D5 

0 

16-23 


Requester Address 

9C 

0 

0-7 




1 

8-15 



9D 

0 

16-23 




1 

24-31 

Channel 7 

Target Address 

C6 

0 

0-7 




1 

8-15 



8A 

X 

16-23 



D6 

0 

24-31 


Byte Count 

C7 

0 

0-7 




1 

8-15 



D7 

0 

16-23 


Requester Address 

9E 

0 

0-7 




1 

8-15 



9F 

0 

16-23 




1 

24-31 


Command Register I (Write Only) 


Port Address — Channels 0-3--0008H 
Channels 4-7 — 00C8H 


D7 06 05 04 03 02 01 DO 



GROUP MASK 

0 = ENABLE CHANNELS 

1 = DISABLE CHANNELS 
PRIORITY 

0 = FIXED PRIORITY 

1 = ROTATING PRIORITY 


290128-37 


Command Register 1 1 (Write Only) 

Port Addresses—Channels 0-3 — 001 AH 
Channels 4-7— OODAH 


07 06 05 04 03 02 01 DO 


1 0 1 0 1 0 1 0 1 PL 1 PL 1 ES 1 OS 1 






DREQn SAMPLING 
EOP# SAMPLING 

0= ASYNCHRONOUS 

I = SYNCHRONOUS 
LOW PRIORITY LEVEL SET 

00 = CHANNEL 0(4) LOWEST 

01=CHANNEL 1 (5) LOWEST 

10= CHANNEL 2(6) LOWEST 

II = CHANNEL 3(7) LOWEST 


290128-38 
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Mode Register I 


(Write Only) 


Port Addresses — Channels 0-3— OOOBH 
Channels 4-7— OOCBH 


D7 

D6 

D5 

D4 

D3 

D2 

D1 

DO 

Z] 

1 1 

Q 

QD 

QD 


[El 

1 CO 


izr 


• CHANNEL SELECT 

00 = CHANNEL 

01 ^CflAMNCL 
10= CHANNEL 
11 = CHANNEL 


rai 

si 


• TRANSFER TYPE 

00 = VERIFY 

01 = WRITE 

10 = READ 

11 = ILLEGAL 

XX IF IN CASCADE MODE 

• AUTO-INITIALIZE 

0 = DISABLE, 1 = ENABLE 

• TARGET INCREMENT/DECREMENT 

0 = INCREMENT TARGET 

1 = DECREMENT TARGET* 

X IF TARGET HOLD ENABLED 

• DATA TRANSFER MODE 

00 = DEMAND MODE 

01 = SINGLE TRANSFER MODE 

10 = BLOCK MODE 

11 = CASCADE MODE 


* Target and Requester DECREMENT is allowed only for byte transfers. 


Mode Register I 


(Write Only) 


Port Addresses — Channels 0-3 — 001 BH 
Channels 4-7— OODBH 


D7 D6 D5 D4 D3 D2 D1 DO 




"HTT 

I , I 


m 


. OHAKIMFI SELECT 

SEE MODE REGISTER I 

- TARGET HOLD 

0 = INCREMENT/DECREMENT 

1 = HOLD 

■ REQUESTER INCREMENT 
0 = INCREMENT 
1 = DECREMENT* 

X IF REQUESTER HOLD ENABLED 

- REQUESTER HOLD , 

0 = INCREMENT/DECREMENT 

1 =H0LD 

• TARGET DEVICE TYPE 

0 = MEMORY 

1 = INPUT/OUTPUT 

- REQUESTER DEVICE TYPE 

0 = MEMORY 

1 = INPUT/OUTPUT 

- TRANSFER CYCLES 

0 = ONE-CYCLE (FLY-BY) 

1 = TWO-CYCLE 


* Target and Requester DECREMENT is allowed only for byte transfers. 
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Software Request Register (Read/Write) 

Port Addresses— Channels 0-3— 0009H 
Channels 4-7— 00C9H 


Write Format: Software DMA Service Request 


D7 

D6 

D5 

D4 

D3 

D2 

D1 

DO 



d 







CO 1 










_J 

-CHANNEL SELECT 

SEE MODE REGISTER I 



















— REQUEST SERVICE 

0 = REMOVE REQUEST 

1 = ASSERT REQUEST 

290128-41 


Read Format: Software Requests Pending 



Mask Set/Reset Register Individual Channel Mask (Write Only) 

Port Addresses — Channels 0-3— OOOAH 
Channels 4-7 — OOCAH 
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Mask Read/Write Register Group Channel Mask (Read/Write) 

Port Addresses—Channels 0-3 — OOOFH 
Channels 4-7— OOCFH 


D7 D6 D5 D4 D3 D2 D1 DO 




^TT 

M3 1 M2 1 Ml 1 MO 1 


1 



CHANNEL 0(4) 
CHANNEL 1 (5) 
CHANNEL 2(6) 
CHANNEL 3(7) 


MASK BIT 
MASK BIT 
MASK BIT 
MASK BIT 


MASK BIT = 0 -CHANNEL ENABLE 
= 1 -CHANNEL DISABLE 
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Status Register Channel Process Status (Read Only) 

Port Addresses— Channels 0-3 — 0008H 
Channels 4-7 — 00C8H 


D7 

D6 

D5 

D4 

D3 

D2 

D1 

DO 

m 

la 

n 

^^1 




ISll 


•CHANNEL 0(4) EXPIRED 1 = EXPIRED 
-CHANNEL 1 (5) EXPIRED 
•CHANNEL 2(6) EXPIRED 
-CHANNEL 3(7) EXPIRED 

•CHANNEL 0(4) REQUEST 1 = REQUEST 

- CHANNEL 1 (5) REQUEST PENDING 
-CHANNEL 2(6) REQUEST 

- CHANNEL 3 (7) REQUEST 
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Bus Size Reaister 


Set Data Path Width (Write Onlv) 


n_0 nHiQU 


Channels 4-7— 00D8H 


D7 

D6 

D5 

D4 

D3 

D2 

D1 

DO 

|r6S1 

RBSO 

TBS1 

TBSO 



M 

1 1 


CHANNEL SELECT 

SEE MODE REGISTER 

TARGET BUS SIZE 
REQUESTER BUS SIZE 


I 
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Bus Size Encoding: 

00 = Reserved by Intel 10 = 16-bit Bus 

01 = 32-bit Bus 11 = 8-bit Bus 
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Chaining Register (Read/Write) 

Port Addresses— Channels 0-3— 001 9H 
Channels 4-7— 00D9H 

Write Format: Set Chaining Mode 


D7 

D6 

D5 

D4 

D3 

D2 

D1 

DO 


CL 



.1. 


CH 

4L 

1 










x! 

B/^UAMKin cn rr^T 










OnAINiNi^w wiiLttwt 

SEE MODE REGISTER I 

PU AIKIIMP ETKJAQI T DIT 










“ OnAINIiNO LiNAdLL Dll 

0 = DISABLE CHAINING MODE 

1 = ENABLE CHAINING MODE 

290128-47 


Read Format: Channel Interrupt Status 


D7 D6 D5 D4 D3 D2 D1 DO 


\JTT 

X 1 X 1 CI3 






□ 



CHANNEL 0(4) BASE EMPTY 
CHANNEL 1 (5) BASE EMPTY 
CHANNEL 2(6) BASE EMPTY 
CHANNEL 3(7) BASE EMPTY 
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3.8 8237A Compatibility 

The register arrangement of the 82380 DMA Con- 
troller is a superset of the 8237A DMA Controller. 
Functionally the 82380 DMA Controller is very differ- 
ent from the 8237A. Most of the functions of the 
8237A are performed also by the 82380. The follow- 
ing discussion points out the differences between 
the 8237A and the 82380. 

The 8237A is limited to transfers between I/O and 
memory only (except in one special case, where two 
channels can be used to perform memory-to-memo- 
ry transfers). The 82380 DMA Controller can transfer 
between any combination of memory and I/O. Sev- 
eral other features of the 8237A are enhanced or 
expanded in the 82380 and other features are add- 
ed. 

The 8237A is an 8-bit only DMA device. For pro- 
gramming compatibility, all of the 8-bit registers are 
preserved in the 82380. The 82380 is programmed 
via 8-bit registers. The address registers in the 
82380 are 32-bit registers in order to support the 


80386’s 32-bit bus. The Byte Count Registers are 
24-bit registers, allowing support of larger data 
blocks than possible with the 8237A. 

All of the 8237A’s operating modes are supported 
by the 82380 (except the cumbersome two-channel 
memory-to-memory transfer). The 82380 performs 
memory-to-memory transfers using only one chan- 
nel. The 82380 has the added features of buffer 
pipelining (Buffer Chaining Process), programmable 
priority levels, and Byte Assembly. 

The 82380 also adds the feature of address regis- 
ters for both destination and source. These address- 
es may be incremented, decremented, or held con- 
stant, as required by the application of the individual 
channel. This allows any combination of destination 
and source device. 

Each DMA channel has associated with it a Target 
and a Requester. In the 8237A, the Target is the 
device which can be accessed by the address regis- 
ter, the Requester Is the device which is accessed 
by the DMA Acknowledge signals and must be an 
I/O device. 
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4.0 Programmable interrupt 
Controller (PIC) 

4.1 Functional Description 

The 82380 Programmable Interrupt Controller (PIC) 
consists of three enhanced 82C59A Interrupt Con- 
I tollers. These three controllers together provide 15 
external and 5 internal interrupt request inputs. Each 
external request input can be cascaded with an ad- 
ditional 62C59A slave collecior. This scheme allows 
the 82380 to support a maximum of 120 (15 x 8) 
external interrupt request inputs. 

Following one or more interrupt requests, the 82380 
PIC issues an interrupt signal to the 80386. When 
the 80386 host processor responds with an interrupt 
acknowledge signal, the PIC will arbitrate between 
the pending interrupt requests and place the Inter- 
rupt vector associated with the highest priority pend- 
ing request on the data bus. 

The major enhancement in the 82380 PIC over the 
82C59A Is that each of the Interrupt request inputs 


can be individually programmed with its own inter- 
rupt vector, allowing more flexibility in interrupt vec- 
tor mapping. 

4.1.1 INTERNAL BLOCK DIAGRAM 

The block diagram of the 82380 Programmable In- 
terrupt Controller Is shown In Figure 4-1. Internally, 
the PIC consists of three 82C59A banks: A, B and C. 
The three banks are cascaded to one another: C Is 
cascaded to B, B is cascaded to A. The I NT output 
of Bank A Is used externally to interrupt the 80386. 

Bank A has nine interrupt request Inputs (two are 
unused), and Banks B and C have eight Interrupt 
request inputs. Of the fifteen external Interrupt re- 
quest inputs, two are shared by other functions. Spe- 
cifically, the Interrupt Request 3 input (IRQ3#) can 
be used as the Timer 2 output (TOUT2#). This pin 
can be used In three different ways: IRQ3# Input 
only, TOUT2# output only, or using TOUT2# to 
generate an IRQ3# interrupt request. Also, the In- 
terrupt Request 9 input (IRQ 9#) can be used as 
DMA Request 4 input (DREQ4). Typically, only 
IRQ9# or DREQ4 can be used at'a time. 





WEAK PULL-UP 


IRQ 16# 
IRQ17# 
IRQ18# 
IRQ19# 
IRQ20# 
IRQ21# 
IRQ22# 
IRQ23# 


T0UT0#(IRQ8#)- 


IRQ11#- 

IRQ12#- 

IRQ13#- 

IRQU#- 

IRQ15#- 


T0UT3#(IRQ0#) 

CHAINING (IRQ1#) 

ICW2 (IRQ 1 .5#) 

TOUT2#/IRQ3# 

SW ReqTC(IRQ4#) 

NOT USED 
NOT USED 
DEFAULT (IRQ?#) — 



INT 

(OUTPUT) 
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NOTE: 

Masking IRQ1.5# also masks IRQ2# 


Figure 4-1. Interrupt Controller Block Diagram 
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4.1.2 INTERRUPT CONTROLLER BANKS 

All three banks are identical, with the exception of 
the IRQ1.5 on Bank A. Therefore, only one bank will 
be discussed. In the 82380 PIC, all external requests 
can be cascaded into and each interrupt controller 
bank behaves like a master. As compared to the 
82C59A, the enhancements in the banks are: 

— All Interrupt vectors are individually programma- 
ble. (In the 82C59A, the vectors must be pro- 
grammed in eight consecutive interrupt vector lo- 
cations.) 


— The cascade address is provided on the Data 
Bus (D0-D7). (In the 82C59A, three dedicated 
control signals (CASO, CAS1, CAS2) are used for 
master/slave cascading.) 

The block diagram of a bank is shown in Figure 4-2. 
As can be seen from this figure, the bank consists of 
six major blocks: the Interrupt Request Register 
(IRR), the In-Service Register (ISR), the Interrupt 
Mask Register (IMR), the Priority Resolver (PR), the 
Vector Register (VR), and the Control Logic. The 
functional description of each block follows. 


IRQO# 

IRQ1# 

IRQ2# 

IRQ3# 

1RQ4# 

IRQ5# 

IRQ6# 

IRQ7# 



82380 ENHANCEMENT OVER THE 82C59A 


290128-50 


Figure 4-2. Interrupt Bank Block Diagram 
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INTERRUPT REQUEST (IRR) AND IN-SERVICE 
REGISTER (ISR) 

The interrupts at the Interrupt Request (IRQ) input 
lines are handled by two registers In cascade, the 
Interrupt Request Register (IRR) and the In-Service 
Register (ISR). The IRR is used to store all interrupt 
levels which are requesting service; and the ISR Is 
used to store all interrupt levels which are being 
serviced. 

PRIORITY RESOLVER (PR) 

This logic block determines the priorities of the bits 
set In the IRR. The highest priority is selected and 
strobed into the corresponding bit of the ISR during 
an Interrupt Acknowledge cycle. 

INTERRUPT MASK REGISTER (IMR) 

The IMR stores the bits which mask the interrupt 
lines to be masked (disabled). The IMR operates on 
the IRR. Masking of a higher priority input will not 
affect the interrupt request lines of lower priority. 

VECTOR REGISTERS (VR) 

This block contains a set of Vector Registers, one 
for each Interrupt request line, to store the pre-pro- 
grammed interrupt vector number. The correspond- 
ing vector number will be driven onto the Data Bus 
of the 82380 during the Interrupt Acknowledge cy- 
cle. 

CONTROL LOGIC 

The Control Logic coordinates the overall operations 
of the other Interna! blocks within the same bank. 
This logic will drive the Interrupt Output signal (INT) 
HIGH when one or more unmasked interrupt inputs 
are active (LOW). The INT output signal goes direct- 
ly to the 80386 (in Bank A) or to another bank to 
which this bank Is cascaded (see Figure 4-1). Also, 
this logic will recognize an Interrupt Acknowledge 
cycle (via M/IO#, D/C# and W/R# signals). During 
this bus cycle, the Control Logic will enable the cor- 
responding Vector Register to drive the interrupt 
vector onto the Data Bus. 

In Bank A, the Control Logic Is also responsible for 
handling the special ICW2 interrupt request Input 
(IRQ1.5#). 


4.2 Interface Signals 

4.2.1 INTERRUPT INPUTS 

There are 15 external Interrupt Request inputs and 5 
Internal Interrupt Requests. The external request in- 
puts are: IRQ3#, IRQ9#, IRQ11 # to IRQ23#. They 
are shown in bold arrows In Figure 4-1. All IRQ in- 
puts are active LOW and they can be programmed 
(via a control bit in the Initialization Command Word 
1 (ICW1)) to be either edge-triggered or level-trig- 
gered. In order to be recognized as a valid Interrupt 
request, the interrupt input must be active (LOW) un- 
til the first INTA# cycle (see Bus Functional De- 
scription). 

Note that all 15 external Interrupt Request inputs 
have weak internal pull-up resistors. 

As mentioned earlier, an 82C59A can be cascaded 
to each external interrupt input to expand the inter- 
rupt capacity to a maximum of 120 levels. Also, two 
of the interrupt Inputs are dual functions: IRQ3# can 
be used as Timer 2 output (TOUT2#) and IRQ9# 
can be used as DREQ4 input. IRQ3# is a bidirec- 
tional dual function pin. This interrupt request input is 
wired-OR with the output of Timer 2 (TOUT2#). If 
only IRQ3# function is to be used. Timer 2 should 
be programmed so that OUT2 is LOW. Note that 
TOUT2# can also be used to generate an Interrupt 
request to IRQ3# input. 

The five internal interrupt requests serve special 
system functions. They are shown In Table 4-1. The 
following paragraphs describe these interrupts. 


Table 4-1. 82380 Internal Interrupt Requests 


Interrupt Request 

Interrupt Source 

IRQO# 

Timer 3 Output (TOUT3#) 

IRQ8# 

Timer 0 Output (TOUTO#) 

IRQ1# 

DMA Chaining Request 

IRQ4# 

DMA Terminal Count 

IRQ1.5# 

ICW2 Written 


TIMER 0 AND TIMER 3 INTERRUPT REQUESTS 
IIRQO#] 

IRQ8# and IRQO# interrupt requests are initiated 
by the output of Timers 0 and 3, respectively. Each 
of these requests is generated by an edge-detector 
flip-flop. The flip-flops are activated by the following 
conditions: 

Set— Rising edge of timer output (TOUT); 

Clear— Interrupt acknowledge for this request; 
OR Request is masked (disabled); OR 
Hardware Reset. 
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CHAINING AND TERMINAL COUNT INTERRUPTS 
[IRQ1#] 

These interrupt requests are generated by the 
82380 DMA Controller. The chaining request 
(IRQ1 #) indicates that the DMA Base Register is 
not loaded. The Terminal Count request (IRQ4#) in- 
dicates that a software DMA request was cleared. 

ICW2 INTERRUPT REQUEST [IRQ1.5#) 

Whenever an Initialization Control Word 2 (ICW2) is 
written to a Bank, a special ICW2 Interrupt request is 
generated. The interrupt will be cleared when the 
newly programmed ICW2 Register is read. This in- 
terrupt request is in Bank A at level 1 .5. This Inter- 
rupt request is internally ORed with the Cascaded 
Request from Bank B and is always assigned a high- 
er priority than the Cascaded Request. 

This special Interrupt Is provided to support compati- 
bility with the original 82C59A. A detailed description 
of this interrupt Is discussed in the Programming 
section. 

DEFAULT INTERRUPT [IRQ7#] 

During an Interrupt Acknowledge cycle, if there is no 
active pending request, the PIC will automatically 


generate a default vector. This vector corresponds 
to the IRQ7# vector in Bank A. 


4.2.2 INTERRUPT OUTPUT (INT) 

The INT output pin is taken directly from bank A. 
This signal should be tied to the Maskable Interrupt 
Request (INTR) of the 80386. When this signal is 
active (HIGH), It indicates that one or more internal/ 
external Interrupt requests are pending. The 80386 
is expected to respond with an Interrupt acknowl- 
edge cycle. 


4.3 Bus Functional Description 

The INT output of bank A will be activated as a result 
of any unmasked interrupt request. This may be a 
non-cascaded or cascaded request. After the PIC 
has driven the INT signal HIGH, 80386 will respond 
by performing two interrupt acknowledge cycles. 
The timing diagram in Figure 4-3 shows a typical In- 
terrupt acknowledge process between the 82380 
and the 80386 CPU. 



Figure 4-3. Interrupt Acknowledge Cycle 
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After activating the I NT signal, the 82380 monitors 
the status lines (M/IO#, D/C#, W/R#) and waits 
for the 80386 to initiate the first interrupt acknowl- 
edge cycle. In the 80386 environment, two succes- 
sive interrupt acknowledge cycles (INTA) marked by 
M/IO# = LOW, D/C# = LOW, and W/R# = 
LOW are performed. During the first INTA cycle, the 
PIC will determine the highest priority request. As- 
suming this Interrupt input has no external Slave 
Controller cascaded to it, the 82380 will drive the 
Data Bus with OOH In the first INTA cycle. During the 
second INTA cycle, the 32380 PIC will drive the 
Data Bus with the corresponding preprogrammed in- 
terrupt vector. 

If the PIC determines (from the ICW3) that this inter- 
rupt input has an external Slave Controller cascaded 
to it, it will drive the Data Bus with the specific Slave 
Cascade Address (Instead of OOH) during the first 
INTA cycle. This Slave Cascade Address Is the pre- 
programmed content In the corresponding Vector 
Register. This means that no Slave Address should 
be chosen to be OOH. Note that the Slave Address 
and Interrupt Vector are different interpretations of 
the same thing. They are both the contents of the 
programmable Vector Register. During the second 
INTA cycle, the Data Bus will be floated so that the 
external Slave Controller can drive Its interrupt vec- 
tor on the bus. Since the Slave Interrupt Controller 
resides on the system bus, bus transceiver enable 
and direction control logic must take this into consid- 
eration. 

In order to have a successful interrupt service, the 
interrupt request Input must be held active (LOW) 
until the beginning of the first interrupt acknowledge 
cycle. If there is no pending Interrupt request when 
the first liNTA cycle is generated, t.he PIG will gener- 
ate a default vector, which is the IRQ7 vector (bank 
A ievei 7). 

According to the Bus Cycle definition of the 80386, 
there will be four Bus Idle States between the two 
interrupt acknowledge cycles. These idle bus cycles 
will be Initiated by the 80386. Also, during each inter- 
rupt acknowledge cycle, the Internal Wait State Gen- 
erator of the 82380 will automatically generate the 
required number of wait states for internal delays. 


4.4 Mode of Operation 

A variety of modes and commands are available for 
controlling the 82380 PIC. All of them are program- 
mable; that is, they may be changed dynamically un- 
der software control. In fact, each bank can be pro- 
grammed individually to operate In different modes. 
With these modes and commands, many possible 


configurations are conceivable, giving the user 
enough versatility for almost any interrupt controlled 
application. 

This section is not intended to show how the 82380 
PIC can be programmed. Rather, It describes the 
operation in different modes. 

4.4.1 END-OF-INTERRUPT 

Upon completion of an Interrupt service routine, the 
interrupted bank needs to be notified so its ISR can 
be updated. This allows the PIC to keep track of 
which interrupt levels are in the process of being 
serviced and their relative priorities. Three different 
End-Of-Interrupt (EOl) formats are available. They 
are: Non-Specific EOl Command, Specific EOl Com- 
mand, and Automatic EOl Mode. Selection of which 
EOl to use Is dependent upon the interrupt opera- 
tions the user wishes to perform. 

If the 82380 is NOT programmed in the Automatic 
EOl Mode, an EOl command must be issued by the 
80386 to the specific 82380 PIC Controller Bank. 
Also, if this controller bank Is cascaded to another 
Internal bank, an EOl command must also be sent to 
the bank to which this bank is cascaded. For exam- 
ple, If an interrupt request of Bank C In the 82380 
PIC is serviced, an EOl should be written Into Bank 
C, Bank B and Bank A. If the request comes from an 
external interrupt controller cascaded to Bank C, 
then an EOl should be v^/ritten Into the external con- 
troller as well. 

NON-SPECIFIC EOl COMMAND 

A Non-Specific EOl command sent from the 80386 
lets the r'lo oank know when a service rou- 

tine has been completed, without specification of its 
exact interrupt level. The respective interrupt bank 
automatically determines the interrupt level and re- 
sets the correct bit in the ISR. 

To take advantage of the Non-Specific EOl, the in- 
terrupt bank must be in a mode of operation In which 
it can predetermine Its in-service routine levels. For 
this reason, the Non-Specific EOl command should 
only be used when the most recent level acknowl- 
edged and serviced is always the highest priority lev- 
el (i.e., in the Fully Nested Mode structure to be de- 
scribed below). When the interrupt bank receives a 
Non-Specific EOl command, it simply resets the 
highest priority ISR bit to indicate that the highest 
priority routine in service is finished. 

Special consideration should be taken when decid- 
ing to use the Non-Specific EOl command. Here are 
two operating conditions in which It Is best NOT 
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used since the Fully Nested Mode structure will be 
destroyed: 

— Using the Set Priority command within an inter- 
rupt service routine. 

— Using a Special Mask Mode. 

These conditions are covered in more detail In their 
own sections, but are listed here for reference. 

SPECIFIC EOl COMMAND 

Unlike a Non-Specific EOl command which automat- 
ically resets the highest priority ISR bit, a Specific 
EOl command specifies an exact ISR bit to be reset. 
Any one of the IRQ levels of an interrupt bank can 
be specified in the command. 

The Specific EOl command is needed to reset the 
ISR bit of a completed service routine whenever the 
Interrupt bank is not able to automatically determine 
It. The Specific EOl command can be used in all 
conditions of operation, including those that prohibit 
Non-Specific EOl command usage mentioned 
above. 

AUTOMATIC EOl MODE 

When programmed in the Automatic EOl Mode, the 
80386 no longer needs to issue a command to notify 
the interrupt bank it has completed an Interrupt rou- 
tine. The Interrupt bank accomplishes this by per- 
forming a Non-Specific EOl automatically at the end 
of the second INTA cycle. 

Special consideration should be taken when decid- 
ing to use the Automatic EOl Mode because it may 
disturb the Fully Nested Mode structure. In the Auto- 
matic EOl Mode, the ISR bit of a routine in service is 
reset right after It Is acknowledged, thus leaving no 
designation in the ISR that a service routine is being 
executed. If any interrupt request within the same 
bank occurs during this time and interrupts are en- 
abled, it will get serviced regardless of its priority. 


Therefore, when using this mode, the 80386 should 
keep Its Interrupt request input disabled during exe- 
cution of a service routine. By doing this, higher pri- 
ority interrupt levels will be serviced only after the 
completion of a routine in service. This guideline re- 
stores the Fully Nested Mode structure. However, in 
this scheme, a routine in service cannot be interrupt- 
ed since the host’s interrupt request input is dis- 
abled. 


4.4.2 INTERRUPT PRIORITIES 

The 82380 PIC provides various methods for arrang- 
ing the interrupt priorities of the interrupt request in- 
puts to suit different applications. The following sub- 
sections explain these methods in detail. 

4.4.2. 1 Fully Nested Mode 

The Fully Nested Mode of operation is a general pur- 
pose priority mode. This mode supports a multi-level 
interrupt structure in which all of the Interrupt Re- 
quest (IRQ) Inputs within one bank are arranged 
from highest to lowest. 

Unless otherwise programmed, the Fully Nested 
Mode is entered by default upon initialization. At this 
time, IRQO# Is assigned the highest priority (priority 
= 0) and IRQ7# the lowest (priority = 7). This de- 
fault priority can be changed, as will be explained 
later In the Rotating Priority Mode. 

When an interrupt is acknowledged, the highest pri- 
ority request is determined from the Interrupt Re- 
quest Register (IRR) and Its vector is placed on the 
bus. In addition, the corresponding bit In the In-Serv- 
ice Register (ISR) is set to designate the routine in 
service. This ISR bit will remain set until the 80386 
Issues an End Of Interrupt (EOl) command immedi- 
ately before returning from the service routine; or 
alternately, if the Automatic End Of Interrupt (AEOI) 
bit is set, the ISR bit will be reset at the end of the 
second INTA cycle. 
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While the ISR bit is set, all further interrupts of the 
same or lower priority are inhibited. Higher level in- 
terrupts can still generate an interrupt, which will be 
acknowledged only if the 80386 internal interrupt en- 
able flip-flop has been re-enabled (through software 
inside the current service routine). 

4.4.2.2 Automatic Rotation— Equal Priority 
Devices 

Automatic rotation of priorities serves in applications 
where the interrupting devices are of equal priority 
within an interrupt bank. In this kind of environment, 
once a device is serviced, all other equal priority pe- 
ripherals should be given a chance to be serviced 
before the original device is serviced again. This is 
accomplished by automatically assigning a device 
the lowest priority after being serviced. Thus, in the 
worst case, the device would have to wait until all 
other peripherals connected to the same bank are 
serviced before it is serviced again. 

There are two methods of accomplishing automatic 
rotation. One is used in conjunction with the Non- 
Specific EOl command and the other Is used with 


the Automatic EOl mode. These two methods are 
discussed below. 

ROTATE ON NON-SPECIFIC EOl COMMAND 

When the Rotate On Non-Specific EOl command Is 
issued, the highest ISR bit Is reset as in a normal 
Non-Specific EOl command. However, after it Is re- 
set, the corresponding Interrupt Request (IRQ) level 
is assigned the lowest priority. Other IRQ priorities 
rotate to conform to the Fully Nested Mode based 
on the newiy assigned low priority. 

Figure 4-4 shows how the Rotate On Non-Specific 
EOl command affects the Interrupt priorities. As- 
sume the IRQ priorities were assigned with IRQO the 
highest and IRQ7 the lowest. IRQ6 and IRQ4 are 
already in service but neither is completed. Being 
the higher priority routine, IRQ4 is necessarily the 
routine being executed. During the IRQ4 routine, a 
rotate on Non-Specific EOl command is executed. 
When this happens. Bit 4 in the ISR is reset. IRQ4 
then becomes the lowest priority and IRQ5 becomes 
the highest. 
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Figure 4-4. Rotate On Non-Specific EOl Command 
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ROTATE ON AUTOMATIC EOl MODE 

The Rotate On Automatic EOl Mode works much 
like the Rotate On Non-Specific EOl Command. The 
main difference is that priority rotation is done auto- 
matically after the second INTA cycle of an interrupt 
request. To enter or exit this mode, a Rotate-On-Au- 
tomatic-EOI Set Command and Rotate-On-Automat- 
ic-EOI Clear Command is provided. After this mode 
is entered, no other commands are needed as in the 
normal Automatic EOl Mode. However, it must be 
noted again that when using any form of the Auto- 
matic EOl Mode, special consideration should be 
taken. The guideline presented in the Automatic EOl 
Mode also applies here. 

4.4.2.3 Specific Rotation — Specific Priority 

Specific rotation gives the user versatile capabilities 
in interrupt controlled operations. It serves In those 
applications in which a specific device’s interrupt pri- 
ority must be altered. As opposed to Automatic Ro- 
tation which will automatically set priorities after 
each interrupt request Is serviced, specific rotation is 
completely user controlled. That Is, the user selects 
which interrupt level is to receive the lowest or the 
highest priority. This can be done during the main 


program or within interrupt routines. Two specific ro- 
tation commands are available to the user: Set Prior- 
ity Command and Rotate On Specific EOl Com- 
mand. 

SET PRIORITY COMMAND 

The Set Priority Command allows the programmer to 
assign an IRQ level the lowest priority. All other in- 
terrupt levels will conform to the Fully Nested Mode 
based on the newly assigned low priority. 

ROTATE ON SPECIFIC EOl COMMAND 

The Rotate On Specific EOl Command Is literally a 
combination of the Set Priority Command and the 
Specific EOl Command. Like the Set Priority Com- 
mand, a specified IRQ level is assigned lowest priori- 
ty. Like the Specific EOl Command, a specified level 
will be reset in the ISR. Thus, this command accom- 
plishes both tasks in one single command. 

4.4.2.4 Interrupt Priority Mode Summary 

In order to simplify understanding the many modes 
of interrupt priority, Table 4-2 is provided to bring out 
their summary of operations. 


Table 4>2. Interrupt Priority Mode Summary 


Interrupt 

Operation 

Effect On Priority After EOl 

Priority Mode 

Summary 

Non>Specific/Automatic 

Specific 

Fully-Nested Mode 

IRQO# -Highest Priority 
IRQ7# -Lowest Priority 

No change in priority. 

Highest ISR bit is reset. 

Not Applicable. 

Automatic Rotation 
(Equal Priority Devices) 

Interrupt level just serviced 
is the lowest priority. Other 
priorities rotate to conform 
to Fully-Nested Mode. 

Highest ISR bit is reset and the 
corresponding level becomes the 
lowest priority. 

Not Applicable. 

Specific Rotation 
(Specific Priority 
Devices) 

User specifies the lowest 
priority level. Other priorities 
rotate to conform to Fully- 
Nested Mode. 

Not Applicable. 

As described under 
‘Operation Summary’. 
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4.4.3 INTERRUPT MASKING 

VIA INTERRUPT MASK REGISTER 

Each bank in the 82380 PIC has an Interrupt Mask 
Register (IMR) which enhances interrupt control ca- 
pabilities. This IMR allows individual IRQ masking. 
When an IRQ is masked, its interrupt request Is dis- 
abled until it Is unmasked. Each bit in the 8-bit IMR 
disables one interrupt channel if it is set (HIGH). Bit 
0 masks IRQO, Bit 1 masks IRQ1 and so forth. 
Masking an IRQ channel will oniy disable the corre- 
sponding channel and does not affect the others op- 
erations. 

The IMR acts only on the output of the IRR. That Is, 
if an interrupt occurs while its IMR bit is set, this 
request is not ‘forgotten’. Even with an IRQ input 
masked, it Is still possible to set the, IRR. Therefore, 
when the IMR bit Is reset, an interrupt request to the 
80386 will then be generated, providing that the IRQ 
request remains active. If the IRQ request is re- 
moved before the IMR is reset, the Default Interrupt 
Vector (Bank A, level 7) will be generated during the 
interrupt acknowledge cycle. 

SPECIAL MASK MQDE 

In the Fully Nested Mode, all IRQ levels of lower 
priority than the routine in service are inhibited. How- 
ever, In some applications, it may be desirable to let 
a lower priority interrupt request to interrupt the rou- 
tine in service. One method to achieve this is by 
using the Special Mask Mode. Working In conjunc- 
tion with the IMR, the Special Mask Mode enables 
Interrupts from all levels except the level In service. 
This is usually done inside an interrupt service rou- 
tine by masking the ievei that is in service and then 
issuing the Special Mask Mode Command. Once the 
Special Mask Mode is enabled, it remains In effect 
until it is disabled. 


4.4.4 EDGE OR LEVEL INTERRUPT 
TRIGGERING 

Each bank in the 82380 PIC can be programmed 
independently for either edge or level sensing for the 
interrupt request signals. Recall that all IRQ inputs 
are active LOW. Therefore, in the edge triggered 
mode, an active edge is defined as an input tran- 
sition from an inactive (HIGH) to active (LOW) state. 
The Interrupt Input may remain active without gener- 
ating another interrupt. During level triggered mode, 
an inlenupt request will be recognized by an active 
(LOW) input, and there is no need for edge detec- 
tion. However, the Interrupt request must be re- 
moved before the EOl Command is Issued, or the 
80386 must be disabled to prevent a second false 
interrupt from occurring. 

In either modes, the interrupt request input must be 
active (LOW) during the first INTA cycle in order to 
be recognized. Otherwise, the Default Interrupt Vec- 
tor will be generated at level 7 of Bank A. 


4.4.5 INTERRUPT CASCADING 

As mentioned previously, the 82380 allows for exter- 
nal Slave interrupt controllers to be cascaded to any 
of its external interrupt request pins. The 82380 PIC 
indicates that a external Slave Controller is to be 
serviced by putting the contents of the Vector Regis- 
ter associated with the particular request on the 
80386 Data Bus during the first INTA cycle (Instead 
of OOH during a non-slave service). The external log- 
ic should latch the vector on the Data Bus using the 
INTA status signals and use it to select the external 
Slave Controller to be serviced (see Figure 4-5). The 
selected Slave will then respond to the second INTA 
cycle and place its vector on the Data Bus. This 
method requires that if external Slave Controllers 



Figure 4-5. Slave Cascade Address Capturing 
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are used in the system, no vector should be pro- 
grammed to OOH. 

Since the external Slave Cascade Address is provid- 
ed on the Data Bus during INTA cycle 1, an external 
latch is required to capture this address for the Slave 
Controller. A simple scheme is depicted in Figure 
4-5. 


4.4.5.1 Special Fully Nested Mode 

This mode will be used where cascading is em- 
ployed and the priority is to be conserved within 
each Slave Controller. The Special Fully Nested 
Mode Is similar to the ‘regular’ Fully Nested Mode 
with the following exceptions: 

— When an interrupt request from a Slave Control- 
ler is In service, this Slave Controller is not 
locked out from the Master’s priority logic. Fur- 
ther interrupt requests from the higher priority 
logic within the Slave Controller will be recog- 
nized by the 82380 PIC and will initiate interrupts 
to the 80386. In comparing to the ‘regular’ Fully 
Nested Mode, the Slave Controller is masked out 
when its request is in service and no higher re- 
quests from the same Slave Controller can be 
serviced. 

— Before exiting the interrupt service routine, the 
software has to check whether the interrupt serv- 
iced was the only request from the Slave Con- 
troller. This is done by sending a Non-Specific 
EOl Command to the Slave Controller and then 
reading Its in Service Register. If there are no 
requests in the Slave Controller, a Non-Specific 
EOl can be sent to the corresponding 82380 PIC 
bank also. Otherwise, no EOl should be sent. 


4.4.6 READING INTERRUPT STATUS 

The 82380 PIC provides several ways to read differ- 
ent status of each Interrupt bank for more flexible 
interrupt control operations. These Include polling 
the highest priority pending interrupt request and 
reading the contents of different interrupt status reg- 
isters. 


4.4.6. 1 Poll Command 

The 82380 PIC supports status polling operations 
with the Poll Command. In a Poll Command, the 


pending interrupt request with the highest priority 
can be determined. To use this command, the INT 
output is not used, or the 80386 interrupt is disabled. 
Service to devices is achieved by software using the 
Poll Command. 

This mode is useful if there is a routine command 
common to several levels so that the INTA se- 
quence Is not needed. Another application is to use 
the Poll Command to expand the number of priority 
levels. 

Notice that the ICW2 mechanism is not supported 
for the Poll Command. However, if the Poll Com- 
mand is used, the programmable Vector Registers 
are of no concern since no INTA cycle will be gener- 
ated. 


4.4.6.2 Reading Interrupt Registers 

The contents of each interrupt register (IRR, ISR, 
and I MR) can be read to update the user’s program 
on the present status of the 82380 PIC. This can be 
a versatile tool in the decision making process of a 
service routine, giving the user more control over 
interrupt operations. 

The reading of the IRR and ISR contents can be 
performed via the Operation Control Word 3 by us- 
ing a Read Status Register Command and the con- 
tent of IMR can be read via a simple read operation 
of the register itself. 


4.5 Register Set Overview 

Each bank of the 82380 PIC consists of a set of 8-bit 
registers to control its operations. The address map 
of all the registers is shown in Table 4-3. Since all 
three register sets are Identical in functions, only 
one set will be described. 

Functionally, each register set can be divided into 
five groups. They are: the four Initialization Com- 
mand Words (ICW’s), the three Operation Control 
Words (OCW’s), the Poll/Interrupt Request/ln-Serv- 
ice Register, the Interrupt Mask Register, and the 
Vector Registers. A description of each group fol- 
lows. 
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Table 4-3. Interrupt Controller Register Address Map 


Port 

Address 

Access 

Register Description 

20H 

Write 

Bank B ICW1 , OCW2, or OCW3 


Read 

Bank B Poll, Request or In-Service 
Status Register 

21 H 

Write 

Bank B ICW2, ICW3, ICW4, OCW1 


Read 

Bank B Mask Register 

22H 

Read 

Bank B ICW2 

28H 

Read/Write 

IRQ8 Vector Register 

29H 

Read /Write 

IRQ9 Vector Register 

2AH 

Read /Write 

Reserved 

2BH 

Read/Write 

IRQ1 1 Vector Register 

2CH 

Read/Write 

IRQ12 Vector Register 

2DH 

Read/Write 

IRQ1 3 Vector Register 

2EH 

Read/Write 

IRQ1 4 Vector Register 

2FH 

Read/Write 

IRQ15 Vector Register 

AOH 

Write 

Bank C ICW1 , OCW2, or OCW3 


Read 

Bank C Poll, Request or In-Service 



Status Register 

A1H 

Write 

Bank C ICW2, ICW3, ICW4, OCW1 


Read 

Bank C Mask Register 

A2H 

Read 

BankCICW2 

ASH 

Read/Write 

IRQ1 6 Vector Register 

A9H 

Read/Write 

IRQ1 7 Vector Register 

AAH 

Read/Write 

IRQ1 8 Vector Register 

ABH 

Read/Write 

IRQ1 9 Vector Register 

ACH 

Read/Write 

IRQ20 Vector Register 

ADH 

Read/Write 

IRQ21 Vector Register 

AEH 

Read/Write 

IRQ22 Vector Register 

AFH 

Read/Write 

IRQ23 Vector Register 

30H 

Write 

Bank A ICW1 , OCW2, or OCW3 


Read 

Bank A Poll, Request or In-Service 
Status Register 

31H 

Write 

Bank A ICW2, ICW3, ICW4, OCW1 


Read 

Bank A Mask Register 

32H 

Read 

Bank ICW2 

38H 

Read/Write 

IRQO Vector Register 

39H 

Read/Write 

IRQ1 Vector Register 

3AH 

Read/Write 

IRQ1 .5 Vector Register 

3BH 

Read /Write 

IRQ3 Vector Register 

3CH 

Read /Write 

IRQ4 Vector Register 

SDH 

Read/Write 

Reserved 

3EH 

Read/Write 

Reserved 

3FH 

Read /Write 

IRQ7 Vector Register 
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4.5.1 INITIALIZATION COMMAND WORDS (ICW) 

Before normal operation can begin, the 82380 PIC 
must be brought to a known state. There are four 
8-bit Initialization Command Words in each interrupt 
bank to setup the necessary conditions and modes 
for proper operation. Except for the second common 
word (ICW2) which is a read/write register, the other 
three are write-only registers. Without going' into de- 
tail of the bit definitions of the command words, the 
following subsections give a brief description of what 
functions each command word controls. 

ICW1 

The ICW1 has three major functions. They are: 

— To select between the two IRQ input triggering 
modes (edge-or level-triggered); 

— To designate whether or not the interrupt bank is 
to be used alone or in the cascade mode. If the 
cascade mode is desired, the Interrupt bank will 
accept ICW3 for further cascade mode program- 
ming. Otherwise, no ICW3 will be accepted; 

— To determine whether or not ICW4 will be issued; 
that is, if any of the iCW4 operations are to be 
used. 

ICW2 

ICW2 is provided for compatibility with the 82C59A 
only. Its contents do not affect the operation of the 
Interrupt bank In any way. Whenever the ICW2 of 
any of the three banks is written into, an interrupt is 
generated from Bank A at level 1.5. The interrupt 
request will be cleared after the ICW2 register has 
been read by the 80386. The user is expected to 
program the corresponding vector register or to use 
it as an indicator that an attempt was made to alter 
the contents. Note that each ICW2 register has dif- 
ferent addresses for read and write operations. 

ICW3 

The interrupt bank will only accept an ICW3 If pro- 
grammed in the external cascade mode (as indicat- 
ed In ICW1). ICW3 is used for specific programming 
within the cascade mode. The bits in ICW3 indicate 
which interrupt request inputs have a Slave cascad- 
ed to them. This will subsequently affect the inter- 
rupt vector generation during the interrupt acknowl- 
edge cycles as described previously. 

ICW4 

The ICW4 is accepted only if it was selected in 
ICW1 . This command word register serves two func- 
tions: 


— To select either the Automatic EOl mode or soft- 
ware EOl mode; 

— To select If the Special Nested mode is to be 
used in conjunction with the cascade mode. 

4.5.2 OPERATION CONTROL WORDS (OCW) 

Once initialized by the ICW’s, the interrupt banks will 
be operating in the Fully Nested Mode by default 
and they are ready to accept interrupt requests. 
However, the operations of each interrupt bank can 
be further controlled or modified by the use of 
OCW’s. Three OCW’s are available for programming 
various modes and commands. Note that all OCW’s 
are 8-bit write-only registers. 

The modes and operations controlled by the OCW’s 
are: 

— Fully Nested Mode; 

— Rotating Priority Mode; 

— Special Mask Mode; 

— Poll Mode; 

— EOl Commands; 

— Read Status Commands. 

OCW1 

OCW1 is used solely for masking operations. It pro- 
vides a direct link to the Interrupt Mask Register 
(I MR). The 80386 can write to this OCW register to 
enable or disable the Interrupt Inputs. Reading the 
pre-programmed mask can be done via the Interrupt 
Mask Register which will be discussed shortly. 

OCW2 

OCW2 is used to select End-Of-Interrupt, Automatic 
Priority Rotation, and Specific Priority Rotation oper- 
ations. Associated commands and modes of these 
operations are selected using the different combina- 
tions of bits in OCW2. 

Specifically, the OCW2 is used to: 

— Designate an interrupt level (0-7) to be used to 
reset a specific ISR bit or to set a specific priori- 
ty. This function can be enabled or disabled; 

— Select which software EOl command (if any) is to 
be executed (i.e., Non-Specific or Specific EOl); 

— Enable one of the priority rotation operations 
(i.e.. Rotate On Non-Specific EOl, Rotate On Au- 
tomatic EOl, or Rotate on Specific EOl). 

OCW3 

There are three main categories of operation that 
OCW3 controls. That are summarized as follows: 
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— To select and execute the Read Status Register 
Commands, either reading the Interrupt Request 
Register (IRR) or the In-Service Register (ISR); 

— To issue the Poll Command. The Poll Command 
will override a Read Register Command if both 
functions are enabled simultaneously; 

— To set or reset the Special Mask Mode. 


4.5.3 POLL/INTERRUPT REQUEST/IN-SERVICE 
STATUS REGISTER 

As the name implies, this 8-bit read-only register has 
multiple functions. Depending on the command is- 
sued in the OCW3, the content of this register re- 
flects the result of the command executed. For a 
Poll Command, the register read contains the binary 
code of the highest priority level requesting service 
(if any). For a Read IRR Command, the register con- 
tent will show the current pending interrupt re- 
quest(s). Finally, for a Read ISR Command, this reg- 
ister will specify all interrupt levels which are being 
serviced. 


4.5.4 INTERRUPT MASK REGISTER (IMR) 

This is a read-only 8-bit register which, when read, 
will specify all interrupt levels within the same bank 
that are masked. 

4.5.5 VECTOR REGISTER (VR) 

Each interrupt request input has an 8-bit read/write 
programmable vector register associated with it. The 
registers should be programmed to contain the Inter- 
rupt vector for the corresponding request. The con- 
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Data Bus during the INTA cycles as described previ- 
ously. 


4.6 Programming 

Programming the 82380 PIC Is accomplished by us- 
ing two types of command words: ICW’s and 
OeW’s. All modes and commands explained in the 
previous sections are programmable using the 
ICW’s and OeW’s. The ICW’s are issued from the 
80386 in a sequential format and are used to setup 
the banks in the 82380 PIC In an Initial state of oper- 
ation. The OeW’s are issued as needed to vary and 
control the 82380 PIC’s operations. 

Both ICW’s and OCW’s are sent by the 80386 to the 
interrupt banks via the Data Bus. Each bank distin- 
guishes between the different ICW’s and OCW’s by 
the I/O address map, the sequence they are issued 
(ICW’s only), and by some dedicated bits among the 
ICW’s and OCW’s. 


All three interrupt banks are programmed In a similar 
way. Therefore, only a single bank will be described. 

4.6.1 INITIALIZATION (ICW) 

Before normal operation can begin, each bank must 
be initialized by programming a sequence of two to 
four bytes written into the ICW’s. 

Figure 4-6 shows the initialization flow for an inter- 
rupt bank. Both ICW1 and ICW2 must be Issued for 
any form of operation. However, ICW3 and ICW4 are 
used only if designated in ICW1. Once initialized, if 
any programming changes within the ICW’s are to 
be made, the entire ICW sequence must be repro- 
grammed, not just an individual ICW. 

Note that although the ICW2’s in the 82380 PIC do 
not affect the Bank’s operation, they still must be 
programmed in order to preserve the compatibility 
with the 82C59A. The contents programmed are not 
relevant to the overall operations of the interrupt 
banks. Also, whenever one of the three ICW2’s is 
programmed, an interrupt level 1.5 In Bank A will be 
generated. This interrupt request will be cleared 
upon reading of the ICW2 registers. Since the three 
ICW2’s share the same interrupt level and the sys- 
tem may not know the origin of the interrupt, all three 
ICW2’s must be read. 

However, It Is not necessary to provide an interrupt 
service routine for the ICW2 interrupt. One way to 
avoid this is as follows. At the beginning of the Initial- 
ization of the Interrupt banks, the 80386 interrupt 
should be disabled. After each ICW2 register write 
operation is performed during the initialization, the 
corresponding ICW2 register is read. This read oper- 
ation will clear the interrupt request of the 82380. At 
the end of the initialization, the 80386 interrupt is re- 
enabled. With this method, the 80386 will not detect 
the ICW2 Interrupt request, thus eliminating the need 
of an interrupt service routine. 

Certain Internal setup conditions occur automatically 
within the interrupt bank after the first ICW (ICW1) 
has been Issued. They are: 

— The edge sensitive circuit is reset, which means 
that following initialization, an interrupt request 
Input must make a HIGH-to-LOW transition to 
generate an interrupt; 

— The Interrupt Mask Register (IMR) is cleared; 
that is, all interrupt inputs are enabled; 

— IRQ7 input of each bank is assigned priority 7 
(lowest); 

— Special Mask Mode is cleared and Status Read 
Is set to IRR; 

— If no ICW4 is needed, then no Automatic-EOI is 
selected. 


4-678 



82380 


inl^ 



290128-55 

*ICW2 vector address must be programmed now. 

Other vector addresses may be programmed via ICW2 interrupt service routine. 


Figure 4-6. Initialization Sequence 


4.6.2 VECTOR REGISTERS (VR) 

Each interrupt request input has a separate Vector 
Register. These Vector Registers are used to store 
the pre-programmed vector number corresponding 
to their interrupt sources. In order to guarantee prop- 
er interrupt handling, all Vector Registers must be 
programmed with the predefined vector numbers. 
Since an interrupt request will be generated whenev- 
er an ICW2 is written during the initialization se- 
quence, it is important that the Vector Register of 
IRQ1.5 in Bank A should be Initialized and the inter- 
rupt service routine of this vector is set up before the 
ICW’s are written. 


4.6.3 OPERATION CONTROL WORDS (OCW) 

After the ICW’s are programmed, the operations of 
each interrupt controller bank can be changed by 
writing into the OCW’s as explained before. There is 
no special programming sequence required for the 
OCW’s. Any OCW may be written at any time in or- 
der to change the mode of or to perform certain op- 
erations on the Interrupt banks. 

4.6.3. 1 Read Status and Poll Commands (OCW3) 

Since the reading of IRR and ISR status as well as 
the result of a Poll Command are available on the 
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same read-only Status Register, a special Read Status Command is received by the interrupt bank, it 

Status/Poll Command must be issued before the ‘remembers’ which register is selected. However, 

Poll/ Interrupt Request/ In-Service Status Register is this is not true when the Poll Command is used, 

read. This command can be specified by writing the 

required control word into OCW3. As mentioned ear- In the Poll Command, after the OCW3 is written, the 

lier, if both the Poll Command and the Status Read 82380 PIC treats the next read to the Status Regis- 

Command are enabled simultaneously, the Poll ter as an Interrupt acknowledge. This will set the ap- 

Command will override the Status Read. That Is, af- propriate IS bit if there Is a request and read the 

ter the command execution, the Status Register will priority level. Interrupt Request Input status remains 

contain the result of the Poll Command. unchanged from the Poll Command to the Status 

Read. 

Note that for reading iRR and iSR, there Is no need 

to issue a Read Status Command to the OCW3 ev- In addition to the above read commands, the Inter- 

ery time the IRR or ISR is to be read. Once a Read rupt Mask Register (IMR) can also be read. When 

read, this register reflects the contents of the pre- 
programmed OCW1 which contains information on 
which interrupt request(s) Is(are) currently disabled. 

4.7 Register Bit Definition 


INITIALIZATION COMMAND WORD 1 (ICW1) 



INITIALIZATION COMMAND WORD 2 (ICW2) 
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INITIALIZATION COMMAND WORD 3 (ICW3) 

ICW3 for Bank A: 



ICW3 for Bank B: 



ICW3 for BankC: 



INITIALIZATION COMMAND WORD 4 (ICW4) 



OPERATION CONTROL WORD 1 (OCW1) 
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OPERATION CONTROL WORD 2 (OCW2) 


D7 

D6 

D5 

D4 

D3 

D2 

D1 

DO 

UJ 

1 1 


0 1 

0 1 

1 

UJ 

LifJ 



1 

1 

1 

0 

0 

1 

0 

0 


NON-SPECIFIC EOl COMMAND 
SPECIFIC EOl COMMAND (L2-L0 USED) 
ROTATE ON NON-SPECIFIC EOl 
ROTATE ON AUTO-EOI MODE (SET) 
ROTATE ON AUTO-EOI MODE (CLEAR) 
ROTATE ON SPECIFIC EOl (L2-L0 USED) 
SET PRIORITY (L2-L0 USED) 

NO OPERATION 


INTERRUPT LEVEL 
TO BE ACTED UPON 


290128-60 


OPERATION CONTROL WORD 3 (OCW3) 


D7 

D6 

D5 

D4 

03 P2 

D1 

DO 



1 ° 1 

ESMM 

SMM 1 

0 1 


p 

1 RR 

1 

] 


ESMM SMM^ ^ 






^ RR 

RIS 


0 

0 NO ACTION 



r 


0 

0 

NO ACTION 

0 

1 NO ACTION 


1 - POLL COMMAND 

0 

1 

NO ACTION 

1 

0 RESET SPECIAL MASK 

0- NO POLL COMMAND 1 

0 

READ IR REG. (STATUS) 

1 

1 SET SPECIAL MASK 




1 

1 

READ IS REG. (STATUS) 


290128-61 

ESMM — Enable Special Mask Mode. When this bit is set to 1. it enables the SMM bit to set or reset the Special Mask 
Mode. When this bit is set to 0, SMM bit becomes don’t care. 

SMM— Special Mask Mode. If ESMM = 1 and SMM = 1, the interrupt controller bank will enter Special Mask Mode. If 
ESMM = 1 and SMM = 0, the bank will revert to normal mask mode. When ESMM = 0, SMM has no effect. 
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POLL COMMAND STATUS 


D7 D6 D5 

D4 D3 

D2 

D1 DO 

\ ' \ ^ \ ^ 

X 1 X 

m 

W1 1 WO 1 





, 1 


► 0 - NO PENDING INTERRUPT 

1 - PENDING INTERRUPT 

!—► BINARY CODE OF 

THE HIGHEST PRIORITY 

LEVEL REQUESTING 


290128-62 
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INTERRUPT REQUEST STATUS 


D7 

D6 D5 

04 

03 

02 

01 

00 


iRQ6 1 IRQ5 

IRQ4 

IRQ3 

IRQ2 

IRQ1 

IRQ0| 


IF IRQ BIT IS: 0- 
1- 

NO REQUEST 
REQUEST PENOING 

290128-63 

NOTE: 

Although all Interrupt Request inputs are active LOW, the internal logical will invert the state of the pins so that when 
there is a pending interrupt request at the input, the corresponding IRQ bit will be set to HIGH in the Interrupt Request 
Status register. 


IN-SERVICE STATUS 


07 

06 

05 

04 





mm 

1^1 


HQ 

IQ 





IF ISn BIT IS: 0 - 
1 - 

NOT IN-SERVICE 

REQUEST IS IN-SERVICE 
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VECTOR REGISTER (VR) 






■ 

■ 

■ 

mm 


IQI 

IQIIQIIIIQI 

o 

on 

■ 

ni 




n 

■■ 

■ 



1 

8-BIT VECTOR NUMBER 

290128-65 


4.8 Register Operational Summary 

For ease of reference, Table 4-4 gives a summary of the different operating modes and commands with their 
corresponding registers. 


Table 4-4 Register Operational Summary 


Operational 

Description 

Command 

Words 

Bits 

Fully Nested Mode 

OCW-Default 

— 

Non-specific EOl Command 

OCW2 

EOl 

Specific EOl Command 

OCW2 

SL, EOl, 

LO-L2 

Automatic EOl Mode 

ICW1, ICW4 

IC4, AEOI 

Rotate On Non-Specific 

OCW2 

EOl 

EOl Command 



Rotate On Automatic 

OCW2 

R. SL, EOl 

EOl Mode 



Set Priority Command 

OCW2 

L0-L2 

Rotate On Specific 

OCW2 

R, SL, EOl 

EOl Command 



Interrupt Mask Register 

OCW1 

M0-M7 

Special Mask Mode 

OCW3 

ESMM, SMM 

Level Triggered Mode 

ICW1 

LTIM 

Edge Triggered Mode 

ICW1 

LTIM 

Read Register Command, IRR 

OCW3 

RR, RIS 

Read Register Command, ISR 

OCW3 

RR, RIS 

Red IMR 

IMR 

M0-M7 

Poll Command 

OCW3 

P 

Special Fully Nested Mode 

ICW2, ICW4 

IC4, SFNM 
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5.0 PROGRAMMABLE INTERVAL 
TIMER 


5.1 Functional Description 


The 82380 contains four independently Programma- 
ble Interval Timers: Timer 0-3. All four timers are 
functionally compatible to the Intel 82C54. The first 
thre^ timers (Timer 0-2) have specific functions. 
The fourth timer, Timer 3, is a general purpose timer. 


description of each timer’s function follows. 


Table 5-1. Programmable 
Interval Timer Functions 


Timer 

Output 

Function 

0 

IRQ8 

Event Based 

IRQ8 Generator 

1 

TOUT1/REF# 

Gen. Purpose/DRAM 
Refresh Req. 

2 

TOUT2#/IRQ3# 

Gen. Purpose/Speaker 
Out/IRQ3# 

3 

TOUT3# 

Gen. Purpose/IRQO 
Generator 


TIMER 0— Event Based IRQ8 Generator 

Timer 0 is intended to be used as an Event Counter. 
The output of this timer will generate an Interrupt 
Request 8 (IRQ8) upon a rising edge of the timer 
output (TOUTO). Typically, this timer is used to im- 
plement a time-of-day clock or system tick. The Tim- 
er 0 output is not available as an external signal. 

TIMER 1 — General Purpose/DRAM Refresh 
Request 

The output of Timer 1, TOUT1, Can be used as a 
general purpose timer or as a DRAM Refresh Re- 
quest signal. The rising edge of this output creates a 
DRAM refresh request to the 82380 DRAM Refresh 
Controller. Upon reset, the Refresh Request func- 
tion is disabled, and the output pin is the Timer 1 
output. 

TIMER 2 — General Purpose/Speaker Out/IRQ3# 

The Timer 2 output, TOUT2#, could be used to sup- 
port tone generation to an external speaker. This pin 
is a bidirectional signal. When used as an input, a 
logic LOW asserted at this pin will generate an Inter- 
rupt Register 3 (IRQ3#) (see Programmable Inter- 
rupt Controller). 
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Figure 5-1. Block Diagram of Programmable Interval Timer 
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TIMER 3 — General Purpose/ Interrupt Request 0 
Generator 

The output of Timer 3 is fed to an edge detector and 
generates an Interrupt Request 0 (IRQO) in the 
82380. The inverted output of this timer (TOUT3#) 
is also available as an external signal for general 
purpose use. 

5.1.1 INTERNAL ARCHITECTURE 

The functional block diagram of the Programmable 
Interval Timer section is shown in Figure 5-1 . Follow- 
ing Is a description of each block. 

DATA BUFFER & READ/WRITE^ LOGIC 

This part of the Programmable Interval Timer is used 
to interface the four timers to the 82380 internal bus. 
The Data Buffer is for transferring commands and 
data between the 8-bit internal bus and the timers. 


The Read/Write Logic accepts inputs from the inter- 
nal bus and generates signals to control other func- 
tional blocks within the timer section. 

CONTROL WORD REGISTERS I & II 

The Control Word Registers are write-only registers. 
They are used to control the operating modes of the 
timers. Control Word Register I controls Timers 0, 1 
and 2, and Control Word Register II controls Timer 
3. Detailed description of the Control Word Regis- 
ters will be included in the Register Set Overview 
section. 

COUNTER 0, COUNTER 1, 

COUNTER 2. COUNTER 3 

Counters 0, 1 , 2, and 3 are the major parts of Timers 
0, 1, 2, and 3, respectively.. These four functional 
blocks are identical in operation, so only a single 
counter will be described. The internal block dia- 
gram of one counter is shown in Figure 5-2. 
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Figure 5-2. Internal Block Diagram of A Counter 
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The four counters share a common clock input 
(CLKIN), but otherwise are fully Independent. Each 
counter is programmable to operate In a different 
Mode. 

Although the Control Word Register Is shown In the 
Figure 5-2, It is not part of the counter itself. Its pro- 
grammed contents are used to control the opera- 
tions of the counters. 

The Status Register, when latched, contains the cur- 

ront nnntonic r»f thcs r^nntml VA/nrH nonictor and 

status of the output and Null Count Flag (see Read 
Back Command). 

The Counting Element (CE) is the actual counter. It 
is a 1 6-bit presettable synchronous down counter. 

The Output Latches (OL) contain two 8-bit latches 
(OLM and OLL). Normally, these latches ‘follow’ the 
content of the CE. OLM contains the most signifi- 
cant byte of the counter and OLL contains the least 
significant byte. If the Counter Latch Command is 
sent to the counter, OL will latch the present count 
until read by the 80386 and then return to follow the 
CE. One latch at a time is enabled by the timer’s 
Control Logic to drive the internal bus. This is how 
the 16-blt Counter communicates over the 8-bit in- 
ternal bus. Note that CE cannot be read. Whenever 
the count is read, it is one of the OL’s that Is being 
read. 

When a new count is written into the counter, the 
value will be stored in the Count Registers (CR), and 
transferred to CE. The transferring of the contents 
from CR’s to CE Is defined as ‘loading’ of the coun- 
ter. The Count Register contains two 8-bit registers: 
QRM rywhiph coptains the most significant byte) and 
CRL (which contains the least significant byte). Simi- 
lar to the 0'i_’s, the Control Logic allows one register 
at a time to be loaded from the 8-bit internal bus. 
However, both bytes are transferred from the CR’s 
to the CE simultaneously. Both CR’s are cleared 
when the Counter is programmed. This way, if the 
Counter has been programmed for one byte count 
(either the most significant or the least significant 
byte only), the other byte will be zero. Note that CE 
cannot be written into directly. Whenever a count is 
written, it is the CR that is being written. 

As shown in the diagram, the Control Logic consists 
of three signals: CLKIN, GATE, and OUT. CLKIN 
and GATE will be discussed in detail in the section 
that follows. OUT is the internal output of the coun- 
ter. The external outputs of some timers (TOUT) are 
the inverted version of OUT (see TOUT1, TOUT2#, 
TOUTS#). The state of OUT depends on the mode 
of operation of the timer. 


5.2 Interface Signals 

5.2.1 CLKIN 

CLKIN is an input signal used by all four timers for 
Internal timing reference. This signal can be inde- 
pendent of the 82380 system clock, CLK2. In the 
following discussion, each ‘CLK Pulse’ is defined as 
the time period between a rising edge and a falling 
edge, in that order, of CLKIN. 

During the rising edge of CLKIN, the state of GATE 
is sampled. All new counts are loaded and counters 
are decremented on the falling edge of CLKIN. 

Please note that there are restrictions on the CLKIN 
signal during WRITE cycles to the 82380 timer unit. 
Refer to the appendix of this data manual for details 
on this issue. 


5.2.2 TOUT1, TOUT2#, TOUT3# 

TOUT1, TOUT2# and TOUT3# are the external 
output signals of Timer 1 , Timer 2 and Timer 3, re- 
spectively. TOUT2# and TOUT3# are the inverted 
signals of their respective counter outputs, OUT. 
There Is no external output for Timer 0. 

If Timer 2 is to be used as a tone generator of a 
speaker, external buffering must be used to provide 
sufficient drive capability. 

The Outputs of Timer 2 and 3 are dual function pins. 
The output pin of Timer 2 (TOUT2#/IRQ3#), which 
is a bidirectional open-collector signal, can also be 
used as interrupt request input. When the Interrupt 
function is enabled (through the Programmable In- 
terrupt Controller), a LOW on this input will generate 

i r-» — j. rt jL nnnnr\ 

ctii iiiit^iiu|Ji nequeai otr lu me o^ooe r luyi cm ii lia- 
ble Interrupt Controller. This pin has a weak internal 
pull-up resistor. To use the IRQ3# function. Timer 2 
should be programmed so that OUT2 Is LOW. Addi- 
tionally, OUT3 of Timer 3 is connected to an edge 
detector which will generate an Interrupt Request 0 
(IRQO) to the 82380 after the rising edge of OUT3 
(see Figure 5-1). 

5.2.3 GATE 

GATE is not an externally controllable signal. Rath- 
er, it can be software controlled with the Internal 
Control Port. The state of GATE is always sampled 
on the rising edge of CLKIN. Depending on the 
mode of operation, GATE is used to enable/disable 
counting or trigger the start of an operation. 

For Timer 0 and 1 , GATE is always enabled (HIGH). 
For Timer 2 and 3, GATE is connected to Bit 0 and 
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6, respectively, of an Internal Control Port (at ad- 
dress 61 H) of the 82380. After a hardware reset, the 
state of GATE of Tinner 2 and 3 is disabled (LOW). 


5.3 Modes of Operation 

Each timer can be independently programmed to 
operate in one of six different modes. Timers are 
programmed by writing a Control Word into the con- 
trol Word Register followed by an Initial Count (see 
Programming). 

The following are defined for use in describing the 
different modes of operation. 

CLK Pulse — A rising edge, then a falling edge, in 
that order of CLKIN. 

Trigger~A rising edge of a timer’s GATE input. 
Timer/Counter Loading— The transfer of a count 
from Count Register (CR) to Count Element (CE). 

Note that figures 5-3 through 5-8 show the logical 
outputs of the timer units, OUTx. This signal polarity 
does not reflect that of the TOUTx signals. See the 
first paragraph of Section 5.2.2. 


5.3.1 MODE 0— INTERRUPT ON TERMINAL 
COUNT 

Mode 0 Is typically used for event counting. After the 
Control Word is written, OUT is initially LOW, and will 
remain LOW until the counter reaches zero. OUT 
then goes HIGH and remains HIGH until a new 
count or a new Mode 0 Control Word is written into 
the counter. 

In this mode, GATE = HIGH enables counting; 
GATE = LOW disables counting. However, GATE 
has no effect on OUT. 

After the Control Word and initial count are written to 
a timer, the initial count will be loaded on the next 
CLK pulse. This CLK pulse does not decrement the 


count, so for an initial count of N, OUT does not go 
HIGH until N + 1 CLK pulses after the initial count is 
written. 

If a new count is written to the timer, it will be loaded 
on the next CLK pulse and counting will continue 
from the new count. If a two-byte count is written, 
the following happens: 

1 . Writing the first byte disables counting, OUT is set 
LOW immediately (i.e., no CLK pulse required). 

2. Writing the second byte allows the new count to 
be loaded on the next CLK pulse. 

This allows the counting sequence to be synchroniz- 
ed by software. Again, OUT does not go HIGH until 
N + 1 CLK pulses after the new count of N is writ- 
ten. 

If an initial count is written while GATE is LOW, the 
counter will be loaded on the next CLK pulse. When 
GATE goes HIGH, OUT will go HIGH N CLK pulses 
later; no CLK pulse is needed to load the counter as 
this has already been done. 


5.3.2 MODE 1— GATE RETRIGGERABLE 
ONE-SHOT 

In this mode, OUT will be initially HIGH. OUT will go 
LOW on the CLK pulse following a trigger to start the 
one-shot operation. The OUT signal will then remain 
LOW until the timer reaches zero. At this point, OUT 
will stay HIGH until the next trigger comes in. Since 
the state of GATE signals of Timer 0 and 1 are inter- 
nally set to HIGH. 

After writing the Control Word and initial count, the 
timer is considered ‘armed’. A trigger results in load- 
ing the timer and setting OUT LOW on the next CLK 
pulse. Therefore, an initial count of N will result in a 
one-shot pulse width of N CLK cycles. Note that this 
one-shot operation is retriggerable; I.e., OUT will re- 
main LOW for N CLK pulses after every trigger. The 
one-shot operation can be repeated without rewrit- 
ing the same count into the timer. 

If a new count Is written to the timer during a one- 
shot operation, the current one-shot pulse width will 
not be affected until the timer is retriggered. This is 
because loading of the new count to CE will occur 
only when the one-shot is triggered. 
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NOTES: 

The following conventions apply to all mode timing diagrams. 

1 . Counters are programmed for binary (not BCD) counting and for reading/writing least significant byte (LSB) only. 

2. The counter Is always selected (CS always low). 

3. CW stands for “Control Word”; CW = 10 means a control word of 10, Hex is written to the counter. 

4. LSB stands for “least significant byte” of count. 

5. Numbers below diagrams are count values. 

The lower number is the least significant byte. 

The upper number is the most significant byte. Since the counter is programmed to read/ write LSB only, the 
most significant byte cannot be read. 

N stands for an undefined count. 

Vertical lines show transitions between count values. 


Figure 5-3. Mode 0 
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Figure 5-4. Mode 1 


5.3.3 MODE 2— RATE GENERATOR 

This mode is a divide-by-N counter. It is typically 
used to generate a Real Time Clock interrupt. OUT 
will initially be HIGH. When the initial count has dec- 
remented to 1 , OUT goes LOW for one CLK pulse, 
then OUT goes HIGH again. Then the timer reloads 
the initial count and the process is repeated. In other 
words, this mode is periodic since the same se- 
quence is repeated itself indefinitely. For an initial 


count of N, the sequence repeats every N CLK cy- 
cles. 

Similar to Mode 0, GATE = HIGH enables counting, 
where GATE = LOW disables counting. If GATE 
goes LOW during an output pulse (LOW), OUT Is set 
HIGH immediately. A trigger (rising edge on GATE) 
will reload the timer with the initial count on the next 
CLK pulse. Then, OUT will go LOW (for one CLK 
pulse) N CLK pulses after the new trigger. Thus, 
GATE can be used to synchronize the timer. 
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CW = 14 LSB = 3 



WRITE \ 1 \ 1 



j\nj\fumiuuu\r 


GATE 



OUT 1 

U LJ~ 


1 .. 1 .. 1 .. 1 .. 

1 1 r. 1 r. 1 r. 
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CW = 14 LSB = 3 



WRITE \ 1 \ 1 
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GATE 



OUT 1 

LJ 


1 N 1 N 1 N 1 N 

CW = 14 LSBs4 

0 1 0 1 0 1 0 1 0 1 0 1 0 1 
3|2|2|3|2|l|3| 

LSB = 5 


WRITE \ j \ 1 

LJ 


j\iuwLruwLfmrLr 


GATE 



OUT 1 

u 


1 N U 1 N 1 M 

till 

0 1 0 1 0 1 0 1 0 1 0 1 0 1 

4|3|2|1 |5|4|3| 
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NOTE: 

A GATE transition should not occur one clock prior to terminal count. 


Figure 5-5. Mode 2 


After writing a Control Word and initial count, the 
timer will be loaded on the next CLK pulse. OUT 
goes LOW (for the CLK pulse) N CLK pulses after 
the Initial count is written. This is another way the 
timer may be synchronized by software. 

Writing a new count while counting does not affect 
the current counting sequence because the new 
count will not be loaded until the end of the current 
counting cycle. If a trigger is received after writing a , 
new count but before the end of the current period, 


the timer will be loaded with the new count on the 
next CLK pulse after the trigger, and counting will 
continue with the new count. 


5.3.4 MODE 3— SQUARE WAVE GENERATOR 

Mode 3 is typically used for Baud Rate generation. 
Functionally, this mode is similar to Mode 2 except 
for the duty cycle of OUT. In this mode, OUT will be 
initially HIGH. When half of the Initial count has ex- 
pired, OUT goes low for the remainder of the count. 
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The counting sequence will be repeated, thus this 
mode is also periodic. Note that an Initial count of N 
results in a square wave with a period of N CLK 
pulses. 

The GATE input can be used to synchronize the tim- 
er. GATE = HIGH enables counting; GATE = LOW 
disables counting. If GATE goes LOW while OUT is 
LOW, OUT is set HIGH immediately (i.e., no CLK 
pulse is required). A trigger reloads the timer with the 
Initial count on the next CLK pulse. 

After writing a Control Word and initial count, the 
timer will be loaded on the next CLK pulse. This al- 
lows the timer to be synchronized by software. 

Writing a new count while counting does not affect 
the current counting sequence. If a trigger is re- 
ceived after writing a new count but before the end 
of the current half-cycle of the square wave, the tim- 
er will be loaded with the new count on the next CLK 


pulse and counting will continue from the new count. 
Otherwise, the new count will be loaded at the end 
of the current half-cycle. 

There is a slight difference in operation depending 
on whether the initial count is EVEN or ODD. The 
following description is to show exactly how this 
mode is implemented. 

EVEN COUNTS: 

OUT is initially HIGH. The initial count Is loaded on 
one CLK pulse and is decremented by two on suc- 
ceeding CLK pulses. When the count expires (decre- 
mented to 2), OUT changes to LOW and the timer Is 
reloaded with the initial count. The above process Is 
repeated indefinitely. 

ODD COUNTS: 

OUT is initially HIGH. The initial count minus one 
(which is an even number) is loaded on one CLK 
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pulse and is decremented by two on succeeding 
CLK pulses. One CLK pulse after the count expires 
(decremented to 2), OUT goes LOW and the timer is 
loaded with the initial count minus one again. Suc- 
ceeding CLK pulses decrement the count by two. 
When the count expires, OUT goes HIGH immedi- 
ately and the timer is reloaded with the initial count 
minus one. The above process is repeated indefi- 
nitely. So for ODD counts, OUT will be HIGH for (N 
+ 1)/2 counts and LOW for (N - 1)/2 counts. 

5.3.5 MODE 4— INITIAL COUNT TRIGGERED 
STROBE 

be HIGH. When a new Initial count is written into the 
timer, the counting sequence will begin. When the 
initial count expires (decremented to 1), OUT will go 
LOW for one CLK pulse and then go HIGH again. 

Again, GATE = HIGH enables counting while GATE 
= LOW disables counting. GATE has no effect on 
OUT. 

After writing the Control Word and initial count, the 
timer will be loaded on the next CLK pulse. This CLK 
pulse does not decrement the count, so tor an initial 
count of N, OUT does not strobe LOW until N + 1 
CLK pulses after initial count is written. 

This mode allows a strobe pulse to be generated by 
writing an initial count to the timer. Initially, OUT will 

If a new count is written during counting, it will be 
loaded In the next CLK pulse and counting will con- 
tinue from the new count. 

CW = 18 LSB = 3 

WRITE l_J L_J 
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OUT j 
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LJ 
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Figure 5-7. Mode 4 
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If a two-byte count is written, the following will occur: 

1 . Writing the first byte has no effect on counting. 

2. Writing the second byte allows the new count to 
be loaded on the next CLK pulse. 

by writing an Initial count. Initially, OUT will be HIGH. 
Counting is triggered by a rising edge of GATE. 
When the initial count has expired (decremented to 
1), OUT will go LOW for one CLK pulse and then go 
HIGH again. 

OUT will strobe LOW N + 1 CLK pulses after the 
new count of N is written. Therefore, when the 
strobe pulse will occur after a trigger depends on the 
value of the initial count loaded. 

5.3.6 MODE 5->GATE RETRIGGERABLE 

STROBE 

After loading the Control Word and Initial count, the 
Count Element will not be loaded until the CLK pulse 
after a trigger. This CLK pulse does not decrement 
the count. Therefore, for an initial count of N, OUT 
does not strobe LOW until N + 1 CLK pulses after a 
trigger. 

Mode 5 is very similar to Mode 4 except the count 
sequence is triggered by the GATE signal instead of 


CW = 1A LSB = 3 

i 1 \ 1 


“ Juum/uiAA/uir 

I "in 

n n— - 
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Figure 5-8. Mode 5 
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SUMMARY OF GATE OPERATIONS 


Mode 

GATE LOW or 
Going LOW 

GATE Rising 

GATE 

HIGH 

0 

Disable Count 

No Effect 

Enable Count 

1 

No Effect 

1 . Initiate Count 

2. Reset Output 

After Next Clock 

No Effect 

2 

1 . Disable Count 

2. Sets Output HIGH 
Immediately 

Initiate Count 

Enable Count 

3 

1 . Disable Count 

2. Sets Output HIGH 
Immediately 

Initiate Count 

Enable Count 

4 

Disable Count 

No Effect 

Enable Count 

5 

No Effect 

Initiate Count 

No Effect 


The counting sequence is retriggerable. Every trig- 
ger will result in the timer being loaded with the initial 
count on the next CLK pulse. 

If the new count is written during counting, the cur- 
rent counting sequence will not be affected. If a trig- 
ger occurs after the new count is written but before 
the current count expires, the timer will be loaded 
with the new count on the next CLK pulse and a new 
count sequence will start from there. 

5.3.7 OPERATION COMMON TO ALL MODES 

5.3.7. 1 GATE 

The GATE input is always sampled on the rising 
edge of CLKIN. In Modes 0, 2, 3 and 4, the GATE 
input is level sensitive. The logic- level Is se.mpifid on 
the rising edge of CLKIN. In Modes 1, 2, 3 and 5, the 
vjA I ti input is rising edge sensitive. In these modes, 
a rising edge of GATE (trigger) sets an edge sensi- 
tive flip-flop in the timer. The flip-flop Is reset Imme- 
diately after it is sampled. This way, a trigger will be 
detected no matter when it occurs; i.e., a HIGH logic 
level does not have to be maintained until the next 
rising edge of CLKIN. Note that in Modes 2 and 3, 
the GATE input is both edge and level sensitive. 

5.3.7.2 Counter 

New counts are loaded and counters are decre- 
mented on the falling edge of CLKIN. The largest 
possible initial count is 0. This is equivalent to 2**16 
for binary counting and 10**4 for BCD counting. 

Note that the counter does not stop when It reaches 
zero. In Modes 0, 1, 4, and 5, the counter ‘wraps 


around’ to the highest count: either FFFF Hex for 
binary counting or 9999 for BCD counting, and con- 
tinues counting. Modes 2 and 3 are periodic. The 
counter reloads Itself with the Initial count and con- 
tinues counting from there. 

The minimum and maximum initial count in each 
counter depends on the mode of operation. They 
are summarized below. 


Mode 

Min 

Max 

0 

1 

0 

1 

1 

0 

2 

2 

0 

3 

2 

0 

4‘ 

1 

0 

5 

1 

0 


5.4 Register Set Overview 

The Programmable Interval Timer module of the 
82380 contains a set of six registers. The port ad- 
dress map of these registers is shown in Table 5-2. 


Table 5-2. Timer Register Port Address Map 


Port Address 

Description 

40H 

Counter 0 Register (read/write) 

41 H 

Counter 1 Register (read/write) 

42H 

Counter 2 Register (read/write) 

43H 

Control Word Register 1 
(Counter 0, 1 & 2) (write-only) 

44H 

Counter 3 Register (read/write) 

45H 

Reserved 

46H 

Reserved 

47H 

Control Word Register 11 
(Counter 3) (write-only) 
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5.4.1 COUNTER 0, 1, 2, 3 REGISTERS 

These four 8-bit registers are functionally identical. 
They are used to write the initial count value into the 
respective timer. Also, they can be used to read the 
latched count value of a timer. Since they are 8-bit 
registers, reading and writing of the 16-bit Initial 
count must follow the count format specified in the 
Control Word Registers; i.e., least significant byte 
only, most significant byte only, or least significant 
byte then most significant byte (see Programming). 

5.4.2 CONTROL WORD REGISTER I & II 

There are two Control Word Registers associated 
with the Timer section. One of the two registers 
(Control Word Register I) is used to control the oper- 
ations of Counters 0, 1 , and 2 and the other (Control 
Word Register II) Is for Counter 3. The major func- 
tions of both Control Word Registers are listed be- 
low; 

— Select the timer to be programmed. 

— Define which mode the selected timer is to oper- 
ate in. 

— Define the count sequence; i.e., if the selected 
timer is to count as a Binary Counter or a Binary 
Coded Decimal (BCD) Counter. 

— Select the byte access sequence during timer 
read/write operations; i.e., least significant byte 
only, most significant byte only, or least signifi- 
cant byte first, then most significant byte. 

Also, the Control Word Registers can be pro- 
grammed to perform a Counter Latch Command or a 
Read Back Command which will be described later. 


5-5 Programming 

5.5.1 INITIALIZATION 

Upon power-up or reset, the state of all timers is 
undefined. The mode, count value, and output of all 
timers are random. From this point on, how each 
timer operates is determined solely by how it is pro- 
grammed. Each timer must be programmed before it 
can be used. Since the outputs of some timers can 
generate interrupt signals to the 82380, all timers 
should be initialized to a known state. 

Timers are programmed by writing a Control Word 
into their respective Control Word Registers. Then, 
an Initial Count can be written into the correspond- 


ing Count Register. In general, the programming pro- 
cedure Is very flexible. Only two conventions need to 
be remembered: 

1 . For each timer, the Control Word must be written 
before the initial count is written. 

2. The 16-blt initial count must follow the count for- 
mat specified in the Control Word (least signifi- 
cant byte only, most significant byte only, or least 
significant byte first, followed by most significant 
byte). 

Since the two Control Word Registers and the four 
Counter Registers have separate addresses, and 
each timer can be individually selected by the appro- 
priate Control Word Register, no special Instruction 
sequence is required. Any programming sequence 
that follows the conventions above is acceptable. 

A new initial count may be written to a timer at any 
time without affecting the timer’s programmed mode 
in any way. Count sequence will be affected as de- 
scribed in the Modes of Operation section. Note that 
the new count must follow the programmed count 
format. 

If a timer is previously programmed to read/write 
two-byte counts, the following precaution applies. A 
program must not transfer control between writing 
the first and second byte to another routine which 
also writes into the same timer. Otherwise, the 
read/write will result in incorrect count. 

Whenever a Control Word is written to a timer, all 
control logic for that timer(s) is immediately reset 
(i.e., no CLK pulse is required). Also, the corre- 
sponding output pin, TOUT(#), goes to a known ini- 
tial state. 


5.5.2 READ OPERATION 

Three methods are available to read the current 
count as well as the status of each timer. They are: 
Read Counter Registers, Counter Latch Command 
and Read Back Command. Following is a descrip- 
tion of these methods. 

READ COUNTER REGISTERS 

The current count of a timer can be read by perform- 
ing a read operation on the corresponding Counter 
Register. The only restriction of this read operation 
is that the CLKIN of the timers must be inhibited by 
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using external logic. Otherwise, the count may be in 
the process of changing when it is read, giving an 
undefined result. Note that since all four timers are 
sharing the same CLKIN signal, inhibiting CLKIN to 
read a timer will unavoidably disable the other timers 
also. This may prove to be impractical. Therefore, it 
is suggested that either the Counter Latch Com- 
mand or the Read Back Command be used to read 
the current count of a timer. 

Another alternative is to temporarily disable a timer 
before reading its Counter Register by using the 
GATE input. Depending on the mode of operation, 
GATE = LOW will disable the counting operation. 
However, this option Is available on Timer 2 and 3 
only, since the GATE signals of the other two timers 
are Internally enabled all the time. 

COUNTER LATCH COMMAND 

A Counter Latch Command will be executed when- 
ever a special Control Word is written into a Control 
Word Register. Two bits written into the Control 
Word Register distinguish this command from a ‘reg- 
ular’ Control Word (see Register Bit Definition). Also, 
two other bits in the Control Word will select which 
counter Is to be latched. 

Upon execution of this command, the selected 
counter’s Output Latch (OL) latches the count at the 
time the Counter Latch Command is received. This 
count is held In the latch until it is read by the 80386, 
or until the timer is reprogrammed. The count is then 
unlatched automatically and the OL returns to ‘fol- 
lowing’ the Counting Element (CE). This allows read- 
ing the contents of the counters ‘on the fly’ without 
affecting counting In progress. Multiple Counter 
Latch Commands may be used io iaicfi riiurt; iiian 
one counter. Each latched count is held until it is 
read. Counter Latch Commands do not affect the 
programmed mode of the timer in any way. 

If a counter Is latched, and at some time later, it Is 
latched again before the prior latched count is read, 
the second Counter Latch Command is ignored. The 
count read will then be the count at the time the first 
command was issued. 

In any event, the latched count must be read ac- 
cording to the programmed format. Specifically, if 
the timer is programmed for two-byte counts, two 
bytes must be read. However, the two bytes do not 
have to be read right after the other. Read/write or 
programming operations of other timers may be per- 
formed between them. 


Another feature of this Counter Latch Command is 
that read and write operations of the same timer 
may be interleaved. For example, if the timer Is pro- 
grammed for two-byte counts, the following se- 
quence is valid. 

1 . Read least significant byte. 

2. Write new least significant byte. 

3. Read most significant byte. 

4. Write new most significant byte. 

If a timer is programmed to read/write two-byte 
counts, the following precaution applies. A program 
must not transfer control between reading the first 
and second byte to another routine which also reads 
from that same timer. Otherwise, an incorrect count 
will be read. 

READ BACK COMMAND 

The Read Back Command is another special Com- 
mand Word operation which allows the user to read 
the current count value and/or the status of the se- 
lected timer(s). Like the Counter Latch Command, 
two bits in the Command Word identify this as a 
Read Back Command (see Register Bit Definition). 

The Read Back Command may be used to latch 
multiple counter Output Latches (OL’s) by selecting 
more than one timer within a Command Word. This 
single command Is functionally equivalent to several 
Counter Latch Commands, one for each counter to 
be latched. Each counter’s latched count will be 
held until it Is read by the 80386 or until the timer Is 
reprogrammed. The counter is automatically un- 
latched when read, but other counters remain 
latched until they are read. If multiple Read Back 
commands are Issued to the same timer without 
reading the count, ail but the first are ignored; i.e., 
the count read will correspond to the very first Read 
Back Command issued. 

As mentioned previously, the Read Back Command 
may also be used to latch status information of the 
selected timer(s). When this function is enabled, the 
status of a timer can be read from the Counter Reg- 
ister after the Read Back Command is issued. The 
status information of a timer includes the following: 

1 . Mode of timer: 

This allows the user to check the mode of opera- 
tion of the timer last programmed. 

2. State of TOUT pin of the timer: 

This allows the user to monitor the counter’s out- 
put pin via software, possibly eliminating some 
hardware from a system. 
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3. Null Count/Count available: 

The Null Count Bit in the status byte indicates if 
the last count written to the Count Register (CR) 
has been loaded into the Counting Element (CE). 
The exact time this happens depends on the 
mode of the timer and is described In the Pro- 
gramming section. Until the count is loaded into 
the Counting Element (CE), it cannot be read from 
the timer. If the count is latched or read before 
this occurs, the count value will not reflect the 
new count just written. 


If both count and status of a timer are latched, the 
first read operation of that timer will return the 
latched status, regardless of which was latched first. 
The next one or two (if two count bytes are to be 
read) read operations return the latched count. Note 
that subsequent read operations on the Counter 
Register will return the unlatched count (like the first 
read method discussed). 


5.6 Register Bit Definitions 


If multiple status latch operations of the timer(s) are 
performed without reading the status, all but the first 
command are ignored; i.e., the status read In will 
correspond to the first Read Back Command issued. 

Both the current count and status of the selected 
timer(s) may be latched simultaneously by enabling 
both functions in a single Read Back Command. 
This is functionally the same as issuing two separate 
Read Back Commands at once. Once again, if multi- 
ple read commands are Issued to latch both the 
count and status of a timer, all but the first command 
will be ignored. 


COUNTER 0, 1, 2, 3 REGISTER (READ/WRITE) 


Port Address 

Description 

40H 

Counter 0 Register (read/write) 

41 H 

Counter 1 Register (read/write) 

42H 

Counter 2 Register (read/write) 

44H 

Counter 3 Register (read/write) 

45H 

Reserved 

46H 

Reserved 



LSB OF COUNT BYTE 
MSB OF COUNT BYTE 
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Note that these B-bit registers are for writing and 
reading of one byte of the 1 6-bit count value, either 
the most significant or the least significant byte. 


CONTROL WORD REGISTER I & II (WRITE-ONLY) 


Port Address 

Description 

43H 

Control Word Register 1 , 


(Counter 0, 1 , 2) (write-only) 

47H 

Control Word Register 1 1 


(Counter 3) (write-only) 


CONTROL WORD REGISTER I 


D7 D6 D5 D4 D3 D2 D1 DO 


I SCI I SCO I RW1 I RWO 




cr 


M2 


SELECT COUNTER: 


00 SELECT COUNTER 0 

01 SELECT COUNTER 1 

10 SELECT COUNTER 2 

1 1 READ BACK COMMAND 
FOR COUNTER 0-2 


Ml 


I MO [bCd] 


0 - 16-BIT BINARY 
COUNTER 


1 - BCD COUNTER 
(4 DECADES) 


1 


▼ MODE: 

READ/WRITE: 000 MODE 0 

00 COUNTER LATCH COMMAND 001 MODE 1 

01 READ/WRlTE LSB BYTE ONLY XI 0 MODE 2 

10 READ/WRITE MSB BYTE ONLY X1 1 MODE 3 

1 1 READ/WRITE LSB, THEN MSB BYTE 100 MODE 4 

101 MODE 5 
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CONTROL WORD REGISTER II 


D7 D6 D5 

D4 D3 D2 D1 DO 

I SCI 1 SCO 1 RW1 

RWO 1 M2 1 Ml 1 MO 1 BCD | 

LJ LJ 1 

1 

SELECT COUNTER: 

00 SELECT COUNTER 3 


1 

0-16- BIT BINARY 
COUNTER 

01 RESERVED 


1 - BCD COUNTER 

orcrpwrrj 


fA n^r'A^^cc^ 

lliljilllll 

r 

— T 

MODE: 

READ/WRITE: 

000 MODE 0 

00 COUNTER LATCH COMMAND 

001 MODE 1 



11 READ/WRITE LSB. THEN MSB BYTE 100 MODE 4 



101 MODE 5 
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COUNTER LATCH COMMAND FORMAT 
(Write to Control Word Register) 


D7 D6 D5 D4 D3 D2 

D1 DO 

BO! ES3[l3i Bl HI D 

DDH 

V 

00 COUNTER 0 (OR 3) 

01 COUNTER 1 

10 COUNTER 2 

1 1 READ BACK COMMAND 

290128-77 


Mode 

Timer 

Gate 

Trigger 


0 

1 

2 

3 

Edge 

Level 

0 






X 

1 

NA 

NA 

CD 

0 

X 


2 





X 

X 

3 





X 

X 

4 






X 

5 

NA 

NA 

0 

0 

X 



C = Must use Port 61 to generate edge. 
NA = Not Applicable 


Interrupt on Terminal Count 
Gate Retriggerable One Shot 
Rate Generator 
Square Wave Generator 
Initial Count Triggered Strobe 
Gate Retriggerable Strobe 
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READ BACK COMMAND FORMAT 
(Write to Control Word Register) 


D7 


D6 


D5 


D4 


D3 


D2 


D1 


DO 


1 1 1 1 [count# 

STATUS 

1 CNT2 1 

CNT1 |cNT0/3 0 | 

r 

0- LATCH COUNT 



r 

:OUNTER NOT 


-►0- ( 


1 - DO NOT LATCH 
COUNT 


0 - LATCH STATUS 

1 - DO NOT UTCH 

STATUS 


SELECTED 
1 - COUNTER IS 
SELECTED 


STATUS FORMAT 

(Returned from Read Back Command) 


D7 

D6 

D5 

D4 

D3 

D2 

D1 

DO 

1 1 

NULL count! 

RW1 1 

1 RWO 

1 1 

Ml 1 

1 MO 

1 BCD 1 


T 


0- OUTPUT 
PIN = 0 


1 - OUTPUT 
PIN = 1 


0- COUNT AVAILABLE 
FOR READING 
1 - NULL COUNT 


COUNTER 

MODE 
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6.0 WAIT STATE GENERATOR 


6.1 Functional Description 

The 82380 contains a programmable Wait State 
Generator which can generate a pre-programmed 
number of wait states during both CPU and DMA 
initiated bus cycles. This Wait State Generator is ca- 
pable of generating 1 to 1 6 wait states in non-pipe- 


lined mode, and 0 to 15 wait states in pipelined 
mode. Depending on the bus cycle type and the two 
Wait State Control Inputs (WSC 0-1), a pre-pro- 
grammed number of wait states in the selected Wait 
State Register will be generated. 

The Wait State Generator can also be disabled to 
allow the use of devices capable of generating their 
own READY # signals. Figure 6-1 is a block diagram 
of the Wait State Generator. 
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6.2 Interface Signals 

The following describes the interface signals which 
affect the operation of the Wait State Generator. 
The READY#, WSCO and WSC1 signals are inputs. 
READYO# is the ready output signal to the host 
processor. 

6.2.1 READY# 

RE.ADY# Is an active LOW input signal which indi- 
cates to the 82380 the completion of a bus cycle. In 
the Master mode (e.g., 82380 initiated DMA trans- 
fer), this signal is monitored to determine whether a 
peripheral or memory needs wait states inserted in 
the current bus cycle. In the Slave mode, it is used 
(together with the ADS# signal) to trace CPU bus 
cycles to determine If the current cycle is pipelined. 

6.2.2 READYO# 

READYO# (Ready Out#) is an active LOW output 
signal and is the output of the Wait State Generator. 
The number of wait states generated depends on 
the WSC(O-I) inputs. Note that special cases are 


handled for access to the 82380 internal registers 
and for the Refresh cycles. For 82380 internal regis- 
ter access, READYO# will be delayed to take into 
account the command recovery time of the register. 
One or more wait states will be generated in a pipe- 
lined cycle. During refresh, the number of wait states 
will be determined by the preprogrammed value in 
the Refresh Wait State Register. 

In the simplest configuration, READYO# can be 
connected to the READY# Input of the 82380 and 
the 80366 CPU. This is, however, not always the 
case. If external circuitry Is to control the READY# 
inputs as well, additional logic will be required (see 
Application Issues). 

6.2.3 WSC(O-I) 

These two Wait State Control inputs select one of 
the three pre-programmed 8-bit Wait State Registers 
which determines the number of wait states to be 
generated. The most significant half of the three 
Wait State Registers corresponds to memory ac- 
cesses, the least significant half to I/O accesses. 
The combination WSC(O-I) = 11 disables the Wait 
State Generator. 


wsco- 

WSC1- 

M/IO#- 


D7 


INTERNAL WAIT STATE 
REQUIREMENT " 

D4 D3 DO 



► 

REGISTER 

► 

SELECT 


LOGIC 



► 


MEMORY 0 

I/O 0 

MEMORY 1 

I/O 1 

MEMORY 2 

I/O 2 

(RESERVED) 

REFRESH 


PROGRAMMABLE WAIT STATE 
REGISTERS 


READYO# 

JT 


WAIT STATE 
COUNTER 


Figure 6-1. Wait State Generator Biock Diagram 
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Figure 6-2. Wait States in Non-Pipelined Cycles 


6.3 Bus Function 

6.3.1 WAIT STATES IN NON-PIPELINED CYCLE 

The timing diagram of two typical non-pipelined cy- 
cles with 82380 generated wait states is shown in 
Figure 6-2. In this diagram, it is assumed that the 
internal registers of the 82380 are not addressed. 
During the first T2 state of each bus cycle, the Wait 
State Control and the M/IO# Inputs are sampled to 
determine which Wait State Register (if any) is se- 
lected. If the WSC Inputs are active (I.e., not both are 
driven HIGH), the pre-programmed number of wait 
states corresponding to the selected Wait State 
Register will be requested. This is done by driving 
the READYO# output HIGH during the end of each 
T2 state. 

The WSC(0-1) inputs need only be valid during the 
very first T2 state of each non-pipelined cycle. As a 
general rule, the WSC inputs are sampled on the 


rising edge of the next clock (82384 CLK) after the 
last state when ADS# (Address Status) is asserted. 

The number of wait states generated depends on 
the type of bus cycle, and the number of wait states 
requested. The various combinations are discussed 
below. 

1 . Access the 82380 internal registers: 2 to 5 wait 
states, depending upon the specific register ad- 
dressed. Some back-to-back sequences to the In- 
terrupt Controller will require 7 wait states. 

2. Interrupt Acknowledge to the 82380: 5 wait 
states. 

3. Refresh: As programmed in the Refresh Wait 
State Register (see Register Set Overview). Note 
that if WSC(0-1) = 11, READYO# will stay Inac- 
tive. 

4. Other bus cycles: Depending on WSC(O-I) and 
M/IO# inputs, these inputs select a Walt State 
Register in which the number of wait states will be 
equal to the pre-programmed wait state count in 
the register plus 1 . The Wait State Register selec- 
tion is defined as follows (Table 6-1). 
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Table 6-1. Wait State Register Selection 


M/IO# 

WSC(I-O) 

Register Selected 

0 

00 

WAIT REG 0 (I/O half) 

0 

01 

WAIT REG 1 (I/O half) 

0 

10 

WAIT REG 2 (I/O half) 

1 

00 

WAIT REG 0 (MEM half) 

1 

01 

WAIT REG 1 (MEM half) 

1 

10 

WAIT REG 2 (MEM half) 

X 

11 

Walt State Gen. Disabled 


The Wait State Control signals, WSC(O-I), can be 
generated with the address decode and the Read/ 
Write control signals as shown In Figure 6-3. 



Note that during HALT and SHUTDOWN, the num- 
ber of wait states will depend on the WSC(O-I) in- 
puts, which will select the memory half of one of the 
Wait State Registers (see CPU Reset and Shutdown 
Detect). 


6.3.2 WAIT STATES IN PIPELINED CYCLE 

The timing diagram of two typical pipelined cycles 
with 82380 generated wait states is shown In Figure 
6-4. Again, In this diagram, it Is assumed that the 
82380 internal registers are not addressed. As de- 
fined in the timing of the 80386 processor, the Ad- 
dress (A 2-31), Byte Enable (BE 0-3), and other 
control signals (M/IO#, ADS#) are asserted one 
T state earlier than in a non-pipellned cycle; i.e., they 
are asserted at T2P. Similar to the non-pipelined 
case, the Walt State Control (WSC) inputs are sam- 
pled in the middle of the state after the last state 
when the ADS# signal is asserted. Therefore, the 
WSC inputs should be asserted during the T1 P state 
of each pipelined cycle (which is one T state earlier 
than in the non-pipelined cycle). 


Figure 6-3. WSC(O-I) Generation 



Figure 6-4. Wait State in Pipelined Cycles 
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The number of wait states generated in a pipelined 
cycle is selected in a similar manner as in the non- 
pipelined case discussed in the previous section. 
The only difference here is that the actual number of 
wait states generated will be one less than that of 
the non-pipelined cycle. This is done automatically 
by the Wait State Generator. 


6.3.3 EXTENDING AND EARLY TERMINATING 
BUS CYCLE 

The 82380 allows external logic to either add wait 
states or cause early termination of a bus cycle by 
controlling the READY# input to the 82380 and the 
host processor. A possible configuration is shown in 
Figure 6-5. 

The EXT. RDY# (External Ready) signal of Figure 
6-5 allows external devices to cause early termina- 
tion of a bus cycle. When this signal is asserted 
LOW, the output of the circuit will also go LOW 
(even though the READYO# of the 82380 may still 


be HIGH). This output is fed to the READY# input of 
the 80386 and the 82380 to indicate the completion 
of the current bus cycle. 

Similarly, the EXT. NOT READY (External Not 
Ready) signal is used to delay the READY# input of 
the processor and the 82380. As long as this signal 
is driven HIGH, the output of the circuit will drive the 
READY# Input HIGH. This will effectively extend the 
duration of a bus cycle. However, it is important to 
note that if the two-level logic is not fast enough to 
satisfy the READY# setup time, the OR gate should 
be eliminated. Instead, the 82380 Wait State Gener- 
ator can be disabled by driving both WSC(0-1) 
HIGH. In this case, the addressed memory or I/O 
device should activate the external READY# input 
whenever it is ready to terminate the current bus 
cycle. 

Figure 6-6 and 6-7 show the timing relationships of 
the ready signals for the early termination and exten- 
sion of the bus cycles. Section 6.7, Application Is- 
sues, contains a detailed timing analysis of the ex- 
ternal circuit. 



Figure 6-5. External ‘READY’ Control Logic 



Figure 6-6. Early Termination of Bus Cycle By ‘READY#’ 
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Figure 6-7. Extending Bus Cycle by ‘READY#’ 


Due to the following implications, it should be noted 
that early termination of bus cycles in which 82380 
internal registers are accessed is not recommended. 

1 . Erroneous data may be read from or written into 
the addressed register. 

2. The 82380 must be allowed to recover either be- 
fore HLDA (Hold Acknowledge) is asserted or be- 
fore another bus cycle into an 82380 internal reg- 
ister is initiated. 

The recovery time, in bus periods, equals the re- 
maining wait states that were avoided plus 4. 


6.4 Register Set Overview 

Altogether, there are four 8-bit internal registers as- 
sociated with the Wait State Generator. The port ad- 
dress map of these registers is shown below in Ta- 
ble 6-2. A detailed description of each follows. 


Table 6-2. Register Address Map 


Port Address 

Description 

72H 

Wait State Reg 0 (read /write) 

73H 

Wait State Reg 1 (read/write) 

74H 

Wait State Reg 2 (read/write) 

75H 

Ref. Wait State Reg (read/write) 


WAIT STATE REGISTER 0, 1, 2 

These three 8-bit read/write registers are functional- 
ly identical. They are used to store the pre-pro- 
grammed wait state count. One half of each register 
contains the wait state count for I/O accesses while 
the other half contains the count for memory ac- 
cesses. The total number of wait states generated 
will depend on the type of bus cycle. For a non-pipe- 
lined cycle, the actual number of wait states request- 
ed is equal to the wait state count plus 1. For ^ 
pipelined cycle, the number of wait states will be 
equal to the wait state count In the selected register. 
Therefore, the Wait State Generator is capable of 
generating 1 to 16 wait states in non-pipelined 
mode, and 0 to 1 5 wait states in pipelined mode. 

Note that the minimum wait state count in each reg- 
ister is 0. This is equivalent to 0 wait states for a 
pipelined cycle and 1 wait state for a non-pipelined 
cycle. 

REFRESH WAIT STATE REGISTER 

Similar to the Walt State Registers discussed above, 
this 4-bit register is used to store the number of wait 
states to be generated during the DRAM refresh cy- 
cle. Note that the Refresh Wait State Register Is not 
selected by the WSC inputs. It will automatically be 
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chosen whenever a DRAM refresh cycle occurs. If 
the Wait State Generator is disabled during the re- 
fresh cycle (WSC(0-1) = 11). READYO# will stay 
inactive and the Refresh Wait State Register is ig- 
nored. 


6.5 Programming 

Using the Wait State Generator is relatively straight- 
forward. No special programming sequence is re- 
quired. In order to ensure the expected number of 
wait states will be generated when a register is se- 
lected, the registers to be used must be pro- 
grammed after power-up by writing the appropriate 
wait state count into each register. Note that upon 
hardware reset, all Walt State Registers are initial- 
ized with the value FFH, giving the maximum num- 
ber of wait states possible. Also, each register can 
be read to check the wait state count previously 
stored in the register. 



I I 


I I 

[E] 



I I 


' 1 ► I/O WAIT 

STATE COUNT 

MEMORY WAIT STATE COUNT 

290128-87 


REFRESH WAIT STATE REGISTER 
Port Address: 75H (Read/Write) 



D6 

05 04 




00 






— ► mu: 

1 . 1 1 

ST BE ZERO 

-► REFRESH WAIT 
STATE COUNT 
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6.6 Register Bit Definition 

WAIT STATE REGISTER 0, 1, 2 


Port Address 

Description 

72H 

Walt State Register 0 (read/write) 

73H 

Wait State Register 1 (read/write) 

74H 

Wait State Register 2 (read/write) 


6.7 Application Issues 

6.7.1 EXTERNAL ‘READY’ CONTROL LOGIC 

As mentioned In section 6.3.3, wait state cycles gen- 
erated by the 82380 can be terminated early or ex- 
tended longer by means of additional external logic 
(see Figure 6-5). In order to ensure that the 
READY# input timing requirement of the 80386 and 
the 82380 is satisfied, special care must be taken 
when designing this external control logic. This sec- 
tion addresses the design requirements. 
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A simplified block diagram of the external logic along 
with the READY # turning diagram is shown In Figure 
6-8. The purpose is to determine the maximum delay 
time allowed in the external control logic in order to 
satisfy the READY # setup time. 

First, it will be assumed that the 80386 Is running at 
16 MHz (i.e., CLK2 and 32 MHz). Therefore, one bus 
state (two CLK2 periods) will be equivalent to 62.5 
nsec. According to the AC specifications of the 


82380, the maximum delay time for valid READYO# 
signal is 31 ns after the rising edge of CLK2 in the 
beginning of T2 (for non-pipellned cycle) or T2P (for 
pipelined cycle). Also, the minimum READY# setup 
time of the 80386 and the 82380 should be 20 ns 
before the rising edge of CLK2 at the beginning of 
the next bus state. This limits the total delay time for 
the external READY# control logic to be 11 ns 
(62.5-31-21) In order to meet the READY# setup 
timing requirement. 


80386-16 

READY# 


EXT. READY# EXT. NOT READY 


READY I 

4 y CONTROL M- 

LOGIC I 


82380 

- READYO# 
READY# 


CLK2 j 

> 

PHM 

PHI 2 



^ \ 

y \ 

y 


B 

— D 



READYO# 


zk - 



READY# 



<4 Q ► 




290128-89 

A = PHI1 + PHI2 = 62.5 ns 
B = Maximum READYO# Valid Delay = 31 ns 
C = READY # Set-up Time = 21 ns 

D = Maximum Ready Control Logic Delay = A- B- C=11ns 


Figure 6-8. ‘READY’ Timing Consideration 
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7.0 DRAM REFRESH CONTROLLER 


7.1 Functional Description 

The 82380 DRAM Refresh Controller consists of a 
24-bit Refresh Address Counter and Refresh Re- 
quest logic for DRAM refresh operations (see Figure 
7-1). TIMER 1 can be used as a trigger signal to the 
DRAM Refresh Request logic. The Refresh Bus Size 
can be programmed to be 8-, 16-, or 32-bit wide. 
Depending on the Refresh Bus Size, the Refresh 
Address Counter will be Incremented with the appro- 
priate value after every refresh cycle. The Internal 
logic of the 82380 will give the Refresh operation the 
highest priority In the bus control arbitration process. 
Bus control is not released and re-requested if the 
82380 is already a bus master. 


7.2 Interface Signals 

7.2.1 TOUT1/REF# 

The dual function output pin of TIMER 1 (TOUT1/ 
REF#) can be programmed to generate DRAM Re- 
fresh signal. If this feature is enabled, the rising edge 
of TIMER 1 output (TOUT1) will trigger the DRAM 
Refresh Request logic. After some delay for gaining 
access of the bus, the 82380 DRAM Controller will 
generate a DRAM Refresh signal by driving REF# 
output LOW. This signal is cleared after the refresh 
cycle has taken place, or by a hardware reset. 

If the DRAM Refresh feature Is disabled, the 
TOUT1/REF# output pin is simply the TIMER 1 out- 
put. Detailed information of how TIMER 1 operates 
Is discussed in section 6 — Programmable Interval 
Timer, and will not be repeated here. 



REFRESH ENABLE (INTERNAL) 


290128-90 


Figure 7-1. DRAM Refresh Controller 
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7.3 Bus Function 


7.3.1 ARBITRATION 

In order to ensure data integrity of the DR AMs, the 
82380 gives the DRAM Refresh signal the highest 
priority in the arbitration logic. It allows DRAM Re- 
fresh to interrupt a DMA in progress in order to per- 
form the DRAM Refresh cycle. The DMA service will 
be resumed after the refresh is done. 

In case of a DRAM Refresh during a DMA process, 
the cascaded device will be requested to get off the 
bus. This is done by deasserting the EDACK signal. 
Once DREQn goes inactive, the 82380 will perform 
the refresh operation. Note that the DMA controller 
does not completely relinquish the system bus dur- 
ing refresh. The Refresh Generator simply ‘steals’ a 
bus cycle between DMA accesses. 

Figure 7-2 shows the timing diagram of a Refresh 
Cycle. Upon expiration of TIMER 1 , the 82380 will try 
to take control of the system bus by asserting 
HOLD. As soon as the 82380 see HLDA go active, 
the DRAM Refresh Cycle will be carried out by acti- 
vating the REF# signal as well as the refresh ad- 
dress and control signals on the system bus (Note 


that REF# will not be active until two CLK periods 
after HLDA Is asserted). The address bus will con- 
tain the 24-bit address currently in the Refresh Ad- 
dress Counter. The control signals are driven the 
same way as in a Memory Read cycle. This ‘read’ 
operation is complete when the READY# signal is 
driven LOW. Then, the 82380 will relinquish the bus 
by de-asserting HOLD. Typically, a Refresh Cycle 
without wait states will take five bus states to exe- 
cute. If ‘n’ wait states are added, the Refresh Cycle 
will last for five plus ‘n’ bus states. 

How often the Refresh Generation will initiate a re- 
fresh cycle depends on the frequency of CLKIN as 
well as TIMERVs programmed mode of operation. 
For this specific application, TIMER1 should be pro- 
grammed to operate in Mode 2 or 3 to generate a 
constant clock rate. See section 6— Programmable 
Interval Timer for more information on programming 
the timer. One DRAM Refresh Cycle will be generat- 
ed each time TIMER 1 expires (when TOUT1 chang- 
es to LOW to HIGH). 

The Walt State Generator can be used to insert wait 
states during a refresh cycle. The 82380 will auto- 
matically insert the desired number of wait states as 
programmed In the Refresh Wait State Register (see 
Wait State Generator). 



*NOTE: 

A24~A31 = 1 during Refresh cycle. 


Figure 7-2. 82380 Refresh Cycle 
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7.4 Modes of Operation 

7.4.1 WORD SIZE AND REFRESH ADDRESS 
COUNTER 

The 82380 supports 8-, 16- and 32-bit refresh cycle. 
The bus width during a refresh cycle is programma- 
ble (see Programming). The bus size can be pro- 
grammed via the Refresh Control Register (see Reg- 
ister Overview). If the DRAM bus size is 8-, 16-, or 
32-bits, the Refresh Address Counter will be Incre- 
mented by 1 , 2, or 4, respectively. 

The Refresh Address Counter is cleared by a hard- 
ware reset. 


7.5 Register Set Overview 

The Refresh Generator has two internal registers to 
control its operation. They are the Refresh Control 
Register and the Refresh Wait State Register. Their 
port address map is shown in Table 7-1 beiow. 


Port Address 

Description 

1CH 

75H 

Refresh Control Reg. (read/write) 
Ref. Wait State Reg. (read/write) 


Table 7-1. Register Address Map 


The Refresh Wait State Register is not part of the 
Refresh Generator. It is only used to program the 
number of wait states to be inserted during a refresh 
cycle. This register is discussed in detail In section 7 
(Wait State Generator) and will not be repeated 
here. 

REFRESH CONTROL REGISTER 

This 2-bit register serves two functions. First, It is 
used to enable/disable the DRAM Refresh function 
output. If disabled, the output of TIMER 1 is simply 
used as a general purpose timer. The second func- 
tion of this register is to program the DRAM bus size 
for the refresh operation. The programmed bus size 
also determines how the Refresh Address Counter 
will be incremented after each refresh operation. 


7.6 Programming 

Upon hardware reset, the DRAM Refresh function is 
disabled (the Refresh Control Register is cleared). 
The following programming steps are needed before 
the Refresh Generator can be used. Since the rate 
of refresh cycles depends on how TIMER 1 is pro- 
grammed, this timer must be initialized with the de- 
sired mode of operation as well as the correct re- 
fresh interval (see Programming Interval Timer). 


Whether or not wait states are to be generated dur- 
ing a refresh cycle, the Refresh Wait State Register 
must also be programmed with the appropriate val- 
ue. Then, the DRAM Refresh feature must be en- 
abled and the DRAM bus width should be defined. 
These can be done in one step by writing the appro- 
priate control word into the Refresh Control Register 
(see Register Bit Definition). After these steps are 
done, the refresh operation will automatically be in- 
voked by the Refresh Generator upon expiration of 
Timer 1. 

In addition to the above programming steps, it 
should be noted that after reset, although the 
TOUT1/REF# becomes the Timer 1 output, the 
state of this pin is undefined. This is because the 
Timer module has not been initialized yet. Therefore, 
if this output is used as a DRAM Refresh signal, this 
pin should be disqualified by external logic until the 
Refresh function is enabled. One simple solution is 
to logically AND this output with HLDA, since HLDA 
should not be active after reset. 


7.7 Register Bit Definition 


REFRESH CONTROL REGISTER 
Port Address: 1CH (Read/Write) 





1 

1 

■ 


1 — > 00 REF. DISABLE 
MUST BE ZERO 01 BUS SIZE = 32 

10 BUS SIZE = 16 

11 BUS SIZE = 8 
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8.0 RELOCATION REGISTER AND 
ADDRESS DECODE 


8.1 Relocation Register 

All the integrated peripheral devices in the 82380 
are controlled by a set of internal registers. These 
registers span a total of 256 consecutive address 
locations (although not all the 256 locations are 
used). The 82380 provides a Relocation Register 
which allows the user to map this set of internal reg- 
isters into either the memory or I/O address space. 
The function of the Relocation Register is to define 
the base address of the internal register set of the 
82380 as well as if the registers are to be memory- 
or I/O-mapped. The format of the Relocation Regis- 
ter is depicted in Figure 8-1 . 
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D7 

D6 

D5 

D4 

D3 

D2 

D1 

DO 

A31/ 

A15 

A30/ 

A14 

A29/ 

A13 

A28/ 

A12 

A27/ 

All 

A26/ 

A10 

A25/ 

A9 

M/IO# 


FOR I/O MAPPED: A1 5-A9 0 - I/O MAPPED 

FOR MEMORY MAPPED: A31 -A25 1 - MEMORY 

MAPPED 

290128-B2 


Figure 8-1. Relocation Register 

Note that the Relocation Register is part of the inter- 
nal register set of the 82380. It has a port address of 
7FH. Therefore, any time the content of the Reloca- 
tion Register is changed, the physical location of this 
register will also be moved. Upon reset of the 82380, 
the content of the Relocation Register will be 
cleared. This implies that the 82380 will respond to 
its I/O addresses in the range of OOOOH to OOFFH. 

8.1.1 I/O-MAPPED 82380 

As shown in the figure. Bit 0 of the Relocation Regis- 
ter determines whether the 82380 registers are to be 
memory-mapped or I/O-mapped. When Bit 0 is set 
to ‘O’, the 82380 will respond to I/O Addresses. Ad- 
dress signals BE0#-BE3#, A2-A7 will be used to 
select one of the internal registers to be accessed. 
Bit 1 to Bit 7 of the Relocation Register will corre- 
spond to A9 to A1 5 of the Address bus, respectively. 
Together with A8 implied to be ‘O’, A15 to A8 will be 
fully decoded by the 82380. The following shows 
how the 82380 is mapped into the I/O address 
space. 

Example 

Relocation Register = 11001110 (OCEH) 

82380 will respond to I/O address range from 
OCEOOH to OCEFFH. 

Therefore, this I/O mapping mechanism allows the 
82380 Internal registers to be located on any even, 
contiguous, 256 byte boundary of the system I/O 
space. 

Port Address: 7FH (Read/Write) 

8.1.2 MEMORY-MAPPED 82380 

When Bit 0 of the Relocation Register is set to ‘1’, 
the 82380 will respond to memory addresses. Again, 
Address signals BE0#-BE3#, A2-A7 will be used 
to select one of the internal registers to be ac- 
cessed. Bit 1 to Bit 7 of the Relocation Register will 
correspond to A25-A31, respectively. A24 is as- 
sumed to be ‘O’, and A8-A23 are ignored. Consider 
the following example. 


Example 

Relocation Register = 10100111 (0A7H) 

The 82380 will respond to memory addresses in 
the range of 0A6XXXX00H to 0A6XXXXFFH 
(where ‘X’ is don’t care). 

This scheme implies that the internal register can be 
located in any even, contiguous, 2**24 byte page of 
the memory space. 

8.2 Address Decoding 

As mentioned previously, the 82380 internal regis- 
ters do not occupy the entire contiguous 256 ad- 
dress locations. Some of the locations are ‘unoccu- 
pied’. The 82380 always decodes the lower 8 ad- 
dress bits (A0-A7) to determine if any one of its 
registers is being accessed. If the address does not 
correspond to any of its registers, the 82380 will not 
respond. This allows external devices to be located 
within the ‘holes’ in the 82380 address space. Note 
that there are several unused addresses reserved 
for future Intel peripheral devices. 

9.0 CPU RESET AND SHUTDOWN 
DETECT 

The 82380 will activate the CPURST signal to reset 
the host processor when one of the following condi- 
tions occurs: 

— 82380 RESET Is active; 

— 82380 detects a 80386 Shutdown cycle (this fea- 
ture can be disabled); 

— CPURST software command is Issued to 80386. 

Whenever the CPURST signal is activated, the 
82380 will reset its own internal Slave-Bus state ma- 
chine. 

9.1 Hardware Reset 

Following a hardware reset, the 82380 will assert Its 
CPURST output to reset the host processor. This 
output will stay active for as long as the RESET input 
is active. During a hardware reset, the 82380 internal 
registers will be initialized as defined in the corre- 
sponding functional descriptions. 

9.2 Software Reset 

CPURST can be generated by writing the following 
bit pattern Into 82380 register location 64H. 


D7 DO 


1 

1 

1 

1 

X 

X 

X 

0 


X = Don’t Care 
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The Write operation into this port is considered as 
an 82380 access and the internal Wait State Gener- 
ator will automatically determine the required num- 
ber of wait states. The CPURST will be active follow- 
ing the completion of the Write cycle to this port. 
This signal will last for 62 CLK2 periods. The 82380 
should not be accessed until the CPURST is deacti- 
vated. 

This internal port Is Write-Only and the 82380 will 
not respond to a Read operation to this location. 
Also, during a CPU software reset command, the 
82380 will reset its Slave-Bus state machine. How- 
ever, its internal registers remain unchanged. This 
allows the operating system to distinguish a ‘warm’ 
reset by reading any 82380 internal register previ- 
ously programmed for a non-default value. The Diag- 
nostic registers can be used or this purpose (see 
Internal Control and Diagnostic Ports). 


9.3 Shutdown Detect 

The 82380 is constantly monitoring the Bus Cycle 
Definition signals (M/IO#, D/C#, R/W#) and is 
able to detect when the 80386 executes a Shutdown 
bus cycle. Upon detection of a processor shutdown, 
the 82380 will activate the CPURST output for 62 
CLK2 periods to reset the host processor. This sig- 
nal is generated after the Shutdown cycle Is termi- 
nated by the READY# signal. 

Although the 82380 Wait State Generator will not 
automatically respond to a Shutdown (or Halt) cycle, 
the Wait State Control inputs (WSCO, WSC1) can be 
used to determine the number of wait states in the 
same manner as other non-82380 bus cycle. 

This Shutdown Detect feature can be enabled or dis- 
abled by writing a control bit in the Internal Control 
Port at address 61 H (see Internal Control and Diag- 


nostic Ports). This feature is disabled upon a hard- 
ware reset of the 82380. As in the case of Software 
Reset, the 82380 will reset Its Slave-Bus state ma- 
chine but will not change any of Its internal register 
contents. 


10.0 INTERNAL CONTROL AND 
DIAGNOSTIC PORTS 


10.1 Internal Control Port 

The format of the Internal Control Port of the 82380 
is shown in Figure 10.1. This Control Port Is used to 
enable/disable the Processor Shutdown Detect 
mechanism as well as controlling the Gate inputs of 
the Timer 2 and 3. Note that this is a Write-Only port. 
Therefore, the 82380 will not respond to a read op- 
eration to this port. Upon hardware reset, this port 
will be cleared; i.e., the Shutdown Detect feature 
and the Gate inputs of Timer 2 and 3 are disabled. 


10.2 Diagnostic Ports 

Two 8-bit read/write Diagnostic Ports are provided 
in the 82380. These are two storage registers and 
have no effect on the operation of the 82380. They 
can be used to store checkpoint data or error codes 
in the power-on sequence and in the diagnostic 
service routines. As mentioned in CPU RESET AND 
SHUTDOWN DETECT section, these Diagnostic 
Ports can be used to distinguish between ‘cold’ and 
‘warm’ reset. Upon hardware reset, both Diagnostic 
Ports are cleared. The address map of these Diag- 
nostic Ports Is shown in Figure 10-2. 


Port 

Address 

Diagnostic Port 1 (Read/Write) 
Diagnostic Port 2 (Read/Write) 

80H 

88H 


Figure 10-2. Address Map of Diagnostic Ports 


Port Address: 61 H (Write Only) 


D7 

D6 

D5 

D4 

D3 

D2 

D1 

DO 

SHUTDOWN 

ENABLE/ 

DISABLE 

COUNTER 3 
GATE 
INPUT 

D 

D 

D 


D 

COUNTER 2 
GATE 
INPUT 


SHUTDOWN 
DETECT 
0- DISABLE 
1 - ENABLE 




COUNTER 3 
GATE 

0- DISABLE 
1 - ENABLE 


COUNTER 2 
GATE 

0- DISABLE 
1 - ENABLE 
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Figure 10-1. Internal Control Port 
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11.0 INTEL RESERVED I/O PORTS 

There are eleven I/O ports in the 82380 address 
space which are reserved for Intel future peripheral 
device use only. Their address locations are: 2AH, 
3DH. 3EH, 45H, 46H, 76H, 77H, 7DH, 7EH. CCH 
and CDH. These addresses should not be used In 
the system since the 82380 may respond to read/ 
write operations to these locations and bus conten- 


tion may occur if any peripheral is assigned to the 
same address location. 

12.0 MECHANICAL DATA 

12.1 Introduction 

In this section, the physical package and its connec- 
tions are described in detail. 
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Figure 12.1. 82380 PGA Pinout— View from TOP side 
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12.2 Pin Assignment 

The 82380 pinout as viewed from the top side of the 
component is shown in Figure 12.1. Its pinout as 
viewed from the pin side of the component is shown 
in Figure 12.2. 


Vcc and GND connections must be made to multi- 
ple Vcc and Vss (GND) pins. Each Vcc and Vss 
MUST be connected to the appropriate voltage lev- 
el. The circuit board should include Vcc and GND 
planes for power distribution and all Vcc Pins must 
be connected to the appropriate plane. 
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Figure 12.2. 82380 PGA Pinout — View from PIN side 
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Table 12-1. 82380 PGA Pinout — Functional Grouping 


Pin/Signal 

Pin/Signal 

Pin/Signal 

Pin/Signal 
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B9 

D30 

M14 

Vcc 

A1 

Vss 
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12.3 Package Dimensions and 
Mounting 

The 82380 package is a 132-pin ceramic Pin Grid 
Array (PGA). The pins are arranged 0.100 inch (2.54 
mm) center-to-center, in a 14 x 14 matrix, three rows 
around. 


A wide variety of available sockets allow low inser- 
tion force or zero insertion force mountings, and a 
choice of terminals such as soldertail, surface 
mount, or wire wrap. Several applicable sockets are 
listed in Figure 1 2-4. 



Figure 12.3. 132-Pin Ceramic PGA Package Dimensions 
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• Low insertion force (LIF) soldertail 
55274-1 

• Amp tests indicate 50% reduction in insertion 
force compared to machined sockets 

Other socket options 

• Zero insertion force (ZIF) soldertail 
55583-1 

• Zero insertion force (ZIF) Burn-in version 
55573-2 

Amp Incorporated 

(Harrisburg, PA 17105 U.S.A. 

Phone 717-564-0100) 



290128-97 

Cam handle locks In low profile position when substrate is installed 
(handle UP for open and DOWN for closed positions) 

courtesy Amp Incorporated 


Peel-A-WayTM Mylar and Kapton 

Socket Terminal Carriers 

• Low Insertion force surface mount 
CS132-37TG 

• Low Insertion force soldertail 
CS1 32-01 TG 

• Low insertion force wire-wrap 
CS132-02TG (two level) 
CS132-03TG (three-level) 

• Low insertion force press-fit 
CS132-05TG 

AHuan^ari intefconnections 
(5 Division Street 
Warwick. Rl 02818 U.S.A. 

Phone 401-885-0485) 


Peel-A-Way Carrier No. 132; 
Kapton Carrier is KS132 
Mylar Carrier is MSI 32 
Molded Plastic Body KS132 
is shown below: 


FOOT PRINT NO. 132 



HK .100TYP 
14 1 14x3 ROWS 


290128-98 



290128-99 

courtesy Advanced Interconnections 
(Peel-A-Way Terminal Carriers 
U.S. Patent No. 4442938) 


Figure 12-4. Several Socket Options for 132-pin PGA 
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• Low insertion force socket soldertail 
(for production use) 
2XX-6576-00-3308 (new style) 
2XX-6003.00-3302 (older style) 

• Zero insertion force soldertail 
(for test and burn-in use) 
2XX-6568-00-3302 

Textool Products 

Electronic Products Dlvision/Sm 

(1410 West Pioneer Drive 
Irving. Texas 75601 U.S.A. 

Phone 214-259-2676) 






L 





r ■■ 

1 

1 

‘\ L. .... 1 1 " 


ITZT 

n 




courtesy Textoll Products/3M 


290128-A0 


Figure 12-4. Several Socket Options for 132-pin PGA (Continued) 


12.4 Package Thermal Specification 

The 82380 is specified for operation when case tem- 
perature is within the range of 0°C -85°C. The case 
temperature may be measured in any environment, 


to determine whether the 82380 is within the speci- 
fied operating range. 

The PGA case temperature should be measured at 
the center of the top surface opposite the pins, as in 
Figure 12.5. 
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Thermal Resistance— °C/Watt 

Parameter 

Airflow— f3/min (m3/sec) 

0 

(0) 

50 

(0.25) 

100 

(0.50) 

200 

(1-01) 

400 

(2.03) 

600 

(3.04) 

800 

(4.06) 

0 Junctlon-to-Case 
(case measured 
as Fig. 6.4) 

2 

2 

2 

2 

2 

2 

2 

$ Case-to-Ambient 
(no heatsink) 

19 

18 

17 

15 

12 

10 

9 

d Case-to-Ambient 
(with omnidirectional 
heatsink) 

16 

15 

14 

12 

9 

7 

6 

0 Case-to-Ambient 
(with unidirectional 
heatsink) 

15 

14 

13 

11 

8 

6 

5 


®J pin 

r\ 

i 

»Jo 



cop 



NOTES: 

1. Table 12-6 applies to 82380 PGA plugged into socket or soldered 
directly into board. 

2. ^JA = ^JC + ^CA- 

3- ^J-CAP = 4”C/W (approx.) 

0J.PIN = 4“C/W (inner pins) (approx.) 

Oj.piN = 8“C/W (outer pins) (approx.) 


Figure 12-6. 82380 PGA Package Typical Thermai Characteristics 


13.0 ELECTRICAL DATA 


13.1 Power and Grounding 

The large number of output buffers (address, data 
and control) can cause power surges as multiple 
ciitpUi buffers drive new signal levels simultaneous- 
ly. The 22 Vcc and Vss P'ms of the 82380 each feed 
separate functional units to minimize switching in- 
duced noise effects. All Vcc pins of the 82380 must 
be connected on the circuit board. 


connects are recommended for the best reliability at 
high frequencies. Low inductance capacitors are 
available specifically for Pin Grid Array packages. 

13.3 Unused Pin Recommendations 

A I IA/A\/0 

I dUKji If r^L.vTr^ I w v^v/i II iwyi ui imo^m ii i~ 

puts to a valid logic level. As is the case with most 
other CMOS processes, a floating input wiii increase 
the current consumption of the component and give 
an indeterminate state to the component. 


13.2 Power Decoupling 

Liberal decoupling capacitance should be placed 
close to the 82380. The 82380 driving its 32-bit par- 
allel address and data buses at high frequencies can 
cause transient power surges when driving large ca- 
pacitive loads. Low Inductance capacitors and inter- 


13.4 ICE-386 Support 

The 82380 specifications provide sufficient drive ca- 
pability to support the ICE386. On the pins that are 
generally shared between the 80386 and the 82380, 
the additional loading represented by the ICE386 
was allowed for in the design of the 82380. 
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13.5 Maximum Ratings 

Storage Temperature -65®C to + 1 50°C 

Case temperature Under Bias . , . -GS^C to + HO^C 
Supply Voltage with Respect 

toVss -0.5V to +6.5V 

Voltage on any other Pin -0.5V to Vcc + 0.5V 

NOTE: 

Stress above those listed above may cause perma- 
nent damage to the device. This is a stress rating 


13.6 D.C. Specifications 

TcaSE = 0°C to 85“C; Vcc = 5V ±5%; Vss = OV. 


Table 13-1. 


Symbol 

Parameter 

Min 

Max 

Unit 

Notes 

V|L 

Input Low Voltage 

-0.3 

0.8 

V 

(Note 1 ) 

V|H 

Input High Voltage 

2.0 

Vcc + 0.3 

V 


V|LC 

CLK2 Input Low Voltage 

-0.3 

0.8 


(Note 1 ) 

V|HC 

CLK2 Input High Voltage 

00 

d 

1 

o 

Vcc + 0.3 

V 


VoL 

Output Low Voltage 

IOL = 4mA; A2-A31, 






D0-D31 


0.45 

V 



Iql = 5 mA; All Others 


0.45 

V 


VoH 

Output High Voltage 
lOH = -1 niA: A2-A31, 






D0-D31 

2.4 


V 



Iqh = “P-9 nriA: All Others 

2.4 


V 


Ili 

Input Leakage Current for 
ail Ins except: 

IRQ11#-IRQ23#, 

TOUT2/IRQ3#, EOP#, DREQ4 


±15 

jllA 

0V<V|N<Vcc 

•lii 

Input Leakage Current for 
pins: IRQ11#-IRQ23#, 
TOUT2#/IRQ3#, EOP#, DREQ4 

10 

-300 

jllA 

0V<V|N<Vcc 
(Note 3) 

•lo 

Output Leakage Current 


±15 

jllA 

0.45 <VouT< Vcc 

Ice 

Supply Current 


300 

mA 

CLK2 = 32 MHz 




325 

mA 

= 40 MHz 






(Note 4) 

(CAP) 

Capacitance (Input/ 10) 


12 

PF 

fc = 1 MHz 
(Note 2) 

CCLK 

CLK2 Capacitance 


20 

PF 

fc = 1 MHz 
(Note 2) 


NOTES: 

1. Minimum value is not 100% tested. 

2. Sampled only. 

3. These pins have internal pullups on them. 

4. Ice is specified with inputs driven to CMOS levels. Ice nnay be higher if driven to TTL levels. 


only and functional operation at these or any other 
conditions above those listed in the operational 
sections of this specification is not Implied. 

Exposure to absolute maximum rating conditions for 
extended periods may affect device reliability. Al- 
though the 82380 contains protective circuitry to re- 
set damage from static electric discharges, always 
take precautions against high static voltages or elec- 
tric fields. 
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13.6 D.C. Specifications (Continued) 

Tcase = 0°C to 85°C; Vcc = 5V ±5%; Vss = OV. 


Table 13-2. 82380-25 D.C. Specifications 


Symbol 

Parameter 

Min 

Max 

Unit 

Notes 

V|L 

Input Low Voltage 

-0.3 

0.8 

V 

(Note 1) 

V|H 

Input High Voltage 

2.0 

Vcc + 0.3 

V 


V|LC 

CLK2 Input Low Voltage 

-0.3 

0.8 

V 


ViKC 

r^l 1^0 inmif Ullnh \//-klf<an£» 

II l^««« 1 11^1 1 * 

\/ A Q 

\/ LAO 

y 


VoL 

Output Low Voltage 

Iql = 4 mA: A 2 -A 31 , Do-Dai 

Iql = 5 mA: All Others 


0.45 

0.45 

V 

V 


VOH 

Output High Voltage 

•oh = “1 mA: A 2 “A 3 i, D 0 --D 31 

•oh = -0.9 mA: All Others 

2.4 

2.4 


V 

V 

- 

Ili 

Input Leakage Current 

All Inputs except: IRQ1 1 #- 
IRQ23#,EOP#,TOUT2/IRQ3#, , 
DREQ4 


±15 

fxA 


•lii 

Input Leakage Current 

Inputs: IRQ11#-IRQ23#, 

EOP#, TOUT2/IRQ3#, DREQ4 

10 

-300 

jxA 

0 < V|N < Vcc 
(Note 3) 

•lo 

Output Leakage Current 


±15 

juA 

0 < V|N < Vcc 

•cc 

Supply Current (CLK2 = 50 MHz) 


375 

mA 

(Note 4) 

C| 

Input Capacitance 


12 

PF 

(Note 2) 

CcLK 

CLK2 Input Capacitance 


20 

PF 

(Note 2) 


NOTES: 

1. Minimum value is not 100% tested. 

2. fn = 1 MHz; Sampled only. 

3. fhese pins have weak internal pullups. They should not be left floating. 

4. Iqc *5 specified with inputs driven to CMOS levelS; and outputs driving CMOS loads. Icq may be higher if inputs are driven 
to TTL levels, or if outputs are driving TTL loads. 
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13.7 A.C. Specif ications 

The A.C. specifications given in the following tables 
consist of output delays and Input setup require- 
ments. The A.C. diagram’s purpose is to Illustrate 
the clock edges from which the timing parameters 
are measured. The reader should not infer any other 
timing relationships from them. For specific Informa- 
tion on timing relationships between signals, refer to 
the appropriate functional section. 


A.C. spec measurement is defined in Figure 13.1. 
Inputs must be driven to the levels shown when A.C. 
specifications are measured. 82380 output delays 
are specified with minimum and maximum limits, 
which are measured as shown. The minimum 82380 
output delay times are hold times for external circuit- 
ry. 82380 input setup and hold times are specified as 
mlnimums and define the smallest acceptable sam- 
pling window. Within the sampling window, a syn- 
chronous input signal must be stable for correct 
82380 operation. 



® — maximum output delay spec 
® — minimum output delay spec 
©—minimum input setup spec 
©—minimum input hold spec 

NOTES: 

1. Input waveforms have tr ^ 2.0 ns from 0.8V to 2.0V. 

2. Under rated loading (120 pF) 82380 output tr, tf is typically ^ 4.0 ns from 0.8V to 2.0V. 

Figure 13-1. Drive Leveis and Measurement Points for A.C. Specification 
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A.C. SPECIFICATION TABLES 

Functional Operating Range: Vcc = 5V ±5%; Tcase == to +85°C 


Table 13-3. 82380 A.C. Characteristics 


Symbol 

Parameter 

82380-16 

82380-20 

Notes 

Min 

Max 

Min 

Max 





Operating Frequency 

4 MHz 

16 MHz 

4 MHz 

20 MHz 

Half CLK2 Frequency 

t1 

CLK2 Period 

31 ns 

125 ns 

25 ns 



t2a 

CLK2 High Time 

9 


8 


at 2.0V 

t2b 

CLK2 High Time 

5 


5 


at (Vcc“0.8)V 

t3a 

CLK2 Low Time 

9 


8 


at 2.0V 

t3b 

CLK2 Low Time 

7 


6 


at 0.8V 

t4 

CLK2 Fall Time 


8 


8 

(Vcc'-0.8)V to 0.8V 

t5 

CLK2 Rise Time 


8 


8 

0.8Vto(Vcc-0.8)V 


A (2-31), BE (0-3) #, 







EDACK (0-2) 






t6 

Valid Delay 

4 


4 

30 

CL = 120pF 

t7 

Float Delay 

4 


4 

32 

(Note 1) 


A (2-31), BE (0-3) # 






t8 

Setup Time 

6 


6 



t9 

Hold Time 

4 


4 




W/R#,M/IO#,D/C#, 






tio 

Valid Delay 

6 


6 

28 

CL = 75 pF 

til 

Float Delay 

4 


4 

30 

(Note 1) 

t12 

Setup Time 

6 


6 



t13 

Hold Time 

4 


4 



t14 

ADS# Valid Delay 



6 

28 

CL = 75 pF 

t15 

Float Delay 



4 

30 


tie 

Setup Time 



15 



t17 

Hold Time 



A 




Slave Mode — 
D(0-31)Read 






t18 1 

Valid Delay 

3 

46 

4 

46 

CL = 120 pF 

t19 

Float Delay 

6 

35 

6 

29 

(Note 1) 


Slave Mode— 

D(0-31) Write 






t20 

Setup Time 

31 


29 



t21 

Hold Time 

26 


26 
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A.C. SPECIFICATION TABLES (Continued) 

Functional Operating Range: Vcc = 5V ±5%; Tcase == to +85°C. 


Table 13-3. 82380 A.C. Characteristics (Continued) 


Symbol 

Parameter 

82380-16 

82380-20 

Notes 

Min 

Max 

Min 

Max 





Master Mode — 

D(0-31) Write 






t22 

Valid Delay 

4 

48 

4 

38 

CL = 120 pF 

t23 

Float Delay 

4 

35 

4 

27 

(Note 1) 


Master Mode — 
D(0-31)Read 






t24 

Setup Time 

11 


11 



t25 

Hold Time 

6 


6 



t26 

READY# Setup Time 

21 


12 



t27 

Hold Time 

4 


4 



t28 

WSC (0-1) Setup 

6 


6 



t29 

Hold 

21 


21 



t31 

RESET Setup Time 

13 


12 



t30 

Hold Time 

4 


4 



t32 

READYO# Valid Delay 

4 

31 

4 

28 

CL = 25 pF 

t33 

CPU Reset From CLK2 

2 

18 

2 

16 

CL = 50 pF 

t34 

HOLD Valid Delay 

5 

33 

5 

30 

CL = 100 pF 

t35 

HLDA Setup Time 

21 


17 



t36 

Hold Time 

6 


6 



t37a 

EOP# Setup Time 

21 


17 


Synch. EOP 

t38a 

EOP# Hold Time 

4 


4 



t37b 

EOP# Setup Time 

11 


11 


Asynch. EOP 

t38b 

EOP# Hold Time 

11 


11 



t39 

EOP# Valid Delay 

5 

38 

5 

30 

CL = 100pF(‘r->‘0’) 

t40 

EOP# Float Delay 

5 

40 

5 

32 


t41a 

DREQ Setup Time 

21 


19 


Synchronous DREQ 

t42a 

Hold Time 

4 


4 



t41b 

DREQ Setup Time 

11 


11 


Asynchronous DREQ 

t42b 

Hold Time 

11 


11 



t43 

INT Valid Delay 


500 


500 

From IRQ Input 

CL = 75 pF 

BBi 

NA# Setup Time 

11 


10 




Hold Time 

15 


15 
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A.C. SPECIFICATION TABLES (Continued) 

Functional Operating Range; Vcc = 5V ±5%; Tcase = to +85°C. 


Table 13-3. 82380 A.C. Characteristics (Continued) 


Symbol 

Parameter 

82380-16 

82380-20 

Notes 

Min 

Max 

Min 

Max 

t46 

CLKIN Frequency 

OMHz 

10 MHz 

OMHz 

10 MHz 


t47 

CLKIN High Time 

30 


30 


At 1.5V 

t48 

CLKIN Low Time 

50 


50 


At 1.5V 

t49 

CLKIN Rise Time 


10 


10 

0.8V to 2.0V 

t50 



10 


10 

2.0V to 0.8V 

t51 


4 

36 

4 


From CLK2, CL = 25 pF 


TOUT1/REF# Valid 

3 

93 

3 

93 

From CLKIN, CL = 120pF 

t53 



93 



From CLKIN, CL = 120pF 
(Falling Edge Only) 

t54 

TOUT2# Float Delay 

3 

40 

3 

40 

From CLKIN (Notel) 

t55 

TOUTS# Valid Delay 

3 

93 

3 

93 

From CLKIN, CL = 120pF 


NOTE: 

1. Float condition occurs when the maximum output current becomes less than ILO In magnitude. Float delay is not tested. 
For testing purposes, the float condition occurs when the dynamic output driven voltage changes with current loads. 


Functional Operating Range: Vcc = 5V ±5%; Tcase ~ 0**^ to +85®C. 
A.C. timings are tested at 1 .5V thresholds; except as noted. 


Table 13-4. 82380-25 A.C. Characteristics 


Symbol 

Parameter 

82380-25 

Unit 

Notes 

Min 

Max 


Operating Frequency 1/(t1 a x 2) 

4 

25 



t1 

CLK2 Period 

20 

125 

ns 


t2a 

CLK2 High Time 

7 


ns 

at 2.0 V 

t2b 

CLK2 High Time 

4 


ns 

at 3.7V 

t3a 

CLK2 Low Time 

7 


ns 

at 2.0V 

t3b 

CLK2 Low Time 

4 


ns 

at 0.8V 

t4 

CLK2 Fall Time 


7 

ns 

3.7V to 0.8V 

t5 

CLK2 Rise Time 


7 

ns 

0.8V to 3.7V 

t6 

A2-A31,BE0#-BE3# 
EDACK0-EDACK3 Valid Delay 

4 

20 


50 pF Load 

t7 

A2-A31,BE0#-BE3# 
EDACK0-EDACK3 Float Delay 

4 

27 


50 pF Load 

t8 

A2-A31, BE0#-BE3# Setup Time 

6 


ns 


t9 

A2-A31, BE0#-BE3# Hold Time 

4 


ns 


■R9Hil 


4 

20 

ns 

50 pF Load 



4 

29 

ns 

50 pF Load 
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A.C. SPECIFICATION TABLES (Continued) 


Functional Operating Range: Vcc = 5V ±5%; Tcase = to +85°C. 
A.C. timings are tested at 1 .5V thresholds; except as noted. 


Symbol 


Table 13-4. 82380-25 A.C. Characteristics (Continued) 
Parameter 


W/R#, M/IO#, D/C# Setup Time 
W/R#, M/IO#, D/C# Hold Time 

ADS# Valid Delay 
ADS# Float Delay 

ADS# Setup Time 
ADS# Hold Time 

Slave Mode D0~D31 Read Valid 
Slave Mode D0-D31 Read Float 


Unit 

Notes 

ns 


ns 


ns 

50 pF Load 

ns 

50 pF Load 


50 pF Load 
50 pF Load 
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A.C. SPECIFICATION TABLES (Continued) 


Functional Operating Range: Vcc = 5V ±5%; Tcase = 0“^ +85®C. 

A.C. timings are tested at 1 .5V thresholds; except as noted. 


Symbol 


Table 13-4. 82380-25 A.C. Characteristics (Continued) 


82380-25 


Parameter 



























82380 


int^ 


Tx 

1 PHM 1 PHI 2 

Tx Tx 

PHM 1 PHI 2 1 PHM 1 PHI 2 

/ \ / V > 

f \ / ^ / \ / \ 

A(2-31). BE(0-3)# 

— 

TSMIn 


TO 

( 

VALID DELAY 

Ar2-31V BEro-3^^ 



TGMax 


T6Min 

EDACK(0 - 2) 

n 

oooo 

[ 

VALID DELAY 

Ar2-31V BEro-3U 



T6Max 


T7M?n 

EDACK(0-2) 



T7Max 

FLOAT DELAY 



^ ^ 

T14Mln 

ADS# 

VAiin nn AY 

“) 


C 

ADS# 



T14Max 

— ► 

T14Mln 

TO 

C 

VALID DELAY 



TUMax 


T1 5MIn 

ADS# 

FinATnFlAY 

D 

TO 

TISMax 

HOLD 



— *■ 

T34Mln 

/ 

T34Max 

290128-A8 





Figure 13-6. Address Output Delays 
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APPENDIX A 
Ports Listed by Address 


Port Address (HEX) Description 


00 

01 

02 

03 

04 

05 

06 

07 

08 

09 
OA 
OB 
OC 
OD 
OE 
OF 

10 
11 
12 

13 

14 

15 

16 

17 

18 

19 
1A 
IB 
1C 
IE 

20 


21 

22 

28 

29 

2A 

2B 

2C 

2D 

2E 

2F 


Read/Wrlte DMA Channel 0 Target Address, A0-A16 
Read/Write DMA Channel 0 Byte Count, B0-B15 
Read/Write DMA Channel 1 Target Address, A0-A15 
Read/Write DMA Channel 1 Byte Count, B0-B15 
Read/Write DMA Channel 2 Target Address, A0-A15 
Read/Write DMA Channel 2 Byte Count, B0~B15 
Read/Write DMA Channel 3 Target Address, A0-A1 5 
Read/ Write DMA Channel 3 Byte Count, B0-B15 
Read/Write DMA Channel 0-3 Status/ Command I Register 
Read/Write DMA Channel 0-3 Software Request Register 
Write DMA Channel 0-3 Set-Reset Mask Register 
Write DMA Channel 0-3 Mode Register I 
Write Clear Byte-Pointer FF 
Write DMA Master-Clear 
Write DMA Channel 0-3 Clear Mask Register 
Read/ Write DMA Channel 0-3 Mask Register 
Read/Write DMA Channel 0 Target Address, A24-A31 
Read/Write DMA Channel 0 Byte Count, B16-B23 
Read/Write DMA Channel 1 Target Address, A24-A31 
Read/Write DMA Channel 1 Byte Count, B16-B23 
Read/Write DMA Channel 2 Target Address, A24-A31 
Read/Write DMA Channel 2 Byte Count, B16-B23 
Read/Write DMA Channel 3 Target Address, A24-A31 
Read/ Write DMA Channel 3 Byte Count, B16-B23 
Write DMA Channel 0-3 Bus Size Register 
Read/Write DMA Channel 0-3 Chaining Register 
Write DMA Channel 0-3 Command Register II 
Write DMA Channel 0-3 Mode Register II 
Read /Write Refresh Control Register 
Reset Software Request Interrupt 
Write Bank B ICW1, OCW2, or OCW3 
Read Bank B Poll, Interrupt Request or In-Service 
Status Register 

Write Bank B ICW2, ICW3, ICW4 or OCW1 
Read Bank B Interrupt Mask Register 
Read Bank B ICW2 
Read/Write IRQ8 Vector Register 
Read/ Write IRQ9 Vector Register 
Reserved 

Read/Write IRQ1 1 Vector Register 
Read/Write IRQ1 2 Vector Register 
Read/Write IRQ13 Vector Register 
Read/Write IRQ1 4 Vector Register 
Read/Write IRQ1 5 Vector Register 
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APPENDIX A — Ports Listed by Address (Continued) 

Port Address (HEX) Description 


30 


31 

32 

38 

39 
3A 
3B 
3C 
3D 
3E 
3F 

40 

41 

42 

43 

44 

45 

46 

47 
61 
64 

72 

73 

74 

75 

76 

77 
7D 
7E 
7F 
80 
81 
82 
83 

87 

88 
89 
8A 
8B 
8F 


Write Bank A 1CW1 , OCW2 or OCW3 
Read Bank A Poll, Interrupt Request or In-Service 
Status Register 

Write Bank A ICW2. ICW3, ICW4 or OCW1 
Read Bank A Interrupt Mask Register 
Read Bank A ICW2 
Read/Write IRQO Vector Register 
Read/Write 1RQ1 Vector Register 
Read/Write IRQ1.5 Vector Register 
Read/Write IRQ3 Vector Register 
Read/ Write IRQ4 Vector Register 
Reserved 
Reserved 

Read/Write IRQ7 Vector Register 

Read/Write Counter 0 Register 

Read/Write Counter 1 Register 

Read/Write Counter 2 Register 

Write Control Word Register I— Counter 0, 1 , 2 

Read/Write Counter 3 Register 

Reserved 

Reserved 

Write Word Register 11 — Counter 3 

Write Internal Control Port 

Write CPU Reset Register (Data-1 1 1 1XXX0H) 

Read/Write Wait State Register 0 

Read/Write Walt State Register 1 

Read/Write Wait State Register 2 

Read/Write Refresh Wait State Register 

Reserved 

Reserved 

Reserved 

Reserved 

Read/Write Relocation Register 

Read/Write Internal Diagnostic Port 0 

Read/ Write DMA Channel 2 Target Address, A16-A23 

Read/Write DMA Channel 3 Target Address, A16-A23 

Read/ Write DMA Channel 1 Target Address, A16-A23 

Read/Write DMA Channel 0 Target Address, A16-A23 

Read/Write Internal Diagnostic Port 1 

Read/Write DMA Channel 6 Target Address, A16~A23 

Read/Write DMA Channel 7 Target Address, A16-A23 

Read/Write DMA Channel 5 Target Address, A16-A23 

Read/Write DMA Channel 4 Target Address, A16-A23 
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APPENDIX A — Ports Listed by Address (Continued) 


Port Address (HEX) Description 

90 Read/Write DMA Channel 0 Requester Address, A0-A1 5 

91 Read/Write DMA Channel 0 Requester Address, A1 6~A31 

92 Read/Write DMA Channel 1 Requester Address, A0-A15 

93 Read/ Write DMA Channel 1 Requester Address, A1 6-A31 

94 Read/Write DMA Channel 2 Requester Address, A0-A1 5 

95 Read/ Write DMA Channel 2 Requester Address, A1 6-A31 

96 Read /Write DMA Channel 3 Requester Address, A0-A1 5 

97 Read/Write DMA Channel 3 Requester Address, A1 6-A31 

98 Read/Write DMA Channel 4 Requester Address, A0-A1 5 

99 Read/Write DMA Channel 4 Requester Address, A16-A31 

9A Read/Write DMA Channel 5 Requester Address, A0-A15 

9B Read/Write DMA Channel 5 Requester Address, A1 6-A31 

9C Read/Write DMA Channel 6 Requester Address, A0-A15 

9D Read/Write DMA Channel 6 Requester Address, A1 6-A31 

9E Read/Write DMA Channel 7 Requester Address, A0-A1 5 

9F Read/Write DMA Channel 7 Requester Address, A1 6-A31 

AO Write Bank C ICW1 , OCW2 or OCW3 

Read Bank C Poll, Interrupt Request or In-Service 
Status Register 

A1 Write Bank C ICW2, ICW3, ICW4 or OCW1 

Read Bank C Interrupt Mask Register 
A2 Read Bank CICW2 

A8 Read/Write IRQ1 6 Vector Register 

A9 Read/Write IRQ1 7 Vector Register 

AA Read/Write 1RQ1 8 Vector Register 

AB Read/Write IRQ1 9 Vector Register 

AC Read/Write IRQ20 Vector Register 

AD Read/Write IRQ21 Vector Register 

AE Read/Write IRQ22 Vector Register 

AF Read/Write IRQ23 Vector Register 

CO Read/Write DMA Channel 4 T arget Address. AO- A1 5 

Cl Read/Write DMA Channel 4 Byte Count, B0-B1 5 

C2 Read/Wriie DMA Channel 5 Target Address, A0-A1 5 

C3 Read/Write DMA Channel 5 Byte Count, B0-B1 5 

C4 Read/Write DMA Channel 6 Target Address, A0-A1 5 

C5 Read/Write DMA Channel 6 Byte Count, B0-B1 5 

C6 Read/WriteDMAChannel7Target Address, AO- A1 5 

07 Read/Write DMA Channel 7 Byte Count, B0-B1 5 

C8 Read DMA Channel 4-7 Status/Command I Register 

C9 Read/Write DMA Channel 4-7 Software Request Register 

CA Write DMA Channel 4-7 Set— Reset Mask Register 

CB Write DMA Channel 4-7 Mode Register I 

CC Reserved 

CD Reserved 

CE Write DMA Channel 4-7 Clear Mask Register 

CF Read/Write DMA Channel 4-7 Mask Register 
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APPENDIX A — Ports Listed by Address (Continued) 

Port Address (HEX) Description 


DO 

D1 

D2 

D3 

D4 

D5 

D6 

D7 

D8 

D9 

DA 

DB 


Read/Write DMA Channel 4 Target Address, A24-A31 
Read/Write DMA Channel 4 Byte Count, B16~B23 
Read/ Write DMA Channel 5 Target Address, A24-A31 
Read/Write DMA Channel 5 Byte Count, B16~B23 
Read/Write DMA Channel 6 Target Address, A24-A31 
Read/Write DMA Channel 6 Byte Count, B16-B23 
Read/ Write DMA Channel 7 Target Address, A24~A31 
Read/ Write DMA Channel 7 Byte Count, B1 6-B23 
Write DMA Channel 4-7 Bus Size Register 
Read/Write DMA Channel 4-7 Chaining Register 
Write DMA Channel 4-7 Command Register 1 1 
Write DMA Channel 4-7 Mode Register II 
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APPENDIX B 
Ports Listed by Function 


Port Address (HEX) 


OD 

OC 

08 

C8 

1A 

DA 

OB 

CB 

1B 

DB 

09 
C9 
IE 
OE 
CE 
OF 
CF 
OA 
CA 
18 
D8 
i9 
D9 
00 
87 

10 
01 
11 

90 

91 
02 
83 
12 
03 
13 

92 

93 


Description 

DMA CONTROLLER 

Write DMA Master-Clear 
Write DMA Clear Byte-Pointer FF 

Read/ Write DMA Channel 0-3 Status/Command I Register 
Read/Write DMA Channel 4-7 Status/Command I Register 
Write DMA Channel 0-3 Command Register 11 
Write DMA Channel 4-7 Command Register 11 
Write DMA Channel 0-3 Mode Register I 
Write DMA Channel 4-7 Mode Register I 
Write DMA Channel 0-3 Mode Register II 
Write DMA Channel 4-7 Mode Register II 
Read/Write DMA Channel 0-3 Software Request Register 
Read/Write DMA Channel 4-7 Software Request Register 
Reset Software Request Interrupt 
Write DMA Channel 0-3 Clear Mask Register 
Write DMA Channel 4-7 Clear Mask Register 
Read/Write DMA Channel 0-3 Mask Register 
Read/Write DMA Channel 4-7 Mask Register 
Write DMA Channel 0-3 Set-Reset Mask Register 
Write DMA Channel 4-7 Set-Reset Mask Register 
Write DMA Channel 0-3 Bus Size Register 
Write DMA Channel 4-7 Bus Size Register 
Read/vVrile DMA Channel 0—3 Chaining Register 
Read/Write DMA Channel 4-7 Chaining Register 
Read/ Write DMA Channel 0 Target Address, A0-A1 5 
Read/Write DMA Channel 0 Target Address, A16-A23 
Read/ Write DMA Channel 0 Target Address, A24-A31 
Read/Write DMA Channel 0 Byte Count, B0-B15 
Read/Write DMA Channel 0 Byte Count, B16-B23 
Read/Write DMA Channel 0 Requester Address, A0-A15 
Read/Write DMA Channel 0 Requester Address, A16-A31 
Read/Write DMA Channel 1 Target Address, A0-A15 
Read/Write DMA Channel 1 Target Address, A16-A23 
Read/Write DMA Channel 1 Target Address, A24-A31 
Read/Write DMA Channel 1 Byte Count, B0-B15 
Read /Write DMA Channel 1 Byte Count, B16-B23 
Read/Write DMA Channel 1 Requester Address, A0-A1 5 
Read/Write DMA Channel 1 Requester Address, A16-A31 
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APPENDIX B— Ports Listed by Function (Continued) 

Port Address (HEX) Description 


04 
81 

14 

05 

15 

94 

95 

06 
82 

16 
07 
17 

96 

97 
CO 
8F 
DO 
Cl 
D1 

98 

99 
C2 
8B 
D2 
C3 
D3 
9A 
9B 
C4 
89 
D4 
C5 
D5 
9C 
9D 
C6 
8A 
D6 
C7 
D7 
9E 
9F 


DMA CONTROLLER 

Read/Write DMA Channel 2 Target Address, A0-A1 5 
Read/ Write DMA Channel 2 Target Address, A16-A23 
Read/Write DMA Channel 2 Target Address, A24-A31 
Read/Write DMA Channel 2 Byte Count, B0-B15 
Read/Write DMA Channel 2 Byte Count, B16-B23 
Read/Write DMA Channel 2 Requester Address, A0-A1 5 
Read/Write DMA Channel 2 Requester Address, A16-A31 
Read/Write DMA Channel 3 Target Address, A0-A15 
Read/ Write DMA Channel 3 Target Address, A16-A23 
Read/Write DMA Channel 3 Target Address, A24-A31 
Read/Write DMA Channel 3 Byte Count, B0~B15 
Read/Write DMA Channel 3 Byte Count, B16-B23 
Read/Write DMA Channel 3 Requester Address, A0-A15 
Read/Write DMA Channel 3 Requester Address, A16~A31 
Read/ Write DMA Channel 4 Target Address, A0-A15 
Read/Write DMA Channel 4 Target Address, A16-A23 
Read/Write DMA Channel 4 Target Address, A24-A31 
Read/Write DMA Channel 4 Byte Count, B0-B15 
Read/Write DMA Channel 4 Byte Count, B16-B23 
Read/Write DMA Channel 4 Requester Address, A0-A15 
Read/Write DMA Channel 4 Requester Address, A16-A31 
Read/Write DMA Channel 5 Target Address, A0-A15 
Read/Write DMA Channel 5 Target Address, A16-A23 
Read/Write DMA Channel 5 Target Address, A24-A31 
Read/Write DMA Channel 5 Byte Count, B0-B15 
Read/Write DMA Channel 5 Byte Count, B16-B23 
Read/Write DMA Channel 5 Requester Address, A0-A1 5 
Read/Write DMA Channel 5 Requester Address, A16-A31 
Read/ Write DMA Channel 6 Target Address, A0-A15 
Read/Write DMA Channel 6 Target Address, A1 6-A23 
Read/Write DMA Channel 6 Target Address, A24-A31 
Read/Write DMA Channel 6 Byte Count, B0-B15 
Read/ Write DMA Channel 6 Byte Count, B16-B23 
Read/Write DMA Channel 6 Requester Address, AO- A1 5 
Read/Write DMA Channel 6 Requester Address, A16-A31 
Read/Write DMA Channel 7 Target Address, A0-A1 5 
Read/ Write DMA Channel 7 Target Address, A16-A23 
Read/Write DMA Channel 7 Target Address, A24-A31 
Read/Write DMA Channel 7 Byte Count, B0-B1 5 
Read/Write DMA Channel 7 Byte Count, B16-B23 
Read/Write DMA Channel 7 Requester Address, A0-A1 5 
Read/Write DMA Channel 7 Requester Address, A16-A31 
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APPENDIX B — Ports Listed by Function (Continued) 

Port Address (HEX) Description 

iNTERRUPT CONTROLLER 


20 

Write Bank B ICW1, OCW2, or OCW3 

Read Bank B Poll, Interrupt Request or In-Service 


Status Register 

21 

Write Bank B ICW2, ICW3, ICW4 or OCW1 

Read Bank B Interrupt Mask Register 

22 

ric;au Ljaiirv u iwvve. 

28 

Read/Write IRQ8 Vector Register 

29 

Read/Write IRQ9 Vector Register 

2A 

Reserved 

2B 

Read/Write IRQ1 1 Vector Register 

2C 

Read/Write IRQ1 2 Vector Register 

2D 

Read/Write IRQ1 3 Vector Register 

2E 

Read/Write IRQ1 4 Vector Register 

2F 

Read/Write IRQ1 5 Vector Register 

AO 

Write Bank C ICW1 , OCW2 or OCW3 

Read Bank C Poll, Interrupt Request or In-Service 


Status Register 

A1 

Write Bank C ICW2, ICW3, ICW4 or OCW1 

Read Bank C Interrupt Mask Register 

A2 

Read Bank CICW2 

A8 

Read/Write IRQ1 6 Vector Register 

A9 

Read/Write IRQ17 Vector Register 

AA 

Read/Write IRQ18 Vector Register 

AB 

Read/Write IRQ1 9 Vector Register 

AC 

Read/Write IRQ20 Vector Register 

AD 

Read/ Write 1RQ21 Vector Register 

AE 

Read/Write IRQ22 Vector Register 

AF 

Read/Write 1RQ23 Vector Register 

nr\ 

\j\j 

Write Bank A !CW1 , QCW2 or OGW3 

Read Bank A Poll, Interrupt Request oor In-Service 


Status Register 

31 

Write Bank A ICW2, ICW3, ICW4 or OCW1 

Read Bank A Interrupt Mask Register 

32 

Read Bank A ICW2 

38 

Read/Write IRQO Vector Register 

39 

Read/Write IRQ1 Vector Register 

3A 

Read/Write IRQ1 .5 Vector Register 

3B 

Read/Write IRQ3 Vector Register 

3C 

Read/ Write IRQ4 Vector Register 

3D 

Reserved 

3E 

Reserved 

3F 

Read/Write IRQ7 Vector Register 
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APPENDIX B— Ports Listed by Function (Continued) 


Port Address (HEX) 

Description 

40 


PROGRAMMABLE INTERVAL TIMER 

Read/Write Counter 0 Register 

41 


Read/Write Counter 1 Register 

42 


Read/Write Counter 2 Register 

43 


Write Control Word Register 1— Counter 0, 1 , 2 

44 


Read/Write Counter 3 Register 

47 


Write Word Register II — Counter 3 

64 


CPU RESET 

Write CPU Reset Register (Data-1 1 1 1 XXXOH) 

72 


WAIT STATE GENERATOR 

Read/Write Wait State Register 0 

73 


Read/Write Wait State Register 1 

74 


Read/Write Wait State Register 2 

75 


Read/Write Refresh Wait State Register 

1C . 


DRAM REFRESH CONTROLLER 

Read/Write Refresh Control Register 


INTERNAL CONTROL AND DIAGNOSTIC PORTS 

61 


Write Internal Control Port 

80 


Read/ Write Internal Diagnostic Port 0 

88 


Read/Write Internal Diagnostic Port 1 

7F 


RELOCATION REGISTER 

Read/Write Relocation Register 

2A 


INTEL RESERVED PORTS 

Reserved 

3D 


Reserved 

3E 


Reserved 

45 


Reserved 

46 


Reserved 

76 


Reserved 

77 


Reserved 

7D 


Reserved 

7E 


Reserved 

CC 


Reserved 

CD 


Reserved 
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APPENDIX C 
Pin Descriptions 


The 82380 provides all of the signals necessary to 
interface it to an 80386 processor. It has separate 
32-bit address and data buses. It also has a set of 
control signals to support operation as a bus master 
or a bus slave. Several special function signals exist 
on the 82380 for interfacing the system support pe- 
ripherals to their respective system counterparts. 
Following are the definitions of the individual pins of 
the 82380. These brief descriptions are provided as 
a reference. Each signal is further defined within the 
sections which describe the associated 82380 func- 
tion. 

A2-A31 I/O ADDRESS BUS 

This is the 32-bit address bus. The addresses are 
doubleword memory and I/O addresses. These are 
three-state signals which are active only during Mas- 
ter mode. The address lines should be connected 
directly to the 80386’s local bus. 

BEO# I/O BYTE-ENABLE 0 

BEO# active indicates that data bits D0-D7 are be- 
ing accessed or are valid. It Is connected directly to 
the 80386’s BEO#. The byte enable signals are ac- 
tive outputs when the 82380 Is in the Master mode. 

Bhi # I/O BVTE-ENABLE i 

BE1# active Indicates that data bits D8-D15 are 
being accessed or are valid. It is connected directly 
to the 80386’s BE1#. The byte enable signals are 
active only when the 82380 is in the Master mode. 

BE2# , I/O BYTE-ENABLE 2 

BE2# active Indicates that data bits D15-D23 are 
being accessed or are valid. It Is connected directly 
to the 80386’s BE2#. The byte enable signals are 
active only when the 82380 Is In the Master mode. 

BE3# I/O BYTE-ENABLE 3 

BE3# active indicates that data bits D24-D31 are 
being accessed or are valid. The byte enable signals 
are active only when the 82380 is in the Master 
mode. This pin should be connected directly to the 
80386’s BE3#. This pin is used for factory testing 
and must be low during reset. The 80386 drives 
BE3# low during reset. 


D0-D31 I/O DATA BUS 

This is the 32-bii data bus. These pins are active 
outputs during interrupt acknowledges, during Slave 
accesses, and when the 82380 is In the Master 
mode. 

CLK2 I PROCESSOR CLOCK 

This pin must be connected to CLK2. The 82380 
monitors the phase of this clock in order to remain 
synchronized with the 80386. This clock drives all of 
the internal synchronous circuitry. 

D/C# I/O DATA/CONTROL 

D/C# is used to distinguish between 80386 control 
cycles and DMA or 80386 data access cycles. It is 
active as an output only in the Master mode. 

W/R# I/O WRITE/READ 

W/R# is used to distinguish between v/rite and read 

cycles. It is active as an output only in the Master 

mode. 

M/IO# I/O MEMORY/IO 

ivi/iL./# is used to distinguish between memory and 
lO accesses. It is active as an output only in the 
Master mode. 

ADS# I/O ADDRESS STATUS 

This signal Indicates presence of a valid address on 
the address bus. It Is active as output only In the 
Master mode. ADS# Is active during the first T-state 
where addresses and control signals are valid. 

NA# I NEXT ADDRESS 

Asserted by a peripheral or memory to begin a pipe- 
lined address cycle. This pin is monitored only while 
the 82380 is in the Master mode. In the Slave mode, 
pipelining is determined by the current and past 
status of the ADS# and READY# signals. 
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HOLD O HOLD REQUEST 

This is an active-high signal to the 80386 to request 
control of the system bus. When control is granted, 
the 80386 activates the hold acknowledge signal 
(HLDA). 

HLDA I HOLD ACKNOWLEDGE 

This input signal tells the DMA controller that the 
80386 has relinquished control of the system bus to 
the DMA controller. 

DREQ (0-3, 5-7) I DMA REQUEST 

The DMA Request inputs monitor requests from pe- 
ripherals requiring DMA service. Each of the eight 
DMA channels has one DREQ input. These active- 
high inputs are internally synchronized and priori- 
tized. Upon reset, channel 0 has the highest priority 
and channel 7 the lowest. 

DREQ4/IRQ9# I DMA/INTERRUPT RE- 
QUEST 

This is the DMA request input for channel 4. It Is also 
connected to the interrupt controller via Interrupt re- 
quest 9. This internal connection Is available for 
DMA channel 4 only. The interrupt input is active low 
and can be programmed as either edge of level trig- 
gered. Either function can be masked by the appro- 
priate mask register. Priorities of the DMA channel 
and the interrupt request are not related but follow 
the rules of the Individual controllers. 

Note that this pin has a weak internal pull-up. This 
causes the Interrupt request to be Inactive, but the 
DMA request will be active if there Is no external 
connection made. Most applications will require that 
either one or the other of these functions be used, 
but not both. For this reason, it is advised that DMA 
channel 4 be used for transfers where a software 
request is more appropriate (such as memory-to- 
memory transfers). In such an application, DREQ4 
can be masked by software, freeing IRQ9# for other 
purposes. 

EOP# I/O END OF PROCESS 

As an output, this signal Indicates that the current 
Requester access is the last access of the currently 
operating DMA channel. It is activated when Termi- 
nal Count is reached. As an Input, it signals the DMA 
channel to terminate the current buffer and proceed 
to the next buffer, if one is available. This signal may 
be programmed as an asynchronous or synchro- 
nous input. 


EOP# must be connected to a pull-up resistor. This 
will prevent erroneous external requests for termina- 
tion of a DMA process. 

EDACK (0-2) O ENCODED DMA ACKNOWL- 
EDGE 

These signals contain the encoded acknowledge- 
ment of a request for DMA service by a peripheral. 
The binary code formed by the three signals indi- 
cates which channel Is active. Channel 4 does not 
have a DMA acknowledge. The inactive state is indi- 
cated by the code 1 00. During a Requester access, 
EDACK presents the code for the active DMA chan- 
nel. During a Target access, EDACK presents the 
inactive code 1 00. 

IRQ (1 1 -23)# I INTERRUPT REQUEST 

These are active low interrupt request inputs. The 
inputs can be programmed to be edge or level sensi- 
tive. Interrupt priorities are programmable as either 
fixed or rotating. These Inputs have weak internal 
pull-up resistors. Unused interrupt request inputs 
should be tied inactive externally. 

INT O INTERRUPT OUT 

INT signals the 80386 that an interrupt request is 
pending. 

CLKIN I TIMER CLOCK INPUT 

This Is the clock input signal to all of the 82380’s 
programmable timers. It is independent of the sys- 
tem clock input (CLK2). 

TOUT1/REF# O TIMER 1 OUTPUT/REFRESH 

This pin is software programmable as either the di- 
rect output of Timer 1 , or as the indicator of a refresh 
cycle in progress. As REF#, this signal is active dur- 
ing the memory read cycle which occurs during re- 
fresh. 

TOUT2#/IRQ3# I/O TIMER 2 OUTPUT/IN- 
TERRUPT REQUEST3 

This is the inverted output of Timer 2. It is also con- 
nected directly to interrupt request 3. External hard- 
ware can use IRQ3# if Timer 2 is programmed as 
OUT=0 (TOUT2# = 1) 

TOUT3# O TIMER 3 OUTPUT 

This is the Inverted output of Timer 3. 
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READY# I READY INPUT 


RESET I RESET 


This active-low input indicates to the 82380 that the 
current bus cycle Is complete. READY is sampled by 
the 82380 both while it Is in the Master mode, and 
while it is in the Slave mode. 

WSC(0-1) I WAIT STATE CONTROL 

WSCO AND WSC1 are inputs used by the Wait-State 
Generator to determine the number of wait states 
r0qMjr0rj Ky +[^0 currsntly accessed memory or I/O 
The binary code on these ins, combined with the M/ 
lO# signal, selects an Internal register in which a 
wait-state count Is stored. The combination WSC = 
1 1 disables the wait-state generator. 

READYO# O READY OUTPUT 

This is the synchronized output of the wait-state 
generator. It is also valid during 80386 accesses to 
the 82380 in the Slave Mode when the 82380 re- 
quires wait states. READYO# should feed directly 
the 80386’s READY# input. 


This synchronous input serves to initialize the state 
of the 82380 and provides basis for the CPURST 
output. RESET must be held active for at least 1 5 
CLK2 cycles in order to guarantee the state of the 
82380. After Reset, the 82380 Is In the Slave mode 
with all outputs except timers and Interrupts In their 
Inactive states. The state of the timers and interrupt 
controller must be initialized through software. This 
input must be active for the entire time required by 


CPURST O CPU RESET 

CPURST provides a synchronized reset signal for 
the CPU. It is activated in the event of a software 
reset command, an 80386 shut-down detect, or a 
hardware reset via the RESET pin. The 82380 holds 
CPURST active for 62 clocks In response to either a 
software reset command or a shut-down detection. 
Otherwise CPURST reflects the RESET Input. 

Vcc + 5V Input power 

Vss Ground 


Table C-1. Wait-State Select Inputs 


Port 

Address 


Wait-State Registers 

D7 D4 D3 DO 

Select Inputs 

WSC1 WSCO 

72H 


Memory 0 

WOO 

0 

0 

73H 


Memory 1 

1/01 

0 

1 

74H 


Memory 2 

I/O 2 

1 

1 



DISABLED 

1 

1 

M/IO# 

1 

0 
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APPENDIX D 
82380 System Notes 


82380 TIMER UNIT SYSTEM NOTES 

The 82380 DMA controller with Integrated System 
Peripherals is functionally Inconsistent with the data 
sheet. This document explains the behavior of the 
82380 Timer Unit and outlines subsequent limita- 
tions of the timer unit. This document also provides 
recommended workarounds. 


Overview 

There are two areas in which the 82380 timer unit 
exhibits non-specifled behavior; 

1 . Mode 0 operation 

2. Write Cycles to the 82380 Timer Unit 

1.0 MODE 0 OPERATION 


1.1 Description 

For Mode 0 operation, the 82380 timer Is specified 
as follows in the Intel 1989 Microprocessor and Pe- 
ripheral Handbook Vol. I Page 4-240: 

“1 . Writing the first byte disables counting, OUT 
is set LOW immediately ...” 

Due to mode 0 errata, this should read as follows: 

“1 . Writing the first byte sets OUT LOW Immedi- 
ately. If the counter has not yet expired, writing . 
the first byte also disables counting. However, if 
the counter has expired, writing the first count 
does not disable counting, although OUT still 
behaves correctly (set LOW Immediately).” 


1.2 Consequences 

Software errors will occur if algorithms depend on 
the 82380 timer unit to stop counting after writing 
the first byte. Thus, software that is based on the 
8254 core will not function reliably on the 82380 tim- 
er unit. 

Note, however, that the external signal of the timer 
behaves correctly. 


1.3 Solution 

As long as software algorithms are aware of this be- 
havior, there should be no problems, as the external 
signal behaves correctly. 


1.4 Long Term Plans 

Currently, Intel has no plans to fix this behavior of 
the 82380 timer unit. 


2.0 WRITE CYCLES TO THE 82380 
TIMER UNIT 

This errata applies only to SLAVE WRITE cycles to 
the 82380 timer unit. During these cycles, the data 
being written into the 82380 timer unit may be cor- 
rupted If CLKIN is not inhibited during a certain “win- 
dow” of the write cycle. 


2.1 Description 

Please refer to Figure 1 . 

During write cycles to the 82380 timer unit, the 
82380 translates the 386DX interface signals such 
as ADS#, W/R#, M/IO#, and D/C# into several 
internal signals that coritrol the operalion of ifie in- 
ternal sub-blocks (e.g.. Timer Unit). 

The 82380 timer unit is controlled by such internal 
signals. These Internal signals are generated and 
sampled with respect to two separate clock signals: 
CLK2 (the system clock) and CLKIN (the 82380 tim- 
er unit clock). 

Since the CLKIN and CLK2 clock signals are used 
internally to generate control slgrials for the inter- 
face to the timer unit, some timing parameters must 
be met in order for the interface logic to function 
properly. 

Those timing parameters are met by inhibiting the 
CLKIN signal for a specific window during Write Cy- 
cles to the 82380 Timer Unit. 

The CLKIN signal must be inhibited using external 
logic, as the GATE function of the 82380 timer unit is 
not guaranteed to totally inhibit CLKIN. 
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2.2 Consequences 

This CLKIN inhibit circuitry guarantees proper write 
cycles to the 82380 timer unit. 

Without this solution, write cycles to the 82380 timer 
unit could place corrupted data into the timer unit 
registers. This, in turn, could yield inaccurate results 
and improper timer operation. 

The proposed solution would involve a hardware 
modification for existing systems. 


2.3 Solution 

A timing waveform (Figure 2) shows the specific win- 
dow during which CLKIN must be inhibited. Please 
note that CLKIN must only be inhibited during the 
window shown in Figure 2. This window is defined by 
two AC timing parameters: 

ta = 9 ns 

tb = 28 ns 


The proposed solution provides a certain amount of 
system "guardband” to make sure that this window 
is avoided. 

PAL equations for a suggested workaround are also 
included. Please refer to the comments in the PAL 
codes for stated assumptions of this particular work- 
around. A state diagram (Figure 3) is provided to 
help clarify how this PAL is designed. 

Figure 4 shows how this PAL would fit into a system 
workaround. In order to show the effect of this work- 
around on the CLKIN signal. Figure 5 shows how 
CLKIN is Inhibited. Note that you must still meet the 
CLKIN AC timing parameters (e.g., (min), t 48 
(min)) in order for the timer unit to function properly. 

Please note that this workaround has not been test- 
ed. It is provided as a suggested solution. Actual 
solutions will vary from system to system. 


2.4 Long Term Plans 

Intel has no plans to fix this behavior in the 82380 
timer unit. 


module Timer_82380_Fix 

flag *-r2*,*-q2»,’-fl*, *-wl, 3, 6, 5, 4, 16, 7, 12, 17, 18, 15, 14* 

title *82380 Timer Unit CLKIN 

INHIBIT signal PAL Solution * 

Timer^Unit^Fix device *P16R6* ; 


"This PAL inhibits the CLKIN signal (that comes from an oscillator) 
"during Slave Writes to the 82380 Timer unit. 

n 

"ASSUMPTION; This PAL assumes that an external system address 
" decoder provides a signal to indicate that an 82380 

" Timer Unit access is taking place. This input 

" signal is called TMR in this PAL. This PAL also 

" assumes that this TMR signal occurs during a 

" specific T-State. Please see Figure 3 of this 

" document to see when this signal is expected to 

" be active by this PAL. 


"NOTE; This PAL does not support pipelined 82380 SLAVE 

" cycles. 

I, 

"(c) Intel Corporation 1989. This PAL is provided as a proposed 
"method of solving a certain 82380 Timer Unit problem. This PAL 
"has not been tested or validated. Please validate this solution 
"for your system and application. 
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"Input Pins" 


CLK2 

pin 

1 

"System Clock 

RESET 

pin 

2 

"Microprocessor RESET signal 

TMR 

pin 

3 

"Input from Address Decoder, indicating 




"an access to the timer unit of the 




"82380, 

!RDY 

pin 

4 

"End of Cycle indicator 

IADS 

pin 

5 

"Address and control strobe 

CLK 

pin 

6 

"PHI2 clock 

W_R 

pin 

7 

"Writa/Read Signal" 

ncl 

pin 

8 

"No Connect 0" 

nc3 

pin 

9 

"No Connect 1" 

GNDa 

pin 

10 

"Tied to ground, documentation only 

GNDb 

pin 

11; 

"Output enable, documentation only 

CLKIN^IN 

pin 

12; 

"Input-CLKIN directly from oscillator 

"Output Pins" 




Q-0 

pin 

18; 

; "Internal signal only, fed back to 




"PAL logic" 

CLKIN„0UT 

pin 

17: 

; "CLKIN signal fed to 82380 Timer Unit 

INHIBIT 

pin 

16; 

; "CLKIN Inhibit signal 

SO 

pin 

15: 

; "Unused State Indicator Pin 

SI 

pin 

14: 

; "Unused State Indicator Pin 


"Declarations" 

Valid_ADS = ADS & CLK ; "ADS# sampled in PHIl of 386DX T-State 

Valid.RDY = RDY & CLK ; "RDY# sampled in PHIl of 386DX T-State 

Timer_Acc = TMR & CLK ; "Timer Unit Access, as provided by 

"external Address Decoder " 


State.Diagram [INHIBIT, SI, SO] 


state 

000; 

if RESET then 000 

-p -i A Anc e. «7 p nm 

WJLkJW ^JL V w&AWk, 

else 000 ; 

state 

001; 

if RESET then 000 
else if Timer_Acc then 010 
else if ITimer^Acc then 000 
else 001; 

state 

010; 

if RESET then 000 
else if CLK then 110 
else 010 ; 

state 

110; 

if RESET then 000 
else if CLK then 111 
else 110 ; 
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state 111: 


state Oil: 


state 100: 


state 101: 


EQUATIONS 


if RESET then 000 
else if CLK then Oil 
else 111; 

if RESET then 000 

else if Valid_RDY then 000 

else Oil; 

if RESET then 000 
else 000 ; 

if RESET then 000 
else 000 ; 


Q«0 := CLKIN_IN ; "Latched incoming clock. This signal is used 
"internally to feed into the MUX-ing logic" 


CLKIN.OUT := (INHIBIT & CLKIN.OUT & IRESET) 
+ ( [INHIBIT & Q^O & IRESET) ; 


"Equation for CLKIN.OUT. This 

"feeds directly to the 82380 Timer Unit." 


END 


Page 1 

ABEL(tm) 3.10 - Document Generator 30-June 89 03:17 
PM 

82380 Timer Unit CLKIN 

INHIBIT signal PAL Solution 
Equations for Module Timer_82380_Fix 

Device Timer_Unit«Fix 

- Reduced Equations: 

[INHIBIT := ( [CLK & [INHIBIT # CLK & SO # RESET # ISl) ; 

[SI := (RESET 

# INHIBIT & [SI 

# CLK & [INHIBIT & [~RDY & SO & SI 

# [CLK & [SI 

# [SI & ITMR 

# [SO & ISl) ; 

[SO := (RESET 

# INHIBIT & [SI 

# CLK & [INHIBIT & [~RDY & SI 

# [CLK & [SO 

# [INHIBIT & [SO & SI 

# SO & [SI 

# [SI & [W_R 

# --ADS & ISl) ; 
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lQ-0 ;= ( ICLKIN_IN) ; 

ICLKIN.OUT ;= (RESET # ICLKIN.OUT & INHIBIT # IINHIBIT & !Q-0) 
Page 2 

ABEL(tm) 3.10 - Document Generator 30-June 89 03;17 
PM 

82380 Timer Unit CLKIN 

INHIBIT signal PAL Solution 
Chip diagram for Module Timer-.S2380-Fix 

Device Timer_Unit«Fix 


CLK2C 1 
RESET C 2 
TMPC 3 
me 4 
5 

CLKC 6 
W_RC 7 
nciC 8 
nc3C 9 


— ^ 

1 

■D 

20 

2 

19 

3 

18 

4 

17 

5 

16 

6 

15 

7 

14 

8 

13 

9 

12 

10 

11 


17Dclkin_out 


12pCLKIN_IN 


end of module Timer_82380-Fix 
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NOTE: 

This solution does not support pipelined 82380 SLAVE Cycles. 

Figure 4. System with 82380 Timer Unit “Inhibit” Circuitry 
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Figure 5(b). Inhibited CLKIN in an 82380 Timer Unit and CLKIN Minimum LOW Time 
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82380 DATA SHEET REVISION HISTORY 

Changes in this revision: 

Figure 4-1: Added details about IRQ3# and IRQ2#/IRQ1.5#. 

Section 5.2.1: Added note referring reader to Appendix D (System Notes). 

Table 13-2: Changed Vihc MIN to Vcc “ 0.8V. 

Figure 13-1: Changed signal names to reflect accurate drive levels and measurement points for those sig- 
nals. 

Appendix D: Added this appendix to explain the restrictions on the CLKIN signal of the 82380 Timer Unit. 
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376™ HIGH PERFORMANCE 
32-BIT EMBEDDED PROCESSOR 


■ Full 32-Bit Internal Architecture 
-8-, 16-, 32-Bit Data Types 

— 8 General Purpose 32-Bit Registers 
— Extensive 32-Bit Instruction Set 

■ High Performance 16-Bit Data Bus 

— 16 MHz CPU Clock 

— Two-Clock Bus Cycles 
-—16 ivibytes/Sec Bus Bandwidth 

■ 16 Mbyte Physical Memory Size 

■ High Speed Numerics Support with the 
80387SX 

■ Low System Cost with the 82370 
Integrated System Peripheral 

■ On-Chip Debugging Support Including 
Break Point Registers 

INTRODUCTION 


■ Complete Intel Development Support 
— C, PL/M, Assembler 

— ICEtm- 376, In-Circuit Emulator 
— IRMKtm Real Time Kernel 
— ISDMtm Debug Monitor 
— DOS Based Debug 

■ Extensive Third-Party SuppcKL_ 

— Languages: 0, Pascal, FORTRAN, 
BASIC and ADA^ 

— Hosts: VMS% UNIX% MS-DOS% and 
Others 

— Real-Time Kernels 

■ High Speed CHMOS Technology 

■ Available in 100 Pin Plastic Quad Flat- 
Pack Package and 88-Pin Pin Grid Array 

(See Packaging Outlines and Dimensions #231369) 


The 376 32-bit embedded processor is designed for high performance embedded systems. It provides the 
performance benefits of a highly pipelined 32-bit internal architecture with the low system cost associated with 
16-blt hardware systems. The 80376 is based on the 80386 and offers a high degree of compatibility with the 
80386. All 80386 32-blt programs not dependent on paging can be executed on the 80376 and all 80376 
programs can be executed on the 80386. All 32-bit 80386 language translators can be used for software 
development. With proper support software, any 80386-based computer can be used to develop and test 
80376 programs. In addition, any 80386-based PC-AT* compatible computer can be used for hardware proto- 
typing for designs based on the 80376 and its companion product the 82370. 
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80376 Microarchitecture 


Intel, iRMK, ICE, 376, 386, Intel386, iSDM, Intel1376 are trademarks of Intel Corp. 
*UNIX is a registered trademark of AT&T. 

ADA is a registered trademark of the U.S. Government, Ada Joint Program Office. 
PC-AT is a regiitered trademark of IBM Corporation. 

VMS is a trademark of Digital Equipment Corporation. 

MS-DOS is a trademark of Microsoft Corporation. 


4-752 


October 1989 
Order Number: 240182-003 















1.0 PIN DESCRIPTION 
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Figure 1.1. 80376 100-Pin Quad Fiat-Pack Pin Out (Top View) 
Table 1.1. 100-Pin Plastic Quad Fiat-Pack Pin Assignments 




ADS# 

SHE# 

BLE# 

BUSY# 

CLK2 

D/C# 

ERROR# 

HLDA 

HOLD 

INTR 

LOCK# 

M/IO# 

NA# 

NMi 

PEREQ 

READY# 

RESET 
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Top View 












Bottom View 










(Component Side) 











(Pin Side) 
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o o o o 
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o 

O 

o 

o 
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01 


0 

0 

0 

0 

0000 

0 

0 

0 

0 

m 


Vcc 

Vss 

N/C 

A1 

ADS# READY# HOLD DO 

02 

Vss 

Vcc 

Vss 

Vcc 



Vcc 

Vss 

Vcc 

Vss 

O2 

Oq holo ready# ads# 

*1 

N/C 

Vss 

Vcc 

H 

2 

O 

O 

0 

o 

o o o o 

o 

O 

O 

O 

O 

2 

02 

O 

O 

0 

0 

0 

0000 

0 

0 

0 

0 



Vgs 

Vcc 

M/IO# BHE# 

BLE# CLK2 NA# HLDA 

D1 

D3 

Vss 

Vcc 

Vss 



Vss 

Vcc 

Vss 

03 

0, 

HLDA NA# CLK2 BLE# 

BHE# M/IO# 

Vcc 

Vss 


3 

O 

O 







O 

O 

3 

03 

O 

O 







0 

0 

03 


Vcc 

o/c# 







04 

Vcc 



Vcc 

04 







D/C# 

Vcc 


4 

O 

O 







O 

O 

4 

04 

O 

O 







0 

0 

04 


Vss 

W/R# 







D6 

DS 



t>5 

06 







W/R# 

Vss 


5 

O 

o 







o 

o 

S 

05 

o 

o 







0 

0 

OS 


Vcc 

LOCK# 







D7 

08 



t>8 

07 







LOCK# 

Vcc 



w 

Vss 

RESn 







D9 

\J 

010 



dTo 








RESET 

Vss 


7 

0 

0 







o 

O 

7 

07 

0 

0 







0 

0 

07 


PEREQ BUSY# 







Dll 

012 



t>12 

On 







BUSY# PEREQ 


8 

O 

O 







o 

o 

8 

08 

o 

0 







0 

0 

08 


ERROR# NMI 







D13 

014 



0i4 

0t3 







NMI 

ERROR# 


9 

o 

O 







o 

o 

9 

09 

O 

0 







0 

0 

09 


Vss 

INTR 







D15 

A23 



*23 

0|5 







INTR 

Vss 


10 

O 

o 







o 

O 

10 

10 

o 

0 







0 

0 

10 



A2 







A21 

A22 



*22 

*21 







*2 

Vcc 


11 

o 

0 







o 

o 

11 

11 

o 

0 







0 

0 

11 



A3 







Vss 
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Vcc 

Vss 
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o 

o 

o 

o 
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o 
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O 

o 

o 

12 

12 

0 

0 

0 

0 

0 
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0 

0 

0 

0 

12 


Vss 

A4 

A5 

A7 

A8 A10 A13 A15 

A17 

A18 

A20 

Vcc 




Vss 

Vcc 

*20 

*18 

*17 

*15 *13 *10 *8 

*7 

*5 

*4 
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o 
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o 

o 

o 

O 

O 
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13 
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0 

0 

0 

0 
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0 

0 

13 
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Vss 

Vcc 

A6 

A9 All A12 AU 

A16 

A19 

Vcc 

Vss 

Vcc 



Vcc 

Vss 

Vcc 

*19 

*16 

*14 *12 *11 *9 

*6 
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Figure 1.2. 80376 88-Pin Grid Array Pin Out 


Table 1.2. 88-Pin Grid Array Pin Assignments 


Pin 

Label 

Pin 

Label 

Pin 

Label 

Pin 

Label 

2H 

CLK2 

12D 

Ai8 

2L 

M/IO# 


Vcc 

9B 

Di5 

12E 

Ai7 

5M 

LOCK# 

13A 

Vcc 

8 A 

Di4 


Ai6 

1J 

ADS# 

13C 

Vcc 

8 B 

Di3 

12 F 

Ai5 

1H 

READY# 

BSSII 

Vcc 

7A 

Di2 

13F 

Ai4 

2 G 

NA# 


Vcc 

7B 

D 11 


Ai3 

1 G 

HOLD 

HIQ3|[|| 

Vcc 

6 A 

D 10 

13G 

Ai2 

2F 

HLDA 

hiehi 

Vss 

6 B 

D 9 

i3H 

All 

7N 

FbhEQ 

2 C 

Vss 

5A 

Ds 

12H 

A 10 

7M 

BUSY# 

1D 

Vss 

5B 

D 7 

13J 

A 9 

8 N 

ERROR# 

1M 

Vss 

4B 

De 

12J 

As 

9M 

INTR 

4N 

Vss 

4A 

Ds 

12K 

A 7 

8 M 


9N 

Vss 

3B 

D 4 


Ae 



11N 

Vss 

2D 

D 3 


A 5 


Vcc 

2A 

Vss 

1E 

02 


A 4 

i2B 

V'cc 

i2A 

Vss 

2E 

Di 

11M 

A 3 

1C 

Vcc 

IB 

Vss 

1F 

Do 

bosh 

A2 

mum 

Vcc 

13B 

Vss 

9A 

A 23 

mamm 

Ai 

imsm 

Vcc 

13M 

Vss 

10A 

A 22 

2J 

BLE# 

5N 

Vcc 

2N 

Vss 

10B 

A 2 I 

IfllQSIIIIi 

BHE# 


Vcc 

6N 

Vss 


A 2 O 

___ 

W/R# 

1A 

Vcc 

12N 

Vss 

MESm 

Ai9 


D/C# 

3A 

Vcc 

1L 

N/C 
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The following table lists a brief description of each pin on the 80376. The following definitions are used in 
these descriptions: 

# The named signal is active LOW. 

I Input signal. 

O Output signal. 

I/O Input and Output signal. 

— No electrical connection. 


Symbol 

Type 

Name and Function 

CLK2 

I 

CLK2 provides the fundamental timing for the 80376. For additional 
Information see Clock in Section 4.1 . 

RESET 

I 

RESET suspends any operation in progress and places the 80376 in a 
known reset state. See Interrupt Signals in Section 4.1 for additional 
information. 

Dis-Do 

I/O 

DATA BUS inputs data during memory, I/O and interrupt acknowledge 
read cycles and outputs data during memory and I/O write cycles. See 
Data Bus in Section 4.1 for additional information. 

A23“Ai 

0 

ADDRESS BUS outputs physical memory or port I/O addresses. See 
Address Bus in Section 4.1 for additional Information. 

W/R# 

0 

WRITE/READ is a bus cycle definition pin that distinguishes write 
cycles from read cycles. See Bus Cycle Definition Signals in Section 

4.1 for additional information. 

D/C# 

0 

DATA/CONTROL is a bus cycle definition pin that distinguishes data 
cycles, either memory or I/O, from control cycles which are: Interrupt 
acknowledge, halt, and instruction fetching. See Bus Cycle Definition 
Signals in Section 4.1 for additional information. 

M/IO# 

0 

MEMORY I/O is a bus cycle definition pin that distinguishes memory 
cycles from input/output cycles. See Bus Cycle Definition Signals in 
Section 4.1 for additional information. 

LOCK# 

0 

BUS LOCK Is a bus cycle definition pin that indicates that other 
system bus masters are denied access to the system bus while it is 
active. See Bus Cycle Definition Signals in Section 4.1 for additional 
information. 

ADS# 

0 

ADDRESS STATUS indicates that a valid bus cycle definition and 
address (W/R#, D/C#, M/IO#, BHE#, BLE# and A 23 ~Ai) are being 
driven at the 80376 pins. See Bus Control Signals in Section 4.1 for 
additional information. 

NA# 

I 

NEXT ADDRESS is used to request address pipelining. See Bus 
Control Signals In Section 4.1 for additional information. 

READY# 

I 

BUS READY terminates the bus cycle. See Bus Control Signals in 
Section 4.1 for additional information. 

BHE#,BLE# 

0 

BYTE ENABLES indicate which data bytes of the data bus take part in 
a bus cycle. See Address Bus in Section 4.1 for additional 
Information. 

HOLD 

I 

BUS HOLD REQUEST input allows another bus master to request 
control of the local bus. See Bus Arbitration Signals In Section 4.1 
for additional Information. 
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Symbol 

Type 

Name and Function 

HLDA 

0 

BUS HOLD ACKNOWLEDGE output indicates that the 80376 has 
surrendered control of Its local bus to another bus master. See Bus 
Arbitration Signals in Section 4.1 for additional information. 

INTR 

I 

INTERRUPT REQUEST Is a maskable input that signals the 80376 to 
suspend execution of the current program and execute an Interrupt 
acknowledge function. See Interrupt Signals in Section 4.1 for 
additional information. 

NMI 

I 

NON-MASKABLE INTERRUPT REQUEST is a non-maskable Input 
that signals the 80376 to suspend execution of the current program 
and execute an interrupt acknowledae function. See Interrupt Signals 

In Section 4.1 for additional Information. 

BUSY# 

I 

BUSY signals a busy condition from a processor extension. See 
Coprocessor Interface Signals In Section 4.1 for additional 
information. 

ERROR# 

I 

ERROR signals an error condition from a processor extension. See 
Coprocessor Interface Signals in Section 4.1 for additional 
Information. 

PEREQ 

I 

PROCESSOR EXTENSION REQUEST indicates that the processor 
extension has data to be transferred by the 80376. See Coprocessor 
Interface Signals in Section 4.1 for additional information. 

N/C 


NO CONNECT should always remain unconnected. Connection of a 
N/C pin may cause the processor to malfunction or be incompatible 
with future steppings of the 80376. 

Vcc 

I 

SYSTEM POWER provides the + 5V nominal D.C. supply input. 

Vss 

I 

SYSTEM GROUND provides OV connection from which all inputs and 
outputs are measured. 


2.0 ARCHITECTURE OVERVIEW 

The 80376 supports the protection mechanisms 
needed by sophisticated multitasking embedded 
systems and real-time operating systems. The use 
of these protection mechanisms is completely op- 
tional. For embedded applications not needing pro- 
tection. the 80376 can easily be configured to pro- 
vide a 16 Mbyte physical address space. 

Instruction pipelining, high bus bandwidth, and a 
very high performance ALU ensure short average 
instruction execution times and high system 
throughput. The 80376 is capable of execution at 
sustained rates of 2.5~3.0 million instructions per 
second. 

The 80376 offers on-chip testability and debugging 
features. Four break point registers allow conditional 
or unconditional break point traps on code execution 
or data accesses for powerful debugging of even 
ROM based systems. Other testability features in- 
clude self-test and tri-stating of output buffers during 
RESET. 

The Intel 80376 embedded processor consists of a 
central processing unit, a memory management unit 
and a bus Interface. The central processing unit con- 


sists of the execution unit and Instruction unit. The 
execution unit contains the eight 32-blt general reg- 
isters which are used for both address calculation 
and data operations and a 64-blt barrel shifter used 
to speed shift, rotate, multiply, and divide operations. 
The instruction unit decodes the instruction opcodes 
and stores them in the decoded Instruction queue 
for Immediate use by the execution unit. 

The Memory Management Unit (MMU) consists of a 
segmentation and protection unit. Segmentation al- 
lows the managing of the logical address space by 
providing an extra addressing component, one that 
allows easy code and data relocatability, and effi- 
cient sharing. 

The protection unit provides four levels of protection 
for isolating and protecting applications and the op- 
erating system from each other. The hardware en- 
forced protection allows the design of systems with 
a high degree of integrity and simplifies debugging. 

Finally, to facilitate high performance system hard- 
ware designs, the 80376 bus interface offers ad- 
dress pipelining and direct Byte Enable signals for 
each byte of the data bus. 
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2.1 Register Set 

The 80376 has twenty-nine registers as shown in Figure 2.1. These registers are grouped into the following six 
categories: 


31 16 15 8 7 0 



AH A 

X AL 


BH B 

X BL 


CH C 

X CL 


DH D 

X DL 


SI 


Dl 


BP 


SP 


EAX 

EBX 

ECX 

EDX 

ESI 

EDI 

EBP 

ESP 


GENERAL PURPOSE 
REGISTERS 


15 0 



CS 


SS 


DS 


ES 


FS 


GS 


SEGMENT 

REGISTERS 


31 

0 


1 


EFUGS 

1 1 

EIP 

31 

0 


1 

1 CRO 




FLAGS AND 

INSTRUCTION 

POINTER 


□ 


CONTROL 

REGISTER 


47 16 15 0 


CO 

to 

<o 












GDTR 

IDTR 

LDTR 

TR 


SYSTEM ADDRESS 
REGISTERS 


31 0 


LINEAR BREAKPOINT ADDRESS 0 

DRO 

LINEAR BREAKPOINT ADDRESS 1 

DR1 

LINEAR BREAKPOINT ADDRESS 2 

DR2 

LINEAR BREAKPOINT ADDRESS 3 

DR3 


DR4 

wMmmm. 

DR5 

BREAKPOINT STATUS 

DR6 

BREAKPOINT CONTROL 

DR7 


DEBUG 

REGISTERS 
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Figure 2.1. 80376 Base Architecture Registers 


4-757 




80376 




int^ 


General Registers: The eight 32>bit general pur- 
pose registers are used to contain arithmetic and 
logical operands. Four of these (EAX, EBX, ECX and 
EDX) can be used either in their entirety as 32-bit 
registers, as 16-bit registers, or split into pairs of 
separate 8-bit registers. 

Segment Registers: Six 1 6-bit special purpose reg- 
isters select, at any given time, the segments of 
memory that are immediately addressable for code, 
stack, and data. 

Flags and Instruction Pointer Registers: These 
two 32-bit special purpose registers in Figure 2.1 
record or control certain aspects of the 80376 proc- 
essor state. The EFLAGS register includes status 
and control bits that are used to reflect the outcome 
of many Instructions and modify the semantics of 
some Instructions. The Instruction Pointer, called 
EIP, Is 32 bits wide. The Instruction Pointer controls 
instruction fetching and the processor automatically 
increments it after executing an instruction. 

Control Register: The 32-blt control register, CRO, 
is used to control Coprocessor Emulation. 


System Address Registers: These four special 
registers reference the tables or segments support- 
ed by the 80376/80386 protection model. These ta- 
bles or segments are: 

GDTR (Global Descriptor Table Register), 

IDTR (Interrupt Descriptor Table Register), 

LDTR (Local Descriptor Table Register), 

TR (Task State Segment Register). 

Debug Registers: The six programmer accessible 
debug registers provide on-chip support for debug- 
ging. The use of the debug registers is described In 
Section 2.11 Debugging Support. 

EFLAGS REGISTER 

The flag Register is a 32-bit register named 
EFLAGS. The defined bits and bit fields within 
EFLAGS, shown In Figure 2.2, control certain opera- 
tions and indicate the status of the 80376 processor. 
The function of the flag bits is given in Table 2.1. 


SPECIAL FIELDS; 

I/O PRIVILEGE LEVEL - 
NESTED TASK - 


CONTROL FLAGS 


-TRAP 

- INTERRUPT 

- DIRECTION 

- RESUME 


MONITOR COPROCESSOR . 


STATUS FLAGS: 


E 


OVERFLOW 

SIGN 

ZERO 

AUX CARRY 

PARITY 

CARRY 



T 

RF 

T 

NT 

lOPL 

OF 

DF 

7 

7 

SF 

ZF 

7 

AF 

7 

PF 

7 

TfI 


LJ 

LJ 

LJ 

MM 

1 



LJ 

LJ 

LJ 


LJ 

MM 

LJ 


LJ 

LJ 


EFLAGS 
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4 3 2 10 


240182-4 


UA - INTEL RESERVED DO NOT USE 


Figure 2.2. Status and Control Register Bit Functions 
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Table 2.1. Flag Definitions 


Bit Position 

Name 

Function 

0 

CF 

Carry Flag — Set on high-order bit carry or borrow; cleared otherwise. 

2 

PF 

Parity Flag — Set if low-order 8 bits of result contain an even number 
of 1-blts; cleared otherwise. 

4 

AF 

Auxiliary Carry Flag — Set on carry from or borrow to the low order 
four bits of AL; cleared otherwise. 

6 

ZF 

Zero Flag — Set if result is zero; cleared otherwise. 

7 

SF 

Sign Flag— Set equal to high-order bit of result (0 If positive, 1 if 
negative). 

8 

TF 

Single Step Flag— Once set, a single step interrupt occurs after the 
next instruction executes. TF is cleared by the single step interrupt. 

9 

IF 

Interrupt-Enable Flag — When set, external interrupts signaled on the 
INTR pin will cause the CPU to transfer control to an Interrupt vector 
specified location. 

10 

DF 

Direction Flag — Causes string Instructions to auto-increment (default) 
the appropriate index registers when cleared. Setting DF causes auto- 
decrement. 

11 

OF 

Overflow Flag — Set if the operation resulted in a carry/borrow into 
the sign bit (high-order bit) of the result but did not result In a 
carry/borrow out of the high-order bit or vice-versa. 

12, 13 

lOPL 

I/O Privilege Level— Indicates the maximum CPL permitted to 
execute I/O instructions without generating an exception 13 fault or 
consulting the I/O permission bit map. It also Indicates the maximum 
CPL value allowing alteration of the IF bit. 

14 

NT 

Nested Task — Indicates that the execution of the current task is 
nested within another task (see Task Switching). 

16 

RF 

Resume Flag — Used in conjunction with debug register breakpoints. It 
is checked at instruction boundaries before breakpoint processing. If 
set, any debug fault Is ignored on the next instruction. It is reset at the 
successful completion of any Instruction except IRET, POPF, and 
those Instructions causing task switches. 


CONTROL REGISTER 

The 80376 has a 32-bit control register called CRO that is used to control coprocessor emulation. This register 
is shown in Figures, 2.1 and 2.2. The defined CRO bits are described in Table 2.2. Bits 0, 4 and 31 of CRO 
have fixed values in the 80376. These values cannot be changed. Programs that load CRO should always load 
bits 0, 4 and 31 with values previously there to be compatible with the 80386. 


Table 2.2. CRO Definitions 


Bit Position 

Name 

Function 

1 

MP 

Monitor Coprocessor Extension— Allows WAIT instructions to cause 
a processor extension not present exception (number 7). 

2 

EM 

Emulate Processor Extension— When set, this bit causes a 
processor extension not present exception (number 7) on ESC 
instructions to allow processor extension emulation. 

3 

TS 

Task Switched — ^When set, this bit indicates the next instruction using 
a processor extension will cause exception 7, allowing software to test 
whether the current processor extension context belongs to the 
current task (see Task Switching). 
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2.2 Instruction Set 

The instruction set is divided into nine categories of 
operations; 

Data Transfer 

Arithmetic 

Shift/ Rotate 

String Manipulation 

Bit Manipulation 

Control Transfer 

High Level Language Support 

Operating System Support 

Processor Control 


These 80376 processor Instructions are listed In Ta- 
ble 8.1 80376 instruction Set and Clock Count 
Summary. 

All 80376 processor Instructions operate on either 0, 
1 , 2 or 3 operands; an operand resides in a register, 
in the instruction itself, or in memory. Most zero op- 
erand instructions (e.g. CLI, STI) take only one byte. 
One operand instructions generally are two bytes 
long. The average instruction Is 3.2 bytes long. 
Since the 80376 has a 16-byte prefetch Instruction 
queue an average of 5 instructions can be pre- 
fetched. The use of two operands permits the follow- 
ing types of common instructions: 

Register to Register 
Memory to Register 
Immediate to Register 
Memory to Memory 
Register to Memory 
Immediate to Memory 


2.3 Memory Organization 

Memory on the 80376 Is divided into 8-bit quantities 
(bytes), 16-bit quantities (words), and 32-bit quanti- 
ties (dwords). Words are stored in two consecutive 
bytes in memory with the low-order byte at the low- 
est address. Dwords are stored in four consecutive 
bytes in memory with the low-order byte at the low- 
est address. The address of a word or Dword is the 
byte address of the low-order byte. For maximum 
performance word and dword values should be at 
even physical addresses^ 

In addition to these basic data types the 80376 proc- 
essor supports segments. Memory can be divided 
up into one or more variable length segments, which 
can be shared between programs. 


ADDRESS SPACES 

The 80376 has three types of address spaces: 
logical, linear, and physical. A logical address 
(also known as a virtual address) consists of a se- 
lector and an offset. A selector is the contents of a 
segment register. An offset is formed by summing ail 
of the addressing components (BASE, INDEX, and 
DISPLACEMENT), discussed In Section 2.4 
Addressing Modes, into an effective address. 

Every selector has a logical base address associat- 
ed with it that can be up to 32 bits in length. This 32- 
bit logical base address is added to either a 32-bit 
offset address or a 16-bit offset address (by using 
the address length prefix )\o form a final 32-bit 
linear address. This final linear address is then trun- 
cated so that only the lower 24 bits of this address 
are used to address the 16 Mbytes physical memory 
address space. The loglodl base address is stored 
in one of two operating system tables (i.e. the Local 
Descriptor Table or Global Descriptor Table). 

Figure 2.3 shows the relationship between the vari- 
ous address spaces. 
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OFFFFFFH 


240182-6 


Figure 2.3. Address Translation 


SEGMENT REGISTER USAGE 

The main data structure used to organize memory is 
the segment. On the 80376, segments are variable 
sized blocks of linear addresses which have certain 
attributes associated with them. There are two main 
types of segments, code and data. The simplest use 
of segments is to have one code and data segment. 
Each segment is 16 Mbytes in size overlapping each 
other. This allows code and data to be directly ad- 
dressed by the same offset. 

In order to provide compact instruction encoding 
and Increase processor performance, instructions 
do not need to explicitly specify which segment reg- 


ister is used. The segment register is automatically 
chosen according to the rules of Table 2.3 (Segment 
Register Selection Rules). In general, data refer- 
ences use the selector contained In the DS register, 
stack references use the SS register and instruction 
fetches use the CS register. The contents of the In- 
struction Pointer provide the offset. Special segment 
override prefixes allow the explicit use of a given 
segment register, and override the implicit rules list- 
ed in Table 2.3. The override prefixes also allow the 
use of the ES, FS and GS segment registers. 

There are no restrictions regarding the overlapping 
of the base addresses of any segments. Thus, all 6 
segments could have the base address set to zero. 
Further details of segmentation are discussed in 
Section 3.0 Architecture. 
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Table 2.3. Segment Register Selection Rules 


Type of 

Implied (Default) 

Segment Override 

Memory Reference 

Segment Use 

Prefixes Possible 

Code Fetch 

CS 

None 

Destination of PUSH, PUSHF, INT, 

CALL, PUSH A Instructions 

ss 

None 

Source of POP, POPA, POPF, IRET, 

RET Instructions 

ss 

None 

Destination of STOS, 

MOVS, REP STOS, 

REP MOVS Instructions 
(Dl is Base Register) 

ES 

None 

Other Data References, 
with Effective Address 

Using Base Register of: 



lEAX] 

DS 

CS, SS, ES, FS, GS 

[EBX] 

DS 

CS, SS. ES, FS, GS 

[ECX] 

DS 

CS, SS, ES, FS, GS 

tEDX] 

DS 

CS, SS, ES, FS, GS 

[ESI] 

DS 

CS, SS, ES, FS, GS 

[EDI] 

DS 

CS, SS. ES, FS, GS 

[EBP] 

SS 

CS. SS. ES. FS. GS 

[ESP] 

SS 

CS, SS. ES, FS, GS 


2.4 Addressing Modes 

The 80376 provides a total of 8 addressing modes 
for instructions to specify operands. The addressing 
modes are optimized to allow the efficient execution 
of high level languages such as C and FORTRAN, 
and they cover the vast majority of data references 
heeded by high-level languages. 

Two of the addressing modes provide for instruc- 
tions that operate on register or immediate oper- 
ands: 

Register Operand Mode: The operand is located in 
one of the 8-, 16- or 32-bit general registers. 

Immediate Operand Mode: The operand is includ- 
ed in the instruction as part of the opcode. 

The remaining 6 modes provide a mechanism for 
specifying the effective address of an operand. The 
linear address consists of two components: the seg- 


ment base address and an effective address. The 
effective address is calculated by summing any 
combination of the following three address elements 
(see Figure 2.3): 

DISPLACEMENT: an 8-, 16- or 32-bit immediate val- 
ue following the instruction. 

BASE: The contents of any genera! purpose regis- 
ter. The base registers are generally used by compil- 
ers to point to the start of the iocai variable area. 
Note that if the Address Length Prefix is used, only 
BX and BP can be used as a BASE register. 

INDEX: The contents of any general purpose regis- 
ter except for ESP. The index registers are used to 
access the elements of an array, or a string of char- 
acters. The index register’s value can be multiplied 
by a scale factor, either 1 , 2, 4 or 8. The scaled index 
is especially useful for accessing arrays or struc- 
tures. Note that If the Address Length Prefix is 
used, no Scaling is available and only the registers 
SI and Dl can be used to INDEX. 
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Combinations of these 3 components make up the 6 
additional addressing modes. There is no perform- 
ance penalty for using any of these addressing com- 
binations, since the effective address calculation is 
pipelined with the execution of other instructions. 
The one exception is the simultaneous use of BASE 
and INDEX components which requires one addi- 
tional clock. 

As shown in Figure 2.4, th^ effective address (EA) of 
an operand is calculated according to the following 
formula: 

EA = BASEpegister “k (INDEXpegjster^ scaling) + 
DISPLACEMENT 

1. Direct Mode: The operand’s offset is contained 
as part of the instruction as an 8-, 16- or 32-bit 
DISPLACEMENT. 


2. Register Indirect Mode: A BASE register con- 
tains the address of the operand. 

3. Based Mode: A BASE register’s contents is add- 
ed to a DISPLACEMENT to form the operand’s 
offset. 

4. Scaled Index Mode: An INDEX register’s con- 
tents Is multiplied by a SCALING factor which is 
added to a DISPLACEMENT to form the oper- 
and’s offset. 

5. Based Scaled Index Mode: The contents of an 
INDEX register is multiplied by a SCALING factor 
and the result is added to the contents of a BASE 
register to obtain the operand’s offset. 

6. Based Scaled Index Mode with Displacement: 

The contents of an INDEX register are multiplied 
by a SCALING factor, and the result is added to 
the contents of a BASE register and a DISPLACE- 
MENT to form the operand’s offset. 



Figure 2.4. Addressing Mode Calculations 
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GENERATING 16-BIT ADDRESSES 

The 80376 executes code with a default length for 
operands and addresses of 32 bits. The 80376 is 
also able to execute operands and addresses of 16 
bits. This is specified through the use of override 
prefixes. Two prefixes, the Operand Length Prefix 
and the Address Length Prefix, override the de- 
fault 32-blt length on an individual instruction basis. 
These prefixes are automatically added by assem- 


blers. The Operand Length and Address Length Pre- 
fixes can be applied separately or in combination to 
any instruction. 

The 80376 normally executes 32-blt code and uses 
either 8- or 32-blt displacements, and any register 
can be used as based or Index registers. When exe- 
cuting 1 6-bit code (by prefix overrides), the displace- 
ments are either 8 or 1 6 bits, and the base and index 
register conform to the 16-blt model. Table 2.4 Illus- 
trates the differences. 


Table 2.4. BASE and INDEX Registers for 16- and 32-Bit Addresses 



16-Bit Addressing 

32-Bit Addressing 

BASE REGISTER 

BX, BP 

Any 32-Bit GP Register 

INDEX REGISTER 

SI, Dl 

Any 32-Bit GP Register 
except ESP 

SCALE FACTOR 

None 

1,2, 4,8 

DISPLACMENT 

0, 8, 1 6 Bits 

0, 8, 32 Bits 


2.5 Data Types 

The 80376 supports all of the data types commonly used in high level languages: 


Bit: 

A single bit quantity. 

Bit Field: 

A group of up to 32 contiguous bits, which spans a maximum of four 
bytes. 

Bit String: 

A set of contiguous bits, on the 80376 bit strings can be up to 16 Mbits 
long. 

Byte: 

A signed 8-bit quantity. 

Unsigned Byte: 

An unsigned 8-bit quantity. 

Integer (Word): 

A signed 1 6-blt quantity. 

Long Integer (Double Word): 

A signed 32-bit quantity. All operations assume a 2’s complement 
representation. 

Unsigned Integer (Word): 

An unsigned 16-bit quantity. 

Unsigned Long Integer 
(Double Word): 

An unsigned 32-bit quantity. 

Signed Quad Word: 

A signed 64-bit quantity. 

Unsigned Quad Word: 

An unsigned 64-bit quantity. 

Pointer: 

A 16- or 32-bit offset only quantity which indirectly references another 
memory location. 

Long Pointer: 

A full pointer which consists of a 1 6-bit segment selector and either a 

1 6- or 32-bit offset. 

Char: 

A byte representation of an ASCII Alphanumeric or control character. 

String: 

A contiguous sequence of bytes, words or dwords. A string may 
contain between 1 byte and 16 Mbytes. 

BCD: 

A byte (unpacked) representation of decimal digits 0-9. 

Packed BCD: 

A byte (packed) representation of two decimal digits 0-9 storing one 
digit in each nibble. 
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When the 80376 is coupled with a numerics Coprocessor such as the 80387SX then the following 
common Floating Point types are supported. 

Floating Point: A signed 32-, 64- or 80-bit real number representation. Floating point 

numbers are supported by the 80387SX numerics coprocessor. 


Figure 2.5 illustrates the data types supported by the 80376 processor and the 80387SX coprocessor. 
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Figure 2.5. 80376 Supported Data Types 
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2.6 I/O Space 

The 80376 has two distinct physical address 
spaces: physical memory and I/O. Generally, pe- 
ripherals are placed in I/O space although the 
80376 also supports memory-mapped peripherals. 
The I/O space consists of 64 Kbytes which can be 
divided into 64K 8-bit ports, 32K 16-bit ports, or any 
combination of ports which add to no more than 64 
Kbytes. The M/IO# pin acts as an additional ad- 
dress line, thus allowing the system designer to easi- 
ly Ho+ormjno w/hjnh arjrjross SpaCO the prOG0SSOr Is 

accessing. Note that the I/O address refers to a 
physical address. 

The I/O ports are accessed by the IN and OUT in- 
structions, with the port address supplied as an im- 
mediate 8-bit constant in the instruction or in the DX 
register. All 8-bit and 16-bit port addresses are zero 
extended on the upper address lines. The I/O in- 
structions cause the M/IO# pin to be driven LOW. 
I/O port addresses 00F8H through OOFFH are re- 
served for use by Intel. 


2.7 Interrupts and Exceptions 

Interrupts and exceptions alter the normal program 
flow in order to handle external events, report errors 
or exceptional conditons. The difference between in- 
terrupts and exceptions is that interrupts are used to 
handle asynchronous external events while excep- 
tions handle instruction faults. Although a program 
can generate a software Interrupt via an I NT N In- 
struction, the processor treats software interrupts as 
exceptions. 

Hardware interrupts occur as the result of an exter- 
nal event and are classified into two types: maskable 
or non-maskable. Interrupts are serviced after the 
execution of the current Instruction. After the Inter- 
rupt handler Is finished servicing the Interrupt, exe- 
cution proceeds with the instruction immediately 
after the interrupted instruction. 

Exceptions are classified as faults, traps, or aborts 
depending on the way they are reported, and wheth- 
er or not restart of the instruction causing the excep- 
tion is suported. Faults are exceptions that are de- 
tected and serviced before the execution of the 
faulting instruction. Traps are exceptions that are 
reported Immediately after the execution of the in- 
struction which caused the problem. Aborts are ex- 
ceptions which do not permit the precise location of 
the instruction causing the exception to be deter- 
mined. Thus, when an interrupt service routine has 
been completed, execution proceeds from the in- 


struction immediately following the interrupted in- 
struction. On the other hand the return address from 
an exception/fault routine will always point at the 
Instruction causing the exception and include any 
leading instruction prefixes. Table 2.5 summarizes 
the possible Interrupts for the 80376 and shows 
where the return address points to. 

The 80376 has the ability to handle up to 256 differ- 
ent interrupts/exceptions. In order to service the in- 
terrupts, a table with up to 256 Interrupt vectors 
must be defined. The interrupt vectors are simply 
pointers to the appropriate Interrupt service routine. 
The interrupt vectors are 8-byte quantities, which are 
put in an Interrupt Descriptor Table. Of the 256 pos- 
sible interrupts, 32 are reserved for use by Intel and 
the remaining 224 are free to be used by the system 
designer. 

INTERRUPT PROCESSING 

When an interrupt occurs the following actions hap- 
pen. First, the current program address and the 
Flags are saved on the stack to allow resumption of 
the interrupted program. Next, an 8-bit vector is sup- 
plied to the 80376 which identifies the appropriate 
entry in the interrupt table. The table contains either 
an Interrupt Gate, a Trap Gate or a Task Gate that 
will point to an interrupt procedure or task. The user 
supplied Interrupt service routine is executed. Final- 
ly, when an IRET instruction is executed the old 
processor state is restored and program execution 
resumes at the appropriate instruction. 

The 8-bit interrupt vector is supplied to the 80376 in 
several different ways: exceptions supply the inter- 
rupt vector Internally; software I NT instructions con- 
tain or imply the vector; maskable hardware 'nter^ 
rupts supply the 8-bit vector via the Interrupt ac- 
knowledge bus sequence. Non-Maskable hardware 
interrupts are assigned to Interrupt vector 2. 

Maskable Interrupt 

Maskable interrupts are the most common way to 
respond to asynchronous external hardware events. 
A hardware interrupt occurs when the INTR Is pulled 
HIGH and the Interrupt Flag bit (IF) is enabled. The 
processor only responds to interrupts between in- 
structions (string Instructions have an “interrupt win- 
dow” between memory moves which allows inter- 
rupts during long string moves). When an interrupt 
occurs the processor reads an 8-blt vector supplied 
by the hardware which identifies the source of the 
interrupt (one of 224 user defined interrupts). 
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Table 2.5. Interrupt Vector Assignments 


Function 

Interrupt 

Number 

Instruction Which 

Can Cause 

Exception 

Return Address 
Points to 
Fauiting 
Instruction 

Type 

Divide Error 

0 

DIV, IDIV 

Yes 

FAULT 

Debug Exception 

1 

Any Instruction 

Yes 

TRAP* 

NMI Interrupt 

2 

INT 2 or NMI 

No 

NMI 

One-Byte Interrupt 

3 

INT 

No 

TRAP 

Interrupt on Overflow 

4 

INTO 

No 


Array Bounds Check 

5 

BOUND 

Yes 


Invalid OP-Code 

6 

Any Illegal Instruction 

Yes 

FAULT 

Device Not Available 

7 

ESC, WAIT 

Yes 

FAULT 

Double Fault 

8 

Any Instruction That Can 
Generate an Exception 


ABORT 

Coprocessor Segment Overrun 

9 

ESC 

No 

ABORT 

Invalid TSS 

10 

JMP,CALL, IRET, INT 

Yes 

FAULT 

Segment Not Present 

11 

Segment Register Instructions 

Yes 

FAULT 

Stack Fault 

12 

Stack References 

Yes 

FAULT 

General Protection Fault 

13 

Any Memory Reference 

Yes 

FAULT 

Intel Reserved 

14-15 

— 

— 

— 

Coprocessor Error 

16 

ESC, WAIT 

Yes 

FAULT 

Intel Reserved 

17-32 




Two-Byte Interrupt 

0-255 

INT n 

No 

TRAP 


*Some debug exceptions may report both traps on the previous instruction, and faults on the next instruction. 


Interrupts through Interrupt Gates automatically re- 
set IF, disabling INTR requests. Interrupts through 
Trap Gates leave the state of the IF bit unchanged. 
Interrupts through a Task Gate change the IF bit ac- 
cording to the image of the EFLAGs register in the 
task’s Task State Segment (TSS). When an IRET 
instruction is executed, the original state of the IF bit 
is restored. 


Non-Maskable Interrupt 

Non-maskable interrupts provide a method of servic- 
ing very high priority interrupts. When the NMI input 
is pulled HIGH it causes an interrupt with an internal- 
ly supplied vector value of 2. Unlike a normal hard- 
ware Interrupt no interrupt acknowledgement se- 
quence is performed for an NMI. 

While executing the NMI servicing procedure, the 
80376 will not service any further NMI request, or 
INT requests, until an interrupt return (IRET) instruc- 


tion is executed or the processor is reset. If NMI 
occurs while currently servicing an NMI, its presence 
will be saved for servicing after executing the first 
IRET instruction. The disabling of INTR requests de- 
pends on the gate in IDT location 2. 

Software Interrupts 

A third type of Interrupt/exception for the 80376 is 
the software interrupt. An INT n instruction causes 
the processor to execute the interrupt service rou- 
tine pointed to by the nth vector in the Interrupt table. 

A special case of the two byte software interrupt 
INT n is the one byte INT 3, or breakpoint Interrupt. 
By inserting this one byte instruction In a program, 
the user can set breakpoints in his program as a 
debugging tool. 
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A final type of software interrupt, is the single step 
interrupt. It Is discussed In Single-Step Trap (page 
22 ). 

INTERRUPT AND EXCEPTION PRIORITIES 

Interrupts are externally-generated events. Maska- 
ble Interrupts (on the INTR Input) and Non-Maskable 
Interrupts (on the NMI Input) are recognized at In- 
struction boundaries. When NMI and maskable 
INTR are both recognized at the same Instruction 
boundary, the 80376 Invokes the NMI service rou- 
tine first. If, after the NMI service routine has been 
invoked, maskable Interrupts are still enabled, then 
the 80376 will invoke the appropriate interrupt serv- 
ice routine. 

As the 80376 executes instructions, it follows a con- 
sistent cycle in checking for exceptions, as shown in 
Table 2.6. This cycle is repeated as each instruction 
is executed, and occurs In parallel with instruction 
decoding and execution. 

INSTRUCTION RESTART 

The 80376 fully supports restarting all instructions 
after faults. If an exception Is detected in the instruc- 
tion to be executed (exception categories 4 through 
9 in Table 2.6), the 80376 device Invokes the appro- 
priate exception service routine. The 80376 Is in a 
state that permits restart of the instruction. 


DOUBLE FAULT 

A Double fault (exception 8) results when the proc- 
essor attempts to Invoke an exception service rou- 
tine for the segment exceptions (10, 11, 12 or 13), 
but in the process of doing so, detects an' exception. 


2.8 Reset and Initialization 

When the processor is Reset the registers have the 
values shown in Table 2.7. The 80376 will then start 
executing instructions near the top of physical mem- 
ory, at location OFFFFFOH. A short JMP should be 
executed within the segment defined for power-up 
(see Table 2.7). The GDT should then be initialized 
for a start-up data and code segment followed by a 
far JMP that will load the segment descriptor cache 
with the new descriptor values. The IDT table, after 
reset, is located at physical address OH, with a limit 
of 256 entries. 

RESET forces the 80376 to terminate all execution 
and local bus activity. No Instruction execution or 
bus activity will occur as long as Reset Is active. 
Between 350 and 450 CLK2 periods after Reset be- 
comes inactive, the 80376 will start executing In- 
structions at the top of physical memory. 


Table 2.6. Sequence of Exception Checking 


Consider the case of the 80376 having just completed an Instruction. It then performs the following checks 
before reaching the point where the next instruction is completed; 

1. Check for Exception 1 Traps from the instruction just completed (single-step via Trap Flag, or Data 
Breakpoints set in the Debug Registers). 

2. Check for external NMI and INTR. 

3. Check for Exception 1 Faults in the next instruction (Instruction Execution Breakpoint set In the 
Debug Registers for the next instruction). 

4. Check for Segmentation Faults that prevented fetching the entire next instruction (exceptions 1 1 or 
13). 

5. Check for Faults decoding the next Instruction (exception 6 if illegal opcode; or exception 13 if 
instruction is longer than 1 5 bytes, or privilege violation (i.e. not at lOPL or at CPL = 0). 

6. If WAIT opcode, check if TS = 1 and MP = 1 (exception 7 if both are 1). 

7. If ESCape opcode for numeric coprocessor, check If EM = 1 or TS = 1 (exception 7 if either are 1). 

8. If WAIT opcode or ESCape opcode for numeric coprocessor, check ERROR# input signal (excep- 
tion 16 if ERROR# input is asserted). 

9. Check for Segmentation Faults that prevent transferring the entire memory quantity (exceptions 1 1 , 
12, 13). 


4-768 




inter 


80376 




Table 2.7. Register Values after Reset 


Flag Word (EFLAGS) 

UUUU0002H 

(Note 1) 

Machine Status Word (CRO) 

uuuuuuulH 

(Note 2) 

Instruction Pointer (EIP) 

OOOOFFFOH 

Code Segment (CS) 

FOOOH 

(Note 3) 

Data Segment (DS) 

OOOOH 

(Note 4) 

Stack Segment (SS) 

OOOOH 

Extra Segment (ES) 

OOOOH 

(Note 4) 

Extra Segment (FS) 

OOOOH 

Extra Segment (GS) 

OOOOH 

EAX Register 

OOOOH 

(Note 5) 

EDX Register 

Component and Stepping ID 

(Note 6) 

All Other Registers 

Undefined 

(Note 7) 


NOTES: 

1. EFLAG Register. The upper 14 bits of the EFLAGS register are undefined, all defined 
flag bits are zero. 

2. CRO: The defined 4 bits in the CRO is equal to 1 H. 

3. The Code Segment Register (CS) will have its Base Address set to OFFFFOOOOH and 
Limit set to OFFFFH. 

4. The Data and Extra Segment Registers (DS and ES) will have their Base Address set 
to OOOOOOOOOH and Limit set to OFFFFH. 

5. If self-test is selected, the EAX should contain a 0 value. If a value of 0 is not found 
the self-test has detected a flaw in the part. 

6. EDX register always holds component and stepping identifier. 

7. All unidentified bits are Intel Resen/ed and should not be used. 


2.9 Initialization 

Because the 80376 processor starts executing in protected mode, certain precautions need be taken during 
initialization. Before any far jumps can take place the GDT and/or LDT tables need to be setup and their 
respective registers loaded. Before Interrupts can be initialized the IDT table must be setup and the IDTR must 
be loaded. The example code is shown below: 

* 

; This is an example of startup code to put either an 80376, 

; 80386SX or 80386 into flat mode. All of memory is treated as 
; simple linear RAM. There are no interrupt routines. The 
; Builder creates the GDT-alias and IDT-alias and places them, 

; by default, in GDT[1] and GDT[2]. Other entries in the GDT 
; are specified in the Build file. After initialization it jumps 
; to a C startup routine. To use this template, change this jmp 
; address to that of your code, or make the label of your code 
; "c_startup". 

» 

; This code was assembled and built using version 1.2 of the 
; Intel RLL utilities and Intel 386ASM assembler. 

« 

; s code was tested *** 

> 
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NAME FLAT ; name of the object module 

EXTRN c_startup ;near ; this is the label jmped to after init 

pe_flag equ 1 

data_selc equ 20h ; assume code is GDT[3], data GDT[4] 

INIT.CODE SEGMENT ER PUBLIC USE32 ; Segment base at OffffffSOh 
PUBLIC GDT.DESC 
gdt^desc dq ? 

PUBLIC START 


start ; 
cld 

smsw bx 
test bl,l 
jnz pestart 
realstart 
db 66h 

mov eax, offset gdt^desc 

xor ebx,ebx 

mov bh,ah 

move bl,al 

db 67h 

db 66h 

Igdt cs:[ebx] 
smsw ax 
or al,pe„flag 
Imsw ax 
jmp next 
pestart ; 

mov ebx, offset gdt^desc 
xor eax, eax 
mov ax,bx 
Igdt cs:[eax] 
xor ebx, ebx 
mov bl,data-selc 
mov ds,bx 
mov ss,bx 
mov es,bx 
mov fs,bx 
mov gs,bx 
jmp pejump 
next : 

xor ebx, ebx 
mov bl,data«selc 
mov dSjbx 
mov ss,bx 
mov es,bx 
mov fs,bx 
mov gs,bx 
db 66h 
pejump : 

jmp far ptr c^startup 


clear direction flag 

check for processor (80376) at reset 

use SMSW rather than MOV for speed 

is an 80386 and in real mode 
force the next operand into 32-bit mode, 
move address of the GDT descriptor into eax 
clear ebx 

load 8 bits of address into bh 
load 8 bits of address into bl 

use the 32-bit form of LGDT to load 
the 32-bits of address into the GDTR 
go into protected mode (set PE bit) 


; flush prefetch queue 


; lower portion of address only 

; Ixiitialize data selectors 
; GDT [3] 


; initialize data selectors 
; GDT [3] 

; for the 80386, need to make a 32-bit jump 
; but the 80376 is already 32-bit. 


org 70h ; only if segment base is at 0ffffff80h 

jmp short start 
INIT.CODE ENDS 
END 
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This code should be linked into your application for boot loadable code. The following build file illustrates how 
this is accomplished. 

FLAT ; — build program id 

SEGMENT 

^segments (dpl=0) , 

_phantom_code_ (dpl=:0) , 

_phantom_data_ (dpl=0) , 
init^code {base=Off ff ffSOh) ; 


— Give all user segments a DPL of 0. 

— These two segments are created by 

— the builder when the FLAT control is used. 

— Put startup code at the reset vector area. 


GATE 

gl3 (entry=13, dpl=0, trap) , — trap gate disables interrupts 

i32 (entry=:32, dpl=0, interrupt), — interrupt gates doesn’t 


TABLE 

— create GDT 


GDT (LOCATION = GDT^DESC, 


ENTRY = (3;«phantom«code_, 
4 ;_phantom_data_ , 
5 :code32, 

6:data, 

7 :init_code) 

) ; 

TASK 

. MAIN.TASK 

( 

DPL = 0 , 

DATA = DATA, 

CODE = main. 


STACKS = (DATA) , 

NO INTENABLED, 
PRESENT 
) ; 


In a buffer starting at GDT_DESC 
BLD386 places the GDT base and 
GDT limit values. Buffer must be 
6 bytes long. The base and limit 
values are places in this buffer 
as two bytes of limit plus 
four bytes of base in the format 
required for use by the LGDT 
instruction. 

— Explicitly place segment 

— entries into the GDT. 


Task privilege level is 0. 

Points to a segment that 
indicates initial DS value. 

Entry point is main, which 
must be a public id. 

Segment id points to stack 
segment. Sets the initial SS:ESP 
Disable interrupts. 

Present bit in TSS set to 1. 


MEMORY 

(RANGE = (EPROM = ROM (Of f f fSOOOh. .Offf f f f f fh) , 
DRAM = RAM(0..0ffffh)) , 

ALLOCATE = (EPROM = (MAIN.TASK) ) ) ; 


END 

asm386 flatsim.a38 debug 
asm386 application. a38 debug 

bnd386 application. obj ,flatsim.obj nolo debug oj ( application. bnd) 
bld386 application. bnd bf (flatsim.bld) bl flat 

Commands to assemble and build a boot-loadable application named “application.a38”. The initialization code 
is called “flatsim.a38”, and build file is called “application.bid”. 
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2.10 Self-Test 

The 80376, like the 80386, has the capability to per- 
form a self-test. The self-test checks the function of 
all of the Control ROM and most of the non-random 
logic of the part. Approximately one-half of the 
80376 can be tested during self-test. 

Self-Test is Initiated on the 80376 when the RESET 
pin transitions from HIGH to LOW. and the BUSY# 
pin is LOW. The self-test takes about 220 clocks, or 
approximately 33 ms with a 16 MHz 80376 proces- 
sor. At the completion of self-test the processor per- 
forms reset and begins normal operation. The part 
has successfully passed self-test if the contents of 
the EAX register is zero. If the EAX register is not 
zero then the self-test has detected a flaw in the 
part. If self-test is not selected after reset, EAX may 
be non-zero after reset. 


2.11 Debugging Support 

The 80376 provides several features which simplify 
the debugging process. The three categories of on- 
chip debugging aids are: 

1 . The code execution breakpoint opcode (OCCH). 

2. The single-step capability provided by the TF bit 
in the flag register, and 

3. The code and data breakpoint capability provided 
by the Debug Registers DRO-3, DR6, and DR7. 

BREAKPOINT INSTRUCTION 

A single-byte software Interrupt (Int 3) breakpoint in- 
struction is available for use by software debuggers. 
The breakpoint opcode is OCCh, and generates an 
exception 3 trap when executed. 


DEBUG REGISTERS 


BREAKPOINT 0 DEBUG FAULT/TRAP - 
BREAKPOINT 1 DEBUG FAULT/TRAP - 
BREAKPOINT 2 DEBUG FAULT/TRAP - 
BREAKPOINT 3 DEBUG FAULT/TRAP - 
REGISTER ACCESS FAULT - 
SINGLE-STEP DEBUG TRAP - 
TASK SWITCH DEBUG TRAP - 


DEBUG 

STATUS 

REGISTER 

1dR6 


3 2 10 

240182-9 



BREAKPOINT 

CONTROL 


DR7 


240182-10 


- INTEL RESERVED DO NOT USE 

240182-5 


Figure 2.6. Debug Registers 
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SINGLE-STEP TRAP 

If the single-step flag (TF, bit 8) in the EFLAG regis- 
ter is found to be set at the end of an instruction, a 
single-step exception occurs. The single-step ex- 
ception is auto vectored to exception number 1 . 

The Debug Registers are an advanced debugging 
feature of the 80376. They allow data access break- 
points as well as code execution breakpoints. Since 
the breakpoints are Indicated by on-chip registers, 
an instruction execution breakpoint can be placed in 
ROM code or in code shared by several tasks, nei- 
ther of which can be supported by the I NT 3 break- 
point opcode. 

The 80376 contains six Debug Registers, consisting 
of four breakpoint address registers and two break- 
point control registers. Initially after reset, break- 
points are In the disabled state; therefore, no break- 
points will occur unless the debug registers are 
programmed. Breakpoints set up in the Debug 
Registers are auto-vectored to exception 1. 
Figure 2.6 shows the breakpoint status and control 
registers. 


3.0 ARCHITECTURE 

The Intel 80376 Embedded Processor has a physi- 
cal address space of 16 Mbytes (2^4 bytes) and al- 
lows the running of virtual memory programs of al- 
most unlimited size (16 Kbytes x 16 Mbytes or 
256 Gbytes (238 bytes)). In addition the 80376 pro- 
vides a sophisticated memory management and a 
hardware-assisted protection mechanism. 


3.1 Addressing Mechanism 

The 80376 uses two components to form the logical 
address, a 16-bit selector which determines the lin- 
ear base address of a segment, and a 32-bit effec- 
tive address. The selector is used to specify an 
index into an operating system defined table (see 
Figure 3.1). The table contains the 32-bit base ad- 
dress of a given segment. The linear address Is 
formed by adding the base address obtained from 
the table to the 32-bit effective address. This value 
is truncated to 24 bits to form the physical address, 
which is then placed on the address bus. 



Figure 3.1. Address Calculation 
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3.2 Segmentation 

Segmentation is one method of memory manage- 
ment and provides the basis for protection in the 
80376. Segments are used to encapsulate regions 
of memory which have common attributes. For ex- 
ample, all of the code of a given program could be 
contained in a segment, or an operating system ta- 
ble may reside in a segment. All information about 
each segment, is stored in an 8-byte data structure 
called a descriptor. All of the descriptors in a system 
are contained in tables recognized by hardware. 


TERMINOLOGY 

The following terms are used throughout the discus- 
sion of descriptors, privilege levels and protection: 

PL: Privilege Level— One of the four hierarchical 

privilege levels. Level 0 is the most privileged 
level and level 3 is the least privileged. 

RPL: Requestor Privilege Level— The privilege 
level of the original supplier of the selector. 
RPL Is determined by the least two significant 
bits of a selector. 

DPL: Descriptor Privilege Level— This is the least 
privileged level at which a task may access 
Jhat descriptor (and the segment associated 
with that descriptor). Descriptor Privilege Lev- 
el is determined by bits 6:5 in the Access 
Right Byte of a descriptor. 

CPL: Current Privilege Level— The privilege level 
at which a task Is currently executing, which 
equals the privilege level of the code seg- 
ment being executed. CPL can also be deter- 
mined by examining the lowest 2 bits of the 
C3 register, except for coniorming code seg- 
ments. 

EPL: Effective Privilege Level — The effective 
privilege level is the least privileged of the 
RPL and the DPL. EPL Is the numerical maxi- 
mum of RPL and DPL. 

Task: One instance of the execution of a program. 
Tasks are also referred to as processes. 


Each of the tables have a register associated with it: 
GDTR, LDTR and IDTR; see Figure 3.2. The LGDT, 
LLDT and LIDT instructions load the base and limit 
of the Global, Local and Interrupt Descriptor Tables 
Into the appropriate register. The SGDT, SLDT and 
SIDT store these base and limit values. These are 
privileged Instructions. 


LDTR 

1 LHT nrcrp 

1 sLector 



15 0 

, 

J 

IDT LIMIT 

IDTR 

IDT BASE 

LINEAR ADDRESS 


31 

0 



15 0 


J 

GDT LIMIT 

GDTR 

GDT BASE 

LINEAR ADDRESS 


31 

0 


LDT BASE 
LINEAR ADDRESS 


32 

PROGRAM INVISIBLE 
AUTOMATICALLY LOADED I 
FROM LDT DESCRIPTOR 
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Figure 3.2. Descriptor Table Registers 


Global Descriptor Table 

The Global Descriptor Table (GDT) contains de- 
scriptors which are possibly available to all of the 
tasks in a system. The GDT can contain any type of 
segment descriptor except for interrupt and trap de- 

Qn07ft Q A 

OWI f IW W% la f l 

simple 80376 system contains only 2 entries in the 
GDT; a code and a data descriptor. For maximum 
performance, descriptor tables should begin on 
even addresses. 

The first slot of the Global Descriptor Table corre- 
sponds to the null selector and Is not used. The null 
selector defines a null pointer value. 


DESCRIPTOR TABLES 

The descriptor tables define all of the segments 
which are used in an 80376 system. There are three 
types of tables on the 80376 which hold descriptors: 
the Global Descriptor Table, Local Descriptor Table, 
and the Interrupt Decriptor Table. All of the tables 
are variable length memory arrays, they can range in 
size between 8 bytes and 64 Kbytes. Each table can 
hold up to 8192 8-byte descriptors. The upper 13 
bits of a selector are used as an index into the de- 
scriptor table. The tables have registers associated 
with them which hold the 32-bit linear base address, 
and the 1 6-bit limit of each table. 


Local Descriptor Table 

LDTs contain descriptors which are associated with 
a given task. Generally, operating systems are de- 
signed so that each task has a separate LDT. The 
LDT may contain only code, data, stack, task gate, 
and call gate descriptors. LDTs provide a mecha- 
nism for Isolating a given task’s code and data seg- 
ments from the rest of the operating system, while 
the GDT contains descriptors for segments which 
are common to all tasks. A segment cannot be ac- 
cessed by a task if its segment descriptor does not 
exist In either the current LDT or the GDT. This pro- 
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vides both isolation and protection for a task’s seg- 
ments, while still allowing global data to be shared 
among tasks. 

Unlike the 6-byte GDT or IDT registers which contain 
a base address and limit, the visible portion of the 
LDT register contains only a 16-bit selector. This se- 
lector refers to a Local Descriptor Table descriptor in 
the GDT (see Figure 2.1). 


INTERRUPT DESCRIPTOR TABLE 

The third table needed for 80376 systems is the In- 
terrupt Descriptor Table. The IDT contains the de- 
scriptors which point to the location of up to 256 
interrupt service routines. The IDT may contain only 
task gates. Interrupt gates and trap gates. The IDT 
should be at least 256 bytes in size in order to hold 
the descriptors for the 32 Intel Reserved Interrupts. 
Every Interrupt used by a system must have an entry 
in the IDT. The IDT entries are referenced by INT 
Instructions, external interrupt vectors, and excep- 
tions. 


DESCRIPTORS 

The object to which the segment selector points to 
is called a descriptor. Descriptors are eight-byte 
quantities which contain attributes about a given 
region of linear address space. These attributes In- 
clude the 32-bit logical base address of the seg- 


ment, the 20-bit length and granularity of the seg- 
ment, the protection level, read, write or execute 
privileges, and the type of segment. All of the attri- 
bute information about a segment is contained in 12 
bits in the segment descriptor. Figure 3.3 shows the 
general format of a descriptor. All segments on the 
the 80376 have three attribute fields in common: the 
Present bit (P), the Descriptor Privilege Level bits 
(DPL) and the Segment bit (S). P = 1 if the segment 
Is loaded in physical memory, if P = 0 then any 
attempt to access the segment causes a not present 
exception (exception 11). The DPL is a two-bit field 
which specifies the protection level, 0-3, associated 
with a segment. 

The 80376 has two main categories of segments: 
system segments, and non-system segments (for 
code and data). The segment bit, S, determines if a 
given segment is a system segment, a code seg- 
ment or a data segment. If the S bit Is 1 then the 
segment is either a code or data segment, if it is 0 
then the segment is a system segment. 

Note that although the 80376 Is limited to a 
16-Mbyte Physical address space (224), jts base ad- 
dress allows a segment to be placed anywhere in a 
4-Gbyte linear address space. When writing code for 
the 80376, users should keep code portability to an 
80386 processor (or other processors with a larger 
physical address space) in mind. A segment base 
address can be placed anywhere in this 4-Gbyte lin- 
ear address space, but a physical address will be 


31 0 BYTE 

ADDRESS 

0 

+ 4 


BASE Base Address of the segment 
LIMIT The length of the segment • 

P Present Bit 1 = Present 0 = Not Present 
DPL Descriptor Privilege Level 0-3 

S Segment Descriptor: 0 = System Descriptor, 1 = Code or Data Descriptor 

TYPE Type of Segment 

A Accessed Bit 

G Granularity Bit 1 = Segment length is 4 Kbyte Granular 
0 = Segment length is byte granular 
0 Bit rhust be zero (0) for compatibility with future processors 
AVL Available field for user or OS 
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Figure 3.3. Segment Descriptors 
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G Granularity Bit 1 = Segment length is 4 Kbyte granular 
0 = Segment length is byte granular 
0 Bit must be zero (0) for compatibility with future processors 
AVL Available field for user or OS 


Figure 3.4. Code and Data Descriptors 
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Table 3.1. Access Rights Byte Definition for Code and Data Descriptors 


Bit 

Position 

Name 

Function 

7 

Present (P) 

P = 1 Segment is mapped into physical memory. 

P = 0 No mapping to physical memory exits 


6-5 

Descriptor Privilege 
Level (DPL) 

Segment privilege attribute used in privilege tests. 


4 

Segment 

S = 1 Code or Data (Includes stacks) segment descriptor 


Descriptor (S) 

S = 0 System Segment Descriptor or Gate Descriptor 


3 

Executable (E) 

E = 0 Descriptor type Is data segment: 

If 

2 

Expansion 

ED = 0 Expand up segment, offsets must be ^ limit. 

Data 


Direction (ED) 

ED = 1 Expand down segment, offsets must be > limit. 

^ Segment 

1 

Writable (W) 

W = 0 Data segment may not be written Into. 

(S = 1, 



W = 1 Data segment may be written into. J 

E = 0) 

3 

Executable (E) 

E = 1 Descriptor type is code segment: 

If 

2 

Conforming (C) 

C = 1 Code segment may only be executed when 

.Code 



CPL ^ DPL and CPL remains unchanged. 

^ Segment 

1 

Readable (R) 

R = 0 Code segment may not be read. 

(S= 1, 



R = 1 Code segment may be read. J 

E= 1) 

0 

Accessed (A) 

A = 0 Segment has not been accessed. 




A = 1 Segment selector has been loaded into segment register 



or used by selector test instructions. 



generated that is a truncated version of this linear 
address. Truncation will be to the maximum number 
of address bits. It Is recommended to place EPROM 
at the highest physical address and DRAM at the 
lowest physical addresses. 


80376 system descriptors (which are the same as 
80386 descriptor types 2, 5, 9, B, C, E and F) contain 
a 32-bit logical base address and a 20-bit segment 
limit. 

Selector Fields 


Code and Data Descriptors (S= 1) 


Figure 3.4 shows the general format of a code and 
data descriptor and Table 3.1 illustrates how the bits 


Code and data segments have several descriptor 
fields In common. The accessed bit, A, Is set when- 
ever the processor accesses a descriptor, the gran- 
ularity bit, G, specifies if a segment length is 1 -byte- 
granular or 4-Kbyte-granular. Base address bits 
31 -24, which are normally found in 80386 descrip- 
tors, are not made externally available on the 80376. 
They do not affect the operation of the 80376. The 
A 31 “A 24 field should be set to allow an 80386 to 
correctly execute with EPROM at the upper 4096 
Mbytes of physical memory. 


System Descriptor Formats (S = 0) 

System segments describe information about oper- 
ating system tables, tasks, and gates. Figure 3.5 
shows the general format of system segment de- 
scriptors, and the various types of system segments. 


A selector has three fields: Local or Global Descrip- 
tor Table Indicator (Tl), Descriptor Entry Index (In- 
dex), and Recjuesiui ( the selector’s) Privileye Level 
(RPL) as shown In Figure 3.6. The Tl bit selects ei- 
ther the Global Descriptor Table or the Local De- 
scriptor Table. The Index selects one of 8K descrip- 
tors in the appropriate descriptor table. The RPL bits 
allow high speed testing of the selector’s privilege 
attributes. 

Segment Descriptor Cache 

In addition to the selector value, every segment reg- 
ister has a segment descriptor cache register asso- 
ciated with it. Whenever a segment register’s con- 
tents are changed, the 8-byte descriptor associated 
with that selector is automatically loaded (cached) 
on the chip. Once loaded, all references to that seg- 
ment use the cached descriptor information Instead 
of reaccessing the descriptor. The contents of the 
descriptor cache are not visible to the programmer. 
Since descriptor caches only change when a seg- 
ment register is changed, programs which modify 
the descriptor tables must reload the appropriate 
segment registers after changing a descriptor’s 
value. 
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Figure 3.5. System Descriptors 
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Figure 3.6. Example Descriptor Selection 

— Data stored in a segment with privilege level p 
can be accessed only by code executing at a 
privilege level at least as privileged as p. 


3.3 Protection 


The 80376 offers extensive protection features, 
these protection features are particularly useful in 
sophisticated embedded applications which use 
multitasking real-time operating systems. For sim- 
pler embedded applications these protection capa- 
bilities can be easily bypassed by making all applica- 
tions run at privilege level (PL) 0. 

RULES OF PRIVILEGE 

The 80376 controls access to both data and proce- 
dures between levels of a task, according to the fol- 
lowing rules. 


— code segment/procedure with privilege level p 
can only be called by a task executing at the 
same or a lesser privilege level than p. 

PRIVILEGE LEVELS 

At any point in time, a task on the 80376 always 
executes at one of the four privilege levels. The Cur- 
rent Privilege Level (CPL) specifies what the task’s 
privilege level Is. A task’s CPL may only be changed 
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by control transfers through gate descriptors to a 
code segment with a different privilege level. Thus, 
an application program running at PL = 3 may call an 
operating system routine at PL = 1 (via a gate) which 
would cause the task’s CPL to be set to 1 until the 
operating system routine was finished. 

Selector Privilege (RPL) 

The privilege level of a selector is specified by the 
RPL field. The selector’s RPL is only used to estab- 
lish a less trusted privilege level than the current 
privilege level of the task for the use of a segment. 
This level is called the task’s effective privilege level 
(EPL). The EPL Is defined as being the least privi- 
leged (numerically larger) level of a task’s CPL and a 
selector’s RPL. The RPL is most commonly used to 
verify that pointers passed to an operating system 
procedure do not access data that is of higher privi- 
lege than the procedure that originated the pointer. 
Since the originator of a selector can specify any 
RPL value, the Adjust RPL (ARPL) instruction Is pro- 
vided to force the RPL bits to the originator’s CPL. 

I/O Privilege 

The I/O privilege level (lOPL) lets the operating sys- 
tem code executing at CPL = 0 define the least privi- 
leged level at which I/O instructions can be used. An 
exception 1 3 (General Protection Violation) is gener- 
ated if an I/O instruction Is attempted when the CPL 
of the task is less privileged than the lOPL. The 
lOPL Is stored in bits 1 3 and 1 4 of the EFLAGS reg- 
ister. The following instructions cause an exception 
13 if the CPL Is greater than lOPL: IN, INS, OUT, 
OUTS, STI, CLI and LOCK prefix. 


There are basically two types of segment acces- 
sess: those involving code segments such as con- 
trol transfers, and those involving data accesses. 
Determining the ability of a task to access a seg- 
ment Involves the type of segment to be accessed, 
the instruction used, the type of descriptor used and 
CPL, RPL, and DPL as described above. 


Any time an instruction loads a data segment regis- 
ter (DS, ES, FS, GS) the 80376 makes protection 
validation checks. Selectors loaded In the DS, ES, 
FS, GS registers must refer only to data segment or 
readable code segments. 

Finally the privilege validation checks are performed. 
The CPL Is compared to the EPL and if the EPL is 
more privileged than the CPL, an exception 13 (gen- 
eral protection fault) Is generated. 

The rules regarding the slack seymerii are slightly 
different than those involving data segments. In- 
structions that load selectors into SS must refer to 
data segment descriptors for writeable data seg- 
ments. The DPL and RPL must equal the CPL of all 
other descriptor types or a privilege level violation 
will cause an exception 13. A stack not present fault 
causes an exception 12. 

PRIVILEGE LEVEL TRANSFERS 

Inter-segment control transfers occur when a selec- 
tor is loaded in the CS register. For a typical system 
most of these transfers are simply the result of a call 
or a jump to another routine. There are five types of 
control transfers which are summarized in Table 3.2. 
Many of these transfers result in a privilege level 
transfer. Changing privilege levels Is done only by 
control transfers, using gates, task switches, and in- 
terrupt or trap gates. 

Control transfers can only occur if the operation 
which loaded the selector references the correct de- 
scriptor type. Any violation of these descriptor usage 
rules will cause an exception 1 3. 

CALL GATES 

Gates provide protected indirect CALLs. One of the 
major uses of gates is to provide a secure method of 
privilege transfers within a task. Since the operating 
system defines all of the gates In a system, it can 
ensure that all gates only allow entry into a few trust- 
ed procedures. 
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Table 3.2. Descriptor Types Used for Control Transfer 


Control Transfer Types 

Operation Types 

Descriptor 

Referenced 

Descriptor 

Table 

Intersegment within the same privilege level 

JMP, CALL. RET. IRET* 

Code Segment 

GDT/LDT 

Intersegment to the same or higher privilege level 
Interrupt within task may change CPL 

CALL 

Call Gate 

GDT/LDT 

Interrupt Instruction. 
Exception. External 
Interrupt 

Trap or 

Interrupt 

Gate 

IDT 

Intersegment to a lower privilege level 
(changes task CPL) 

RET. IRET*^ 

Code Segment 

GDT/LDT 


CALL. JMP 

Task State 
Segment 

GDT 

Task Switch 

CALL. JMP 

Task Gate 

GDT/LDT 

IRET** 

Interrupt Instruction, 
Exception. External 
Interrupt 

Task Gate 

IDT 


*NT (Nested Task bit of flag register) = 0 
**NT (Nested Task bit of flag register) = 1 
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TASK SWITCHING 

A very important attribute of any multi-tasking oper- 
ating system is its ability to rapidly switch between 
tasks or processes. The 80376 directly supports this 
operation by providing a task switch instruction in 
hardware. The 80376 task switch operation saves 
the entire state of the machine (all of the registers, 
address space, and a link to the previous task), 
loads a new execution state, performs protection 
checks, and commences execution in the new task. 
Like transfer of control by gates, the task switch op- 
eration is invoked by executing an inter-segment 
JMP or CALL instruction which refers to a Task 
State Segment (TSS), or a task gate descriptor in 
the GOT or LOT. An INT n instruction, exception, 
trap or external interrupt may also invoke the task 
switch operation If there is a task gate descriptor In 
the associated IDT descriptor slot. For simple appli- 
cations, the TSS and task switching may not be 
used. The TSS or task switch will not be used or 
occur if no task gates are present In the GDT, LDT 
or IDT. 

The TSS descriptor points to a segment (see Figure 
3.7) containing the entire 80376 execution state. A 
task gate descriptor contains a TSS selector. The 
limit of an 80376 TSS must be greater than 64H,, and 
can be as large as 16 Mbytes. In the additional TSS 
space, the operating system is free to store addition- 
al Information as the reason the task is inactive, the 
time the task has spent running, and open files be- 
longing to the task. For maximum performance, TSS 
should start on an even address. 

Each Task must have a TSS associated with it. The 
current TSS is identified by a special register in the 
80376 called the Task State Segment Register (TR). 
This register contains a selector referring to the task 
state segment descriptor that defines the current 
TSS. A hidden base and limit register associated 
with the TSS descriptor is loaded whenever TR is 
loaded with a new selector. Returning from a task is 
accomplished by the IRET instruction. When IRET is 
executed, control is returned to the task which was 


Interrupted. The current executing task’s state Is 
saved in the TSS and the old task state is restored 
from its TSS. 

Several bits in the flag register and CRO register give 
Information about the state of a task which is useful 
to the operating system. The Nested Task bit, NT, 
controls the function of the IRET instruction. If NT = 
0 the IRET Instruction performs the regular return. If 
NT = 1, IRET performs a task switch operation 
back to the previous task. The NT bit is set or reset 
in the following fashion: 

When a CALL or INT instruction initiates a task 
switch, the new TSS will be marked busy and 
the back link field of the new TSS set to the old 
TSS selector. The NT bit of the new task is set 
by CALL or INT initiated task switches. An Inter- 
rupt that does not cause a task switch will clear 
NT (The NT bit will be restored after execution 
of the interrupt handler). NT may also be set or 
cleared by POPF or IRET instructions. 

The 80376 task state segment is marked busy by 
changing the descriptor type field from TYPE 9 to 
TYPE OBH. Use of a selector that references a busy 
task state segment causes an exception 13. 

The coprocessor’s state is not automatically saved 
when a task switch occurs. The Task Switched Bit, 
TS, in the CRO register helps deal with the coproces- 
sor’s state in a multi-tasking environment. Whenever 
the 80376 switches tasks, it sets the TS bit. The 
80376 detects the first use of a processor extension 
Instruction after a task switch and causes the proc- 
essor extension not available exception 7. The ex- 
ception handler for exception 7 may then decide 
whether to save the state of the coprocessor. 

The T bit in the 80376 TSS indicates that the proc- 
essor should generate a debug exception when 
switching to a task. If T = 1 then upon entry to a 
new task a debug exception 1 will be generated. 
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PROTECTION AND I/O PERMISSION BIT MAP 

The I/O instructions that directly refer to addresses 
in the processor’s I/O space are IN, INS, OUT and 
OUTS. The 80376 has the ability to selectively trap 
references to specific I/O addresses. The structure 
that enables selective trapping is the I/O Permis- 
sion Bit Map In the TSS segment (see Figures 3.7 
and 3.8). The I/O permission map is a bit vector. 
The size of the map and Its location In the TSS seg- 
ment are variable. The processor locates the I/O 
permission map by means of the i/0 map base field 
in the fixed portion of the TSS. The I/O map base 
field is 16 bits wide and contains the offset of the 
beginning of the I/O permission map. 

If an I/O instruction (IN, INS, OUT or OUTS) is en- 
countered, the processor first checks whether 
CPL lOPL. If this condition is true, the I/O opera- 
tion may proceed. If not true, the processor checks 
the I/O permission map. 

Each bit in the map corresponds to an I/O port byte 
address; for example, the bit for port 41 is found at 
I/O map base +5 linearly, (5X8 = 40), bit offset 
1 . The processor tests all the bits that correspond to 
the I/O addresses spanned by an I/O operation; for 
example, a double word operation tests four bits cor- 
responding to four adjacent byte addresses. If any 
tested bit Is set, the processor signals a general pro- 
tection exception. If all the tested bits are zero, the 
I/O operations may proceed. 


It is not necessary for the I/O permission map to 
represent all the I/O addresses. I/O addresses not 
spanned by the map are treated as if they had one- 
bits in the map. The I/O map base should be at 
least one byte less than the TSS limit and the last 
byte beyond the I/O mapping information must con- 
tain all 1 ’s. 

Because the I/O permission map Is in the TSS seg- 
ment, different tasks can have different maps. Thus, 
the operating system can allocate ports to a task by 
chanyiny the I/O permission map in the task’s TSS. 

IMPORTANT IMPLEMENTATION NOTE: 

Beyond the last byte of I/O mapping Information in 
the I/O permission bit map must be a byte contain- 
ing all 1’s. The byte of all Ts must be within the 
limit of the 80376’s TSS segment (see Figure 3.7). 


4.0 FUNCTIONAL DATA 

The Intel 80376 embedded processor features a 
straightforward functional interface to the external 
hardware. The 80376 has separate parallel buses 
for data and address. The data bus is 16 bits in 
width, and bidirectional. The address bus outputs 
24-bit address values using 23 address lines and 
two-byte enable signals. 

The 80376 has two selectable address bus cycles: 
pipelined and non-pipellned. The pipelining option 
allows as much time as possible for data access by 
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Starting the pending bus cycle before the present 
bus cycle is finished. A non-pipelined bus cycle 
gives the highest bus performance by executing ev- 
ery bus cycle in two processor clock cycles. For 
maximum design flexibility, the address pipelining 
option is selectable on a cycle-by-cycle basis. 

The processor’s bus cycle is the basic mechanism 
for information transfer, either from system to proc- 
essor, or from processor to system. 80376 bus cy- 
cles perform data transfer in a minimum of only two 
clock periods. On a 16-bit data bus, the maximum 
80376 transfer bandwidth at 16 MHz is therefore 
1 6 Mbytes/sec. However, any bus cycle will be ex- 
tended for more than two clock periods if external 
hardware withholds acknowledgement of the cycle. 

The 80376 can relinquish control of its local buses 
to allow mastership by other devices, such as direct 
memory access (DMA) channels. When relin- 
quished, HLDA is the only output pin driven by the 
80376, providing near-complete Isolation of the 
processor from its system (all other output pins are 
In a float condition). 


4.1 Signal Description Overview 

Ahead is a brief description of the 80376 input and 
output signals arranged by functional groups. Note 
the # symbol at the end of a signal name Indicates 
the active, or asserted, state occurs when the signal 
is at a LOW voltage. When no # is present after the 
signal name, the signal is asserted when at the 
HIGH voltage level. 

Example signal: M/IO# — HIGH voltage indicates 
Memory selected 

—LOW voltage indicates 
I/O selected 

The signal descriptions sometimes refer to A.C. tim- 
ing parameters, such as “t 25 Reset Setup Time” and 
“t 26 Reset Hold Time.” The values of these parame- 
ters can be found In Table 6.4. 


CLOCK (CLK2) 

CLK2 provides the fundamental timing for the 
80376. It is divided by two internally to generate the 
internal processor clock used for instruction execu- 
tion. The internal clock is comprised of two 


CLK2 


INTERNAL 
PROCESSOR CLOCK 
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Figure 4.2. CLK2 Signal and Internal Processor Clock 
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phases, “phase one” and “phase two”. Each CLK2 
period is a phase of the internal clock. Figure 4.2 
illustrates the relationship. If desired, the phase of 
the internal processor clock can be synchronized to 
a known phase by ensuring the falling edge of the 
RESET signal meets the applicable setup and hold 
times t 25 and t 26 - 

DATA BUS (D15-D0) 

These three-state bidirectional signals provide the 
general purpose data path between the 80376 and 
other devices. The data bus outputs are active HIGH 
and will float during bus hold acknowledge. Data bus 
reads require that read-data setup and hold times 
t 2 i and t 22 be met relative to CLK2 for correct oper- 
ation. 


ADDRESS BUS (BHE#, BLE#, A23-A1) 

These three-state outputs provide physical memory 
addresses or I/O port addresses. A 23 -A 16 are LOW 
during I/O transfers except for I/O transfers auto- 
matically generated by coprocessor instructions. 


During coprocessor I/O transfers, A 22 -A 16 are driv- 
en LOW, and A 23 is driven HIGH so that this ad- 
dress line can be used by external logic to generate 
the coprocessor select signal. Thus, the I/O address 
driven by the 80376 for coprocessor commands is 
8000F8H, and the I/O address driven by the 80376 
processor for coprocessor data Is 8000FCH or 
8000FEH. 

The address bus Is capable of addressing 1 6 Mbytes 
of physical memory space (OOOOOOH through 
OFFFFFFH), and 64 Kbytes of I/O address space 
(OOOOOOH through OOFFFFH) for programmed I/O. 
The address bus is active HIGH and will float during 
bus hold acknowledge. 

The Byte Enable outputs BHE# and BLE# directly 
indicate which bytes of the 16-blt data bus are in- 
volved with the current transfer. BHE# applies to 
D- 15 -D 8 and BLE# applies to D 7 -D 0 . If both BHE# 
and BLE# are asserted, then 16 bits of data are 
being transferred. See Table 4.1 for a complete de- 
coding of these signals. The byte enables are active 
LOW and will float during bus hold acknowledge. 


Table 4 . 1 . Byte Enable Definitions 


BHE# 

BLE# 

Function 

0 

0 

Word Transfer 

0 

1 

Byte Transfer on Upper Byte of the Data Bus, D 15 -D 8 

1 

0 

Byte Transfer on Lower Byte of the Data Bus, D 7 -D 0 

1 

1 

Never Occurs 
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BUS CYCLE DEFINITION SIGNALS 
(W/R#, D/C#, M/IO#, LOCK#) 

These three-state outputs define the type of bus cy- 
cle being performed: W/R# distinguishes between 
write and read cycles, D/C# distinguishes between 
data and control cycles, M/IO# distinguishes be- 
tween memory and I/O cycles, and LOCK# distin- 
guishes between locked and unlocked bus cycles. 
All of these signals are active LOW and will float 
during bus acknowledge. 

The primary bus cycle definition signals are W/R#, 
D/C# and M/IO#, since these are the signals driv- 
en valid as ADS# (Address Status output) becomes 
active. The LOCK# signal is driven valid at the same 
time the bus cycle begins, which due to address 
pipelining, could be after ADS# becomes active. Ex- 
act bus cycle definitions, as a function of W/R#, 
D/C# and M/IO# are given in Table 4.2. 

LOCK# indicates that other system bus masters are 
not to gain control of the system bus while It is ac- 
tive. LOCK# is activated on the CLK2 edge that be- 
gins the first locked bus cycle (i.e., it is not active at 
the same time as the other bus cycle definition pins) 
and is deactivated when ready is returned to the end 
of the last bus cycle which is to be locked. The be- 
ginning of a bus cycle Is determined when READY# 
is returned in a previous bus cycle and another is 
pending (ADS# is active) or the clock in which 
ADS# is driven active if the bus was idle. This 
means that it follows more closely with the write 
data rules when it is valid, but may cause the bus to 
be locked longer than desired. The LOCK# signal 
may be explicitly activated by the LOCK prefix on 
certain instructions. LOCK# is always asserted 
when executing the XCHG Instruction, during de- 
scriptor updates, and during the interrupt acknowl- 
edge sequence. 


BUS CONTROL SIGNALS 
(ADS#, READY#, NA#) 

The following signals allow the processor to indicate 
when a bus cycle has begun, and allow other system 
hardware to control address pipelining and bus cycle 
termination. 


Address Status (ADS#) 

This three-state output indicates that a valid bus cy- 
cle definition and address (W/R#, D/C#, M/IO#, 
BHE#, BLE# and A 23 -A 1 ) are being driven at the 
80376 pins. ADS# is an active LOW output. Once 
ADS# is driven active, valid address, byte enables, 
and definition signals will not change. In addition, 
ADS# will remain active until its associated bus cy- 
cle begins (when READY# is returned for the previ- 
ous bus cycle when running pipelined bus cycles). 
ADS# will float during bus hold acknowledge. See 
sections Non-Pipelined Bus Cycles (page 43) and 
Pipelined Bus Cycles (page 45) for additional infor- 
mation on how ADS# is asserted for different bus 
states. 


Transfer Acknowledge (READY#) 

This input indicates the current bus cycle is com- 
plete, and the active bytes indicated by BHE# and 
BLE# are accepted or provided. When READY# is 
sampled active during a read cycle or interrupt ac- 
knowledge cycle, the 80376 latches the input data 
and terminates the cycle. When READY# is sam- 
pled active during a write cycle, the processor termi- 
nates the bus cycle. 


Table 4.2. Bus Cycle Definition 


M/iO# 

D/C# 

W/R# 

Bus Cycie Type 

Locked? 

0 

0 

0 

INTERRUPT ACKNOWLEDGE 

Yes 

0 

0 

1 

Does Not Occur 

— 

0 

1 

0 

I/O DATA READ 

No 

0 

1 

1 

I/O DATA WRITE 

No 

1 

0 

0 

MEMORY CODE READ 

No 

1 

0 

1 

HALT: SHUTDOWN: 

Address = 2 Address ^ 0 

BHE# = 1 BHE# = 1 

BLE# = 0 BLE# = 0 

No 

1 

1 

0 , 

MEMORY DATA READ 

Some Cycles 

1 

1 

1 

MEMORY DATA WRITE 

Some Cycles 
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READY# is ignored on the first bus state of all bus 
cycles, and sampled each bus state thereafter until 
asserted. READY# must eventually be asserted to 
acknowledge every bus cycle, Including Halt Indica- 
tion and Shutdown Indication bus cycles. When be- 
ing sampled, READY# must always meet setup and 
hold times t-ig and t 2 o for correct operation. 

Next Address Request (NA#) 

This Is used to request pipelining. This Input indi- 

uaioo II lo ojroi^iii lo iv; new voiu^o 

Of BHE#, BLE#, A 23 -A 1 , W/R#, D/C# and 
M/IO# from the 80376 even if the end of the current 
cycle is not being acknowledged on READY#. If this 
input is active when sampled, the next bus cycle’s 
address and status signals are driven onto the bus, 
provided the next bus request is already pending in- 
ternally. NA# Is ignored In clock cycles in which 
ADS# or READY# is activated. This signal is active 
LOW and must satisfy setup and hold times t-is and 
ti 6 for correct operation. See Pipelined Bus Cycles 
(page 45) and Read and Write Cycles (page 42) for 
additional information. 

BUS ARBITRATION SIGNALS (HOLD, HLDA) 

This section describes the mechanism by which the 
processor relinquishes control of its local buses 
when requested by another bus master device. See 
Entering and Exiting Hold Acknowledge (page 
52) for additional information. 

Bus Hold Request (HOLD) 

This input Indicates some device other than the 
80376 requires bus mastership. When control Is 
yr anted, the 60376 noals A 23 -A 1 , BHE#, BLE#, 
D 15 -D 0 , LOCK#, M/IO#, D/C#, W/R# and 
ADS#, and then activates HLDA, thus entering the 
bus hold acknowledge state. The local bus will re- 
main granted to the requesting master until HOLD 
becomes inactive. When HOLD becomes Inactive, 
the 80376 will deactivate HLDA and drive the local 
bus (at the same time), thus terminating the hold 
acknowledge condition. 

HOLD must remain asserted as long as any other 
device is a local bus master. External pull-up resis- 
tors may be required when in the hold acknowledge 
state since none of the 80376 floated outputs have 
internal pull-up resistors. See Resistor Recommen- 
dations (page 59) for additional information. HOLD 
is not recognized while RESET is active but is recog- 
nized during the time between the high-to-low tran- 
sistlon of RESET and the first instruction fetch. If 
RESET Is asserted while HOLD is asserted, RESET 
has priority and places the bus into an Idle state, 
rather than the hold acknowledge (high-impedance) 
state. 


HOLD Is a level-sensitive, active HIGH, synchronous 
Input. HOLD signals must always meet setup and 
hold times t 23 and t 24 for correct operation. 

Bus Hoid Acknowledge (HLDA) 

When active (HIGH), this output indicates the 80376 
has relinquished control of its local bus In response 
to an asserted HOLD signal, and is In the bus Hold 
Acknowledge state. 

The Bus Hold Acknowledge state offers near-com- 
plete signal Isolation. In the Hold Acknowledge 
state, HLDA Is the only signal being driven by the 
80376. The other output signals or bidirectional sig- 
nals (D 15 -D 0 , BHE#, BLE#, A 23 --A 1 , W/R#, 
D/C#, M/IO#, LOCK# and ADS#) are in a high- 
impedance state so the requesting bus master may 
control them. These pins remain OFF throughout the 
time that HLDA remains active (see Table 4.3). Pull- 
up resistors may be desired on several signals to 
avoid spurious activity when no bus master Is driving 
them. See Resistor Recommendations (page 59) 
for additional information. 

When the HOLD signal is made inactive, the 80376 
will deactivate HLDA and drive the bus. One rising 
edge on the NMI input is remembered for processing 
after the HOLD input is negated. 


Table 4.3. Output Pin State during HOLD 


Pin Value 

Pin Names 

1 

Float 

HLDA 

LOCK#, M/IO#, D/C#, W/R#, 
ADS#, A23~Ai, BHE#, BLE#, 
D15-D0 


In addition to the normal usage of Hold Acknowl- 
edge with DMA controllers or master - peripherals, 
the near-complete isolation has particular attractive- 
ness during system test when test equipment drives 
the system, and In hardware-fault-tolerant applica- 
tions. 


Hold Latencies 

The maximum possible HOLD latency depends on 
the software being executed. The actual HOLD la- 
tency at any time depends on the current bus activi- 
ty, the state of the LOCK# signal (internal to the 
CPU) activated by the LOCK# prefix, and interrupts. 
The 80376 will not honor a HOLD request until the 
current bus operation is complete. Table 4.4 shows 
the types of bus operations that can affect HOLD 
latency, and Indicates the types of delays that 
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Coprocessor Busy (BUSY#) 


these operations may introduce. When considering 
maximum HOLD latencies, designers must select 
which of these bus operations are possible, and 
then select the maximum latency form among them. 

The 80376 breaks 32-bit data or I/O accesses Into 2 
internally locked 16-blt bus cycles; the LOCK# sig- 
nal is not asserted. The 80376 breaks unaligned 
16-blt or 32-bit data or I/O accesses into 2 or 3 Inter- 
nally locked 16-bit bus cycles. Again the LOCK# 
signal Is not asserted but a HOLD request will not be 
recognized until the end of the entire transfer. 

Wait states affect HOLD latency. The 80376 will not 
honor a HOLD request until the end of the current 
bus operation, no matter how many wait states are 
required. Systems with DMA where data transfer is 
critical must insure that READY # returns sufficiently 
soon. 


COPROCESSOR INTERFACE SIGNALS 
(PEREQ, BUSY#, ERROR#) 

In the following sections are descriptions of signals 
dedicated to the numeric coprocessor interface. In 
addition to the data bus, address bus, and bus cycle 
definition signals, these following signals control 
communication between the 80376 and the 
80387SX processor extension. 

Coprocessor Request (PEREQ) 

When asserted (HIGH), this input signal indicates a 
coprocessor request for a data operand to be trans- 
ferred to/from memory by the 80376. In response, 
the 80376 transfers Information between the co- 
processor and memory. Because the 80376 has in- 
ternally stored the coprocessor opcode being exe- 
cuted, it performs the requested data transfer with 
the correct direction and memory address. 

PEREQ is a level-sensitive active HIGH asynchro- 
nous signal. Setup and hold times, t 29 and tao, rela- 
tive to the CLK2 signal must be met to guarantee 
recognition at a particular clock edge. This signal is 
provided with a weak internal pull-down resistor of 
around 20 KH to ground so that it will not float active 
when left unconnected. 


When asserted (LOW), this input indicates the co- 
processor is still executing an instruction, and Is not 
yet able to accept another. When the 80376 en- 
counters any coprocessor instruction which oper- 
ates on the numerics stack (e.g. load, pop, or arith- 
metic operation), or the WAIT instruction, this input 
is first automatically sampled until it is seen to be 
Inactive. This sampling of the BUSY # input prevents 
overrunning the execution of a previous coprocessor 
instruction. 

The F(N)INIT, F(N)CLEX coprocessor instructions 
are allowed to execute even if BUSY# Is active, 
since these instructions are used for coprocessor 
initialization and exception-clearing. 

BUSY # is an active LOW, level-sensitive asynchro- 
nous signal. Setup and hold times, t 29 and tso, rela- 
tive to the CLK2 signal must be met to guarantee 
recognition at a particular clock edge. This pin Is pro- 
vided with a weak Internal pull-up resistor of around 
20 Kfl to Vcc so that it will not float active when left 
unconnected. 

BUSY # serves an additional function. If BUSY # is 
sampled LOW at the falling edge of RESET, the 
80376 processor performs an internal self-test (see 
Bus Activity During and Following Reset on page 
54). If BUSY# is sampled HIGH, no self-test Is per- 
formed. 


When asserted (LOW), this input signal indicates 
that the previous coprocessor instruction generated 
a coprocessor error of a type not masked by the 
coprocessor’s control register. This input is automat- 
ically sampled by the 80376 when a coprocessor 
instruction is encpuntered, and If active, the 80376 
generates exception 1 6 to access the error-handling 
software. . 

Several coprocessor instructions, generally those 
which clear the numeric error flags in the coproces- 
sor or save coprocessor state, do execute without 
the 80376 generating exception 16 even if ER- 
ROR# is active. These instructions are FNINIT, 
FNCLEX, FNSTSW, FNSTSWAX, FNSTCW, 
FNSTENV and FNSAVE. 


Coprocessor Error (ERROR#) 
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ERROR# is an active LOW, level-sensitive asyn- 
chronous signal. Setup and hold times t 29 and tao, 
relative to the CLK2 sijgnal must be met to guarantee 
recognition at a particular clock edge. This pin is pro- 
vided with a weak internal pull-up resistor of around 
20 Kft to Vcc so that It will not float active when left 
unconnected. 


INTERRUPT SIGNALS (INTR, NMI, RESET) 

The following descriptions cover inputs that can in- 
terrupt or suspend execution of the processor’s cur- 
rent instruction stream. 


Maskable Interrupt Request (INTR) 

When asserted, this input indicates a request for in- 
terrupt service, which can be masked by the 80376 
Flag Register IF bit. When the 80376 responds tp 
the INTR Input, it performs two interrupt acknowl- 
edge bus cycles and, at the end of the second, 
latches an 8-bit Interrupt vector on Dy-Do to identify 
the source of the Interrupt. 

INTR is an active HIGH, level-sensitive asynchro- 
nous signal. Setup and hold times, t 27 and t 28 , rela- 
tive to the CLK2 signal must be met to guarantee 
recognition at a particular clock edge. To assure rec- 
ognition of an INTR request, INTR should remain 
active until the first Interrupt acknowledge bus cycle 
begins. INTR is sampled at the beginning of every 
Instruction. In order to be recognized at a particular 
instruction boundary, INTR must be active at least 
eight CLK2 clock periods before the beginning of the 
execution of the instruction. If recognized, the 80376 
will begin execution of the interrupt. 

Non-Maskable Interrupt Request (NMI) 

This input indicates a request for interrupt service 
which cannot be masked by software. The non- 
maskable interrupt request Is always processed ac- 
cording to the pointer or gate In slot 2 of the Interrupt 
table. Because of the fixed NMI slot assignment, no 
interrupt acknowledge cycles are performed when 
processing NMI. 

NMI is an active HIGH, rising edge-sensitive asyn- 
chronous signal. Setup and hold times, t 27 and t 28 , 
relative to the CLK2 signal must be met to guarantee 
recognition at a particular clock edge. To assure rec- 
ognition of NMI, It must be inactive for at least eight 
CLK2 periods, and then be active for at least eight 
CLK2 periods before the beginning of the execution 
of an instruction. 

Once NMI processing has begun, no additional 
NMI’s are processed until after the next IRET in- 
struction, which Is typically the end of the NMI serv- 


ice routine. If NMI is re-asserted prior to that time, 
however, one rising edge on NMI will be remem- 
bered for processing after executing the next IRET 
Instruction. 

Interrupt Latency 

The time that elapses before an Interrupt request Is 
serviced (Interrupt latency) varies according to sev- 
eral factors. This delay must be taken into account 
by the interrupt .source. Any of the following factors 
can affect interrupt latency: 

1. If interrupts are masked, and INTR request will 
not be recognized until interrupts are reenabled. 

2. If an NMI is currently being serviced, an incoming 
NMI request will not be recognized until the 80376 
encounters the IRET instruction. 

3. An interrupt request is recognized only on an in- 
struction boundary of the 80376 Execution Unit 
except for the following cases: 

— Repeat string Instructions can be Interrupted 
after each iteration. 

— If the instruction loads the Stack Segment reg- 
ister, an interrupt is not processed until after 
the following instruction, which should be an 
ESP load. This allows the entire stack pointer 
to be loaded without interruption. 

— If an instruction sets the interrupt flag (enabling 
interrupts), an interrupt is not processed until 
after the next instruction. 

The longest latency occurs when the Interrupt re- 
quest arrives while the 80376 processor Is exe- 
cuting a long instruction such as multiplication, di- 
vision or a task-switch. 

4. Saving the Flags register and C5:EiP registers. 

5. If interrupt service routine requires a task switch, 
time must be allowed for the task switch. 

6. If the Interrupt service routine saves registers that 
are not automatically saved by the 80376. 

RESET. 

This input signal suspends any operation In progress 
and places the 80376 in a known reset state. The 
80376 is reset by asserting RESET for 15 or more 
CLK2 periods (80 or more CLK2 periods before re- 
questing self-test). When RESET is active, ail other 
input pins are ignored, and all other bus pins are 
driven to an Idle bus state as shown in Table 4.5. If 
RESET and HOLD are both active at a point In time, 
RESET takes priority even if the 80376 was in a 
Hold Acknowledge state prior to RESET active. 

RESET is an active HIGH, level-sensitive synchro- 
nous signal. Setup and hold times, t 25 and t 26 . must 
be met in order to assure proper operation of the 
80376. 


4-788 



80376 




int^ 


Table 4.5. Pin State (Bus idle) during RESET 


Pin Name 

Signal Level during RESET 

ADS# 

1 

D15-D0 

Float 

BHE#, BLE# 

0 

A23-A1 

1 

W/R# 

0 

D/C# 

1 

M/IO# 

0 

LOCK# 

1 

HLDA 

0 


4.2 Bus Transfer Mechanism 

All data transfers occur as a result of one or more 
bus cycles. Logical data operands of byte and word 
lengths may be transferred without restrictions on 
physical address alignment. Any byte boundary may 
be used, although two physical bus cycles are per- 
formed as required for unaligned operand transfers. 

The 80376 processor address signals are designed 
to simplify external system hardware. BHE# and 
BLE# provide linear selects for the two bytes of the 
1 6-bit data bus. 

Byte Enable outputs BHE# and BLE# are asserted 
when their associated data bus bytes are involved 
with the present bus cycle, as listed in Table 4.6. 


Table 4.6. Byte Enables and Associated 
Data and Operand Bytes 


Byte Enable 

Associated Data Bus Signals 

BHE# 

BLE# 

Di 5“D8 (Byte 1— Most Significant) 
D7-D0 (Byte 0 — Least Significant) 


Each bus cycle is composed of at least two bus 
states. Each bus state requires one processor clock 
period. Additional bus states added to a single bus 
cycle are called wait states. See Bus Functional 
Description (page 39) for additional information. 


4.3 Memory and I/O Spaces 

Bus cycles may access physical memory space or 
I/O space. Peripheral devices in the system may ei- 
ther be memory-mapped, or I/O-mapped, or both. 
As shown In Figure 4.3, physical memory addresses 
range from OOOOOOH to OFFFFFFH (16 Mbytes) and 
I/O addresses from OOOOOOH to OOFFFFH 
(64 Kbytes). Note the I/O addresses used by the 
automatic I/O cycles for coprocessor communica- 
tion are 8000F8H to 8000FFH, beyond the address 
range of programmed I/O, to allow easy generation 
of a coprocessor chip select signal using the A23 
and M/IO# signals. 


OPERAND ALIGNMENT 

With the flexibility of memory addressing on the 
80376, it is possible to transfer a logical operand 
that spans more than one physical Dword or word of 
memory or I/O. Examples are 32-bit Dword or 16-blt 
word operands beginning at addresses not evenly 
divisible by 2. 

Operand alignment and size dictate when multiple 
bus cycles are required. Table 4.6a describes the 
transfer cycles generated for all combinations of log- 
ical operand lengths and alignment. 


Table 4.6a. Transfer Bus Cycles 
for Bytes, Words and Dwords 



Byte-Length of Logical Operand | 


1 

2 

4 

Physical Byte 
Address in 

XX 

00 

01 

10 

11 

00 

01 

10 

11 

Memory 

(Low-Order 

Bits) 










Transfer 

b 

w 

lb, 

w 

hb, 

Iw, 

hb. 

hw, 

mw, 

Cycles 



hb 


l.b 

hw 

lb, 

Iw 

hb, 








mw 


lb 


Key: b = byte transfer 
w = word transfer 
I = low-order portion 
m = mid-order portion 
X = don’t care 
h = high-order portion 
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4.4 Bus Functional Description 

The 80376 has separate, parallel buses for data and 
address. The data bus is 16 bits in width, and bidi- 
rectional. The address bus provides a 24-bit value 
using 23 signals for the 23 upper-order address bits 
and 2 Byte Enable signals to directly Indicate the 
active bytes. These buses are interpreted and con- 
trolled by several definition signals. 

The definition of each bus cycle Is given by three 
signals: M/IO#, W/R# and D/C#. At the same 
time, a valid address is present on the byte enable 
signals, BHE# and BLE#, and the other address 
signals A 23 -’Ai. A status signal, ADS#, Indicates 
when the 80376 issues a new bus cycle definition 
and address. 

Collectively, the address bus, data bus and all asso- 
ciated control signals are referred to simply as “the 
bus”. When active, the bus performs one of the bus 
cycles below: ' 

1 . Read from memory space 

2. Locked read from memory space 

3. Write to memory space 

4. Locked write to memory space 


5. Read from I/O space (or coprocessor) 

6. Write to I/O space (or coprocessor) 

7. Interrupt acknowledge (always locked) 

8. Indicate halt, or Indicate shutdown 

Table 4.2 shows the encoding of the bus cycle defi- 
nition signals tor each bus cycle. See Bus Cycle 
Definition Signais (page 35) for additonal informa- 
tion. 

When the 80376 bus Is not performing one of the 
activities listed above, it is either Idle or in the Hold 
Acknowledge state, which may be detected by ex- 
ternal circuitry. The idle state can be identified by the 
80376 giving no further assertions on its address 
strobe output (ADS#) since the beginning of its 
most recent bus cycle, and the most recent bus cy- 
cle having been terminated. The hold acknowledge 
state is identified by the 80376 asserting Its hold ac- 
knowledge (HLDA) output. 

The shortest time unit of bus activity is a bus state. A 
bus state Is one processor clock period (two CLK2 
periods) in duration. A complete data transfer occurs 
during a bus cycle, composed of two or more bus 
states. 
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Figure 4.4. Fastest Read Cycles with Non-Pipelined Timing 


The fastest 80376 bus cycle requires only two bus 
states. For example, three consecutive bus read cy- 
cles, each consisting of two bus states, are shown 
by Figure 4.4. The bus states in each cycle are 
named T1 and T2. Any memory or I/O address may 
be accessed by such a two-state bus cycle, if the 
external hardware is fast enough. 

Every bus cycle continues until it is acknowledged 
by the external system hardware, using the 80376 
READY# input. Acknowledging the bus cycle at the 
end of the first T2 results in the shortest bus cycle, 
requiring only T1 and T2. If READY# is not immedi- 
ately asserted however, T2 states are repeated in- 
definitely until the READY # input is sampled active. 

The pipelining option provides a choice of bus cycle 
timings. Pipelined or non-pipelined cycles are 


selectable on a cycle-by-cycle basis with the Next 
Address (NA#) input. 

When pipelining is selected the address (BHE#, 
BLE# and A23-A1) and definition (W/R#, D/C#, 
M/IO# and LOCK#) of the next cycle are available 
before the end of the current cycle. To signal their 
availability, the 80376 address status output (ADS#) 
is asserted. Figure 4.5 Illustrates the fastest read cy- 
cles with pipelined timing. 

Note from Figure 4.5 the fastest bus cycles using 
pipelining require only two bus states, named TIP 
and T2P. Therefore pipelined cycles allow the same 
data bandwidth as non-pipelined cycles, but ad- 
dress-to-data access time is increased by one 
T-state time compared to that of a non-pipelined cy- 
cle. 
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Figure 4.5. Fastest Read Cycles with Pipelined Timing 


READ AND WRITE CYCLES 

Data transfers occur as a result of bus cycles, classi- 
fied as read or write cycles. During read cycles, data 
is transferred from an external device to the proces- 
sor. During write cycles, data is transferred from the 
processor to an external device. 

Two choices of bus cycle timing are dynamically se- 
lectable: non-pipelined or pipelined. After an idle bus 
state, the processor always uses non-pipellned tim- 
ing. However the NA# (Next Address) input may be 
asserted to select pipelined timing for the next bus 
cycle. When pipelining is selected and the 80376 
has a bus request pending internally, the address 
and definition of the next cycle Is made available 
even before the current bus cycle is acknowledged 
by READY#. 

Terminating a read or write cycle, like any bus cycle, 
requires acknowledging the cycle by asserting the 
READY# input. Until acknowledged, the processor 
inserts wait states into the bus cycle, to allow adjust- 


ment for the speed of any external device. External 
hardware, which has decoded the address and bus 
cycle type, asserts the READY# input at the appro- 
priate time. 

At the end of the second bus state within the bus 
cycle, READY# is sampled. At that time, if external 
hardware acknowledges the bus cycle by asserting 
READY#, the bus cycle terminates as shown In Fig- 
ure 4.6. If READY# is negated as in Figure 4.7, the 
80376 executes another bus state (a wait state) and 
READY # Is sampled again at the end of that state. 
This continues Indefinitely until the cycle is acknowl- 
edged by READY# asserted. 

When the current cycle is acknowledged, the 80376 
terminates it. When a read cycle Is acknowledged, 
the 80376 latches the information present at Its data 
pins. When a write cycle is acknowledged, the write 
data of the 80376 remains valid throughout phase 
one of the next bus state, to provide write data hold 
time. 
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Idle states are shown here for diagram variety only. Write cycles are not always followed by an idle state. An active bus 
cycle can immediately follow the write cycle. 


Figure 4.6. Various Non-Pipeiined Bus Cycles (Zero Wait States) 


Non-Pipelined Bus Cycles 

Any bus cycle may be performed with non-pipelined 
timing. For example, Figure 4.6 shows a mixture of 
non-pipelined read and write cycles. Figure 4.6 
shows that the fastest possible non-pipelined cycles 
have two bus states per bus cycle. The states are 
named T1 and T2. In phase one of T1, the address 
signals and bus cycle definition signals are driven 
valid and, to signal their availability, address strobe 
(ADS#) is simultaneously asserted. 


During read or write cycles, the data bus behaves as 
follows. If the cycle Is a read, the 80376 floats its 
data signals to allow driving by the external device 
being addressed. The 80376 requires that ali data 
bus pins be at a vaiid iogic state (HIGH or LOW) 
at the end of each read cycle, when READY # is 
asserted. The system MUST be designed to 
meet this requirement, if the cycle is a write, data 
signals are driven by the 80376 beginning in phase 
two of T1 until phase one of the bus state following 
cycle acknowledgement. 
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Idle states are shown here for diagram variety only. Write cycles are not always followed by an idle state. An active bus 
cycle can immediately follow- the write cycle. 


Figure 4.7. Various Non-Pipeiined Bus Cycles (Various Number of Wait States) 


Figure 4.7 inustrates ncn-pipclined bus cycles with 
one wait state added to Cycles 2 and 3. READY# is 
sampled inactive at the end of the first T2 in Cycles 
2 and 3. Therefore Cycles 2 and 3 have T2 repeated 
again. At the end of the second T2, READY# is 
sampled active. 

When address pipelining is not used, the address 
and bus cycle definition remain valid during all wait 
states. When wait states are added and it Is desir- 
able to maintain non-pipelined timing, It is necessary 
to negate NA# during each T2 stats except the 


last onS; as shown in Figure 4.7. Cycles 2 and 3. If 
NA# Is sampled active during a T2 other than the 
last one, the next state would be T2! or T2P instead 
of another T2. 

When address pipelining is not used, the bus states 
and transitions are completely Illustrated by Figure 
4.8. The bus transitions between four possible 
states, T1, T2, Tj, and T^. Bus cycles consist of T1 
and T2, with T2 being repeated for wait states. Oth- 
erwise the bus may be idle, Tj, or in the hold ac- 
knowledge state T^. 
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nally pending bus cycle before the current bus cycle 
is acknowledged with READY# asserted. ADS# is 
asserted by the 80376 when the next address is is- 
sued. The pipelining option is controlled on a cycle- 
by-cycle basis with the NA# input signal. 

Once a bus cycle is in progress and the current ad- 
dress has been valid for at least one entire bus 
state, the NA# input is sampled at the end of every 
phase one until the bus cycle is acknowledged. Dur- 
ing non-pipelined bus cycles NA# is sampled at the 
end of phase one In every T2. An example is Cycle 2 
in Figure 4.9, during which NA# is sampled at the 
end of phase one of every T2 (it was asserted once 
during the first T2 and has no further effect during 
that bus cycle). 


Bus cycles always begin with T1 . T1 always leads to 
T2. If a bus cycle is not acknowledged during T2 and 
NA# is inactive, T2 is repeated. When a cycle Is 
acknowledged during T2, the following state will be 
T 1 of the next bus cycle if a bus request is pending 
internally, or Tj if there is no bus request pending, or 
Th if the HOLD input is being asserted. 

Use of pipelining allows the 80376 to enter three 
additional bus states not shown In Figure 4.8. Figure 
4.12 on page 49 Is the complete bus state diagram, 
including pipelined cycles. 

Pipelined Bus Cycles 

Pipelining Is the option of requesting the address 
and the bus cycle definition of the next Inter- 
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If NA# is sampleu active, the 80376 is frcs to drive 
the address and bus cycle definition of the next bus 
cycle, and assert ADS#, as soon as it has a bus 
request internally pending. It may drive the next ad- 
dress as early as the next bus state, whether the 
current bus cycle is acknowledged at that time or 
not. 

Regarding the details of pipelining, the 80376 has 
the following characteristics; 

1 . The next address and status may appear as early 
as the bus state after NA# was sampled active 
(see Figures 4.9 or 4.10). In that case, state T2P 
Is entered immediately. However, when there is 
not an internal bus request already pending, the 
next address and status will not be available im- 
mediately after NA# is asserted and T2I is en- 
tered instead of T2P (see Figure 4.11 Cycle 3). 
Provided the current bus cycle Isn’t yet acknow- 


ledged by RE.ADY # asserted, T2P will be entered 
as soon as the 80376 does drive the next address 
and status. External hardware should therefore 
observe the ADS# output as confirmation the 
next address and status are actually being driven 
on the bus. 

2. Any address and status which are validated by a 
pulse on the 80376 ADS# output will remain sta- 
ble on the address pins for at least two processor 
clock periods. The 80376 cannot produce a new 
address and status more frequently than every 
two processor clock periods (see Figures 4.9, 
4.10 and 4.11). 

3. Only the address and bus cycle definition of the 
very next bus cycle is available. The pipelining ca- 
pability cannot look further than one bus cycle 
ahead (see Figure 4.11, Cycle 1). 
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Following any idle bus state (Ti) the bus cycle is always non-pipelined and NA# is only sampled during wait states. To 
start, address pipelining after an idle state requires a non-pipelined cycle with at least one wait state (cycle 1 above). 
The pipelined cycles (2, 3, 4 above) are shown with various numbers of wait states. 


Figure 4.10. Fastest Transition to Pipelined Bus Cycle Following Idle Bus State 


The complete bus state transition diagram, including 
pipelining is given by Figure 4.12. Note it is a super- 
set of the diagram for non-pipelined only, and the 
three additional bus states for pipelining are drawn 
in bold. 

The fastest bus cycle with pipelining consists of just 
two bus states, TIP and T2P (recall for non-pipe- 
lined It is TI and T2). TIP is the first bus state of a 
pipelined cycle. 

Initiating and Maintaining Pipelined Bus Cycles 

Using the state diagram Figure 4.12, observe the 
transitions from an idle state, Tj, to the beginning of 


a pipelined bus cycle TIP. From an idle state, Tj, the 
first bus cycle must begin with T 1 , and is therefore a 
non-pipelined bus cycle. The next bus cycle will be 
pipelined, however, provided NA# Is asserted and 
the first bus cycle ends in a T2P state (the address 
and status for the next bus cycle is driven during 
T2P). The fastest path from an idle state to a pipe- 
lined bus cycle Is shown in bold below: 


T|, T|, 

T1-T2-T2P, 

T1P-T2P, 

idle 

non-pipelined 

pipelined 

states 

cycle 

cycle 
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Figure 4.11. Details of Address Pipelining during Cycles with Wait States 


T1 -T2-T2P are the states of the bus cycle that es- 
tablishes address pipelining for the next bus cycle, 
which begins with T 1 P. The same is true after a bus 
hold state, shown below: 

Th, Th, Th, T1-T2-T2P, T1P-T2P, 

hold aknowledge non-pipelined pipelined 

states cycle cycle 


The transition to pipelined address is shown func- 
tionally by Figure 4.10, Cycle 1. Note that Cycle 1 is 
used to transition into pipelined address timing for 
the subsequent Cycles 2, 3 and 4, which are pipe- 
lined. The NA# Input Is asserted at the appropriate 
time to select address pipelining for Cycles 2, 3 and 
4. 

Once a bus cycle Is in progress and the current ad- 
dress and status has been valid for one entire bus 
state, the NA# Input Is sampled at the end of every 
phase one until the bus cycle is acknowledged. 
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Bus States: 

T1— first clock of a non-pipelined bus cycle (80376 drives new address, status and asserts ADS#). 

T2 — subsequent clocks of a bus cycle when NA# has not been sampled asserted in the current bus cycle. 

T2I — subsequent clocks of a bus cycle when NA# has been sampled asserted in the current bus cycle but there is not 
yet an internal bus request pending (80376 will not drive new address, status or assert ADS#). 

T2P — subsequent clocks of a bus cycle when NA# has been sampled asserted in the current bus cycle and there is an 
internal bus request pending (80376 drives new address, status and asserts ADS#). 

T 1 P— first clock of a pipelined bus cycle. 

Ti — Idle state. 

Th— hold acknowledge state (80376 asserts HLDA). 

Asserting NA# for pipelined bus cycles gives access to three more bus states: T2I, T2P and T1P. 

Using pipelining the fastest bus cycle consists of T1P and T2P. 


Figure 4.12. 80376 Processor Complete Bus States (Including Pipelining) 


4-799 




im^ 


80376 




Sampling begins in T2 during Cycle 1 in Figure 4.10. 
Once NA# is sampled active during the current cy- 
cle, the 80376 is free to drive a new address and bus 
cycle definition on the bus as early as the next bus 
state. In Figure 4.10, Cycle 1 for example, the next 
address and status is driven during state T2P. Thus 
Cycle 1 makes the transition to pipelined timing, 
since It begins with T1 but ends with T2P. Because 
the address for Cycle 2 Is available before Cycle 2 
begins. Cycle 2 is called a pipelined bus cycle, and it 
begins with TIP. Cycle 2 begins as soon as 
READY# asserted terminates Cycle 1. 

Examples of transition bus cycles are Figure 4.10, 
Cycle 1 and Figure 4.9, Cycle 2. Figure 4.10 shows 
transition during the very first cycle after an Idle bus 
state, which is the fastest possible transition into ad- 
dress pipelining. Figure 4.9, Cycle 2 shows a tran- 
sition cycle occurring during a burst of bus cycles. In 
any case, a transition cycle is the same whenever it 
occurs: it consists at least of T1, T2 (NA# is assert- 
ed at that time), and T2P (provided the 80376 has an 
Internal bus request already pending, which it almost 
always has). T2P states are repeated If wait states 
are added to the cycle. 

Note that only three states (T1, T2 and T2P) are 
required in a bus cycle performing a transition from 
non-pipellned into pipelined timing, for example Fig- 
ure 4.10, Cycle 1. Figure 4.10, Cycles 2, 3 and 4 
show that pipelining can be maintained with two- 
state bus cycles consisting only of T1 P and T2P. 

Once a pipelined bus cycle is in progress, pipelined 
timing is maintained for the next cycle by asserting 
NA# and detecting that the 80376 enters T2P dur- 
ing the current bus cycle. The current bus cycle must 
end in state T2P for pipelining to be maintained in 
the next cycle. T2P is identified by the assertion of 
ADS#. Figures 4.9 and 4.10 however, each show 


pipelining ending after Cycle 4 because Cycle 4 
ends In T2I. This indicates the 80376 didn’t have an 
internal bus request prior to the acknowledgement 
of Cycle 4. If a cycle ends with a T2 or T2I, the next 
cycle will not be pipelined. 

Realistically, pipelining is almost always maintained 
as long as NA# Is sampled asserted. This Is so be- 
cause in the absence of any other request, a code 
prefetch request is always Internally pending until 
the instruction decoder and code prefetch queue are 
completely full. Therefore pipelining is maintained 
for long bursts of bus cycles, if the bus is available 
(i.e., HOLD Inactive) and NA,# is sampled active In 
each of the bus cycles. 

INTERRUPT ACKNOWLEDGE (INTA) CYCLES 

In repsonse to an Interrupt request on the INTR In- 
put when Interrupts are enabled, the 80376 performs 
two interrupt acknowledge cycles. These bus cycles 
are similar to read cycles In that bus definition sig- 
nals define the type of bus activity taking place, and 
each cycle continues until acknowledged by 
READY # sampled active. 

The state of A2 distinguishes the first and second 
interrupt acknowledge cycles. The byte address 
driven during the first interrupt acknowledge cycle Is 
4 (A23-A3, Ai, BLE# LOW, A2 and BHE# HIGH). 
The byte address driven during the second interrupt 
acknowledge cycle is 0 (A23-A1, BLE# LOW and 
BHE# HIGH). 

The LOCK# output is asserted from the beginning 
of the first interrupt acknowledge cycle until the end 
of the second interrupt acknowledge cycle. Four Idle 
bus states, Tj, are inserted by the 60376 between 
the two interrupt acknowledge cycles for compatibil- 
ity with the interrupt specification Trhrl of the 
8259A Interrupt Controller and the 82370 Integrated 
Peripheral. 
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Interrupt Vector (0-255) is read on D0-D7 at end of second Interrupt Acknowledge bus cycle. 

Because each Interrupt Acknowledge bus cycle is followed by idle bus states, asserting NA# has no practical effect. 
Choose the approach which is simplest for your system hardware design. 


Figure 4.13. Interrupt Acknowledge Cycles 


During both interrupt acknowledge cycles, D-is-Dq 
float. No data Is read at the end of the first interrupt 
acknowledge cycle. At the end of the second inter- 
rupt acknowledge cycle, the 80376 will read an ex- 
ternal interrupt vector from Dy-Dg of the data bus. 
The vector indicates the specific Interrupt number 
(from 0-255) requiring service. 


HALT INDICATION CYCLE 

The 80376 execution unit halts as a result of execut- 
ing a HLT instruction. Signaling its entrance into the 
halt state, a halt indication cycle is performed. The 
halt indication cycle is identified by the state of the 
bus definition signals shown on page 34, Bus Cycle 
Definition Signals, and a byte address of 2. The 
halt Indication cycle must be acknowledged by 
READY # asserted. A halted 80376 resumes execu- 
tion when INTR (if interrupts are enabled), NMI or 
RESET is asserted. 
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Figure 4.14. Example Halt Indication Cycle from Non-Pipelined Cycle 


SHUTDOWN INDICATION CYCLE ENTERING AND EXITING HOLD 

ACKNOWLEDGE 

The 80376 shuts down as a result of a protection 

fault while attempting to process a double fault Sig- The bus hold acknowledge state, Th, is entered in 

naling its entrance Into the shutdown state, a shut- response to the HOLD input being asserted. In the 

down indication cycle Is performed. The shutdown bus hold acknowledge state, the 80376 floats all 

indication cycle is identified by the state of the bus outputs or bidirectional signals, except for HLDA. 

definition signals shown on page 34 Bus Cycle Def- HLDA is asserted as long as the 80376 remains in 

inition Signals and a byte address of 0. The shut- the bus hold acknowledge state. In the bus hold ac- 

down indication cycle must be acknowledged by knowledge state, all inputs except HOLD and RE- 
READY # asserted. A shutdown 80376 resumes ex- SET are ignored, 

ecution when Nivil or RESET is asserted. 
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Figure 4.15. Example Shutdown indication Cycle from Non-Pipelined Cycle 


Th may be entered from a bus idle state as in Figure 
4.16 or after the acknowledgement of the current 
physical bus cycle If the LOCK# signal is not assert- 
ed, as in Figures 4.17 and 4.18. 

Th is exited in response to the HOLD input being 
negated. The following state will be T-, as in Figure 
4.16 if no bus request is pending. The following bus 


state will be T1 if a bus request is internally pending, 
as In Figures 4.17 and 4.18. Th is exited in response 
to RESET being asserted. 

If a rising edge occurs on the edge-triggered NMI 
Input while in Th, the event is remembered as a non- 
maskable interrupt 2 and is serviced when Th is exit- 
ed unless the 80376 is reset before Th is exited. 
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NOTE: 

For maximum design flexibility the 80376 has no internal pull-up resistors on its outputs. Your design may require an 
external pullup on ADS# and other 80376 outputs to keep them negated during float periods. 


Figure 4.16. Requesting Hold from Idle Bus 


RESET DURING HOLD ACKNOWLEDGE 

RESET being asserted takes priority over HOLD be- 
ing asserted. If RESET is asserted while HOLD re- 
mains asserted, the 80376 drives its pins to defined 
states during reset, as in Table 4.5, Pin State Dur- 
ing Reset, and performs internal reset activity as 
usual. 

If HOLD remains asserted when RESET Is inactive, 
the 80376 enters the hold acknowledge state before 
performing Its first bus cycle, provided HOLD is still 
asserted when the 80376 processor would other- 


wise perform its first bus cycle. If HOLD remains as- 
serted when RESET is inactive-, the BUSY# input is 
still sampled as usual to determine whether a self 
test is being requested. 

BUS ACTIVITY DURING AND FOLLOWING 
RESET 

RESET Is the highest priority input signal, capable of 
interrupting any processor activity when it Is assert- 
ed. A bus cycle in progress can be aborted at any 
stage, or idle states or bus hold acknowledge states 
discontinued so that the reset state is established. 
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NOTE: 

HOLD is a synchronous input and can be asserted at any CLK2 edge, provided setup and hold (t 23 and t 24 ) require- 
ments are met. This waveform is useful for determining Hold Acknowledge latency. 


Figure 4.17. Requesting Hold from Active Bus (NA# Inactive) 


RESET should remain asserted for at least 15 CLK2 
periods to ensure it is recognized throughout the 
80376, and at least 80 CLK2 periods if a 80376 self- 
test is going to be requested at the falling edge. RE- 
SET asserted pulses less than 1 5 CLK2 periods may 
not be recognized. RESET pulses less than 80 CLK2 


periods followed by a self-test may cause the self- 
test to report a failure when no true failure exists. 

Provided the RESET falling edge meets setup and 
hold times t 25 and tae. the Internal processor clock 
phase is defined at that time as illustrated by Figure 
4.19 and Figure 6.7. 
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NOTE: 

HOLD is a synchronous input and can be asserted at any CLK2 edge, provided setup and hold (t 23 and t 24 ) require- 
ments are met. This waveform is useful for determining Hold Acknowledge latency. 


Figure 4.18. Requesting Hold from Idie Bus (NA# Active) 


An 80376 self-test may be requested at the time RE- 
SET goes inactive by having the BUSY # input at a 
LOW level as shown in Figure 4.19. The self-test 
requires (220 + approximately 60) CLK2 periods to 
complete. The self-test duration Is not affected by 
the test results. Even if the self-test indicates a 


problem, the 80376 attempts to proceed with the 
reset sequence afterwards. 

After the RESET falling edge (and after the self-test 
if It was requested) the 80376 performs an internal 
initialization sequence for approximately 350 to 450 
CLK2 periods. 
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NOTES: 

1. BUSY# should be held stable for 8 CLK2 periods before and after the CLK2 period in which RESET falling edge 
occurs. 

2. If self-test is requested, the 80376 outputs remain in their reset state as shown here. 


Figure 4.19. Bus Activity from Reset until First Code Fetch 


4.5 Self-Test Signature 

Upon completion of self-test (if self-test was re- 
quested by driving BUSY # LOW at the falling edge 
of RESET) the EAX register will contain a signature 
of OOOOOOOOH indicating the 80376 passed its self- 
test of microcode and major PLA contents with no 
problems detected. The passing signature in EAX, 
OOOOOOOOH, applies to all 80376 revision levels.' Any 
non-zero signature indicates the 80376 unit is faulty. 


4.6 Component and Revision 
Identifiers 

To assist 80376 users, the 80376 after reset holds a 
component identifier and revision identifier in its DX 
register. The upper 8 bits of DX hold 33H as identifi- 
cation of the 80376 component. (The lower nibble, 
03H, refers to the lntel386TM architecture. The up- 
per nibble, 30H, refers to the third member of the 
Intel386 family). The lower 8 bits of DX hold an 
8-bit unsigned binary number related to the 
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component revision level. The revision identifier will, 
in general, chronologically track those component 
steppings which are intended to have certain im- 
provements or distinction from previous steppings. 
The 80376 revision identifier will track that of the 
80386 where possible. 

The revision identifier is Intended to assist 80376 
users to a practical extent. However, the revision 
identifier value is not guaranteed to change with ev- 
ery stepping revision, or to follow a completely uni- 
form numerical sequence, depending on the type or 
intention of revision, or manufacturing materials re- 
quired to be changed. Intel has sole discretion over 
these characteristics of the component. 


Table 4.7. Component and 
Revision Identifier History 


80376 Stepping Name 

Revision identifier 

AO 

OSH 


4.7 Coprocessor Interfacing 

The 80376 provides an automatic interface for the 
Intel 80387SX numeric floating-point coprocessor. 
The 80387SX coprocessor uses an I/O mapped in- 
terface driven automatically by the 80376 and as- 
sisted by three dedicated signals: BUSY#, ER- 
ROR# and PEREQ. 


ERROR# inputs of the 80376 may also be used for 
the custom coprocessor interface, if such hardware 
assist is desired. These signals can be tested by the 
80376 WAIT opcode (9BH). The WAIT instruction 
will wait until the BUSY # input is Inactive (interrupta- 
ble by an NMI or enabled INTR input), but generates 
an exception 16 fault if the ERROR# pin is active 
when the BUSY# goes (or is) inactive. If the custom 
coprocessor interface is memory-mapped, protec- 
tion of the addresses used for the interface can be 
provided with the segmentation mechanism of the 
80376. if the custom interface is i/O-mapped, pro- 
tection of the interface can be provided with the 
80376 lOPL (I/O Privilege Level) mechanism. 

The 80387SX numeric coprocessor interface Is I/O 
mapped as shown in Table 4.8. Note that the 
80387SX coprocessor interface addresses are be- 
yond the OH-OFFFFH range for programmed I/O. 
When the 80376 supports the 80387SX coproces- 
sor, the 80376 automatically generates bus cycles to 
the coprocessor interface addresses. 


Table 4.8 Numeric Coprocessor Port Addresses 


Address in 80376 

80387SX 

I/O Space 

Coprocessor Register 

8000F8H 

Opcode Register 

8000FCH 

Operand Register 

8000FEH 

Operand Register 


As the 80376 begins supporting a coprocessor in- 
struction, it tests the BUSY# and ERROR# signals 
to determine if the coprocessor can accept Its next 
instruction. Thus, the BUSY# and ERROR# inputs 
eliminate the need for any “preamble” bus cycles 
for communication between processor and coproc- 


code Immediately. The dedicated signals provide in- 
struction synchronization, and eliminate the need of 
using the 80376 WAIT opcode (9BH) for 80387SX 
instruction synchronization (the WAIT opcode was 
required when the 8086 or 8088 was used with the 
8087 coprocessor). 


SOFTWARE TESTING FOR COPROCESSOR 
PRESENCE 

When software is used to test coprocessor 
(80387SX) presence, it should use only the following 
coprocessor opcodes: FNINIT, FNSTCW and 
FNSTSW. To use other coprocessor opcodes when 
a coprocessor is known to be not present, first set 
EM = 1 in the 80376 CRO register. 


5.0 PACKAGE THERMAL 
SPECIFICATIONS 


Custom coprocessors can be included In 80376 
based systems by memory-mapped or I/O-mapped 
interfaces. Such coprocessor interfaces allow a 
completely custom protocol, and are not limited to a 
set of coprocessor protocol “primitives”. Instead, 
memory-mapped or I/O-mapped interfaces may use 
all applicable 80376 instructions for high-speed co- 
processor communication. The BUSY# and 


The Intel 80376 embedded processor is specified 
for operation when case temperature Is within the 
range of OX-IIS^C for the ceramic 88-pin PGA 
package, and O^C-IIO^C for the 100-pin plastic 
package. The case temperature may be measured 
in any environment, to determine whether the 80376 
is within specified operating range. The case tem- 
perature should be measured at the center of the 
top surface. 


4-808 





80376 


[Pl^iHOMOMV 


inl^ 


The ambient temperature is guaranteed as long as 
Tc is not violated. The ambient temperature can be 
calculated from the 0jc and 0ja from the following 
equations; 

Tj = Tc + P*0jc 

Ta = Tj - P*0ja 

Tc = Ta + P*[0ja ~ ^jcl 

Values for 0ja and 0jc are given in Table 5.1 for the 
100-lead fine pitch. is given at various airflows. 
Table 5.2 shows the maximum Ta allowable (without 
exceeding Tc) at various airflows. Note that Ta can 
be improved further by attaching “fins” or a "heat 
sink” to the package. P is calculated using the maxi- 
mum Tjo/ Ice- 

Table 5.1. 80376 Package Thermal 
Characteristics Thermal Resistances 


(X/Watt) 0jc and 0ja 




0ja Versus Airflow-ft/min (m/sec) 

Package 

0jc 

0 

(0) 

200 

(1.01) 

400 

(2.03) 

600 

(3.04) 

800 

(4.06) 

1000 

(5.07) 

100-Lead 
Fine Pitch 

7 

33 

27 

24 

21 

18 

17 

88-Pin 

PGA 

2 

25 

20 

17 

14 

12 

11 


Assuming Ice hot of 360 mA, Vcc 5.0V, and a 
Tcase 0^ 1 10“C for plastic and 1 1 5“C for the 88-Pin 
PGA Package: 


Table 5.2. 80376 
Maximum Allowable Ambient 
Temperature at Various Airflows 




Ta(“C) vs Afrflow-ft/min (m/sec) 

Package 

0]C 

0 

(0) 

200 

(1.01) 

400 

(2.03) 

600 

(3.04) 

800 

(4.06) 

1000 

(5.07) 

100-Lead 
Fine Pitch 

7 

63 

74 

79 

85 

91 

92 

88-Pin 

PGA 

2 

74 

83 

88 

93 

97 

99 


6.0 ELECTRICAL SPECIFICATIONS 

The following sections describe recommended elec- 
trical connections for the 80376, and its electrical 
specifications. 


6.1 Power and Grounding 

The 80376 is implemented in CHMOS III technology 
and has modest power requirements. However, its 
high clock frequency and 47 output buffers (address, 
data, control, and HLDA) can cause power surges 
as multiple output buffers drive new signal levels 
simultaneously. For clean on-chip power distribution 
at high frequency, 14 Vcc and 1 8 Vss pins separate- 
ly feed functional units of the 80376. 

Power and ground connections must be made to all 
external Vcc and GND pins of the 80376. On the 
circuit board, ail Vcc should be connected on a 
Vcc plane and all Vss pins should be connected on 
a GND plane. 

POWER DECOUPLING RECOMMENDATIONS 

Liberal decoupling capacitors should be placed ne^r 
the 80376. The 80376 driving its 24-bit address bus 
and 1 6-bit data bus at high frequencies can cause 
transient power surges, particularly when driving 
large capacitive loads. Low inductance capacitors 
and Interconnects are recommended for best high 
frequency electrical performance. Inductance can 
be reduced by shortening circuit board traces be- 
tween the 80376 and decoupling capacitors as 
much as possible. 

RESISTOR RECOMMENDATIONS 

The ERROR# and BUSY# inputs have internal pull- 
up resistors of approximately 20 KH and the PEREQ 
Input has an internal pull-down resistor of approxi- 
mately 20 Kn built into the 80376 to keep these 
signals Inactive when the 80387SX Is not present in 
the system (or temporarily removed from its socket). 
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In typical designs, the external pull-up resistors 
shown in Table 6.1 are recommended. However, a 
particular design may have reason to adjust the re- 
sistor values recommended here, or alter the use of 
pull-up resistors in other ways. 


Table 6.1. Recommended 
Resistor Pull-Ups to Vcc 


Pin 

Signal 

Pull-Up Value 

Purpose 

16 

ADS# 

20 KH ± 10% 

Lightly Pull ADS# 
Inactive during 80376 
Hold Acknowledge 
States 

26 

LOCK# 

20 KH ± 10% 

Lightly Pull LOCK# 
Inactive during 80376 
Hold Acknowledge 
States 


OTHER CONNECTION RECOMMENDATIONS 

For reliable operation, always connect unused In- 
puts to an appropriate signal level. N/C pins should 
always remain unconnected. Connection of N/C 
pins to Vcc or ^ss will result in Incompatibility 
with future steppings of the 80376. 

Particularly when not using Interrupts or bus hold (as 
when first prototyping), prevent any chance of spuri- 
ous activity by connecting these associated inputs to 
GND: 

— INTR 
— NMI 
—HOLD 


If not using address pipelining connect the NA# pin 
to a pull-up resistor In the range of 20 KCt to Vcc- 


6.2 Absolute Maximum Ratings 


Table 6.2. Maximum Ratings 


Parameter 

Maximum Rating 

Storage Temperature 

-65°Cto +150“C 

Case Temperature 
under Bias 

-65-0 to +120°C 

Supply Voltage with 
Respect to Vss 

-0.5V to +6.5V 

Voltage on Other Pins 

-0.5V to (Vcc + 0-5)V 


Table 6.2 gives a stress ratings only, and functional 
operation at the maximums Is not guaranteed. Func- 
tional operating conditions are given in Section 6.3, 
D.C. Specifications, and Section 6.4, A.C. Specifi- 
cations. 

Extended exposure to the Maximum Ratings may af- 
fect device reliability. Furthermore, although the 
80376 contains protective circuitry to resist damage 
from static electric discharge, always take precau- 
tions to avoid high static voltages or electric fields. 
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6.3 D.C. Specifications 

ADVANCE INFORMATION SUBJECT TO CHANGE 

Table 6.3: 80376 D.C. Characteristics 

Functional Operating Range: Vcc = 5V ±10%; Tcase == to 115°C 88-pin PGA, Tcase = 0°^ to IIO^C 
100-pin plastic 


Symbol 

Parameter 

Min 

Max 

Unit 

V|L 

Input LOW Voltage 

-0.3 

+ 0.8 

V(1) 

V|H 

Input HIGH Voltage 

2.0 

Vcc +0.3 

Wfit 

V|LC 

CLK2 Input LOW Voltage 

-0.3 

+ 0.8 ^ 


VlHC 

CLK2 Input HIGH Voltage 

Vcc - 0.8 

< 

0 

^ + 

|%i) .. 

VoL 

Output LOW Voltage 



__ 



loL = 4 mA: 

A 23 -A 1 , D 15 -D 0 




Iql = 5 mA: 

BHE#,BLE#, W/R#, 

D/C#, M/IO#, LOCK#, 
ADS#.HLDA 


+ 0.45^1 

♦I 

VOH 

Output High Voltage 

IHHH 



loH = -1 mA; 

A 23 -A 1 , D 15 -D 0 

^ 2.£ 


'V(1) 


A23-Ai,Di5-Do ^ 



V(1) 

Iqh ~ ~0.9 mA: 

BHE#,BLE#.W/R'#, ^ \ 

D/C#,M/IO#^^^#, 

ADS#, HLD/^^'" 


f" 

VO) 

lOH = -0.18 mA: 


- 0.5 


VO) 

Ili 

% 

^^^^eakgge^went 

Ld ERROR#) 


±15 

jLtA, OV ^ V|N ^ Vec^^^ 

hH 

In^^^^kage Current 
(PE*Q Pin) 


200 

(aA,V|H = 2.4V(1.2) 

l|L 

Input Leakage Current 
(Busy# and ERROR# Pins) 


-400 

fiA. V|L = 0.45V(3) 

•lo 

Output Leakage Current 


±15 

jliA, 0.45V ^ Vqut ^ ^cc^^^ 

Ice 

Supply Current 
at HOT 


400 

360 

mA(4) 

mA(6) 

C|N 

Input Capacitance 


10 

pF, Fc = 1 MHz(5) 

Gout 

Output or I/O Capacitance 


12 

pF, Fc = 1 MHz(5) 

CcLK 

CLK2 Capacitance 


20 

pF, Fc = 1 MHz(5) 


NOTES: 

1. Tested at the minimum operating frequency of the part. 

2. PEREQ input has an internal pull-down resistor. 

3. BUSY# and ERROR# inputs each have an internal pull-up resistor. 

4. Ice max measurement at worse case frequency, Vcc and temperature (0°C). 

5. Not 100% tested. 

6. Ice HOT max measurement at worse case frequency, Vcc and max temperature. 
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The A.C. specifications given in Table 6.4 consist of 
output delays, input setup requirements and input 
hold requirements. All A.C. specifications are rela- 
tive to the CLK2 rising edge crossing the 2.0V level. 

A.C. specification measurement is defined by Figure 
6.1. Inputs must be driven to the voltage levels indi- 
cated by Figure 6.1 when A.C. specifications are 
measured. 80376 output delays are specified with 
minimum and maximum limits measured as shown. 
The minimum 80376 delay times are hold times pro- 
vided to externa! circuitry. 80376 input setup and 
hold times are specified as minimums, defining the 


smallest acceptable sampling window. Within the 
sampling window, a synchronous input signal must 
be stable for correct 80376 processor operation. 

Outputs NA#, W/R#, D/C#, M/IO#, LOCK#, 
BHE#, BLE#, A23-A1 and HLDA only change at 
the beginning of phase one. D15-D0 (write cycles) 
only change at the beginning of phase two. The 
READY#, HOLD, BUSY#, ERROR#, PEREQ and 
D15-D0 (read cycles) inputs are sampled at the be- 
ginning of phase one. The NA#, INTR and NMI In- 
puts are sampled at the beginning of phase two. 



Figure 6.1. Drive Levels and Measurement Points for A.C. Specifications 
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6.4 A.C. Specifications 

ADVANCE INFORMATION SUBJECT TO CHANGE 

Table 6.4. 80376 A.C. Characteristics at 16 MHz 

Functional Operating Range; Vcc = 5V ±10%; Tcase = 0“^ to 115°C for 88-pin PGA, 0®C to 110®C for 
100-pin plastic 


Symbol 

Parameter 

Min 

Max 

Unit 

Figure 

Notes 


Operating Frequency 

4 

16 

MHz 


Half CLK2 Freq 

ti 

CLK2 Period 

31 

125 

ns 

6.3 


t2a 

CLK2 HIGH Time 

9 


ns 

CD 

V At 2(3) 

t2b 

CLK2 HIGH Time 

5 


ns 


Ati¥%>- 0.8)V(3) 

t3a 

CLK2 LOW Time 

9 


ns V ■ 



t3b 

CLK2 LOW Time 

7 



6.3 X, 

X 0.8V(3) 

t4 

CLK2 Fall Time 


8 



(Vcc-0.8)Vto0.8V(3) 

ts 

CLK2 Rise Time 


ft \ 



0.8Vto(Vcc-0.8)(3) 

^6 

A23-A1 Valid Delay 

4 


ns'V 


Cl = 120pF(4) 

ty 

A23-A1 Float Delay 


^ 40 



(1) 

te 

BHE#,BLE#,LOCK# ^ 

Valid Delay 


ll 

, ns ■ , 


Cl = 75 pF(4) 

tg 

BHE#,BLE#,LOCK# 

Float Delay 




6.6 

(1) 

tio 

W/R#,M/IO#,D/^^^^ 
ADS# Valid Del^^^- 



ns 

6.5 

Cl = 75 pF(4) 

til 

W/R#.M/I(^^^#, 


^^'35 

ns 

6.6 

(1) 

tl2 


p 4 

40 

ns 

6.5 

Cl = 120pF(4) 

tl3 

D 1 5 “ Dq W r 

Float Del^^^r 

4 

35 

ns 

6.6 

(1) 

^14 

HLDA ValiTOelay 

6 

33 

ns 

6.6 

Cl = 75 pF(4) 

tl5 

NA# Setup Time 

5 


ns 

6.4 


tl6 

NA# Hold Time 

21 


ns 

6.6 


tl9 

READY# Setup Time 

19 


ns 

6.4 


^20 

READY# Hold Time 

4 


ns 

6.4 


t21 

Setup Time D15-D0 Read Data 

9 


ns 

6.4 


t22 

Hold Time D 15 -D 0 Read Data 

6 


ns 

6.4 


*23 

HOLD Setup Time 

26 


ns 

6.4 


*24 

HOLD Hold Time 

5 


ns 

6.4 


*25 

RESET Setup Time 

13 


ns 

6.7 


*26 

RESET Hold Time 

4 1 


ns 

6.7 



NOTE: 

The 80376 does not have ti 7 or tie timing specifications. 
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Table 6.4. 80376 A.C. Characteristics at 16 MHz 


Functional Operating Range: Vcc = 5V ±10%; Tcase = 0""^ to IIS^C for 80-pin PGA, 0°C to 110®C for 
1 00-pin plastic (Continued) 



NOTES: ' 

1. Float condition occurs vyhen niaximurii^Output^rr^nt "becomes less than Ilo in magnitude. Float delay Is not 100% 

tested. V 

2. These inputs are allowed to be asynchronous to CLK2. The setup and hold specifications are given for testing purposes, 
to assure recognition within a specific CLK2' period. 

3. These are not tested. They are guaranteed by design characterization. 

4. Tested with Cl set to 50 pF and derated to support the indicated distributed capacitive load. See Figure 6.8 for the 
capacitive derating curve. 


A.C. TEST LOADS A.C. TIMING WAVEFORMS 



Figure 6.2. A.C. Test Loads Figure 6.3. CLK2 Waveform 



Figure 6.4. A.C. Timing Waveforms— Input Setup and Hold Timing 
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(OUTPUT) 
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Figure 6.5. A.C. Timing Waveforms — Output Vaiid Delay Timing 
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240182-41 

The second internal processor phase following RESET high-to-low transition (provided t25 and t26 are met) is <I>2. 


Plgura 0,7^ A.G. Timing Wavstorms-^RESET Satup and Hold Timlngj and Intorna! Phas® 


Typical Capacitive Derating 

OUTPUT VALID DELAY (ns) 

-* -» M ^ 

3 Ul O U) O C 









; 























•-Low to High 
X-High to Low 

25 50 75 100 125 150 

CAPACITIVE LOAD (pF) 

240182-42 


Figure 6.8. Capacitive Derating Curve 



Rates for Output Buffers 


Typical Siew Rates at TTL Levels 
£0.8V to 2.GV and 2.0V to G.GV) 

20 

15 

c 

< 10 

5 




r 


























•-Low to High 
X-High to Low 

25 50 75 100 125 150 

CAPACITANCE 

240182-44 


Figure 6.10. TTL Levei Siew 
Rates for Output Buffers 



Figure 6. 11. Typical Ice vs Frequency 
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6.5 Designing for ICEtm- 376 Emuiator 
(Advanced Data) 

The 376 embedded processor in-circuit emulator 
product is the ICE-376 emulator. Use of the emula- 
tor requires the target system to provide a socket 
that is compatible with the ICE-376 emulator. The 
80376 offers two different probes for emulating user 
systems: an 88-pin PGA probe and a 100-pin fine 
pitch flat-pack probe. The 100-pin fine pitch flat- 
pack probe requires a socket, called the 100-pin 
PQFP, which is available from 3-M text-tool (part 
number 2-0100-07243-000). The ICE-376 emulator 
probe attaches to the target system via an adapter 
which replaces the 80376 component in the target 
system. Because of the high operating frequency of 
80376 systems and of the ICE-376 emulator, there is 
no buffering between the 80376 emulation proces- 
sor in the ICE-376 emulator probe and the target 
system. A direct result of the non-buffered intercon- 
nect is that the ICE-376 emulator shares the ad- 
dress and data bus with the user’s system, and the 
RESET signal is intercepted by the ICE emulator 
hardware. In order for the ICE-376 emulator to be 
functional In the user’s system without the Optional 
Isolation Board (OIB) the designer must be aware of 
the following conditions: 

1 . The bus controller must only enable data trans- 
ceivers onto the data bus during valid read cycles 
of the 80376, other local devices or other bus 
masters. 

2. Before another bus master drives the local proc- 
essor address bus, the other master must gain 
control of the address bus by asserting HOLD and 
receiving the HLDA response. 


3. The emulation processor receives the RESET sig- 
nal 2 or 4 CLK2 cycles later than an 80376 would, 
and responds to RESET later. Correct phase of 
the response is guaranteed. 

In addition to the above considerations, the ICE-376 
emulator processor module has several electrical 
and mechanical characteristics that should be taken 
into consideration when designing the 80376 sys- 
tem. 

Capacitive Loading: ICE-376 adds up to 27 pF to 
each 80376 signal. 

Drive Requirements: ICE-376 adds one FAST TTL 
load on the CLK2, control, address, and data lines. 
These loads are within the processor module and 
are driven by the 80376 emulation processor, which 
has standard drive and loading capability listed in 
Tables 6.3 and 6.4. 

Power Requirements: For noise immunity and 
CMOS latch-up protection the ICE-376 emulator 
processor module Is powered by the user system. 
The circuitry on the processor module draws up to 
1.4A including the maximum 80376 Iqc ^rom the 
user 80376 socket. 

80376 Location and Orientation: The ICE-376 em- 
ulator processor module may require lateral clear- 
ance. Figure 6.12 shows the clearance requirements 
of the iMP adapter and Figure 6.13 shows the clear- 
ance requirements of the 88-pln PGA adapter. The 



Figure 6.12. Preliminary ICETM .376 Emulator User Cable with PQFP Adapter 

4-817 




Figure 6.13. Preliminary ICETM .376 Emulator User Cable with 88-Pin PGA Adapter 

optional isolation board (01 B), which provides extra on the user’s bus. The OIB allows the ICE-376 emu- 

electrical buffering and has the same lateral clear- lator to function in user systems with faults (shorted 

ance requirements as Figures 6.12 and 6.13, adds signals, etc.). After electrical verification the OIB 

an additional 0.5 Inches to the vertical clearance re- may be removed. When the OIB is installed, the user 

quirement. This Is illustrated In Figure 6.14. system must have a maximum CLK2 frequency of 20 

MHz. 

Optional Isolation Board (OIB) and the CLK2 
speed reduction: Due to the unbuffered probe de- 
sign, the ICE-376 emulator Is susceptible to errors 



Figure 6.14. Preliminary ICETM -376 Emulator User Cable with OIB and PQFP Adapter 
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7.0 DIFFERENCES BETWEEN THE 
80376 AND THE 80386 

The following are the major differences between the 

80376 and the 80386. 

1. The 80376 generates byte selects on BHE# and 
BLE# (like the 8086 and 80286 microprocessors) 
to distinguish the upper and lower bytes on its 
1 6-bit data bus. The 80386 uses four-byte selects, 
BE0#-BE3#, to distinguish between the differ- 
ent bytes on Its 32-bit bus. 

2. The 80376 has no bus sizing option. The 80386 
can select between either a 32-blt bus or a 1 6-bit 
bus by use of the BS16# input. The 80376 has a 
16-blt bus size. 

3. The NA# pin operation in the 80376 is Identical to 
that of the NA# pin on the 80386 with one excep- 
tion: the NA# pin of the 80386 cannot be activat- 
ed on 16-bit bus cycles (where BS16# Is LOW in 
the 80386 case), whereas NA# can be activated 
on any 80376 bus cycle. 

4. The contents of all 80376 registers at reset are 
identical to the contents of the 80386 registers at 
reset, except the DX register. The DX register 
contains a component-stepping Identifier at reset, 
i.e. 

in 80386, after reset DH = 3 indicates 80386 
DL = revision number; 

in 80376, after reset DH = 33H indicates 80376 
DL = revision number. 

5. The 80386 uses A31 and M/IO# as a select 
for numerics coprocessor. The 80376 uses the 
A23 and M/IO# to select its numerics coproc- 
essor. 

6. The 80386 prefetch unit fetches code in four- 
byte units. The 80376 prefetch unit reads two 
bytes as one unit (like the 80286 microproces- 
sor). In BS16# mode, the 80386 takes two 
consecutive bus cycles to complete a prefetch 
request. If there is a data read or write request 
after the prefetch starts, the 80386 will fetch 
all four bytes before addressing the new re- 
quest. 


7. The 80376 has no paging mechanism. 

8. The 80376 starts executing code in what corre- 
sponds to the 80386 protected mode. The 80386 
starts execution In real mode, which is then used 
to enter protected mode. 

9. The 80386 has a virtual-86 mode that allows the 
execution of a real mode 8086 program as a task 
in protected mode. The 80376 has no virtual-86 
mode. 

10. The 80386 maps a 48-blt logical address into a 
32-bit physical address by segmentation and 
paging. The 80376 maps its 48-bit logical ad- 
dress into a 24-bit physical address by segmen- 
tation only. 

1 1 . The 80376 uses the 80387SX numerics coproc- 
essor for floating point operations, while the 
80386 uses the 80387 coprocessor. 

1 2. The 80386 can execute from 1 6-bit code seg- 
ments. The 80376 can only execute from 32-blt 
code Segments. 


8.0 INSTRUCTION SET 

This section describes the 376 embedded processor 
instruction set. Table 8.1 lists all instructions along 
with instruction encoding diagrams and clock 
counts. Further details of the instruction encoding 
are then provided in the following sections, which 
completely describe the encoding structure and the 
definition of all fields occurring within 80376 Instruc- 
tions. 


8.1 80376 Instruction Encoding and 
Clock Count Summary 

To calculate elapsed time for an instruction, multiply 
the instruction clock count, as listed in Table 8.1 be- 
low, by the processor clock period (e.g. 62.5 ns for 
an 80376 operating at 16 MHz). The actual clock 
count of an 80376 program will average 1 0% more 
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than the calculated clock count due to instruction 

sequences which execute faster than they can be 

fetched from memory. 

Instruction Clock Count Assumptions: 

1. The instruction has been prefetched, decoded, 
and is ready for execution. 

2. Bus cycles do not require wait states. 

3. There are no local bus HOLD requests delaying 
processor acess to the bus. 

4. No exceptions are detected during instruction ex- 
ecution. 

5. If an effective address is calculated, It does not 
use two general register components. One regis- 
ter, scaling and displacement can be used within 
the clock counts showns. However, If the effec- 
tive address calculation uses two general register 
components, add 1 clock to the clock count 
shown. 

6. Memory reference instruction accesses byte or 
aligned 16-blt operands. 

Instruction Clock Count Notation 

— If two clock counts are given, the smaller refers to 
a register operand and the larger refers to a 
memory operand. 


— n = number of times repeated. 

— m = number of components In the next Instruc- 
tion executed, where the entire displacement (if 
any) counts as one component, the entire im- 
mediate data (If any) counts as one component, 
and all other bytes of the Instruction and pre- 
fix(es) each count as one component. 

Misaligned or 32-Bit Operand Accesses: 

— If Instructions accesses a misaligned 1 6-blt oper- 
and or 52-bii operand on even address add: 

2 * clocks for read or write. 

4** clocks for read and write. 

— If instructions accesses a 32-blt operand on odd 
address add: 

4 * clocks for read or write. 

8** clocks for read and write. 

Walt States: 

Walt states add 1 clock per wait state to instruction 

execution for each data access. 
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Table 8.1. 80376 Instruction Set Clock Count Summary 
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Table 8.1. 80376 Instruction Set Clock Count Summary (Continued) 


Instruction 


Clock 

Counts 


Number 
Of Data 
Cycles 


ARITHMETIC (Continued) 
jRegister from Memory 
Memory from Register 
Immediate from Register/Memory 
Immediate from Accumulator (Short Form) 
SBB = Subtract with Borrow 
Register from Register 
Register from Memory 
Memory from Register 
Immediate from Register/Memory 
Immediate from Accumulator (Short Form) 
DEC = Decrement 
Register/Memory 
Register (Short Form) 

CMP = Compare 
Register with Register 
Memory with Register 
Register with Memory 
Immediate with Register/ Memory 
Immediate with Accumulator (Shi 
|neG = Change Sign 
AAA = ASCII Adjust % Add 
AAS = ASCII Adjust for Subtract^ 

DAA = Decimal Adjust for Add' 

DAS = Decimal Adjust for Subtract 
MUL == Multiply (Unsigned) 

Accumulator with Register/Memory 
Multiplier— Byte 
—Word 
— Doubleword 

IlMUL = Integer Multiply (Signed) 

[Accumulator with Register/Memory 
Multiplier— Byte 
—Word 
—Doubleword 

[Register with Register/Memory 
Multiplier — Byte 
—Word 
— Doubleword 

[Register/Memory with Immediate to Register [ 
—Word 
—Doubleword 



I 1 1 1 1 0 1 1 w I mod 1 0 0 r/m| 


1 1 1 1 0 1 1 w mod 101 r/m 


00001111 I 10101111 Imodreg r/m| 


0 1 1 0 1 0 s 1 I mod reg r/m| immediate data 


12-17/15-20 

0/1 

a,n 

12-25/15-28* 

0/1* 

a,n 

12-41/17-46* 

0/2* 

a.n 

12-17/15-20 

0/1 

a,n 

12-25/15-28* 

0/1* 

a,n 

12-41/17-46* 

0/2* 

a,n 

12-17/15-20 

0/1 

a.n 

12-25/15-28* 

0/1* 

a,n 

12-41/17-46* 

0/2* 

a,n 

13-26/14-27* 

0/1* 

a,n 

13-42/16-45* 

0/2* 

a.n 
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Table 8.1. 80376 Instruction Set Clock Count Summary (Continued) 
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Table 8.1. 80376 Instruction Set Clock Count Summary (Continued) 
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Table 8.1. 80376 Instruction Set Clock Count Summary (Continued) 


Instruction 


Clock 

Counts 


CONTROL TRANSFER (Continued) 
(Direct Intersegment) 

Via Call Gate to Same Privilege Level 
Via Call Gate to Different Privilege Level, 
(No Parameters) 

Via Call Gate to Different Privilege Level, 
(x Parameters) 

From 386 Task to 386 TSS 


Indirect Intersegment 

Via Call Gate to Same Privilege Level 
Via Call Gate to Different Privilege Level, 
(No Parameters) 

Via Call Gate to Different Privilege Level, 
(x Parameters) 

From 386 Task to 386 TSS 

JMP = Unconditional Jump 

Short 

Direct within Segment 
Register/Memory Indirect within Segi 
Direct Intersegment 


Via Call Gate to Same^Priv 


From 386 Task to 386 TSS 


Indirect Intersegment 


Via Call Gate to Same Privilege Level 
From 386 Task to 386 TSS 



59 + m 
401 


Number 
of Data 
Cycles 


13 

13 

13 + 4x 
124 

10 

14 

14 

14 + 4x 

130 


2/4 

5 


9 

124 


13 

124 


a,c,d,j 

a.c.d.j 

a,c,d,j 

a,c,d,j 

a,c,d,j 

a,c,d,j 

a,c,d,j 

a,c,d,j 

a,c,d,j 


i 

a.j 

c,d,j 

a,c,d,j 

a,c,d,j 

a,c,d,j 


a,c,d,j 

a,c,d,j 
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Table 8.1. 80376 Instruction Set Clock Count Summary (Continued) 


CONTROL TRANSFER (Continued) 
RET = Return from CALL: 


Within Segment 

Within Segment Adding Immediate to SP 


Intersegment Adding Immediate to SP | 110 

to Different Privilege Level 
Intersegment 

Intersegment Adding Immediate to SP 

CONDITIONAL JUMPS 

NOTE: Times Are Jump “Taken or Not Taken" 

JO = Jump on Overflow 

8-Bit Displacement | 011 

Full Displacement | 000 

JNO = Jump on Not Overflow 

8-Bit Displacement | 011 

Full Displacement | 000 

JB/JNAE = Jump on Below/Not Above or Equal 


8-Bit Displacement 
Full Displacement 


JNB/JAE = Jump on Not Below/ Al 

8-Bit Displacement 


Full Displacement 


JE/JZ = Jump on E(#|l/Zert 
8-Bit Displacement 

Fuji Displacement 




0011 I full displacement 


uuuui 1 1 1 I 1 uuum uu | tun oispiacement 


8-Bit Displacement 
Full Displacement 


00001111 I 10000101 i full displacement 


JBE/JNA = Jump on Below or Equal/N ot Above 

8-Bit Displacement 1^0 1110 


Full Displacement 


00001 1 1 1 I 100001 1 0 I full displacement 


JNBE/JA = Jump on Not Below or Equal /Above 

8-Bit Displacement | 0111 


Full Displacement 
JS = Jump on Sign 
8-Bit Displacement 


00001 1 1 1 I 1000011 1 I full displacement 


Full Displacement 


10001000 I full displacement 


7 + m or 3 
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Table 8.1. 80376 Instruction Set Clock Count Summary (Continued) 
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Table 8.1. 80376 Instruction Set Clock Count Summary (Continued) 


Number 

of Data Notes 
Cycles 
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Table 8.1. 80376 Instruction Set Clock Count Summary (Continued) 


instruction Format 

Clock 

Counts^#^ 

Number 
of Data 
Cycles 

Notes 

INTERRUPT INSTRUCTIONS 




INT = Interrupt: 




Type Specified | 110 0 110 1 | type | ^ 




Via Interrupt or Trap Gate 




to Same Privilege Level ^ 


14 

c.d.j.p 

Via Interrupt or T rap Gate 




to Different Privilege Level 


14 

c.dj.p 

From 386 Task to 386 TSS via Task Gate 


140 

c.d.j.p 

Type3 I 1 1 001 1 00 1 




Via Interrupt or Trap Gate 




to Same Privilege Level 

▼ 71 

14 

c.d.j.p 

Via Interrupt or T rap Gate . ^ 




to Different Privilege Level A 

111 

14 

c.d.j.p 

From 386 Task to 386 TSS via Task Gate ^ 

308 

138 

c.d.j.p 

INTO = Interrupt 4 If Overflow Flag Sq|^ 1 1 1 





3 







Via Interrupt or Trap Ga^^^^^r 




to Same Privilege LevJ^^^ ^ 

71 

14 

c.d.j.p 

Via Interrupt or Tr^|^ate^ 




to Different Privilege Level 

111 

14 

c.d.j.p 

From 386 Task to 386 TSS Gate 

413 

138 

c.d.j.p 
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Table 8.1. 80376 instruction Set Clock Count Summary (Continued) 
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Table 8.1. 80376 Instruction Set Clock Count Summary (Continued) 
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NOTES: 

a. Exception 1 3 fault (general violation) will occur If the memory operand in CS, DS, ES, FS or GS cannot be used due to 
either a segment limit violation or access fights violation. If a stack limit Is violated, and exception 12 (stack segment limit 
violation or not present) occurs. 

b. For segment load operations, the CPL, RPL and DPL must agree with the privilege rules to avoid an exception 1 3 fault 
(general protection violation). The segments’s descriptor must indicate “present” or exception 1 1 (CS, DS, ES, FS, GS not 
present). If the SS register, is loaded and a stack segment not present is detected, an exception 12 (stack segment limit 
violation or not present occurs). 

c. All segment descriptor accesses In the GDT or LDT made by this instruction will automatically assert LOCK# to maintain 
descriptor integrity in multiprocessor systems. 

d. JMP, CALL, INT, RET and IRET instructions referring to another code segment will cause an exception 13 (general 
protection violation) if an applicable privilege rule is volated. 

e. An exception 13 fault occurs if CPL is greater than 0. 

f. An exception 1 3 fault occurs if CPL is greater than lOPL. 

g. The IF bit of the flag register is not updated if CPL is greater than lOPL. The lOPL field of the flag register Is updated only 
if CPL = 0. 

h. Any violation of privelege rules as applied to the selector operand does not cause a protection exception; rather, the zero 
flag is cleared. 

I. If the coprocessor’s memory operand violates a segment limit or segment access rights, an exception 1 3 fault (general 
protection exception) will occur before the ESC instruction is executed. An exception 1 2 fault (stack segment limit violation 
or no present) will occur if the stack limit is violated by the operand’s starting address. 

j. The destination of a JMP, CALL, INT, RET or IRET must be In the defined limit of a code segment or an exception 13 fault 
(general protection violation) will occur. 

k. If CPL < lOPL 

l. If CPL > lOPL 

m. LOCK# is automatically asserted, regardless of the presence or absence of the LOCK# prefix. 

n. The 80376 uses an early-out multiply algorithm. The actual number of clocks depends on the position of the most signifi- 
cant bit in the operand (multiplier). Clock counts given are minimum to maximum. To calculate actual clocks use the follow- 
ing formula: 

Actual Clock = if m < >0 then max ([log 2 |mll, 3) + 9 clocks: 

if m = 0 then 1 2 clocks (where m is the multiplier) 

0 . An exception may occur, depending on the value of the operand, 
p. LOCK# is asserted during descriptor table accesses. 
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8.2 INSTRUCTION ENCODING 


Overview 

All instruction encodings are subsets of the general 
instruction format shown in Figure 8.1. Instructions 
consist of one or two primary opcode bytes, possibly 
an address specifier consisting of the “mod r/m” 
byte and “scaled index” byte, a displacement if re- 
quired, and an immediate data field if required. 

Within the primary opcode or opcodes, smaller en- 
coding fields may be defined. These fields vary ac- 
cording to the class of operation. The fields define 
such information as direction of the operation, size 
of the displacements, register encoding, or sign ex- 
tension. 

Almost all instructions referring to an operand in 
memory have an addressing mode byte following 
the primary opcode byte(s). This byte, the mod r/m 
byte, specifies the address mode to be used. Certain 


encodings of the mod r/m byte indicate a second 
addressing byte, the scale-index-base byte, follows 
the mod r/m byte to fully specify the addressing 
mode. 

Addressing modes can include a displacement im- 
mediately following the mod r/m byte, or scaled in- 
dex byte. If a displacement is present, the possible 
sizes are 8, 16 or 32 bits. 

If the Instruction specifies an immediate operand, 
the immediate operand follows any displacement 
bytes. The immediate operand, if specified, is always 
the last field of the instruction. 

Figure 8.1 illustrates several of the fields that can 
appear in an instruction, such as the mod field and 
the r/m field, but the Figure does not show all fields. 
Several smaller fields also appear in certain instruc- 
tions, sometimes within the opcode bytes them- 
selves. Table 8.2 is a complete list of all fields ap- 
pearing In the 80376 instruction set. Further ahead, 
following Table 8.2, are detailed tables for each 
field. 


TTTTTTTT 

TTTTTTTT 

mod T T T r/m 

ss index base 


d32 16 8 none data32 16 8 none 


'L 


0 7 


0 765320 765320 


J ^ 


opcode 

(one or two bytes) 
(T represents an 
opcode bit.) 


“mod r/m” “s-i-b” 

byte byte ^ 

T' 

register and address 
mode specifier 


address 
displacement 
(4, 2, 1 bytes 
or none) 


immediate 

data 

(4, 2, 1 bytes 
or none) 


Figure 8.1. General Instruction Format 


Table 8.2. Fields within 80376 Instructions 


Field Name 

Description 

Number of Bits 

w 

Specifies If Data is Byte or Full Size (Full Size is either 1 6 or 32 Bits 

1 

d 

Specifies Direction of Data Operation 

1 

s 

Specifies if an Immediate Data Field Must be Sign-Extended 

1 

reg 

General Register Specifier 

3 

mod r/m 

Address Mode Specifier (Effective Address can be a General Register) 

2 for mod; 

ss 

Scale Factor for Scaled Index Address Mode 

3 for r/m 

2 

Index 

General Register to be used as Index Register 

3 

base 

General Register to be used as Base Register 

3 

sreg2 

Segment Register Specifier for CS, SS, DS, ES 

2 

sreg3 

Segment Register Specifier for CS, SS, DS, ES, FS, GS 

3 

tttn 

For Conditional Instructions, Specifies a Condition Asserted 
or a Condition Negated 

4 


Note: Table 8.1 shows encoding of individual instructions. 
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16 -Bit Extensions of the 
instruction Set 

Two prefixes, the operand size prefix (66H) and the 
effective address size prefix (67H), allow overriding 
individually the default selection of operand size and 
effective address size. These prefixes may precede 
any opcode bytes and affect only the instruction 
they precede. If necessary, one or both of the prefix- 
es may be placed before the opcode bytes. The 
presence of the operand size prefix (66H) and the 
effective address prefix will allow 16-bii data opera- 
tion and 1 6-bit effective address calculations. 

For instructions with more than one prefix, the order 
of prefixes is unimportant. 

Unless specified otherwise, instructions with 8-bit 
and' 1 6-bit operands do not affect the contents of 
the high-order bits of the extended registers. 


Encoding of Instruction Fields 

Within the instruction are several fields indicating 
register selection, addressing mode and so on. 

ENCODING OF OPERAND LENGTH (w) FIELD 

For any given instruction performing a data opera- 
tion, the instruction will execute as a 32-blt opera- 
tion. Within the constraints of the operation size, the 
w field encodes the operand size as either one byte 
or the full operation size, as shovm in the table be- 
low. 


w Field 

Operand Size 

Normal 

I 


wiui oon riciiA 

wpciaiiu oiAc 

0 

8 Bits 

8 Bits 

1 

16 Bits 

32 Bits 


ENCODING OF THE GENERAL 
REGISTER (reg) FIELD 

The general register is specified by the reg field, 
which may appear in the primary opcode bytes, or as 
the reg field of the “mod r/m” byte, or as the r/m 
field of the “mod r/m” byte. 


Encoding of reg Field When w Field 
is not Present in Instruction 


reg Field 

Register Seiected 
with 66H Prefix 

Register Seiected 
During 32-Bit 
Data Operations 

000 

AX 

FAX 

001 

CX 

ECX 

010 

DX 

EDX 

oil 

BX 

EBX 

100 

SP 

ESP 

101 

BP 

EBP 

110 

SI 

ESI 

111 

Dl 

EDI 


Encoding of reg Field When w Field 
is Present in Instruction 


Register Specified by reg Field 
with 66H Prefix 

reg 

Function of w Fieid 

(when w = 0) 

(when w = 1) 

000 

AL 

AX 

001 

CL 

CX 

010 

DL 

DX 

oil 

BL 

BX 

100 

AH 

SP 

101 

CH 

BP 

110 

DH 

SI 

111 

BH 

Dl 


Register Specified by reg Fieid 
without 66H Prefix 

reg 

Function of w Fieid 

(when w = 0) 

(when w = 1) 

000 

AL 

EAX 

001 

CL 

ECX 

010 

DL 

EDX 

oil 

BL 

EBX 

100 

AH 

ESP 

101 

CH 

EBP 

110 

DH 

ESI 

111 

BH 

EDI 
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ENCODING OF THE SEGMENT 
REGISTER (sreg) FIELD 

The sreg field in certain instructions is a 2-bit field 
allowing one of the CS, DS, ES or SS segment regis- 
ters to be specified. The sreg field in other instruc- 
tions is a 3-bit field, allowing the FS and GS segment 
registers to be specified also. 


2-Bit sreg2 Field 


2-Bit 

sreg2 Field 

Segment 

Register 

Selected 

00 

ES 

01 

CS 

10 

SS 

11 

DS 


3-Bit sregS Field 


3-Bit 

sreg3 Field 

Segment 

Register 

Selected 

000 

ES 

001 

CS 

010 

SS 

oil 

DS 

100 

FS 

101 

GS 

110 

do not use 

111 

do not use 


ENCODING OF ADDRESS MODE 

Except for special instructions, such as PUSH or 
POP, where the addressing mode is pre-determined, 
the addressing mode for the current instruction is 
specified by addressing bytes following the primary 
opcode. The primary addressing byte is the “mod 
r/m“ byte, and a second byte of addressing informa- 
tion, the “s-i-b“ (scale-index-base) byte, can be 
specified. 

The s-i-b byte (scale-index-base byte) is specified 
when using 32-bit addressing mode and the “mod 
r/m” byte has r/m = 100 and mod = 00, 01 or 10. 
When the sib byte is present, the 32-bit addressing 
mode is a function of the mod, ss, index, and base 
fields. 

The primary addressing byte, the “mod r/m” byte, 
also contains three bits (shown as TTT in Figure 8.1) 
sometimes used as an extension of the primary op- 
code. The three bits, however, may also be used as 
a register field (reg). 

When calculating an effective address, either 16-bit 
addressing or 32-blt addressing is used. 16-bit ad- 
dressing uses 1 6-bit address components to calcu- 
late the effective address while 32-bit addressing 
uses 32-bit address components to calculate the ef- 
fective address. When 1 6-bit addressing is used, the 
“mod r/m” byte is interpreted as a 16-bit addressing 
mode specifier. When 32-bit addressing is used, the 
“mod r/m” byte is interpreted as a 32-blt addressing 
mode specifier. 

Tables on the following three pages define all en- 
codings of all 16-blt addressing modes and 32-bit 
addressing modes. 
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Encoding of Normal Address Mode with “mod r/m” byte (no “s-i-b” byte present): 


mod r/m 

Effective Address 

00 000 

DS:[EAX] 

00 001 

DS:[ECX] 

00 010 

DS:[EDX] 

00 011 

DS:[EBX] 

00100 

s-i-b is present 

00101 

DS:d32 

r\n -1 4 n 

VV/ 1 1 V/ 

no.rccil 

00111 

DS:[EDI] 

01 000 

DS:[EAX+d8l 

01 001 

DS:[ECX+d8] 

01 010 

DS:[EDX + d8] 

01 oil 

DS:[EBX+d8] 

01 100 

s-i-b is present 

01 101 

SS:[EBP-fd8] 

01 110 

DS;[ESI-l-d8] 

01 111 

DS:tEDI-l-d8] 


mod r/m 

Effective Address 

10 000 

DS:[EAX+d32] 

10 001 

DS:[ECX + d32] 

10010 

DS:[EDX + d32] 

10011 

DS:[EBX+d32] 

10100 

s-i-b is present 

10 101 

SS:[EBP + d32] 

10 110 

DS:[ES! + d32] 

10111 

DS:[EDI + d32i 

11000 

register — see below 

11 001 

register— -see below 

11 010 

register — see below 

11 oil 

register— see below 

11 100 

register — see below 

11 101 

register — see below 

11110 

register— see below 

11 111 

register — see below 


Register Specified by reg or r/m 
during Normal Data Operations: 

mod r/m 

function of w field 

(when w=0) 

(when w= 1) 

11 000 

AL 

EAX 

11 001 

CL 

ECX 

11 010 

DL 

EDX 

11 oil 

BL 

EBX 

11 100 

AH 

ESP 

11 101 

CH 

EBP 

11 110 

DH 

ES! 

11 111 

BH 

EDI 


Register Specified by reg or r/m 

during 16-Bit Data Operations: (66H Prefix) 

mod r/m 

function of w field 

(when w=0) 

(when w=1) 


11 000 

AL 

AX 

11 001 

CL 

CX 

11 010 

DL 

DX 

11 oil 

BL 

BX 

11 100 

AH 

SP 

11 101 

CH 

BP 

11 110 

DH 

SI 

11 111 

BH 

Dl 
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Encoding of 16-bit Address Mode with “mod r/m” Byte Using 67H Prefix 


mod r/m 

Effective Address 

00 000 

DS:[BX+SI] 

00 001 

DS:[BX+DI] 

00 010 

SS:[BP + SI] 

00 011 

SS:[BP + DI] 

00 100 

DS:[SI] 

00 101 

DS:[DI] 

00110 

DS:d16 

00111 

DS:[BX] 

01 000 

DS:[BX+SI + d8] 

01 001 

DS:[BX + DH-d8] 

01 010 

SS:[BP+SI + d8] 

01 oil 

SS;[BP + DI + d8] 

01 100 

DS:[SI + d8] 

01 101 

DS:[DI + d8] 

01 110 

SS:[BP + d8] 

01 111 

DS:[BX + d8] 


mod r/m 

Effective Address 

10 000 

DS:[BX+SI + d16] 

10 001 

DS:[BX + DI + d16] 

10010 

SS:[BP + SI + d16] 

10011 

SS:[BP + DI + d16] 

10100 

DS:[SH-d16] 

10101 

DS:[DI + d16] 

10110 

SS:[BP + d16] 

10111 

DS;[BX + d16] 

11 000 

register — see below 

11 001 

register — see below 

11 010 

register — see below 

11 oil 

register — see below 

11 100 

register — see below 

11 101 

register — see below 

11 110 

register — see below 

11 111 

register — see below 
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Encoding of 32-bit Address Mode (“mod r/m” byte and “s-i-b” byte present): 


mod base 

Effective Address 

00 000 

DS:[EAX + (scaled index)] 

00 001 

DS;[ECX + (scaled index)] 

00 010 

DSrlEDXT- (scaled index)] 

00 011 

DS:[EBX + (scaled index)] 

00100 

SS: [ESP + (scaled index)] 

00 101 

DS: [d32 + (scaled index)] 

00110 

DS:[ESI + (scaled index)] 

00 111 

DS: [EDI + (scaled index)] 

01 000 

DS: [EAX + (scaled index) + d8] 

01 001 

DS: [ECX + (scaled index) + d8] 

01 010 

DS: [EDX -f (scaled index) + d8] 

01 oil 

DS: [EBX + (scaled index) + d8] 

01 100 

SS: [ESP + (scaled index) + d8] 

01 101 

SS: [EBP + (scaled Index) + d8] 

01 110 

DS:[ESI + (scaled index) + d8] 

01111 

DS: [EDI + (scaled index) + d8] 

10 000 

DS: [EAX + (scaled index) + d32] 

10 001 

DS: [ECX + (scaled Index) + d32] 

10010 

DS: [EDX + (scaled index) + d32] 

10011 

DS: [EBX + (scaled index) + d32] 

10 100 

SS: [ESP + (scaled index) + d32] 

10 101 

SS: [EBP + (scaled index) + d32] 

10110 

DS:[ESI + (scaled Index) + d32] 

10111 

DS:[EDI + (scaled index) + d32] 


NOTE: 

Mod field in “mod r/m” byte; ss, index, base fields in 
“s-i-b” byte. 


ss 

Scaie Factor 

00 

Xl 

01 

x2 

10 

x4 

11 

x8 


index 

index Register 

000 

EAX 

001 

ECX 

010 

EDX 

oil 

EBX 

100 

no Index reg** 

101 

EBP 

110 

ESI 

111 

EDI 


^♦IMPORTANT NOTE: 

When index field is 100, indicating “no index register,” then 
ss field MUST equal 00. If index is 100 and ss does not 
equal 00, the effective address is undefined. 
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ENCODING OF OPERATION 
DIRECTION (d) FIELD 


In many two-operand instructions the d field is pres- 
ent to indicate which operand is considered the 
source and which is the destination. 


d 

Direction of Operation 

0 

Register/Memory <- - Register 
“reg” Field Indicates Source Operand; 

“mod r/m” or “mod ss index base” Indicates 
Destination Operand 

1 

Register <- - Register/Memory 
“reg” Field Indicates Destination Operand; 
“mod r/m” or “mod ss index base” Indicates 
Source Operand 


ENCODING OF SIGN-EXTEND (s) FIELD 

The s field occurs primarily to instructions with im- 
mediate data fields. The s field has an effect only if 
the size of the immediate data is 8 bits and is being 
placed in a 1 6-bit or 32-bit destination. 


s 

Effect on 

Effect on 

Immediate Data8 

Immediate Data 16|32 

0 

None 

None 

1 

Sign-Extend Data8 to Fill 

1 6-Bit or 32-Bit Destination 

None 


ENCODING OF CONDITIONAL 
TEST (tttn) FIELD 

For the conditional instructions (conditional jumps 
and set on condition), tttn is encoded with n indicat- 
ing to use the condition (n = 0) or its negation (n = 1), 
and ttt giving the condition to test. 


Mnemonic 

Condition 

tttn 

0 

Overflow 

0000 

NO 

No Overflow 

0001 

B/NAE 

Below/Not Above or Equal 

0010 

NB/AE 

Not Below/Above or Equal 

0011 

E/Z 

Equal/Zero 

0100 

NE/NZ 

Not Equal/Not Zero 

0101 

BE/NA 

Below or Equal/Not Above 

0110 

NBE/A 

Not Below or Equal/Above 

0111 

S 

Sign 

1000 

NS 

Not Sign 

1001 

P/PE 

Parity/ Parity Even 

1010 

NP/PO 

Not Parity/ Parity Odd 

1011 

L/NGE 

Less Than/Not Greater or Equal 

1100 

NL/GE 

Not Less Than/Greater or Equal 

1101 

LE/NG 

Less Than or Equal/Greater Than 

1110 

NLE/G 

Not Less or Equal/Greater Than 

1111 


ENCODING OF CONTROL OR DEBUG 
REGISTER (eee) FIELD 

For the loading and storing of the Control and Debug 
registers. 


When Interpreted as Control Register Field 


eee Code 

Reg Name 

000 


CRO 

010 


Reserved 

oil 


Reserved 

Do not use any other encoding 


When Interpreted as Debug Register Field 


eee Code 

Reg Name 

000 

DRO 

001 

DR1 

010 

DR2 

oil 

DR3 

110 

DR6 

111 

DR7 

Do not use any other encoding 
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9.0 REVISION HISTORY 

This 80376 data sheet, version >002, contains updates and improvements to previous versions. A revision 

summary is listed here for your convenience. 

The sections significantly revised since version -001 are: 

Front Page The 80376 Microarchitecture diagram was added. 

Section 1 .0 Figure 1 .2 was updated to show both top and bottom views of the 88-pin PGA package. 

Section 2.0 Figure 2.0 was updated to show the 16-bit registers SI, Dl, BP and SP. 

Section 2.1 Figure 2.2 was updated to show the correct bit polarity for bit 4 in the CRO register. 

Section 2.1 Tables 2.1 and 2.2 were updated to Include additional Information on the EFLAGs and CRO 

registers. 

Section 2.3 Figure 2.3 was updated to more accurately reflect the addressing mechanism of the 80376. 

Section 2.6 In the subsection Maskable Interrupt a paragraph was added to describe the effect of 

interrupt gates on the IF EFLAGs bit. 

Section 2.8 Table 2.7 was updated to reflect the correct power up condition of the CRO register. 

Section 2.10 Figure 2.6 was updated to show the correct bit positions of the BT, BS and BD bits in the 

DR6 register. 

Section 3.0 Figure 3.1 was updated to clearly show the address calculation process. 

Section 3.2 The subsection DESCRIPTORS was elaborated upon to clearly define the relationship be- 
tween the linear address space and physical address space of the 80376. 

Section 3.2 Figures 3.3 and 3.4 were updated to show the AVL bit field. 

Section 3.3 The last sentence in the first paragraph of subsection PROTECTION AND I/O PERMIS- 

SION BIT MAP was deleted. This was an incorrect statement. 

Section 4.1 In the Subsection ADDRESS BUS (BHE#, BLE#, A 23 -A 1 last sentence in the first para- 
graph was updated to reflect the numerics operand addresses as 8000FCH and 8000FEH. 
Because the 80376 sometimes does a double word I/O access a second access to 
8000FEH can be seen. 

Section 4.1 The Subsection Hold Lantencies was updated to describe how 32-blt and unaligned ac- 
cesses are internally locked but do not assert the LOCK# signal. 

Section 4.2 Table 4.6 was updated to show the correct active data bits during a BLE# assertion. 

Section 4.4 This section was updated to correctly reflect the pipelining of the address and status of the 

80376 as opposed to “Address Pipeiining” which occurs on processors such as the 80286. 

Section 4.6 Table 4.7 was updated to show the correct Revision number, OSH. 

Section 4.7 Table 4.8 was updated to show the numerics operand register 8000FEH. This address is 

seen when the 80376 does a DWORD operation to the port address 8000FCH. 

Section 5.0 In the first paragraph the case temperatures were updated to correctly reflect the 0°C- 1 1 5°C 
for the ceramic package and O^C-IIO^C for the plastic package. 

Section 6.2 Table 6.2 was updated to correctly reflect the Case Temperature under Bias specification of 
-65‘’C-120°C. 

Section 6.4 Figure 6.8 vertical axis was updated to reflect “Output Valid Delay (ns)“. 

Section 6.4 Figure 6.1 1 was updated to show typical Ice vs Frequency for the 80376. 

Section 6.5 This entire section was updated to reflect the new ICE-376 emulator. 

Section 8.1 The clock counts and opcodes for various instructions were updated to their correct value. 

Section 8.2 The section INSTRUCTION ENCODING was appended to the data sheet. 

The sections significantly revised since version -002 are: 

Section 1.0 Modified table 1.1. to list pins in alphabetical order. 
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INTEGRATED SYSTEM PERIPHERAL 



■ High Performance 32-Bit DMA 
Controller for 16-Bit Bus 

— 16 MBytes/Sec Maximum Data 
Transfer Rate at 16 MHz 

— 8 Independently Programmable 
Channels 

■ 20-Source Interrupt Controller 

— Individually Programmable Interrupt 
Vectors 

— 15 External, 5 Internal Interrupts 

— 82C59A Superset 

■ Four 16-Bit Programmable Interval 
Timers 

— 82C54 Compatible 

■ Software Compatible to 82380 


■ Programmable Wait State Generator 

— 0 to 15 Walt States Pipelined 

— 1 to 16 Wait States Non-Pipelined 

■ DRAM Refresh Controller 

■ 80376 Shutdown Detect and Reset 
Control 

— Software/Hardware Reset 

■ High Speed CHMOS III Technology 

■ 100-Pin Plastic Quad Flat-Pack Package 
and 132-Pin Pin Grid Array Package 

(See Packaging Handbook Order #231369) 

■ Optimized for Use with the 80376 
Microprocessor 

— Resides on Local Bus for Maximum 
Bus Bandwidth 


The 82370 is a multi-function support peripheral that integrates system functions necessary in an 80376 
environment. It has eight channels of high performance 32-bit DMA (32-bit internal, 16-blt external) with the 
most efficient transfer rates possible on the 80376 bus. System support peripherals integrated Into the 82370 
provide Interrupt Control, Timers, Wait State generation, DRAM Refresh Control, and System Reset logic. 

The 82370’s DMA Controller can transfer data between devices of different data path widths using a single 
channel. Each DMA channel operates independently In any of several modes. Each channel has a temporary 
data storage register for handling non-aligned data without the need for external alignment logic. 


80376 LOCAL BUS 



Internal Block Diagram 
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Pin Descriptions 

The 82370 provides all of the signals necessary to 
interface an 80376 host processor. It has a separate 
24-bit address and 1 6-bit data bus. It also has a set 
of control signals to support operation as a bus mas- 
ter or a bus slave. Several special function signals 


exist on the 82370 for interfacing the system support 
peripherals to their respective system counterparts. 
Following are the definitions of the individual pins of 
the 82370. These brief descriptions are provided as 
a reference. Each signal Is further defined within the 
sections which describe the associated 82370 func- 
tion. 


Symbol 

Type 

Name and Function 

A 1 -A 23 

I/O 

ADDRESS BUS: Outputs physical memory or port I/O addresses. See 

Address Bus (2.2.3) for additicnal information. 

BHE# 

BLE# 

I/O 

BYTE ENABLES: Indicate which data bytes of the data bus take part In a bus 
cycle. See Byte Enable (2.2.4) for additional information. 

D 0 -D 15 

I/O 

DATA BUS: This is the 16-bit data bus. These pins are active outputs during 
interrupt acknowledges, during Slave accesses, and when the 82370 is in the 
Master Mode. 

CLK2 

I 

PROCESSOR CLOCK: This pin must be connected to the processor’s clock, 
CLK2. The 82370 monitors the phase of this, clock in order to remain 
synchronized with the CPU. This clock drives all of the internal synchronous 
circuitry. 

D/C# 

I/O 

DATA/CONTROL: D/C# is used to distinguish between CPU control cycles 
and DMA or CPU data access cycles. It is active as an output only in the 

Master Mode. 

w7R# 

I/O 

WRiTE/READ: vV/R# is used to distinguish between write and read cycles. It 
is active as an output only in the Master Mode. 

M/IO# 

I/O 

MEMORY/IO: M/IO# is used to distinguish between memory and lO 
accesses. It is active as an output only in the Master Mode. 

ADS# 

I/O 

ADDRESS STATUS: This signal indicates presence of a valid address on the 
address bus. It is active as output only in the Master Mode. ADS# is active 
during the first T-state where addresses and control signals are valid. 

NA# 

I 

NEXT ADDRESS: Asserted by a peripheral or memory to begin a pipelined 
address cycle. This pin is monitored only while the 82370 is in the Master 

Mode. In the Slave Mode, pipelining is determined by the current and past 
status of the ADS# and READY# signals. 

HOLD 

0 

HOLD REQUEST: This is an active-high signal to the Bus Master to request 
control of the system bus. When control is granted, the Bus Master activates 
the hold acknowledge signal (HLDA). 

HLDA 

I 

HOLD ACKNOWLEDGE: This Input signal tells the DMA controller that the 

Bus Master has relinquished control of the system bus to the DMA controller. 
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Pin Descriptions (Continued) 


Symbol 

Type 

Name and Function 

DREQ (0-3, 5-7) 

I 

DMA REQUEST: The DMA Request inputs monitor requests from peripherals 
requiring DMA service. Each of the eight DMA channels has one DREQ Input. 
These active-high Inputs are internally synchronized and prioritized. Upon 
request, channel 0 has the highest priority and channel 7 the lowest. 

DREQ4/IRQ9# 

I 

DMA/INTERRUPT REQUEST: This is the DMA request input for channel 4. It 
is also connected to the interrupt controller via interrupt request 9. This 
internal connection is available for DMA channel 4 only. The interrupt input is 
active low and can be programmed as either edge or level triggered. Either 
function can be masked by the appropriate mask register. Priorities of the 

DMA channel and the interrupt request are not related but follow the rules of 
the individual controllers. 

Note that this pin has a weak internal pull-up. This causes the interrupt 
request to be inactive, but the DMA request will be active if there is no 
external connection made. Most applications will require that either one or the 
other of these functions be used, but not both. For this reason, it is advised 
that DMA channel 4 be used for transfers where a software request is more 
appropriate (such as memory-to-memory transfers). In such an application, 
DREQ4 can be masked by software, freeing IRQ9# for other purposes. 

EOP# 

I/O 

END OF PROCESS: As an output, this signal indicates that the current 
Requester access is the last access of the currently operating DMA channel. 

It is activated when Terminal Count is reached. As an input, it signals the DMA 
channel to terminate the current buffer and proceed to the next buffer, if one 
is available. This signal may be programmed as an asynchronous or 
synchronous input. 

EOP# must be connected to a pull-up resistor. This will prevent erroneous 
external requests for termination of a DMA process. 

EDACK (0-2) 

0 

ENCODED DMA ACKNOWLEDGE: These signals contain the encoded 
acknowledgment of a request for DMA service by a peripheral. The binary 
code formed by the three signals indicates which channel is active. Channel 4 
does not have a DMA acknowledge. The inactive state is indicated by the 
code 100. During a Requester access, EDACK presents the code for the 
active DMA channel. During a Target access, EDACK presents the inactive 
code 100. 

IRQ (11-23)# 

I 

INTERRUPT REQUEST: These are active low interrupt request inputs. The 
inputs can be programmed to be edge or level sensitive. Interrupt priorities 
are programmable as either fixed or rotating. These inputs have weak internal 
pull-up resistors. Unused interrupt request inputs should be tied inactive 
externally. 

INT 

0 

INTERRUPT OUT: INT signals that an interrupt request is pending. 

CLKIN 

I 

TIMER CLOCK INPUT: This is the clock input signal to all of the 82370’s 
programmable timers. It is independent of the system clock input (CLK2). 

TOUT1/REF# 

0 

TIMER 1 OUTPUT/REFRESH: This pin is software programmable as either 
the direct output of Timer 1 , or as the indicator of a refresh cycle in progress. 

As REF#, this signal is active during the memory read cycle which occurs 
during refresh. 
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Pin Descriptions (Continued) 


Symbol 

Type 

Name and Function 

TOUT2#/IRQ3# 

I/O 

TIMER 2 bUTPUT/INTERRUPT REQUEST: This is the inverted output of 

Tinner 2. It is also connected directly to interrupt request 3. External hardware 
can use IRQ3# if Timer 2 is programmed as OUT=0 (TOUT2# = 1). 

TOUT3# 

0 

TIMER 3 OUTPUT: This is the inverted output of Timer 3. 

READY# 

I 

READY INPUT: This active-low input indicates to the 82370 that the current 
bus cycle is complete. READY is sampled by the 82370 both while it is in the 
Master Mode, and while It Is in the Slave Mode. 

WSC (0-1) 

I 

WAIT STATE CONTROL: WSCO and WSC1 are inputs used by the Wait- 
State Generator to determine the number of wait states required by the 
currently accessed memory or I/O. The binary code on these pins, combined 
with the M/IO# signal, selects an internal register in which a wait-state count 
is stored. The combination WSC= 1 1 disables the wait-state generator. 

READYO# 

0 

READY OUTPUT: This is the synchronized output of the wait-state generator. 

It is also valid during CPU accesses to the 82370 in the Slave Mode when the 
82370 requires wait states. READYO# should feed directly the processor’s 
READY# input. 

RESET 

I 

RESET: This synchronous input serves to Initialize the state of the 82370 and 
provides basis for the CPURST output. RESET must be held active for at least 

1 5 CLK2 cycles in order to guarantee the state of the 82370. After Reset, the 
82370 is in the Slave Mode with all outputs except timers and interrupts in 
their inactive states. The state of the timers and interrupt controller must be 
initialized through software. This input must be active for the entire time 
required by the host processor to guarantee proper reset. 

CHPSEL# 

0 

CHIP SELECT: This pin is driven active whenever the 82370 is addressed in a 
slave bus read or write cycle. It is also active during interrupt acknowledge 
cycles when the 82370 is driving the Data Bus. It can be used to control the 
local bus transceivers to prevent contention with the system bus. 

CPURST 

0 

CPU RESET: CPURST provides a synchronized reset signal for the CPU. It is 
activated in the event of a software reset command, a processor shut-down 
detect, or a hardware reset via the RESET pin. The 82370 holds CPURST 
active for 62 clocks in response to either a software reset command or a shut- 
down detection. Otherwise CPURST reflects the RESET input. 

Vcc 


POWER: + 5V input power. 

Vss 


Ground Reference. 


Table 1. Wait-State Select Inputs 


Port 

Wait-State Registers 

Select Inputs 

Address 

D7 D4 

D3 DO 

WSC1 

WSCO 

72H 

MEMORY 0 

1/0 0 

0 

0 

73H 

MEMORY 1 

1/01 

0 

1 

74H 

MEMORY 2 

1/0 2 

1 

0 


DISABLED 

1 

1 

M/IO# 

1 

0 
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A Row 

B Row 

C Row 

D Row 

Pin 

Label 

Pin 

Label 

Pin 

Label 

Pin 

Label 

1 

CPURST 

26 

Vcc 

51 

All 

76 

DREQ5 

2 

INT 

27 

D11 

52 

A 1 O 

77 

DREQ4/IRQ9# 

3 

Vcc 

28 

D4 

53 

Ag 

78 

DREQ3 

4 

Vss 

29 

Di2 

54 

As 

79 

DREQ2 

5 

TOUT2#/IRQ3# 

30 

Ds 

55 

Ay 

80 

DREQ1 

6 

T0UT3# 

31 

Di3 

56 

Ae 

81 

DREQO 

7 

D/C# 

32 

Do 

57 

A 5 

82 

IRQ23# 

8 

Vcc 

33 

Vss 

58 

Vcc 

83 

IRQ22# 

9 

W/R# 

34 

Di4 

59 

A 4 

84 

IRQ21 # 

10 

M/IO# 

35 

D7 

60 

As 

85 

IRQ20# 

11 

HOLD 

36 

Di5 

61 

A 2 

86 

IRQ19# 

12 

TOUT1/REF# 

37 

A 23 

62 

Ai 

87 

IRQ18# 

13 

CLK2 

38 

A 22 

63 

Vss 

88 

IRQ17# 

14 

Vss 

39 

A 2 I 

64 

BLE# 

89 

IRQ16# 

15 

READYO# 

40 

A 2 O 

65 

BHE# 

90 

IRQ15# 

16 

EOF# 

41 

Ai9 

66 

Vss 

91 

IRQ14# 

17 

CHPSEL# 

42 

Ai8 

67 

ADS# 

92 

IRQ13# 

18 

Vcc 

43 

Vcc 

68 

Vcc 

93 

IRQ12# 

19 

Do 

44 

Ai7 

69 

EDACK2 

94 

IRQ11# 

20 

Do 

45 

Ai6 

70 

EDACK1 

95 

CLKIN 

21 

Di 

46 

Ai5 

71 

EDACKO 

96 

WSCO 

22 

Dg 

47 

Ai4 

72 

HLDA 

97 

WSC1 

23 

Da 

48 

Vss 

73 

DREQ7 

98 

RESET 

24 

Dio 

49 

Ai3 

74 

DREQ6 

99 

READY# 

25 

Do 

50 

Ai2 

75 

NA# 

100 

Vss 
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■ 

B 

c 

D 

E 

F 

G 

H 

J 

K 

L 

M 

N 

P 


^Vss 

Vcc 

Vss 

Vcc 

A12 

A9 

A8 

A5 

A3 

BHE# 

DREQO 

EDACK1 

Vss 

Vcc 


1 

o 

o 

o 

o 

O 

O 

O 

O 

O 

O 

O 

O 

o 

O 



Vcc 

A19 

A17 

A15 

A13 

A10 

A7 

A4 

A1 

ADS# 

EDACK2 

INT 

Vss 

Vcc 


2 

o 

O 

o 

O 

O 

O 

O 

O 

O 

O 

O 

O 

o 

o 



Vss 

A21 

A18 

A16 

A14 

All 

A6 

A2 

BLE# 

DREQ4/ 

, IRQ9# 

EDACKO 

HLDA 

DREQ7 

DREQ5 


3 

o 

O 

O 

O 

O 

O 

O 

O 

O 

O 

O 

O 

O 

O 



< 

o 

o 

A22 

A20 









DRLgt) 

NA# 

UKh.g3 


4 

o 

O 

0 









o 

O 

o 



(NC) 

(NC) 

A23 









wsco 

DREQ2 

DREQ1 


5 

o 

o 

O 









o 

O 

O 



(NC) 

(NC) 

(NC) 




BOnOM VIEW 
METAL LID 




WSC1 

IRQ22# 

IRQ23# 


6 

o 

o 

o 









o 

O 

0 



(NC) 

(NC) 

(NC) 









IRQ21# 

IRQ20# 

IRQ19# 


7 

o 

o 

o 









O 

O 

O 



(NC) 

(NC) 

D15 




(82370) 




IRQ17# 

IRQ16# 

IRQ18# 


8 

o 

o 

o 









o 

o 

O 



D7 

(NC) 

(NC) 









IRQ13# 

IRQ 14# 

IRQ 15# 


9 

o 

o 

o 









o 

o 

o 



D14 

D6 

D13 









D/C# 

IRQ12# 

IRQ11# 


10 

O 

o 

o 









o 

o 

o 



(NC) 

D5 

(NC) 









READY# 

CLKIN 

W/R# 


11 

O 

o 

o 









o 

o 

o 



< 

o 

o 

(NC) 

D12 

(NC) 

D3 

DtO 

(NC) 

READYO# 

HOLO 

CHPSEL# 

EOP# 

CPURST 

RESET 

< 

o 

o 


12 

O 

o 

o 

o 

O 

o 

o 

o 

o 

o 

o 

o 

o 

O 



< 

(/) 

(/) 

(NC) 

D4 

(NC) 

(NC) 

02 

D9 

(NC) 

(NC) 

T0UT1/ 

REF# 

M/K3# 

T0UT3# 

T0UT2#/ 

IRQ3 

< 

</) 

(/) 


13 

o 

o 

o 

o 

o 

o 

O 

o 

o 

o 

o 

o 

o 

o 



Vcc 

Vss 

Vcc 

01 1 

(NC) 

(NC) 

CLK2 

D1 

DO 

D8 

Vss 

Vcc 

Vss 

Vcc 


14 

o 

o 

o 

o 

o 

o 

O 

O 

o 

o 

o 

o 

o 

o 
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Pin 

Label 

Pin 

Labei 

Pin 

Label 

Pin 

Labei 

G14 

CLK2 

D14 

D 11 

LI 

DREQO 

A2 

Vcc 

N12 

RESET 

FI 2 

D 10 

P 6 

IRQ23# 

P2 

Vcc 

M12 

CPURST 

G13 

Dg 

N 6 

IRQ22# 

A4 

Vcc 

C5 

A 23 

K14 

Da 

M7 

IRQ21# 

A12 

Vcc 

B4 

A 22 

A9 

D 7 

N7 

IRQ 20 # 

P12 

Vcc 

B3 

A 21 

B10 

Da 

P7 

IRQ19# 

A14 

Vcc 

C4 

A 20 

B11 

Ds 

P 8 

IRQ18# 

C14 

Vcc 

B2 

Ai9 

C13 

D 4 

M 8 

IRQ17# 

M14 

Vcc 

C3 

Ai8 

E12 

Da 

N 8 • 

IRQ16# 

P14 

Vcc 

C 2 

Ai7 

FI 3 

Da 

P9 

IRQ15# 

A5 

NC 

D3 

Ai6 

H14 

Di 

N9 

IRQ14# 

B5 

NC 

D2 

Ai5 

J14 

Do 

M9 

IRQ13# 

A 6 

NC 

E3 

Ai4 

P11 

W/R# 

N10 

IRQ12# 

B 6 

NC 

E2 

Ai3 

LI 3 

M/IO# 

P10 

IRQ11# 

C 6 

NC 

El 

Ai2 

K2 

ADS# 

M5 

WSCO 

A7 

NC 

F3 

A 11 

M10 

D/C# 

M 6 

WSC 1 

B7 

NC 

F2 

A 10 

N4 

NA# 

M13 

TOUTS# 

C7 

NC 

FI 

A 9 

M11 

READY# 

N13 

TOUT2#/IRQ3# 

A 8 

NC 

G 1 

Ae 

H12 

READYO# 

K13 

TOUT 1 /REF# 

B 8 

NC 

G2 

Ay 

J12 

HOLD 

N11 

CLKIN 

B9 

NC 

G3 

Ae 

M3 

HLDA 

A1 

Vss 

C9 

NC 

HI 

A 5 

M2 

INT 

Cl 

Vss 

All 

NC 

H2 

A 4 

LI 2 

EOP# 

N 1 

Vss 

B12 

NC 

J1 

A 3 

L2 

EDACK2 

N2 

Vss 

C11 

NC 

H3 

A 2 

Ml 

EDACK1 

A3 

Vss 

D12 

NC 

J2 

A 1 

L3 

EDACKO 

A13 

Vss 

G12 

NC 

J3 

BLE# 

N3 

DREQ7 

P13 

Vss 

B13 

NC 

K1 

BHE# 

M4 

DREQ 6 

B14 

Vss 

D13 

NC 

K12 

CHPSEL# 

P3 

DREQ5 

L14 

Vss 

E13 

NC 

C 8 

Di5 

K3 

DREQ4/IRQ9# 

N14 

Vss 

H13 

NC. 

A10 

Di4 

P4 

DREQ3 

B1 

Vcc 

J13 

NC 

CIO 

Di3 

N5 

DREQ2 

DI 

Vcc 

E14 

NC 

C12 

Di2 

P5 

DREQ1 

PI 

Vcc 

F14 

NC 


1.0 FUNCTIONAL OVERVIEW 

The 82370 contains several independent functional 
modules. The following is a brief discussion of the 
components and features of the 82370. Each mod- 
ule has a corresponding detailed section later in this 
data sheet. Those sections should be referred to for 
design and programming information. 


1.1 82370 Architecture 

The 82370 is comprised of several computer system 
functions that are normally found in separate LSI 
and VLSI components. These include: a high-per- 
formance, eight-channel, 32-bit Direct Memory Ac- 
cess Controller; a 20-level Programmable Interrupt 


Controller which is a superset of the 82C59A; four 
16-bit Programmable Interval Timers which are func- 
tionally equivalent to the 82C54 timers; a DRAM Re- 
fresh Controller; a Programmable Wait State Gener- 
ator; and system reset logic. The interface to the 
82370 is optimized for high-performance operation 
with the 80376 microprocessor. 

The 82370 operates directly on the 80376 bus. In 
the Slave Mode, It monitors the state of the proces- 
sor at all times and acts or Idles according to the 
commands of the host. It monitors the address pipe- 
line status and generates the programmed number 
of wait states for the device being accessed. The 
82370 also has logic to the reset of the 80376 via 
hardware or software reset requests and processor 
shutdown status. 
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After a system reset, the 82370 is in the Slave 
Mode. It appears to the system as an I/O device. It 
becomes a bus master when it is performing DMA 
transfers. 


are automatically inserted into the access cycle. 
This allows the programmer to write initialization rou- 
tines, etc. without regard to hardware recovery 
times. 


To maintain compatibility with existing software, the 
registers within the 82370 are accessed as bytes. If 
the internal logic of the 82370 requires a delay be- 
fore another access by the processor, wait states 


Figure 1-1 shows the basic architectural compo- 
nents of the 82370. The following sections briefly 
discuss the architecture and function of each of the 
distinct sections of the 82370. 


OUO/O LUV^AL DUO UnrOLUff 


BUS INTERFACE 


READY# ■ 
READYO# *< 
WSCO - 
WSC1 • 


TOUTI/REF#^ 


RESET - 
CPURST 


INTERNAL BUS 
ARBITRATION 
AND CONTROL 


WAIT- STATE 
CONTROL 


DRAM ^ ^ 

REFRESH ^ 

CONTROLLER ^ 

-5 Iniernai requests 

20 -LEVEL 
INTERRUPT 
■ CONTROLLER 


1 6 - BIT PHYSICAL 
(32 -BIT LOGICAL) 
8 -CHANNEL 
DMA 

CONTROLLER 




W TOUTS# 


piniire 1-1. Architecture of the 82370 
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1.1.1 DMA CONTROLLER 

The 82370 contains a high-performance, 8-channel 
DMA Controller. It provides a 32-bit internal data 
path. Through its 16-bit external physical data bus, it 
is capable of transferring data in any combination of 
bytes, words and double-words. The addresses of 
both source and destination can be independently 
Incremented, decremented or held constant, and 
cover the entire 16-bit physical address space of the 
80376. It can disassemble and assemble non- 
aligned data via a 32-blt internal temporary data 
storage register. Data transferred between devices 
of different data path widths can also be assembled 
and disassembled using the internal temporary data 
storage register. The DMA Controller can also trans- 
fer aligned data between I/O and memory on the fly, 
allowing data transfer rates up to 16 megabytes per 
second for an 82370 operating at 16 MHz. Figure 
1 -2 illustrates the functional components of the DMA 
Controller. 

There are twenty-four general status and command 
registers in the 82370 DMA Controller. Through 
these registers any of the channels may be pro- 
grammed into any of the possible modes. The oper- 
ating modes of any one channel are independent of 
the operation of the other channels. 


Each channel has three programmable registers 
which determine the location and amount of data to 
be transferred: 

Byte Count Register — Number of bytes to trans- 
fer. (24-bits) 

Requester Register — Byte Address of memory 
or peripheral which is re- 
questing DMA service. 
(24-bits) 

Target Register — • Byte Address of peripheral 

or memory which will be 
accessed. (24-bits) 

There are also port addresses which, when ac- 
cessed, cause the 82370 to perform specific func- 
tions. The actual data written doesn't matter, the act 
of writing to the specific address causes the com- 
mand to be executed. The commands which operate 
in this mode are: Master Clear, Clear Terminal Count 
Interrupt Request, Clear Mask Register, and Clear 
Byte Pointer Flip-Flop. 

DMA transfers can be done between all combina- 
tions of memory and I/O; memory-to-memory, mem- 
ory-to-l/0, l/O-to-memory, and l/O-to-l/0. DMA 
service can be requested through software and/or 
hardware. Hardware DMA acknowledge signals are 
available for all channels (except channel 4) through 
an encoded 3-bit DMA acknowledge bus 
(EDACKO-2). 



EDACKO 
EDACKI -4- 
EDACK2 ◄- 
EOP# ◄- 


PROCESS 

CONTROL 


CONTROL/STATUS REGISTERS 


CHANNEL REGISTERS 


COMMAND REGISTER I 


COMMAND REGISTER H 


MODE REGISTER I 


MODE REGISTER IT 


SOFTWARE REQUEST 
REGISTER 


MASK REGISTER 


STATUS REGISTER 


BUS SIZE REGISTER 


CHAINING REGISTER 


BASE 

BYTE COUNT 


BASE 

REQUESTER 

ADDRESS 


BASE 

TARGET 

ADDRESS 


CURRENT 
BYTE COUNT 


CURRENT 

REQUESTER 

ADDRESS 


CURRENT 

TARGET 

ADDRESS 


TEMPORARY] 

REGISTER 


CHANNEL 1 (SAME AS CH 0) 


CHANNEL 2 (SAME AS CH 0) 


CHANNEL 3 (SAME AS CH 0) 


"LOWER" GROUP OF CHANNELS 


"UPPER" GROUP OF CHANNELS 


CONTROL/STATUS 
(SAME AS 
LOWER GROUP) 


CHANNEL 4 (SAME AS CH 0) 


CHANNEL 5 (SAME AS CH 0) 


CHANNEL 6 (SAME AS CH 0) 


CHANNEL 7 (SAME AS CH 0) 


CHANNEL 0 


Figure 1-2. 82370 DMA Controller 
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The 82370 DMA Controller transfers blocks of data 
(buffers) in three modes: Single Buffer, Buffer Auto- 
Initialize, and Buffer Chaining. In the Single Buffer 
Process, the 82370 DMA Controller is programmed 
to transfer one particular block of data. Successive 
transfers then require reprogramming of the DMA 
channel. Single Buffer transfers are useful in sys- 
tems where It Is known at the time the transfer be- 
gins what quantity of data is to be transferred, and 
there is a contiguous block of data area available. 

The Buffer Auto-lnitialize Process allows the same 
data area to be used for successive DMA transfers 
without having to reprogram the channel. 

The Buffer Chaining Process allows a program to 
specify a list of buffer transfers to be executed. The 
82370 DMA Controller, through interrupt routines, is 
reprogrammed from the list. The channel Is repro- 
grammed for a new buffer before the current buffer 
transfer Is complete. This pipelining of the channel 
programming process allows the system to allocate 
non-contiguous blocks of data storage space, and 
transfer all of the data with one DMA process. The 
buffers that make up the chain do not have to be in 
contiguous locations. 

Channel priority can be fixed or rotating. Fixed priori- 
ty allows the programmer to define the priority of 
DMA channels based on hardware or other fixed pa- 


rameters. Rotating priority is used to provide periph- 
erals access to the bus on a shared basis. 

With fixed priority, the programmer can set any 
channel to have the current lowest priority. This al- 
lows the user to reset or manually rotate the priority 
schedule without reprogramming the command reg- 
isters. 


1.1.2 PROGRAMMABLE INTERVAL TIMERS 

Four 16-blt programmable interval timers reside 
within the 82370. These timers are identical in func- 
tion to the timers in the 82C54 Programmable Inter- 
val Timer. All four of the timers share a common 
clock input which can be independent of the system 
clock. The timers are capable of operating In six dif- 
ferent modes. In all of the modes, the current count 
can be latched and read by the 80376 at any time, 
making these very versatile event timers. Figure 1-3 
shows the functional components of the Program- 
mable Interval Timers. 

The outputs of the timers are directed to key system 
functions, making system design simpler. Timer 0 is 
routed directly to an Interrupt input and Is not avail- 
able externally. This timer would typically be used to 
generate time-keeping Interrupts. 


A 




GATESj^ 

CLKIN 


INTERNAL D.ATA BUS 




CONTROL 

REGISTERS 


CONTROL 

LOGIC 



li 

• 

■-3 C--- 

1 STATUS 1 

1 LATCn 1 

1 INPUT/OUTPUT 1 

! 1 AT/'urc 1 

1 1 

i 

r 

Tt 



16- BIT COUNTER!. 

1 1 1 

1 OUTPUT CONTROL LOGIC J- 




►TOUTO 


TIMER 0 


TIMER 1 


TIMER 2 


TIMER 3 


T0UT1 


TOUT2 


TOUTS 
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Figure 1-3. Programmable Interval Timers— Block Diagram 
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Timers 1 and 2 have outputs which are available for 
general timer/counter purposes as well as special 
functions. Timer 1 Is routed to the refresh control 
logic to provide refresh timing. Timer 2 Is connected 
to an interrupt request input to provide other timer 
functions. Timer 3 is a general purpose timer/coun- 
ter whose output is available to external hardware. It 
Is also connected internally to the interrupt request 
which defaults to the highest priority (IRQO). 

1.1.3 INTERRUPT CONTROLLER 

The 82370 has the equivalent of three enhanced 
82C59A Programmable Interrupt Controllers. These 
controllers can all be operated In the Master Mode, 
but the priority is always as if they were cascaded. 
There are 15 interrupt request inputs provided for 
the user, ail of which can be inputs from external 
slave interrupt controllers. Cascading 82C59As to 
these request inputs allows a possible total of 120 
external interrupt requests. Figure 1-4 is a block dia- 
gram of the 82370 Interrupt Controller. 

Each of the interrupt request Inputs can be individu- 
ally programmed with its own Interrupt vector, allow- 
ing more flexibility in interrupt vector mapping than 


was available with the 82C59A. An Interrupt is pro- 
vided to alert the system that an attempt is being 
made to program the vectors in the method of the 
82C59A. This provides compatibility of existing soft- 
ware that used the 82C59A or 8259A with new de- 
signs using the 82370. 

In the event of an unrequested or otherwise errone- 
ous interrupt acknowledge cycle, the 82370 Interrupt 
Controller issues a default vector. This vector, pro- 
grammed by the system software, will alert the sys- 
tem of unsolicited interrupts of the 80376. 

The functions of the 82370 Interrupt Controller are 
identical to the 82C59A, except in regards to pro- 
gramming the interrupt vectors as mentioned above. 
Interrupt request inputs are programmable as either 
edge or level triggered and are software maskable. 
Priority can be either fixed or rotating and interrupt 
requests can be nested. 

Enhancements are added to the 82370 for cascad- 
ing external interrupt controllers. Master to Slave 
handshaking takes place on the data bus, instead of 
dedicated cascade lines. 


moo# 

IRQ1# 

IRQ2# 

IRQ3# 

IRQ4# 

IRQ5# 

IRQ6# 

IRQ7# 



82370 ENHANCEMENT OVER THE 82C59A 
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Figure 1-4. 82370 Interrupt Controller— Block Diagram 


4-853 




82370 


inter 


1.1.4 WAIT STATE GENERATOR 

The Wait State Generator is a programmable 
READY generation circuit for the 80376 bus. A pe- 
ripheral requiring wait states can request the Wait 
State Generator to hold the processor’s READY in- 
put Inactive for a predetermined number of bus 
states. Six different wait state counts can be pro- 
grammed into the Walt State Generator by software; 
three for memory accesses and three for I/O ac- 
cesses. A block diagram of the 82370 Wait State 
Generator is shown in Figure 1-5. 

The peripheral being accessed selects the required 
wait state count by placing a code on a 2-bit wait 
state select bus. This code along with the M/IO# 
signal from the bus master is used to select one of 
six Internal 4-bit wait state registers which has been 
programmed with the desired number of wait states. 
From zero to fifteen wait states can be programmed 
Into the wait state registers. The Wait State genera- 
tor tracks the state of the processor or current bus 
master at all times, regardless of which device is the 
current bus master and regardless of whether or not 
the wait state generator is currently active. 

The 82370 Wait State Generator is disabled by mak- 
ing the select inputs both high. This allows hardware 
which is Intelligent enough to generate its own ready 
signal to be accessed without penalty. As previously 
mentioned, deselecting the Wait State Generator 
does not disable Its ability to determine the proper 
number of wait states due to pipeline status in sub- 
sequent bus cycles. 

The number of wait states Inserted into a pipelined 
bus cycle is the value in the selected wait state reg- 
ister. If the bus master is operating in the non-pipe- 
lined mode; the Walt State Generator will Increase 
the number of wait states inserted into the bus cycle 
by one. 


On reset, the Walt State Generator’s registers are 
loaded with the value FFH, giving the maximum 
number of wait states for any access in which the 
wait state select inputs are active. 

1.1.5 DRAM REFRESH CONTROLLER 

The 82370 DRAM Refresh Controller consists of a 
24-bit refresh address counter and bus arbitration 
logic. The output of Timer 1 is used to periodically 
request a refresh cycle. When the controller re- 
ceives the request. It requests access to the system 
bus through the HOLD signal. When bus control is 
acknowledged by the processor or current bus mas- 
ter, the refresh controller executes a memory read 
operation at the address currently in the Refresh Ad- 
dress Register. At the same time, it activates a re- 
fresh signal (REF#) that the memory uses to force a 
refresh instead of a normal read. Control of the bus 
is transferred to the processor at the completion of 
this cycle. Typically a refresh cycle will take six clock 
cycles to execute on an 80376 bus. 

The 82370 DRAM Refresh Controller has the high- 
est priority when requesting bus access and will In- 
terrupt any active DMA process. This allows large 
blocks of data to be moved by the DMA controller 
without affecting the refresh function. Also the DMA 
controller is not required to completely relinquish the 
bus, the refresh controller simply steals a bus cycle 
between DMA accesses. 

The amount by which the refresh address is incre- 
mented Is programmable to allow for different bus 
widths and memory bank arrangements. 

1.1.6 CPU RESET FUNCTSON 

The 82370 coniains a special reset function which 
can respond to hardware reset signals as well as a 


Pipelined 0-15 Wait States 
Non-Pipelined 0-16 Wait States 


WSCO- 

WSC1- 

M/IO#- 



PROGRAMMABLE WAIT STATE 
REGISTERS 


290164-8 


Figure 1-5. 82370 Wait State Generator— Block Diagram 
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software reset command. The circuit will hold the 
80376’s RESET line active while an external hard- 
ware reset signal is present at its RESET Input. It 
can also reset the 80376 processor as the result of a 
software command. The software reset command 
causes the 82370 to hold the processor’s RESET 
line active for a minimum of 62 clock cycles. The 
80376 requires that its RESET line be held active for 
a minimum of 80 clock cycles to re-initialize. For a 
more detailed explanation and solution, see Appen- 
dix D (System Notes). 

The 82370 can be programmed to sense the shut- 
down detect code on the status lines from the 
80376. If the Shutdown Detect function is enabled, 
the 82370 will automatically reset the processor. A 
diagnostic register is available which can be used to 
determine the cause of reset. 


1.1.7 REGISTER MAP RELOCATION 

After a hardware reset, the internal registers of the 
82370 are located In I/O space beginning at port 
address OOOOH. The map of the 82370’s registers is 
relocatable via a software command. The default 
mapping places the 82370 between I/O addresses 
OOOOH and OODBH. The relocation register allows 
this map to be moved to any even 256-byte bounda- 
ry In the processor’s 1 6-bit I/O address space or any 
even 64 kbyte boundary in the 24-bit memory ad- 
dress space. 


1.2 Host Interface 

The 82370 is designed to operate efficiently on the 
local bus of an 80376 microprocessor. The control 
signals of the 82370 are identical in function to 
those of the 80376. As a slave, the 82370 operates 
with all of the features available on the 80376 bus. 
When the 82370 Is in the Master Mode, it looks Iden- 
tical to an 80376 to the connected devices. 

The 82370 monitors the bus at all times, and deter- 
mines whether the current bus cycle is a pipelined or 
non-pipelined access. All of the status signals of the 
processor are monitored. 

The control, status, and data registers within the 
82370 are located at fixed addresses relative to 
each other, but the group can be relocated to either 
memory or I/O space and to different locations with- 
in those spaces. 

As a Slave device, the 82370 monitors the control/ 
status lines of the CPU. The 82370 will generate all 
of the wait states It needs whenever it is accessed. 
This allows the programmer the freedom of access- 


ing 82370 registers without having to insert NOPs in 
the program to wait for slower 82370 Internal regis- 
ters. 

The 82370 can determine if a current bus cycle is a 
pipelined or a non-pipelined cycle. It does this by 
monitoring the ADS#, NA# and READY# signals 
and thereby keeping track of the current state of the 
80376. 

As a bus master, the 82370 looks like an 80376 to 
the rest of the system. This enables the designer 
greater flexibility in systems which include the 
82370. The designer does not have to alter the inter- 
faces of any peripherals designed to operate with 
the 80376 to accommodate the 82370. The 82370 
will access any peripherals on the bus in the same 
manner as the 80376, including recognizing pipe- 
lined bus cycles. 

The 82370 is accessed as an 8-bit peripheral. The 
80376 places the data of all 8-bit accesses either on 
D(0-7) or D(8-15). The 82370 will only accept data 
on these lines when in the Slave Mode. When in the 
Master Mode, the 82370 is a full 16-bit machine, 
sending and receiving data in the same manner as 
the 80376. 


2,0 80376 HOST INTERFACE 

The 82370 contains a set of interface signals to op- 
erate efficiently with the 80376 host processor. 
These signals were designed so that minimal hard- 
ware is needed to connect the 82370 to the 80376. 
Figure 2-1 depicts a typical system configuration 
with the 80376 processor. As shown in the diagram, 
the 82370 is designed to Interface directly with the 
80376 bus. 

Since the 82370 resides on the opposite side of the 
data bus transceivers with respect to the rest of the 
system peripherals, it Is Important to note that the 
transceivers should be controlled so that contention 
between the data bus transceivers and the 82370 
will not occur. In order to ease the Implementation of 
this, the 82370 activates the CHPSEL# signal which 
indicates that the 82370 has been addressed and 
may output data. This signal should be Included in 
the direction and enable control logic of the trans- 
ceiver. When any of the 82370 internal registers are 
read, the data bus transceivers should be disabled 
so that only the 82370 will drive the local bus. 

This section describes the basic bus functions of the 
82370 to show how this device interacts with the 
80376 processor. Other signals which are not direct- 
ly related to the host interface will be discussed in 
their associated functional block description. 
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2.1 Master and Slave Modes 

At any time, the 82370 acts as either a Slave device 
or a Master device in the system. Upon reset, the 
82370 will be in the Slave Mode. In this mode, the 
80376 processor can read/write into the 82370 in- 
ternal registers. Initialization information may be pro- 
grammed into the 82370 during Slave Mode. 

When DMA service (including DRAM Refresh Cycles 
generated by the 82370) is requested, the 82370 will 
request and subsequently get control of the 80376 
local bus. This is done through the HOLD and HLDA 
(Hold Acknowledge) signals. When the 80376 proc- 


essor responds by asserting the HLDA signal, the 
82370 will switch Into Master Mode and perform 
DMA transfers. In this mode, the 82370 Is the bus 
master of the system. It can read/write data from/to 
memory and peripheral devices. The 82370 will re- 
turn to the Slave Mode upon completion of DMA 
transfers, or when HLDA is negated. 


2.2 80376 ititerfaCB Sl9nal3 

As mentioned in the Architecture section, the Bus 
Interface module of the 82370 (see Figure 1-1) con- 
tains signals that are directly connected to the 
80376 host processor. This module has separate 
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16-bit Data and 24-bit Address busses. Also, it has 
additional control signals to support different bus op- 
erations on the system. By residing on the 80376 
local bus, the 82370 shares the same address, data 
and control lines with the processor. The following 
subsections discuss the signals which interface to 
the 80376 host processor. 

2.2.1 CLOCK (CLK2) 


upon whether Byte Enable bit BLE# is 0 or 1 (see 
Table 2-1). When the 80376 host processor reads 
from the 82370, the single byte data will be duplicat- 
ed twice on the Data Bus; i.e. on D0-D7 and Ds- 
Di5- 

During Master Mode, the 82370 can transfer 16-, 
and 8-bit data between memory (or I/O devices) and 
I/O devices (or memory) via the Data Bus. 


The CLK2 input provides fundamental timing for the 
82370. It is divided by two internally to generate the 
82370 internal clock. Therefore, CLK2 should be 
driven with twice the 80376’s frequency. In order to 
maintain synchronization with the 80376 host proc- 
essor, the 82370 and the 80376 should share a 
common clock source. 

The internal clock consists of two phases; PHI1 and 
PHI2. Each CLK2 period is a phase of the internal 
clock. PHI2 is usually used to sample Input and set 
up internal signals and PHI1 is for latching internal 
data. Figure 2-2 illustrates the relationship of CLK2 
and the 82370 Internal clock signals. The CPURST 
signal generated by the 82370 guarantees that the 
80376 will wake up in phase with PHI1. 


2.2.2 DATA BUS (D 0 -D 15 ) 

This 16-bit three-state bidirectional bus provides a 
general purpose data path between the 82370 and 
the system. These pins are tied directly to the corre- 
sponding Data Bus pins of the 80376 local bus. The 
Data Bus Is also used for interrupt vectors generated 
by the 82370 in the Interrupt Acknowledge cycle. 

During Slave I/O operations, the 82370 expects a 
single byte to be written or read. When the 80376 
host processor writes Into the 82370, either D0-D7 
or Ds-Dis will be latched into the 82370, depending 


2.2.3 ADDRESS BUS (A 23 -A 1 ) 

These three-state bidirectional signals are connect- 
ed directly to the 80376 Address Bus. In the Slave 
Mode, they are used as input signals so that the 
processor can address the 82370 internal ports/reg- 
isters. In the Master Mode, they are used as output 
signals by the 82370 to address memory and periph- 
eral devices. The Address Bus Is capable of ad- 
dressing 16 Mbytes of physical memory space 
(OOOOOOH to FFFFFFH), and 64 Kbytes of I/O ad- 
dresses. 


2.2.4 BYTE ENABLE (BHE#, BLE#) 

The Byte Enable pins BHE# and BLE# select the 
specific byte(s) In the word addressed by A1-A23. 
During Master Mode operation, it is used as an out- 
put by the 82370 to address memory and I/O loca- 
tions. The definition of BHE# and BLE# is further 
Illustrated in Table 2-1. 

NOTE: 

The 82370 will activate BHE# when output In Mas- 
ter Mode. For a more detailed explanation and its 
solutions, see Appendix D (System Notes). 
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As an output (Master Mode): 


Table 2-1. Byte Enable Signals 


BHE# 

BLE# 

Byte to be Accessed 
Relative to A 23 -A 1 

Logical Byte Presented on 

Data Bus During WRITE Only* 
Di 5 -De D 7 -D 0 

0 

0 

0.1 

B A 

0 

1 

1 

A A 

1 

0 

0 

U A 

1 

1 

(Not Used) 



U = Undefined 
A = Logical D0-D7 
B = Logical Ds-D-is 


*NOTE: 

Actual number of bytes accessed depends upon the programmed data path width. 


Table 2-2. Bus Cycle Definition 


M/IO# 

D/C# 

W/R# 

As INPUTS 

As OUTPUTS 

0 

0 

0 

Interrupt Acknowledge 

NOT GENERATED 

0 

0 

1 

UNDEFINED 

NOT GENERATED 

0 

1 

0 

I/O Read 

I/O Read 

0 

1 

1 

I/O Write 

I/O Write 

1 

0 

.0 

UNDEFINED 

NOT GENERATED 

1 

0 

1 

HALT if Ai = 1 
SHUTDOWN If Ai = 0 

NOT GENERATED 

1 

1 

0 

Memory Read 

Memory Read 

1 

1 

1 

Memory Write 

Memory Write 


2.2.5 BUS CYCLE DEFINITION SIGNALS 
(D/C#, W/R#, M/IO#) 

These three-state bidirectional signals define the 
type of bus cycle being performed. W/R# distin- 
guishes between write and read cycles. D/C# dis- 
tinguishes between processor data and control cy- 
cles. M/iu# oistinyuishes between rnemory and I/O 
cycles. 

During Slave Mode, these signals are driven by the 
80376 host processor; during Master Mode, they are 
driven by the 82370. In either mode, these signals 
will be valid when the Address Status (ADS#) Is 
driven LOW. Exact bus cycle definitions are given In 
Table 2-2. Note that some combinations are recog- 
nized as inputs, but not generated as outputs. In the 
Master Mode, D/C# Is always HIGH. 


2 . 2.6 ADDRESS STATUS (ADS#) 

This signal indicates that a valid address (Ai -A23, 
BHE#, BLE#) and bus cycle definition (W/R#, 
D/C#, M/IO#) is being driven on the bus. In the 
Master Mode, it Is driven by the 82370 as an output. 
In the Slave Mode, this signal is monitored as 


an input by the 82370. By the current and past 
status of ADS# and the READY# input, the 82370 
is able to determine, during Slave Mode, If the next 
bus cycle Is a pipelined address cycle. ADS# Is as- 
serted during T 1 and T2P bus states (see Bus State 
Definition). 

NOTE: 

ADS# must be qualified with the rising edge of 
CLK2. 


2.2.7 TRANSFER ACKNOWLEDGE (READY#) 

This input indicates that the current bus cycle is 
complete. In the Master Mode, assertion of this sig- 
nal Indicates the end of a DMA bus cycle. In the 
Slave Mode, the 82370 monitors this input and 
ADS# to detect a pipelined address cycle. This sig- 
nal should be tied directly to the READY # Input of 
the 80376 host processor. 

2.2.8 NEXT ADDRESS REQUEST (NA#) 

This input is used to indicate to the 82370 in the 
Master Mode that the system is requesting address 
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pipelining. When driven LOW by either memory or 
peripheral devices during Master Mode, It indicates 
that the system is prepared to accept a new address 
and bus cycle definition signals from the 82370 be- 
fore the end of the current bus cycle. If this Input is 
active when sampled by the 82370, the next address 
is driven onto the bus, provided a bus request Is 
already pending internally. 

This input pin is monitored only in the Master Mode. 
In the Slave Mode, the 82370 uses the ADS# and 
READY# signals to determine address pipelining 
cycles, and NA# will be ignored. 

2.2.9 RESET (RESET, CPURST) 

RESET 

This synchronous input suspends any operation in 
progress and places the 82370 in a known initial 
state. Upon reset, the 82370 will be in the Slave 
Mode waiting to be Initialized by the 80376 host 
processor. The 82370 is reset by asserting RESET 
for 15 or more CLK2 periods. When RESET is as- 
serted, all other input pins are ignored, and all other 
bus pins are driven to an idle bus state as shown in 
Table 2-3. The 82370 will determine the phase of its 
internal clock following RESET going inactive. 

RESET is level-sensitive and must be synchronous 
to the CLK2 signal. The RESET setup and hold time 
requirements are shown in Figure 2-3. 


Table 2-3. Output Signals Following RESET 


Signal 

Level 

A 1 -A 23 , Do-D-j 5 , BHE#, BLE# 

Float 

D/C#, W/R#, M/IO#, ADS# 

Float 

READYO# 

‘V 

EOP# 

‘ 1 ’ (Weak Pull-UP) 

EDACK2-EDACK0 

‘ 100 ’ 

HOLD 

‘ 0 ’ 

INT 

UNDEFINED^ 

TOUT 1 /REF#, 
TOUT2#/IRQ3#, TOUT3# 

UNDEFINED* 

CPURST 

‘ 0 ’ 

CHPSEL# 

‘ 1 ’ 


♦NOTE: 

The Interrupt Controller and Programmable Interval Timer 
are initialized by software commands. 


CPURST 

This output signal Is used to reset the 80376 host 
processor. It will go active (HIGH) whenever one of 
the following events occurs; a) 82370’s RESET input 
is active; b) a software RESET command is Issued 
to the 82370; or c) when the 82370 detects a proc- 
essor Shutdown cycle and when this detection fea- 
ture is enabled (see CPU Reset and Shutdown De- 
tect). When activated, CPURST will be held active 
for 62 clocks. The timing of CPURST is such that the 
80376 processor will be In synchronization with the 
82370. This timing Is shown in Figure 2-4. 
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2.2.10 INTERRUPT OUT (INT) 

This output pin is used to signal the 80376 host 
processor that one or more interrupt requests (either 
internal or external) are pending. The processor is 
expected to respond with an Interrupt Acknowledge 
cycle. This signal should be connected directly to 
the Maskable Interrupt Request (INTR) input of the 
80376 host processor. 


2.3 8237G Bus Timing 

The 82370 internally divides the CLK2 signal by two 
to generate its internal clock. Figure 2-2 showed the 
relationship of CLK2 and the internal clock which 
consists of two phases: PHI1 and PHI2. Each CLK2 
period Is a phase of the internal clock. 

In the 82370, whether It is in the Master or Slave 
Mode, the shortest time unit of bus activity is a bus 
state. A bus state, which is also referred as a 
T-state’, Is defined as one 82370 PHI2 clock period 
(i.e. two CLK2 periods). Recall In Table 2-2 various 
types of bus cycles in the 82370 are defined by the 
M/IO#, D/C# and W/R# signals. Each of these 
bus cycles is composed of two or more bus states. 
The length of a bus cycle depends on when the 
READY# input Is asserted (I.6. driven LOW). 

2.3.1 ADDRESS PIPELINING 

The 82370 supports Address Pipelining as an option 
In both the Master and Slave Mode. This feature typ- 
ically allows a memory or peripheral device to oper- 
ate with one less wait state than would otherwise be 
required. This is possible because during a pipelined 
cycle, the address and bus cycle 'definition of the 
next cycle will be generated by the bus master while 
waiting for the end of the current cycle to be ac- 
knowledged. The pipelined bus is especially well 
suited for an interleaved memory environment. For 
16 MHz interleaved memory designs with 100 ns ac- 
cess time DRAMs, zero wait state memory accesses 
can be achieved when pipelined addressing is se- 
lected. 

In the Master Mode, the 82370 is capable of initiat- 
ing, on a cycle-by-cycle basis, either a pipelined or 
non-pipelined access depending upon the state of 
the NA# input. If a pipelined cycle Is requested (Indi- 
cated by NA# being driven LOW), the 82370 will 
drive the address and bus cycle definition of the next 
cycle as soon as there is an internal bus request 
pending. 

In the Slave Mode, the 82370 is constantly monitor- 
ing the ADS# and READY# signals on the proces- 
sor local bus to determine if the current bus cycle is 


a pipelined cycle. If a pipelined cycle is detected, the 
82370 will request one less wait state from the proc- 
essor if the Wait State Generator feature is selected. 
On the other hand, during an 82370 internal register 
access in a pipelined cycle, it will make use of the 
advance address and bus cycle information. In all 
cases, Address Pipelining will result In a savings of 
one wait state. 


2.3.2 MASTER MODE BUS TIMING 

When the 62370 is in the Master Mode, I t will bo in 
one of six bus states. Figure 2-5 shows the complete 
bus state diagram of the Master Mode, including 
pipelined address states. As seen in the figure, the 
82370 state diagram is very similar to that of the 
80376. The major difference Is that in the 82370, 
there is no Hold state. Also, in the 82370, the condi- 
tions for some state transitions depend upon wheth- 
er it is the end of a DMA process. 

NOTE: 

The term ‘end of a DMA process’ Is loosely defined 
here. It depends on the DMA modes of operation 
as well as the state of the EOP# and DREQ in- 
puts. This is expained In detail in section 3 — DMA 
Controller. 

The 82370 will enter the idle state, Tl, upon RESET 
and whenever the Internal address is not available at 
the end of a DMA cycle or at the end of a DMA 
process. When address pipelining is not used (NA# 
Is not asserted), a new bus cycle always begins with 
state T 1 . During T 1 , address and bus cycle definition 
signals will be driven on the bus. Tl is always fol- 
lowed by T2. 

if a Dus cycle is not ackriovvlsdged (with REA.DY#) 
during T2 and NA# is negated, T2 will be repeated. 
When the end of the bus cycle is acknowledged dur- 
ing T2, the following state will be T1 of the next bus 
cycle (if the Internal address latch is loaded and if 
this Is not the end of the DMA process). Otherwise, 
the Ti state will be entered. Therefore, if the memory 
or peripheral accessed is fast enough to respond 
within the first T2, the fastest non-pipellned cycle will 
take one Tl and one T2 state. 

Use of the address pipelining feature allows the 
82370 to enter three additional bus states: T1 P, T2P 
and T2I. Tl P is the first bus state of a pipelined bus 
cycle. T2P follows TIP (or T2) if NA# is asserted 
when sampled. The 82370 will drive the bus with the 
address and bus cycle definition signals of the next 
cycle during T2P. From the state diagram, it can be 
seen that after an idle state Tl, the first bus cycle 
must begin with T 1 , and is therefore a non-pipellned 
bus cycle. The next bus cycle can be pipelined if 
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NA# is asserted and the previous bus cycle ended 
in a T2P state. Once the 82370 is in a pipelined 
cycle and provided that NA# is asserted in subse- 
quent cycles, the 82370 will be switching between 
T1P and T2P states. If the end of the current bus 
cycle is not acknowledged by the READY# input, 
the 82370 will extend the cycle by adding T2P 
states. The fastest pipelined cycle will consist of one 
T1 P and one T2P state. 

The 82370 will enter state T2i when NA# is assert- 
ed and when one of the following two conditions 
occurs. The first condition is when the 82370 is in 
state T2. T2i will be entered if READY# is not as- 
serted and there is no next address available. This 
situation is similar to a wait state. The 82370 will stay 
in T2i for as long as this condition exists. The sec- 
ond condition which will cause the 82370 to enter 
T2i is when the 82370 is in state T 1 P. Before going 
to state T2P, the 82370 needs to wait in state T2i 
until the next address is available. Also, in both cas- 
es, if the DMA process is complete, the 82370 will 
enter the T2i state in order to finish the current DMA 
cycle. 

Figure 2-6 is a timing diagram showing non-pipelined 
bus accesses in the Master Mode. Figure 2-7 shows 
the timing of pipelined accesses in the Master Mode. 


2.3.3 SLAVE MODE BUS TIMING 

Figure 2-8 shows the Slave Mode bus timing in both 
pipelined and non-pipelined cycles when the 82370 
is being accessed. Recall that during Slave Mode, 
the 82370 will constantly monitor the ADS# and 
READY# signals to determine If the next cycle is 
pipelined. In Figure 2-8, the first cycle is non-pipe- 
lined and the second cycle is pipelined. In the pipe- 
lined cycle, the 82370 will start decoding the ad- 
dress and bus cycle signals one bus state earlier 
than in a non-pipelined cycle. 

The READY# Input signal is sampled by the 80376 
host processor to determine the completion of a bus 
cycle. This occurs during the end of every T2, T2i 
and T2P state. Normally, the output of the 82370 
Walt State Generator, READYO#, Is directly con- 
nected to the READY# Input of the 80376 host 
processor and the 82370. In such case, READYO# 
and READY# will be Identical (see Wait State Gen- 
erator). 



Figure 2-5. Master Mode State Diagram 
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3.0 DMA CONTROLLER 

The 82370 DMA Controller Is capable of transferring 
data between any combination of memory and/or 
I/O, with any combination of data path widths. The 
82370 DMA Controller can be programmed to ac- 
commodate 8- or 16-bit devices. With its 16-bit ex- 
ternal data path, It can transfer data in units of byte 
or a word. Bus bandwidth is optimized through the 
use of an internal temporary register which can dis- 
assemble or assemble data to or from either an 
aligned or non-aligned destination or source. Figure 
3-1 is a block diagram of the 82370 DMA Controller. 


The 82370 has eight channels of DMA. Each chan- 
nel operates independently of the others. Within the 
operation of the Individual channels, there are many 
different modes of data transfer available. Many of 
the operating modes can be intermixed to provide a 
very versatile DMA controller. 


3.1 Functional Description 

In describing the operation of the 82370’s DMA Con- 
troller, close attention to terminology is required. Be- 
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Figure 3-1. 82370 DMA Controller Block Diagram 


fore entering the discussion of the function of the 
82370 DMA Controller, the following explanations of 
some of the terminology used herein may be of ben- 
efit. First, a few terms for clarification: 

DMA PROCESS — ^A DMA process is the execution 
of a programmed DMA task from beginning to end. 
Each DMA process requires intitial programming by 
the host 60376 microprocessor. 

BUFFER — A contiguous block of data. 

BUFFER TRANSFER— -The action required by the 
DMA to transfer an entire buffer. 

DATA TRANSFER— The DMA action in which a 
group of bytes or words are moved between devices 
by the DM.A Controller. .A data transfer operation 
may involve movement of one or many bytes. 

BUS CYCLE— Access by the DMA to a single byte 
or word. 

Each DMA channel consists of three major compo- 
nents. These components are identified by the con- 
tents of programmable registers which define the 


memory or I/O devices being serviced by the DMA. 
They are the Target, the Requester, and the Byte 
Count. They will be defined generically here and in 
greater detail in the DMA register definition section. 

The Requester is the device which requires service 
by the 82370 DMA Controller, and makes the re- 
quest for service. All of the control signals which the 
DMA monitors or generates for specific channels 
are logically related to the Requester. Only the Re- 
quester is considered capable of Initiating or termi- 
nating a DMA process. 

The Target is the device with which the Requester 
wishes to communicate. As far as the DMA process 
is concerned, the Target is a slave which is incapa- 
ble of control over the process. 

The direction of data transfer can be either from Re- 
quester to Target or from Target to Requester; I.e. 
each can be either a source or a destination. 

The Requester and Target may each be either I/O 
or memory. Each has an address associated with It 
that can be incremented, decremented, or held con- 
stant. The addresses are stored in the Requester 
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Address Registers and Target Address Registers, 
respectively. These registers have two parts; one 
which contains the current address being used in the 
DMA process (Current Address Register), and one 
which holds the programmed base address (Base 
Address Register). The contents of the Base Regis- 
ters are never changed by the 82370 DMA Control- 
ler. The Current Registers are incremented or decre- 
mented according to the progress of the DMA pro- 
cess. 

The Byte Count is the component of the DMA pro- 
cess which dictates the amount of data which must 
be transferred. Current and Base Byte Count Regis- 
ters are provided. The Current Byte Count Register 
is decremented once for each byte transferred by 
the DMA process. When the register is decremented 
past zero, the Byte Count is considered ‘expired’ 
and the process is terminated or restarted, depend- 
ing on the mode of operation of the channel. The 
point at which the Byte Count expires is called ‘Ter- 
minal Count’ and several status signals are depen- 
dent on this event. 

Each channel of the 82370 DMA Controller also 
contains a 32-bit Temporary Register for use in as- 
sembling and disassembling non-aligned data. The 
operation of this register is transparent to the user, 
although the contents of It may affect the timing of 
some DMA handshake sequences. Since there Is 
data storage available for each channel, the DMA 
Controller can be interrupted without loss of data. 

To avoid unexpected results, care should be taken 
in programming the byte count correctly when as- 
sembing and disassembling non-aligned data. For 
example: 

Words to Bytes: 

Transferring two words to bytes, but setting the byte 
count to three, will result in three bytes transferred 
and the final byte flushed. 

Bytes to Words: 

Transferring six bytes to three words, but setting the 
byte count to five, will result In the sixth byte trans- 
ferred being undefined. 

The 82370 DMA Controller is a slave on the bus until 
a request for DMA service is received via either a 
software request command or a hardware request 
signal. The host processor may access any of the 
control/status or channel registers at any time the 
82370 is a bus slave. Figure 3-2 shows the flow of 
operations that the DMA Controller performs. 

At the time a DMA service request is received, the 
DMA Controller issues a bus hold request to the 
host processor. The 82370 becomes the bus master 
when the host relinquishes the bus by asserting a 


hold acknowledge signal. The channel to be serv- 
iced will be the one with the highest priority at the 
time the DMA Controller becomes the bus master. 
The DMA Controller will remain in control of the bus 
until the hold acknowledge signal is removed, or un- 
til the current DMA transfer is complete. 

While the 82370 DMA Controller has control of the 
bus, it will perform the required data transfer(s). The 
type of transfer, source and destination addresses, 
and amount of data to transfer are programmed in 
the control registers of the DMA channel which re- 
ceived the request for service. 

At completion of the DMA process, the 82370 will 
remove the bus hold request. At this time the 82370 
becomes a slave again, and the host returns to be- 
ing a master. If there are other DMA channels with 
requests pending, the controller will again assert the 
hold request signal and restart the bus arbitration 
and switching process. 
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Figure 3-2. Flow of DMA Controller Operation 


3.2 Interface Signals 

There are fourteen control signals dedicated to the 
DMA process. They include eight DMA Channel Re- 
quests (DREQn), three Encoded DMA Acknowledge 
signals (EDACKn), Processor Hold and Hold Ac- 


4-865 




82370 




Figure 3-3. Requester, Target and DMA Controller Interconnection 


knowledge (HOLD, HLDA), and End-of-Process 
(EOP#). The DREQn Inputs and EDACK (0-2) out- 
puts are handshake signals to the devices requiring 
DMA service. The HOLD output and HLDA input are 
handshake signals to the host processor. Figure 3-3 
shows these signals and how they interconnect be- 
tween the 82370 DMA Controller, and the Requester 
and Target devices. 

3.2.1 DREQn and EDACK (0-2) 

These signals are the handshake signals between 
the peripheral and the 82370. When the peripheral 
requires DMA service, it asserts the DREQn signal 
of the channel which is programmed to perform the 
service- The 82370 arbitrates the DREQn against 
other pending requests and begins the DMA pro- 
cess after finishing other higher priority processes. 

When the DMA service for the requested channel is 
In progress, the EDACK (0-2) signals represent the 
DMA channel which Is accessing the Requester. 
The 3-bit code on the EDACK (0-2) lines indicates 
the number of the channel presently being serviced. 
Table 3-2 shows the encoding of these signals. Note 
that Channel 4 does not have a corresponding hard- 
ware acknowledge. 

The DMA acknowledge (EDACK) signals Indicate 
the active channel only during DMA accesses to the 
Requester. During accesses to the Target, EDACK 
(0-2) has the idle code (100). EDACK (0-2) can 
thus be used to select a Requester device during a 
transfer. 

DREQn can be programmed as either an Asynchro- 
nous or Synchronous input. See section 3.4.1 for de- 
tails on synchronous versus asynchronous operation 
of these pins. 


Table 3-2. EDACK Encoding 
During a DMA Transfer 


EDACK2 

EDACK1 

EDACKO 

Active Channel 

0 

0 

0 

0 

0 

0 . 

1 

1 

0 

1 

0 

2 

0 

1 

1 

3 

1 

0 

0 

Target Access 

1 

0 

1 

5 

1 

1 

0 

6 

1 

1 

1 

7 


The EDACKn signals are always active. They either 
indicate ‘no acknowledge’ or they indicate a bus ac- 
cess to the requester. The acknowledge code is ei- 
ther 100, for an Idle DMA or during a DMA access to 
the Target, or ‘n’ during a Requester access, where 
n Is the binary value representing the channel. A 
simple 3-line to 8-llne decoder can be used to pro- 
vide discrete acknowledge signals for the peripher- 
als. 

3.2.2 HOLD AND HLDA 

The Hold Request (HOLD) and Hold Acknowledge 
(HLDA) signals are the handshake signals between 
the DMA Controller and the host processor. HOLD is 
an output from the 82370 and HLDA is an input. 
HOLD Is asserted by the DMA Controller when there 
Is a pending DMA request, thus requesting the proc- 
essor to give up control of the bus so the DMA pro- 
cess can take place. The 80376 responds by assert- 
ing HLDA when it is ready to relinquish control of the 
bus. 
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The 82370 will begin operations on the bus one 
clock cycle after the HLDA signal goes active. For 
this reason, other devices on the bus should be In 
the slave mode when HLDA is active. 

HOLD and HLDA should not be used to gate or se- 
lect peripherals requesting DMA service. This is be- 
cause of the use of DMA-like operations by the 
DRAM Refresh Controller. The Refresh Controller Is 
arbitrated with the DMA Controller for control of the 
bus, and refresh cycles have the highest priority. A 
refresh cycle will take place between DMA cycles 
without relinquishing bus control. See section 3.4.3 
for a more detailed discussion of the interaction be- 
tween the DMA Controller and the DRAM Refresh 
Controller. 


3.2.3 EOP# 

EOP# is a bi-directional signal used to Indicate the 
end of a DMA process. The 82370 activates this as 
an output during the T2 states of the last Requester 
bus cycle for which a channel is programmed to exe- 
cute. The Requester should respond by either with- 
drawing its DMA request, or interrupting the host 
processor to indicate that the channel needs to be 
programmed with a new buffer. As an input, this sig- 
nal is used to tell the DMA Controller that the periph- 
eral being serviced does not require any more data 
to be transferred. This indicates that the current 
buffer is to be terminated. 

EOP# can be programmed as either an Asynchro- 
nous or a Synchronous input. See section 3.4.1 for 
details on synchronous versus asynchronous opera- 
tion of this pin. 


3.3 Modes of Operation 

The 82370 DMA Controller has many independent 
operating functions. When designing peripheral in- 
terfaces for the 82370 DMA Controller, all of the 
functions or modes must be considered. All of the 
channels are Independent of each other (except In 
priority of operation) and can operate in any of the 
modes. Many of the operating modes, though inde- 
pendently programmable, affect the operation of 
other modes. Because of the large number of com- 
binations possible, each programmable mode is dis- 
cussed here with its affects on the operation of other 
modes. The entire list of possible combinations will 
not be presented. 

Table 3-1 shows the categories of DMA features 
available in the 82370. Each of the five major cate- 
gories is independent of the others. The sub-catego- 
ries are the available modes within the major func- 


Table 3-1. DMA Operating Modes 

I. TARGET/REQUESTER DEFINITION 

a. Data Transfer Direction 

b. Device Type 

II. BUFFER PROCESSES 

a. Single Buffer Process 

b. Buffer Auto-lnitialize Process 

c. Buffer Chaining Process 

ill. DATA TRANSFER/HANDSHAKE MODES 

a. Single Transfer Mode 

b. Demand Transfer Mode 

c. Block Transfer Mode 

d. Cascade Mode 

IV. PRIORITY ARBITRATION 

a. Fixed 

b. Rotating 

c. Programmable Fixed 

V. BUS OPERATION 

a. Fly-By (Single-Cycle)/Two-Cycle 

b. Data Path Width 

c. Read, Write, or Verify Cycles 


tion or mode category. The following sections ex- 
plain each mode or function and its relation to other 
features. 

3.3.1 TARGET/REQUESTER DEFINITION 

All DMA transfers involve three devices: the DMA 
Controller, the Requester, and the Target. Since the 
devices to be accessed by the DMA Controller vary 
widely, the operating characteristics of the DMA 
Controller must be tailored to the Requester and 
Target devices. 

The Requester can be defined as either the source 
or the destination of the data to be transferred. This 
is done by specifying a Write or a Read transfer, 
respectively. In a Read transfer, the Target is the 
data source and the Requester is the destination for 
the data. In a Write transfer, the Requester is the 
source and the Target is the destination. 

The Requester and Target addresses can each be 
independently programmed to be incremented, dec- 
remented, or held constant. As an example, the 
82370 is capable of reversing a string of data by 
having the Requester address increment and the 
Target address decrement in a memory-to-memory 
transfer. 
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3.3.2 BUFFER TRANSFER PROCESSES 

The 82370 DMA Controller allows three programma- 
ble Buffer Transfer Processes. These processes de- 
fine the logical way in which a buffer of data is ac- 
cessed by the DMA. 

The three Buffer Transfer Processes include the Sin- 
gle Buffer Process, the Buffer Auto-lnitialize Pro- 
cess, and the Buffer Chaining Process. These pro- 
cesses require special programming considerations. 
See the DMA Programming section for more detaiis 
on setting up the Buffer Transfer Processes. 

Single Buffer Process 

The Single Buffer Process allows the DMA channel 
to transfer only one buffer of data. When the buffer 
has been completely transferred (Current Byte 
Count decremented past zero or EOP# input ac- 
tive), the DMA process ends and the channel be- 
comes Idle. In order for that channel to be used 
again, it must be reprogrammed. 

The Single Buffer Process is usually used when the 
amount of data to be transferred is known exactly, 
and It is also known that there is not likely to be any 
data to follow before the operating system can re- 
program the channel. 

Buffer Auto-lnitiaiize Process 

The Buffer Auto-lnitialize Process allows multiple 
groups of data to be transferred to or from a single 
buffer. This process does not require reprogram- 
ming. The Current Registers are automatically repro- 
grammed from the Base Registers when the current 
process is terminated, either by an expired Byte 
Count or by an external EOP# signal. The data 
transferred will always be between the same Target 
and Requester. 

The auto-lnitlalizatlon/process-execution cycle Is re- 
peated until the channel Is either disabled or re-pro- 
grammed. 

Buffer Chaining Process 

The Buffer Chaining Process is useful for transfer- 
ring large quantities of data into non-contigupus 
buffer areas. In this process, a single channel is 
used to process data from several buffers, while 
having to program the channel only once. Each new 
buffer Is programmed in a pipelined operation that 
provides the new buffer Information while the old 
buffer is being processed. The chain Is created by 
loading new buffer Information while the 82370 DMA 
Controller Is processing the Current Buffer. When 
the Current Buffer expires, the 82370 DMA Control- 
ler automatically restarts the channel using the new 
buffer information. 


Loading the new buffer information Is done by an 
interrupt routine which is requested by the 82370. 
Interrupt Request 1 (IRQ1) Is tied internally to the 
82370 DMA Controller for this purpose. IRQ1 is gen- 
erated by the 82370 when the new buffer informa- 
tion is loaded into the channel’s Current Registers, 
leaving the Base Registers ‘empty’. The Interrupt 
service routine loads new buffer information into the 
Base Registers. The host processor is required to 
load the information for another buffer before the 
current Byte Count expires. The process repeats un- 
iii ine nosi proyrarns the channel back to single buff- 
er operation, or until the channel runs out of buffers. 

The channel runs out of buffers when the Current 
Buffer expires and the Base Registers have not yet 
been loaded with new buffer information. When this 
occurs, the channel must be reprogrammed. 

If an external EOP# is encountered while executing 
a Buffer Chaining Process, the current buffer is con- 
sidered expired and the new buffer information is 
loaded into the Current Registers. If the Base Regis- 
ters are ‘empty’, the chain is terminated. 

The channel uses the Base Target Address Register 
as an indicator of whether or not the Base Registers 
are full. When the most significant byte of the Base 
Target Register is loaded, the channel considers all 
of the Base Registers loaded, and removes the in- 
terrupt request. This requires that the other Base 
Registers (Base Requester Address, Base Byte 
Count) must be loaded before the Base Target Ad- 
dress Register. The reason for implementing the re- 
loading process this way is that, for most applica- 
tions, the Byte Count and the Requester will not 
change from one buffer to the next, and therefore do 
not need to be reprogrammed. The details of pro- 
gramming the channel for the Buffer Chaining Pro- 
cess can be found in the section on DMA program- 
ming. 

3.3.3 DATA TRANSFER MODES 

Three Data Transfer modes are available In the 
82370 DMA Controller. They are the Single Transfer, 
Block Transfer, and Demand Transfer Modes. 
These transfer modes can be used in conjunction 
with any one of three Buffer Transfer modes: Single 
Buffer, Auto-Initialized Buffer and Buffer Chaining. 
Any Data Transfer Mode can be used under any of 
the Buffer Transfer Modes. These modes are inde- 
pendently available for all DMA channels. 

Different devices being serviced by the DMA Con- 
troller require different handshaking sequences for 
data transfers to take place. Three handshaking 
modes are available on the 82370, giving the de- 
signer the opportunity to use the DMA Controller as 
efficiently as possible. The speed at which data can 
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be presented or read by a device can affect the way 
a DMA Controller uses the host’s bus, thereby af- 
fecting not only data throughput during the DMA pro- 
cess, but also affecting the host’s performance by 
limiting its access to the bus. 

Single Transfer Mode 

In the Single Transfer Mode, one data transfer to or 
from the Requester is performed by the DMA Con- 
troller at a time. The DREQn input is arbitrated and 
the HOLD/HLDA sequence is executed for each 
transfer. Transfers continue in this manner until the 
Byte Count expires, or until EOP# Is sampled active. 
If the DREQn input is held active continuously, the 
entire DREQ-HOLD-HLDA-DACK sequence is re- 
peated over and over until the programmed number 
of bytes has been transferred. Bus control is re- 
leased to the host between each transfer. Figure 3-4 
shows the logical flow of events which make up a 
buffer transfer using the Single Transfer Mode. Re- 
fer to section 3.4 for an explanation of the bus con- 
trol arbitration procedure. 


HOLD-HLDA-DACK handshake cycle. Figure 3-5 
shows the timing of the Single Transfer Mode cycle. 



END OF BUFFER 
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The Single Transfer Mode is used for devices which 
require complete handshake cycles with each data 
access. Data is transferred to or from the Requester 
only when the Requester is ready to perform the 
transfer. Each transfer requires the entire DREQ- 


Figure 3-4. Buffer Transfer 
in Single Transfer Mode 



NOTE: 

The Single Transfer Mode is more efficient (15% -20%) in the case where the source is the Target. Because of the 
internal pipeline of the 82370 DMA Controller, two idle states are added at the end of a transfer in the case where the 
source is the Requester. 


Figure 3-5. DMA Single Transfer Mode 
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Block Transfer Mode 

In the Block Transfer Mode, the DMA process is ini- 
tiated by a DMA request and continues unti the Byte 
Count expires, or until EOP# is activated by the Re- 
quester. The DREQn signal need only be held active 
until the first Requester access. Only a refresh cycle 
will Interrupt the block transfer process. 

Figure 3-6 illustrates the operation of the DMA dur- 
ing the Block Transfer Mode. Figure 3-7 shows the 
timing of the handshake signals during Block Mode 
Transfers. 



Figure 3-6. Buffer Transfer 
in Block Transfer Mode 
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Demand Transfer Mode 

The Demand Transfer Mode provides the most flex- 
ible handshaking procedures during the DMA pro- 
cess. A Demand Transfer is Initiated by a DMA re- 
quest. The process continues until the Byte Count 
expires, or an external EOP# is encountered. If the 
device being serviced (Requester) desires, it can In- 
terrupt the DMA process by de-actIvatIng the 
DREQn line. Action Is taken on the condition of 
DREQn during Requester accesses only. The ac- 
cess during which DREQn is sampled inactive is the 
last Requester access which will be performed dur- 
ing the current transfer. Figure 3-8 shows the flow of 
events during the transfer of a buffer in the Demand 
Mode. 

When the DREQn line goes inactive, the DMA Con- 
troller will complete the current transfer, including 
any necessary accesses to the Target, and relin- 
quish control of the bus to the host. The current pro- 
cess information is saved (byte count, Requester 
and Target addresses, and Temporary Register). 



Figure 3-8. Buffer Transfer 
in Demand Transfer Mode 


The Requester can restart the transfer process by 
reasserting DREQn. The 82370 will arbitrate the re- 
quest with other pending requests and begin the 
process where It left off. Figure 3-9 shows the timing 
of handshake signals during Demand Transfer Mode 
operation. 



Figure 3-9. Demand Mode Transfers 
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Using the Demand Transfer Mode allows peripherals 
to access memory In small, irregular bursts without 
wasting bus control time. The 82370 is designed to 
give the best possible bus control latency in the De- 
mand Transfer Mode. Bus control latency is defined 
here as the time form the last active bus cycle of the 
previous bus master to the first active bus cycle of 
the new bus master. The 82370 DMA Controller will 
perform its first bus access cycle two bus states af- 
ter HLDA goes active. In the typical configuration, 
bus control is returned to the host one bus state 
after the DREQn goes inactive. 

There are two cases where there may be more than 
one bus state of bus control latency at the end of a 
transfer. The first is at the end of an Auto-lnitialize 
process, and the second is at the end of a process 
where the source is the Requester and Two-Cycle 
transfers are used. 

When a Buffer Auto-lnitialize Porcess Is complete, 
the 82370 requires seven bus states to reload the 
Current Registers from the Base Registers of the 
Auto-Initialized channel. The reloading Is done while 
the 82370 is still the bus master so that it is prepared 
to service the channel immediately after relinquish- 
ing the bus, if necessary. 


In the case where the Requester is the source, and 
Two-Cycle transfers are being used, there are two 
ektra idle states at the end of the transfer process. 
This occurs due to the housekeeping In the DMA’s 
internal pipeline. These two idle states are present 
only after the very last Requester access, before the 
DMA Controller de-activates the HOLD signal. 

3.3.4 CHANNEL PRIORITY ARBITRATION 

DMA channel priority can be programmed into one 
of two arbitration methods: Fixed or Rotating. The 
four lower DMA channels and the four upper DMA 
channels operate as if they were two separate DMA 
controllers operating in cascade. The lower group of 
four channels (0-3) is always prioritized between 
channels 7 and 4 of the upper group of channels (4- 
7). Figure 3-10 shows a pictorial representation of 
the priority grouping. 

The priority can thus be set up as rotating for one 
group of channels and fixed for the other, or any 
other combination. While in Fixed Priority, the pro- 
grammer can also specify which channel has the 
lowest priority. 



Figure 3-10. DMA Priority Grouping 
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The 82370 DMA Controller defaults to Fixed Priority. 
Channel 0 has the highest priority, then 1, 2, 3, 4, 5, 
6, 7. Channel 7 has the lowest priority. Any time the 
DMA Controller arbitrates DMA requests, the re- 
questing channel with the highest priority will be 
serviced next. 

Fixed Priority can be entered Into at any time by a 
software command. The priority levels in effect after 
the mode switch are determined by the current set- 
ting of the Programmable Priority. 

Programmable Priority is available for fixing the prior- 
ity of the DMA channels within a group to levels oth- 
er than the default. Through a software command, 
the channel to have the lowest priority in a group 
can be specified. Each of the two groups of four 
channels can have the priority fixed in this way. The 
other channels in the group will follow the natural 
Fixed Priority sequence. This mode affects only the 
priority levels while operating with Fixed Priority. 

For example, if channel 2 is programmed to have the 
lowest priority In its group, channel 3 has the highest 
priority. In descending order, the other channels 
would have the following priority: (3, 0,1, 2), 4,5,6, 7 
(channel 2 lowest, channel 3 highest). If the upper 


group were programmed to have channel 5 as the 
lowest priority channel, the priority would be (again, 
highest to lowest): 6,7, (3,0,1, 2), 4,5. Figure 3-11 
shows this example pictorlally. The lower group is 
always prioritized as a fifth channel of the upper 
group (between channels 4 and 7). 

The DMA Controller will only accept Programmable 
Priority commands while the addressed group is op- 
erating in Fixed Priority. Switching from Fixed to Ro- 
tating Priority preserves the current priority levels. 
Switching from Rotating to Fixed Priority returns the 
priority levels to those which were last programmed 
by use of Programmable Priority. 

Rotating Priority allows the devices using DMA to 
share the system bus more evenly. An individual 
channel does not retain highest priority after being 
serviced, priority is passed to the next highest priori- 
ty channel in the group. The channel which was 
most recently serviced inherits the lowest priority. 
This rotation occurs each time a channel is serviced. 
Figure 3-12 shows the sequence of events as priori- 
ty is passed between channels. Note that the lower 
group rotates within the upper group, and that serv- 
icing a channel within the lower group causes rota- 
tion within the group as well as rotation of the upper 
group. 


CHANNEL 6 


CHANNEL 7 

PHANTOM 


CHANNEL 4 

CHANNEL 5 


CHANNEL 3 


CHANNEL 2 


CHANNEL 1 


CHANNEL 0 


LOW PRIORITY 


HIGH PRIORITY 
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Figure 3-11. Example of Programmed Priority 
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0|l|2|3| |4|5|6|7|— default (highest to low- 
est) 

DREQ2 and DREQ6 — process channel 2 



I 

I 

0 

0 

0 

0 

0 


— channel 2 drops to low- 
est priority within group. 
Lower group drops to 
lowest priority within up- 
per group. (Double Rota- 
tion) 

DREQ6 (still) and DREQ7— process channel 6 


0 


0 

0 

0 

0 

0 

0 

0 


— channel 6 drops to low- 
est priority within group 

DREQ7 (still) and DREQO — process channel 7 


0 


0 

0 

0 


0 

0 


— channel 7 drops to low- 
est priority within group 

DREQO (still) and DREQ1 — process channel 0 


0 

5 

0 

0 

0 

2 

0 

0 


— channel 0 drops to low- 
est priority within group. 
(Double Rotation) 

DREQ1 (still) — process channel 1 


0 

0 

6 

0 

0 

3 


i 


■ channel 1 drops to low- 
est priority within group 


Figure 3-12. Rotating Channel Priority. 
Lower and upper groups are programmed 
for the Rotating Priority Mode. 


3.3.5 COMBINING PRIORITY MODES 

Since the DMA Controller operates as two four- 
channel controllers In cascade, the overall priority 
scheme of all eight channels can take on a variety of 
forms. There are four possible combinations of prior- 
ity modes between the two groups of channels: 
Fixed Priority only (default), Fixed Priority upper 
group/ Rotating Priority lower group. Rotating Priority 
upper group/FIxed Priority lower group, and Rotating 
Priority only. Figure 3-13 illustrates the operation of 
the two combined priority methods. 


Case 1 — 

0-3 Fixed Priority, 4-7 Rotating Priority 

Default priority 

High 

0 12 3 

Low 

4 5 6 7 

After servicing channel 2 

4 5 6 7 

0 12 3 

After servicing channel 6 [ 

7 0 12 

3 4 5 6 

After servicing channel 1 

4 5 6 7 

[o|l 2 3 

Case 2- 
0-3 Rotating Priority, 4 

-7 Fixed Priority 

Default priority 

High 

0 12 3 

Low 

4 5 6 7 

After servicing channel 2 

3 0 12 

4 5 6 7 

After servicing channel 6 

3 0 12 

4 5 6 7 

After servicing channel 1 

2 3 0 1 

4 5 6 7 





Figure 3-13. Combining Priority Modes 


3.3.6 BUS OPERATION 

Data may be transferred by the DMA Controller us- 
ing two different bus cycle operations: Fly-By (one- 
cycle) and Two-Cycle. These bus handshake meth- 
qHo qi '9 selectable independently for each channel 
through a command register. Device data path 
wioins are independently programmable for both 
Target and Requester. Also selectable through soft- 
ware Is the direction of data transfer. All of these 
parameters affect the operation of the 82370 on a 
bus-cycle by bus-cycle basis. 


3.3.6.1 Fly-By Transfers 

The Fly-By Transfer Mode Is the fastest and most 
efficient way to use the 82370 DMA Controller to 
transfer data. In this method of transfer, the data is 
written to the destination device at the same time it 
is read from the source. Only one bus cycle is used 
to accomplish the transfer. 
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In the Fly-By Mode, the DMA acknowledge signal is 
used to select the Requester. The DMA Controller 
simultaneously places the address of the Target on 
the address bus. The state of M/IO# and W/R# 
during the Fly-By transfer cycle indicate the type of 
Target and whether the Target is being written to or 
read from. The Target’s Bus Size is used as an in- 
crementer for the Byte Count. The Requester ad- 
dress registers are ignored during Fly-By transfers. 

Note that memory-to-memory transfers cannot be 
done using the Fly-By Mode. Only one memory of 
I/O address is generated by the DMA Controller at a 
time during Fly-By transfers. Only one of the devices 
being accessed can be selected by an address. 
Also, the Fly-By method of data transfer limits the 
hardware to accesses of devices with the same data 
bus width. The Temporary Registers are not affect- 
ed in the Fly-By Mode. 

Fly-By transfers also require that the data paths of 
the Target and Requester be directly connected. 
This requires that successive Fly-By access be to 
word boundaries, or that the Requester be capable 
of switching its connections to the data bus. 

3.3.6.2. Two-Cycle Transfers 

Two-Cycle transfers can also be performed by the 
82370 DMA Controller. These transfers require at 
least two bus cycles to execute. The data being 
transferred is read into the DMA Controller’s Tempo- 
rary Register during the first bus cycle(s). The sec- 
ond bus cycle is used to write the data from the 
Temporary Register to the destination. 

If the addresses of the data being transferred are 
not word aligned, the 82370 will recognize the situa- 
tion and read and write the data in groups of bytes, 
placing them always at the proper destination. This 
process of collecting the desired bytes and putting 
them together Is called “byte assembly’’. The re- 
verse process (reading from aligned locations and 
writing to non-aligned locations) is called “byte dis- 
assembly’’. 

The assembly/disassembly process takes place 
transparent to the software, but can only be done 
while using the Two-Cycle transfer method. The 
82370 will always perform the assembly/disassem- 
bly process as necessary for the current data trans- 
fer. Any data path widths for either the Requester or 
Target can be used in the Two-Cycle Mode. This is 
very convenient for Interfacing existing 8- and 1 6-bit 
peripherals to the 80376’s 16-bit bus. 

The 82370 DMA Controller always reads and write 
data within the word boundaries; i.e. if a word to be 


read Is crossing a word boundary, the DMA Control- 
ler will perform two read operations, each reading 
one byte, to read the 16-bit word into the Temporary 
Register. Also, the 82370 DMA Controller always at- 
tempts to fill the Temporary Register from the 
source before writing any data to the destination. If 
the process Is terminated before the Temporary 
Register Is filled (TC or EOF#), the 82370 will write 
the partial data to the destination. If a process is 
temporarily suspended (such as when DREQn is de- 
activated during a demand transfer), the contents of 
a partially filled Temporary Register will be stored 
within the 82370 until the process Is restarted. 

For example, if the source is specified as an 8-bit 
device and the destination as a 32-bit device, there 
will be four reads as necessary from the 8-bit source 
to fill the Temporary Register. Then the 82370 will 
write the 32-bit contents to the destination In two 
cycles of 16-bit each. This cycle will repeat until the 
process is terminated or suspended. 

With Two-Cycle transfers, the devices that the 
82370 accesses can reside at any address within 
I/O or memory space. The device must be able to 
decode the byte-enables (BLE#, BHE#). Also, if the 
device cannot accept data In byte quantities, the 
programmer must take care not to allow the DMA 
Controller to access the device on any address oth- 
er than the device boundary. 

3.3.6.3 Data Path Width and Data Transfer Rate 
Considerations 

The number of bus cycles used to transfer a single 
“word” of data is affected by whether the Two-Cycle 
or the Fly-By (Single-Cycle) transfer method Is used. 

The number of bus cycles used to transfer data di- 
rectly affects the data transfer rate. Inefficient use of 
bus cycles will decrease the effective data transfer 
rate that can be obtained. Generally, the data trans- 
fer rate is halved by using Two-Cycle transfers In- 
stead of Fly-By transfers. 

The choice of data path widths of both Target and 
Requester affects the data transfer rate also. During 
each bus cycle, the largest pieces of data possible 
should be transferred. 

The data path width of the devices to be accessed 
must be programmed into the DMA controller. The 
82370 defaults after reset to 8-bit-to-8-bit data trans- 
fers, but the Target and Requester can have differ- 
ent data path widths, independent of each other and 
independent of the other channels. Since this is a 
software programmable function, more discussion of 
the uses of this feature are found in the section on 
programming. 
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3.3.6.4 Read, Write and Verify Cycies 

Three different bus cycles types may be used in a 
data transfer. They are the Read, Write and Verify 
cycles. These cycle types dictate the way in which 
the 82370 operates on the data to be transferred. 

A Read Cycle transfers data from the Target to the 
Requester. A Write Cycle transfers data from the 
Requester to the target. In a Fly-By transfer, the ad- 
dress and bus status signals indicate the access 
(read of write) to the Target; the access to the Re- 
quester is assumed to be the opposite. 

The Verify Cycle is used to perform a data read only. 
No write access is indicated or assumed in a Verify 
Cycle. The Verify Cycle is useful for validating block 
fill operations. An external comparator must be pro- 
vided to do any comparisons on the data read. 


3.4 Bus Arbitration and Handshaking 

Figure 3-14 shows the flow of events in the DMA 
request arbitration process. The arbitration se- 
quence starts when the Requester asserts a DREQn 
(or DMA service Is requested by software). Figure 
3-15 shows the timing of the sequence of events 
following a DMA request. This sequence is executed 
for each channel that is activated. The DREQn sig- 
nal can be replaced by a software DMA channel re- 
quest with no change In the sequence. 

After the Requester asserts the service request, the 
82370 will request control of the bus via the HOLD 
signal. The 82370 will always assert the HOLD sig- 
nal one bus state after the service request is assert- 
ed. The 80376 responds by asser ting the HLDA sig- 
nal, thus releasing control of the bus to the 82370 
DMA Controller. 

Priority of pending DMA service requests is arbitrat- 
ed during the first state after HLDA Is asserted by 
the 80376. The next state will be the beginning of 
the first transfer access of the highest priority pro- 
cess. 

When the 82370 DMA Controller is finished with its 
current bus activity, it returns control of the bus to 
the host processor. This is done by driving the 
HOLD signal Inactive. The 82370 does not drive any 
address or data bus signals after HOLD goes low. It 
enters the Slave Mode until another DMA process is 
requested. The processor acknowledges that it has 


regained control of the bus by forcing the HLDA sig- 
nal inactive. Note that the 82370’s DMA Controller 
will not re-request control of the bus until the entire 
HOLD/HLDA handshake sequence is complete. 



290164-27 


Figure 3-14. Bus Arbitration and DMA Sequence 

The 82370 DMA Controller will terminate a current 
DMA process for one of three reasons: expired byte 
count, end-of-process command (EOF# activated) 
from a peripheral, or deactivated DMA request sig- 
nal. In each case, the controller will de-assert HOLD 
immediately after completing the data transfer in 
progress. These three methods of process termina- 
tion are illustrated in Figures 3-16, 3-19 and 3-18, 
respectively. 

An expired byte count indicates that the current pro- 
cess is complete as programmed and the channel 
has no further transfers to process. The channel 
must be restarted according to the currently pro- 
grammed Buffer Transfer Mode, or reprogrammed 
completely, Including a new Buffer Transfer Mode. 
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NOTE: 290164-28 

Channel priority resolution takes place during the bus state before HOLDA is asserted, allowing the DMA Controller to 
respond to HLDA without extra idle bus states. 


Figure 3-15. Beginning of a DMA process 


If the peripheral activates the EOF# signal, it is indi- 
cating that it will not accept or deliver any more data 
for the current buffer. The 82370 DMA Controller 
considers this as a completion of the channel’s cur- 
rent process and interprets the condition the same 
way as if the byte count expired. 

The action taken by the 82370 DMA Controller in 
response to a de-activated DREQn signal depends 
on the Data Transfer Mode of the channel. In the 
Demand Mode, data transfers will take place as long 
as the DREQn is active and the byte count has not 
expired. In the Block Mode, the controller will com- 
plete the entire block transfer without relinquishing 
the bus, even if DREQn goes inactive before the 


transfer is complete. In the Single Mode, the control- 
ler will execute single data transfers, relinquishing 
the bus between each transfer, as long as DREQn is 
active. 

Normal termination of a DMA process due to expira- 
tion of the byte count (Terminal Count — ^TC) is 
shown if Figure 3-16. The condition of DREQn is 
ignored until after the process is terminated. If the 
channel is programmed to auto-lnitialize, HOLD will 
be held active for an additional seven clock cycles 
while the auto-initialization takes place. 

Table 3-3 shows the DMA channel activity due to 
EOF# or Byte Count expiring (Terminal Count). 


Table 3-3. DMA Channel Activity Due to Terminal Count or External EOF# 


Buffer Process 

Single or 
Chaining-Base 
Empty 

Auto- 

lnitialize 

Chaining-Base 

Loaded 

EVENT 

Terminal Count 

True 

X 

True 

X 

True 

X 

EOF# 

X 

0 

X 

0 

X 

0 

RESULTS 

Current Registers 

Channel Mask 

Set 

Set 

Load 

Load 

Load 

Load 

EOP# Output 

0 

X 

0 

X 

1 

X 

Terminal Count Status 

Set 

Set 

Set 

Set 



Software Request 

CLR 

CLR 

CLR 

CLR 
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Figure 3-16. Termination of a DMA Process Due to Expiration of Current Byte Count 



The 82370 always relinquishes coniroi of the bus 
between channel services. This allows the hardware 
designer the flexibility to externally arbitrate bus hold 
requests, If desired. If another DMA request is pend- 
ing when a higher priority channel service is com- 
pleted, the 82370 will relinquish the bus until the 
hold acknowledge is inactive. One bus state after 
the HLDA signal goes inactive, the 82370 will assert 
HOLD again. This is illustrated in Figure 3-17. 

3.4.1 SYNCHRONOUS AND ASYNCHRONOUS 
SAMPLING OF DREQn AND EOP# 

As an indicator that a DMA service is to be started, 
DREQn Is always sampled asynchronous. It Is sam- 


pled at the beginning of a bus state and acted upon 
at the end of the state. Figure 3-15 illustrates the 
start of a DMA process due to a DREQn input. 

The DREQn and EOP# Inputs can be programmed 
to be sampled either synchronously or asynchro- 
nously to signal the end of a transfer. 

The synchronous mode affords the Requester one 
bus state of extra time to react to an access. This 
means the Requester can terminate a process on 
the current access, without losing any data. The 
asynchronous mode requires that the input signal be 
presented prior to the beginning of the last state of 
the Requester access. 
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The timing relationships of the DREQn and EOP# 
signals to the termination of a DMA transfer are 
shown in Figures 3-18 and 3-19. Figure 3-18 shows 
the termination of a DMA transfer due to inactive 
DREQn. Figure 3-19 shows the termination of a 
DMA process due to an active EOP# input. 

In the Synchronous Mode, DREQn and EOP# are 
sampled at the end of the last state of every Re- 
quester data transfer cycle. If EOP# is active or 
DREQn is inactive at this time, the 82370 recognizes 
this access to the Requester as the last transfer. At 
this point, the 82370 completes the transfer in prog- 
ress, if necessary, and returns bus control to the 
host. 


In the asynchronous mode, the inputs are sampled 
at the beginning of every state of a Requester ac- 
cess. The 82370 waits until the end of the state to 
act on the input. 

DREQn and EOP# are sampled at the latest possi- 
ble time when the 82370 can determine if another 
transfer is required. In the Synchronous Mode, 
DREQn and EOP# are sampled on the trailing edge 
of the last bus state before another data access cy- 
cle begins. The Asynchronous Mode requires that 
the signals be valid one clock cycle earlier. 



Figure 3-18. Termination of a DMA Process due to De-Asserting DREQn 



Figure 3-19. Termination of a DMA Process due to an External EOP# 
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While in the Pipeline Mode, if the NA# signal is sam- 
pled active during a transfer, the end of the state 
where NA# was sampled active is when the 82370 
decides whether to commit to another transfer. The 
device must de-assert DREQn or assert EOP# be- 
fore NA# is asserted, otherwise the 82370 will com- 
mit to another, possibly undesired, transfer. 

Synchronous DREQn and EOP# sampling allows 
the peripheral to prevent the next transfer from oc- 
curring by de-activating DREQn or asserting EOP# 
during the current Requester access, before the 
82370 DMA Controller commits itself to another 
transfer. The DMA Controller will not perform the 
next transfer if it has not already begun the bus cy- 
cle. Asynchronous sampling allows less stringent 
timing requirements than the Synchronous Mode, 
but requires that the DREQn signal be valid at the 
beginning of the next to last bus state of the current 
Requester access. 

Using the Asynchronous Mode with zero wait states 
can be very difficult. Since the addresses and con- 
trol signals are driven by the 82370 near half-way 
through the first bus state of a transfer, and the 
Asynchronous Mode requires that DREQn be inac- 
tive before the end of the state, the peripheral being 
accessed Is required to present DREQn only a few 
nanoseconds after the control information is avail- 
able. This means that the peripheral’s control logic 
must be extremely fast (practically non-causal). An 
alternative is the Synchronous Mode. 


3.4.2 ARBITRATION OF CASCADED MASTER 
REQUESTS 

The Cascade Mode allows another DMA-type de- 
vice to share the bus by arbitrating its bus accesses 
with the 82370’s. Seven of the eight DMA channels 
(0-3 and 5-7) can be connected to a cascaded de- 
vice. The cascaded device requests bus control 
through the DREQn line of the channel which Is pro- 
grammed to operate in Cascade Mode. Bus hold ac- 
knowledge is signalled to the cascaded device 
through the EDACK lines. When the EDACK lines 
are active with the code for the requested cascade 
channel, the bus is available to the cascaded master 
device. 

A cascade cycle begins the same way a regular 
DMA cycle begins. The requesting bus master as- 
serts the DREQn line on the 82370. This bus control 
request is arbitrated as any other DMA request 
would be. If any channel receives a DMA request, 
the 82370 requests control of the bus. When the 
host acknowledges that it has released bus control, 
the 82370 acknowledges to the requesting master 
that it may access the bus. The 82370 enter? an Idle 
state until the new master relinquishes control. 

A cascade cycle will be terminated by one of two 
events; DREQn going inactive, or HLDA going inac- 
tive. The normal way to terminate the cascade cycle 



Figure 3-20. Cascaded Bus Master 
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is for the cascaded master to drop the DREQn sig- 
nal. Figure 3-21 shows the two cascade cycle termi- 
nation sequences. 

The Refresh Controller may interrupt the cascaded 
master to perform a refresh cycle. If this occurs, the 
82370 DMA Controller will de-assert the EDACK sig- 
nal (hold acknowledge to cascaded master) and wait 
for the cascaded master to remove its hold request. 
When the 82370 regains bus control, It will perform 
the refresh cycle In its normal fashion. After the re- 
fresh cycle has been completed, and if the cascad- 
ed device has re-asserted its request, the 82370 will 
return control to the cascaded master which was in- 
terrupted. 

The 82370 assumes that it is the only device moni- 
toring the HLDA signal. If the system designer 
wishes to place other devices on the bus as bus 
masters, the HLDA from the processor must be in- 
tercepted before presenting it to the 82370. Using 
the Cascade capabililty of the 82370 DMA Controller 
offers a much better solution. 


3.4.3 ARBITRATION OF REFRESH REQUESTS 

The arbitration of refresh requests by the DRAM Re- 
fresh Controller Is slightly different from normal DMA 


channel request arbitration. The 82370 DRAM Re- 
fresh Controller always has the highest priority of 
any DMA process. It also can interrupt a process in 
progress. Two types of processes in progress may 
be encountered: normal DMA, and bus master cas- 
cade. 

In the event of a refresh request during a normal 
DMA process, the DMA Controller will complete the 
data transfer in progress and then execute the re- 
fresh cycle before continuing with the current DMA 
process. The priority of the Interrupted process is 
not lost. If the data transfer cycle interrupted by the 
Refresh Controller is the last of a DMA process, the 
refresh cycle will always be executed before control 
of the bus is transferred back to the host. 

When the Refresh Controller request occurs during 
a cascade cycle, the Refresh Controller must be as- 
sured that the cascaded master device has relin- 
quished control of the bus before it can execute the 
refresh cycle. To do this, the DMA Controller drops 
the EDACK signal to the cascaded master and waits 
for the corresponding DREQn input to go Inactive. 
By dropping the DREQn signal, the cascaded mas- 
ter relinquishes the bus. The Refresh Controller then 
performs the refresh cycle. Control of the bus is re- 
turned to the cascaded master if DREQn returns to 
an active state before the end of the refresh cycle, 
otherwise control Is passed to the processor and the 
cascaded master loses its priority. 
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3.5 DMA Controller Register Overview 

The 82370 DMA Controller contains 44 registers 
which are accessable to the host processor. Twen- 
ty-four of these registers contain the device ad- 
dresses and data counts for the individual DMA 
channels (three per channel). The remaining regis- 
ters are control and status registers for initiating and 
monitoring the operation of the 82370 DMA Control- 
ler. Table 3-4 lists the DMA Controller’s registers 
and their accessability. 


Table 3-4. DMA Controller Registers 


Register Name 

Access 

Control/Status Registers^one each per group 

Command Register 1 

write only 

Command Register II 

write only 

Mode Register 1 

write only 

Mode Register 1 1 

write only 

Software Request Register 

read /write 

Mask Set-Reset Register 

write only 

Mask Read-Write Register 

read/write 

Status Register 

read only 

Bus Size Register 

write only 

Chaining Register 

read /write 

Channel Registers— one each per channel 

Base Target Address 

write only 

Current Target Address 

read only 

Base Requester Address 

write only 

Current Requester Address 

read only 

Base Byte Count 

write only 

Current Byte Count 

read only 


3.5.1 CONTROL/STATUS REGISTERS 

The following registers are available to the host 
processor for programming the 82370 DMA Control- 
ler into its various modes and for checking the oper- 
ating status of the DMA processes. Each set of four 
DMA channels has one of each of these registers 
associated with it. 

Command Register I 

Enables or disables the DMA channel as a group. 
Sets the Priority Mode (Fixed or Rotating) of the 
group. This write-only register is cleared by a hard- 
ware reset, defaulting to all channels enabled and 
Fixed Priority Mode. 

Command Register II 

Sets the sampling mode, of the DREQn and EOP# 
Inputs. Also sets the lowest priority channel for the 
group In the Fixed Priority Mode. The functions pro- 
grammed through Command Register 11 default after 


a hardware reset to: a^synchronous DREQn and 
EOP#, and channels 3 and 7 lowest priority. 

Mode Registers I 

Mode Register I Is Identical in function to the Mode 
register of the 8237A. It programs the following func- 
tions for an Individually selected channel: 

Type of Transfer — read, write, verify 
Auto-lnitialize— enable or disable 
Target Address Count — increment or decrement 
Data Transfer Mode— demand, single, block, 
cascade 

Mode Register I functions default to the following 
after reset: verify transfer, Auto-lnitialize disabled. In- 
crement Target address. Demand Mode. 

Mode Register 11 

Programs the following functions for an individually 
selected channel: 

Target Address Hold — enable or disable 
Requester Address Count — increment or 
decrement 

Requester Address Hold — enable or disable 
Target Device Type — I/O or Memory 
Requester Device Type — I/O or Memory 
Transfer Cycles — ^Two-Cycle or Fly-By 

Mode Register 11 functions are defined as follows 
after a hardware reset: Disable Target Address Hold, 
Increment Requester Address, Target (and Re- 
quester) in memory, Fly-By Transfer Cycles. Note: 
Requester Device Type Ignored in Fly-By Transfers. 

Software Request Register 

The DMA Controller can respond to service requests 
which are initiated by software. Each channel has an 
internal request status bit associated with it. The 
host processor can write to this register to set or 
reset the request bit of a selected channel. 

The status of a group’s software DMA service re- 
quests can be read from this register as well. Each 
status bit is cleared upon Terminal Count or external 
EOP#. 

The software DMA requests are non-maskable and 
subject to priority arbitration with all other software 
and hardware requests. The entire register is 
cleared by a hardware reset. 

Mask Registers 

Each channel has associated with It a mask bit 
which can be set/reset to disable/enable that chan- 
nel. Two methods are available for setting and clear- 
ing the mask bits. The Mask Set/ Reset Register is a 
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write-only register which allows the host to select an 
individual channel and either set or reset the mask 
bit for that channel only. The Mask Read/Write Reg- 
ister is available for reading the mask bit status and 
for writing mask bits in groups of four. 

The mask bits of a group may be cleared in one step 
by executing the Clear Mask Command. See the 
DMA Programming section for details. A hardware 
reset sets all of the channel mask bits, disabling all 
channels. 

Status Register 

The Status register is a read-only register which con- 
tains the Terminal Count (TC) and Service Request 
status for a group. Four bits indicate the TC status 
and four bits indicate the hardware request status 
for the four channels in the group. The TC bits are 
set when the Byte Count expires, or when and exter- 
nal EOP# Is asserted. These bits are cleared by 
reading from the Status Register. The Service Re- 
quest bit for a channel indicates when there is a 
hardware DMA request (DREQn) asserted for that 
channel. When the request has been removed, the 
bit is cleared. 

Bus Size Register 

This write-only register is used to define the bus size 
of the Target and Requester of a selected channel. 
The bus sizes programmed will be used to dictate 
the sizes of the data paths accessed when the DMA 
channel is active. The values programmed into this 
register affect the operation of the Temporary Regis- 
ter. When 32-bit bus width Is programmed, the 
82370 DMA Controller will access the device twice 
through its 16-bit external Data Bus to perform a 
32-bit data transfer. Any byte-assembly required to 
make the transfers using the specified data path 
widths will be done in the Temporary Register. The 
Bus Size register of the Target Is used as an incre- 
ment/decrement value for the Byte Counter and 
Target Address when in the Fly-By Mode. Upon re- 
set, all channels default to 8-bit Targets and 8-bit 
Requesters. 

Chaining Register 

As a command or write register, the Chaining regis- 
ter is used to enable or disable the Chaining Mode 
for a selected channel. Chaining can either be dis- 
abled or enabled for an individual channel, indepen- 
dently of the Chaining Mode status of other chan- 
nels. After a hardware reset, all channels default to 
Chaining disabled. 

When read by the host, the Chaining Register pro- 
vides the status of the Chaining Interrupt of each of 
the channels. These Interrupt status bits are cleared 
when the new buffer information has been loaded. 


3.5.2 CHANNEL REGISTERS 

Each channel has three individually programmable 
registers necessary for the DMA process; they are 
the Base Byte Count, Base Target Address, and 
Base Requester Address registers. The 24-bit Base 
Byte Count register contains the number of bytes to 
be transferred by the channel. The 24-bit Base Tar- 
get Address Register contains the beginning ad- 
dress (memory or I/O) of the Target device. The 
24-bit Base Requester Address register contains the 
base address (memory or I/O) of the device which is 
to request DMA service. 

Three more registers for each DMA channel exist 
within the DMA Controller which are directly related 
to the registers mentioned above. These registers 
contain the current status of the DMA process. They 
are the Current Byte Count register, the Current Tar- 
get Address, and the Current Requester Address. It 
Is these registers which are manipulated (increment- 
ed, decremented, or held constant) by the 82370 
DMA Controller during the DMA process. The Cur- 
rent registers are loaded from the Base registers at 
the beginning of a DMA process. 

The Base registers are loaded when the host proc- 
essor writes to the respective channel register ad- 
dresses. Depending on the mode In which the chan- 
nel is operating, the Current registers are typically 
loaded In the same operation. Reading from the 
channel register addresses yields the contents of 
the corresponding Current register. 

To maintain compatibility with software which ac- 
cesses an 8237A, a Byte Pointer Flip-Flop is used to 
control access to the upper and lower bytes of some 
words of the Channel Registers. These words are 
accessed as byte pairs at single port addresses. The 
Byte Pointer Flip-Flop acts as a one-bit pointer 
which Is toggled each time a qualifying Channel 
Register byte is accessed. 

It always points to the next logical byte to be ac- 
cessed of a pair of bytes. 

The Channel registers are arranged as pairs of 
words, each pair with its own port address. Address- 
ing the port with the Byte Pointer Flip-Flop reset ac- 
cesses the least significant byte of the pair. The 
most significant byte is accessed when the Byte 
Pointer Is set. 

For compatibility with existing 8237A designs, there 
Is one exception to the above statements about the 
Byte Pointer Flip-Flop. The third byte (bits 1 6-23) of 
the Target Address Is accessed through its own port 
address. The Byte Pointer Flip-Flop is not affected 
by any accesses to this byte. 
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The upper eight bits of the Byte Count Register are 
cleared when the least significant byte of the regis- 
ter is loaded. This provides compatibility with soft- 
ware which accesses an 8237A. The 8237A has 
16-bit Byte Count Registers. 

NOTE: 

The 82370 is a subset of the Intel 82380 32-bit 
DMA Controller with Integrated System Peripherals. 

Although the 82370 has 24 address bits externally, 
the programming model is actually a full 32 bits wide. 
For this reason, there are some “hidden” DMA reg- 
isters in the 82370 register set. These hidden regis- 
ters correspond to what would be A24-A31 in a 
32-bit system. 

Think of the 82370 addresses as though they were 
32 bits wide, with only the lower 24 bits available 
externally. 

This should be of concern in two areas: 

1 . Understanding the Byte Pointer Flip Flop 

2. Removing the IRQ1 Chaining Interrupt 

The byte pointer flip flop will behave as though the 
hidden upper address bits were accessible. 

The IRQ1 Chaining Interrupt will be removed only 
when the hidden upper address bits are pro- 
grammed. You will note that since the hidden upper 
address bits are not available externally, the value 
you program into the registers is not important. The 
act of programming the hidden register is critical In 
removing the IRQ1 Chaining Interrupt for a DMA 
channel. 

The port assignments for these hidden upper ad- 
dress bits come directly from the port assignments 
of the Intel 82380. For your convenience, those port 
definitions have been included In this data sheet in 
section 3.7. 

3.5.3 TEMPORARY REGISTERS 

Each channel has a 32-bit Temporary Register used 
for temporary data storage during two-cycle DMA 
transfers. It is this register in which any necessary 
byte assembly and disassembly of non-aligned data 
Is performed. Figure 3-22 shows how a block of data 
will be moved between memory locations with differ- 
ent boundaries. Note that the order of the data does 
not change. 

If the destination is the Requester and an early pro- 
cess termination has been indicated by the EOF# 
signal or DREQn inactive in the Demand Mode, the 
Temporary Register Is not affected. If data remains 
In the Temporary Register due to differences in data 
path widths of the Target and Requester, it will not 
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Target = source = 00000020H . 
Requester = destination = 00000053H 
Byte Count = 000007H 



Figure 3-22. Transfer of data between memory 
locations with different boundaries. This will be 
the result, independent of data path width. 


be transferred or otherwise lost, but will be stored for 
later transfer. 

If the destination is the Target and the EOF# signal 
is sensed active during the Requester access of a 
transfer, the DMA Controller will complete the trans- 
fer by sending to the Target whatever information Is 
in the Temporary Register at the time of process 
termination. This implies that the Target could be 
accessed with partial data in two accesses. For this 
reason it is advisable to have an I/O device desig- 
nated as a Requester, unless It is capable of han- 
dling parlial data transfers. 


3.6 DMA Controller Programming 

Frogramming a DMA Channel to perform a needed 
DMA function is in general a four step process. First 
the global attributes of the DMA Controller are pro- 
grammed via the two Command Registers. These 
global attributes include: priority levels, channel 
group enables, priority mode, and DREQn/EOF# in- 
put sampling. 

The second step involves setting the operating 
modes of the particular channel. The Mode Regis- 
ters are used to define the type of transfer and the 
handshaking modes. The Bus Size Register and 
Chaining Register may also need to be programmed 
in this step. 

The third step In setting up the channel is to load the 
Base Registers in accordance with the needs of the 
operating modes chosen in step two. The Current 
Registers are automatically loaded from the Base 
Registers, If required by the Buffer Transfer Mode in 
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effect. The information loaded and the order in 
which it is loaded depends on the operating mode. A 
channel used for cascading, for example, needs no 
buffer information and this step can be skipped en- 
tirely. 

The last step is to enable the newly programmed 
channel using one of the Mask Registers. The chan- 
nel is then available to perform the desired data 
transfer. The status of the channel can be observed 
at any time through the Status Register, Mask Reg- 
ister, Chaining Register, and Software Request reg- 
ister. 

Once the channel is programmed and enabled, the 
DMA process may be initiated in one of two ways, 
either by a hardware DMA request (DREQn) or a 
software request (Software Request Register). 

Once programmed to a particular Process/Mode 
configuration, the channel will operate in that config- 
uration until programmed otherwise. For this reason, 
restarting a channel after the current buffer expires 
does not require complete reprogramming of the 
channel. Only those parameters which have 
changed need to be reprogrammed. The Byte Count 
Register is always changed and must be repro- 
grammed. A Target or Requester Address Register 
which Is incremented or decremented should be re- 
programmed also. 


3.6.1 BUFFER PROCESSES 

The Buffer Process is determined by the Auto-lnltlal- 
ize bit of Mode Register I and the Chaining Register. 
If Auto-lnitialize is enabled. Chaining should not be 
used. 


3.6.1. 1 Single Buffer Process 

The Single Buffer Process is programmed by dis- 
abling Chaining via the Chaining Register and pro- 
gramming Mode Register I for non-Auto-lnitlallze. 

3.6. 1.2 Buffer Auto-lnitialize Process 

Setting the Auto-lnitialize bit In Mode Register I Is all 
that is necessary to place the channel in this mode. 
Buffer Autb-lnitiallze must not be enabled simulta- 
neous to enabling the Buffer Chaining Mode as this 
will have unpredictable results. 

Once the Base Registers are loaded, the channel is 
ready to be enabled. The channel will reload its Cur- 
rent Registers from the Base Registers each time 
the Current Buffer expires, either by an expired Byte 
Count or an external EOP#. 


I INSTALL IRQ 1 INTERRUPT SERVICE ROUTINE | 


[ 


SET THE CHANNEL TO NON-CHAINING PROCESS 


] 


PROGRAM THE MODE REGISTERS 


LOAD BASE REGISTERS FOR FIRST BUFFER 



r 

1 SET THE CHANNEL TO CHAINING PROCESS | | 

1 

(IRQ1 WILL BE ACTIVATED) 

r 

1 ENABLE INTERRUPT | | 


(IRQ1 WILL NEED SERVICE- 
LOAD BASE REGISTERS) 

r 


ENABLE THE CHANNEL 


FROM THIS POINT, THE HOST CAN PERFORM 
ANOTHER TASK. THE INTERRUPT SERVICE ROUTINE 
LEFT BEHIND WILL MAINTAIN THE CHANNEL. 


Figure 3-23. Flow of Events in the Buffer Chaining Process 
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3.6. 1.3 Buffer Chaining Process 

The Buffer Chaining Process is entered into from the 
Single Buffer Process. The Mode Registers should 
be programmed first, with all of the Transfer Modes 
defined as if the channel were to operate in the Sin- 
gle Buffer Process. The channel’s Base Registers 
are then loaded. When the channel has been set up 
in this way, and the chaining interrupt service routine 
is in place, the Chaining Process can be entered by 
programming the Chaining Register, Figure 3-23 il- 
lustrates the Buffer Chaining Process. 

An interrupt (IRQ1) will be generated immediately af- 
ter the Chaining Process is entered, as the channel 
then perceives the Base Registers as empty and in 
need of reloading. It is important to have the inter- 
rupt service routine in place at the time the Chaining 
Process is entered into. The interrupt request is re- 
moved when the most significant byte of the Base 
Target Address is loaded. 

The Interrupt will occur again when the first buffer 
expires and the Current Registers are loaded from 
the Base Registers. The cycle continues until the 
Chaining Process is disabled, or the host fails to re- 
spond to IRQ 1 before the Current Buffer expires. 

Exiting the Chaining Process can be done by reset- 
ting the Chaining Mode Register. If an interrupt is 
pending for the channel when the Chaining Register 
Is reset, the interrupt request will be removed. The 
Chaining Process can be temporarily disabled by 
setting the channel’s Mask bit in the Mask Register. 

The interrupt service routine for IRQ1 has the re- 
sponsibility of reloading the Base Realsters as nec- 
essary. It should check the status of the channel to 
determine the cause of channel expiration, etc. It 
should also have access to operating system Infor- 
mation regarding the channel, if any exists. The 
IRQ1 service routine should be capable of determin- 
ing whether the chain should be continued or termi- 
nated and act on that Information. 


3.6.2 DATA TRANSFER MODES 

The Data Transfer Modes are selected via Mode 
Register I. The Demand, Single, and Block Modes 
are selected by bits D6 and D7. The individual trans- 
fer type (Fly-By vs Two-Cycle, Read-Write-Verify, 
and I/O vs Memory) is programmed through both of 
the Mode registers. 

3.6.3 CASCADED BUS MASTERS 

The Cascade Mode is set by writing ones to D7 and 
D6 of Mode Register I. When a channel is pro- 


grammed to operate In the Cascade Mode, all of the 
other modes associated with Mode Registers I and 11 
are ignored. The priority and DREQn/EOP# defini- 
tions of the Command Registers will have the same 
effect on the channel’s operation as any other 
mode. 

3.6.4 SOFTWARE COMMANDS 

There are five port addresses which, when written 
to, command certain operations to be performed by 
the 82370 DMA Controller. The data written to these 
locations is not of consequence, writing to the loca- 
tion is all that is necessary to command the 82370 to 
perform the indicated function. Following are de- 
scriptions of the command functions. 

Clear Byte Pointer Flip-Flop— Location ObOCH 

Resets the Byte Pointer Flip-Flop. This command 
should be performed at the beginning of any access 
to the channel registers in order to be assured of 
beginning at a predictable place in the register pro- 
gramming sequence. 

Master Clear— Location OOODH 

All DMA functions are set to their default states. This 
command Is the equivalent of a hardware reset to 
the DMA Controller. Functions other than those in 
the DMA Controller section of the 82370 are not af- 
fected by this command. 

Clear Mask Register— Channels 0-3 

— Location OOOEH 

Channels 4-7 
— Location OOCEH 

This command simultaneously clears the Mask Bits 
of all channels in the addressed group, enabling all 
of the channels In the group. 

Clear TC Interrupt Request— Location 001 EH 

This command resets the Terminal Count Interrupt 
Request Flip-Flop. It is provided to allow the pro- 
gram which made a software DMA request to ac- 
knowledge that It has responded to the expiration of 
the requested channel(s). 


3.7 Register Definitions 

The following diagrams outline the bit definitions and 
functions of the 82370 DMA Controller’s Status and 
Control Registers. The function and programming of 
the registers is covered In the previous section ori 
DMA Controller Programming. An entry of “X” as a 
bit value indicates “don’t care.’’ 
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Channel Registers (read Current, write Base) 


Channel 

Register Name 

Address 

(hex) 

Byte 

Pointer 

Bits 

Accessed 

Channel 0 

Target Address 

00 

0 

0-7 




1 

8-15 



87 

X 

16-23 



10 

0 

24-31 (*) 


Byte Count 

01 

0 

0-7 




1 

8-15 



11 

0 

16-23 


Requester Address 

90 

0 

0-7 




1 

8-15 



91 

0 

16-23 




1 

24-310 

Channel 1 

Target Address 

02 

0 

0-7 




1 

8-15 



83 

X 

16-23 



12 

0 

24-310 


Byte Count 

03 

0 

0-7 




1 

8-15 



13 

0 

16-23 


Requester Address 

92 

0 

0-7 




1 

8-15 



93 

0 

16-23 




1 

24-310 

Channel 2 

Target Address 

04 

0 

0-7 




1 

8-15 



81 

X 

16-23 



14 

0 

24-310 


Byte Count 

05 

0 

0-7 




1 

8-15 



15 

0 

16-23 


Requester Address 

94 

0 

0-7 




1 

8-15 



95 

0 

16-23 




1 

24-310 

Channel 3 

Target Address 

06 

0 

0-7 




1 

8-15 



82 

X 

16-23 



16 

0 

24-31 (*) 


Byte Count 

07 

0 

0-7 




1 

8-15 



17 

0 

16-23 


Requester Address 

96 

0 

0-7 




1 

8-15 



97 

0 

16-23 




1 

24-310 
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Channel Registers (read Current, write Base) (Continued) 


Channel 

Register Name 

Address 

(hex) 

Byte 

Pointer 

Bits 

Accessed 

Channel 4 

Target Address 

CO 

0 

0-7 




1 

8-15 



8F 

X 

16-23 



DO 

0 

24-31 (’) 


Byte Count 

C1 

0 

0-7 




1 

8-15 



D1 

rv 

V/ 

16-23 


Requester Address 

98 

0 

0-7 




1 

8-15 



99 

0 

16-23 




1 

24-310 

Channel 5 

Target Address 

C2 

0 

0-7 




1 

8-15 



8B 

X 

16-23 



D2 

0 

24-31 (’^) 


Byte Count 

C3 

0 

0-7 




1 

8-15 



D3 

0 

16-23 


Requester Address 

9A 

0 

0-7 




1 

8-15 



9B 

0 

16-23 




1 

24-31 (*) 

Channel 6 

Target Address 

C4 

0 

0-7 




1 

8-15 



89 

X 

16-23 



D4 

0 

24-310 


Byte Count 

C5 

0 

0-7 




1 

8-15 



D5 

0 

CO 

CM 

1 

CD 

ir- 


Requester Address 

9C 

0 

0-7 




1 

8-15 



9D 

0 

16-23 




1 

24-31 (*) 

Channel 7 

Target Address 

C6 

0 

0-7 

■ 



1 

8-15 



8A 1 

X 

16-23 



D6 

0 

24-310 


Byte Count 

C7 , 

0 

0-7 




1 

8-15 



D7 

0 

16-23 


Requester Address 

9E 

0 

0-7 




1 

8-15 



9F 

0 

16-23 




1 

24-310 


NOTE: 

(*)These bits are not available externally. You need to be aware of their existence for chaining and Byte Pointer Flip-Flop 
operations. Please see section 3.5.2 for further details. 
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Command Register I (write only) 


Port Addresses— Channels 0-3— 0008H 
Channels 4-7— 00C8H 


D7 D6 D5 D4 D3 D2 D1 DO 
^ M I X I M X I M I X I X 

GROUP MASK 

0 = ENABLE CHANNELS 

1 = DISABLE CHANNELS 

PRIORITY 

0 = FIXED PRIORITY 

1 = ROTATING PRIORITY 


290164-36 


Command Register II (write only) 

Port Addresses — Channels 0-3— 001 AH 
Channels 4-7— OODAH 


D7 D6 D5 D4 D3 D2 D1 DO 


L.°-L, ° -,l°.i.., ° J3I 


PL ES DS 




DREQN SAMPLING 

EOP# SAMPLING 

0 = ASYNCHRONOUS 

1 = SYNCHRONOUS 

LOW PRIORITY LEVEL SET 

00 = CHANNEL 0(4) LOWEST 

01 = 1(5) 

10 = 2 ( 6 ) 

11= 3(7) 


290164-37 


Mode Register I (write only) 

Port Addresses— Channels 0-3— OOOBH 
Channels 4-7— OOCBH 


D7 D6 D5 D4 D3 D2 D1 DO 



CHANNEL SELECT 


00 = 

CHANNEL 0(4) 

01 = 

1(5) 

10 = 

2(6) 

11 = 

3(7) 


TRANSFER TYPE 

00 = VERIFY 

01 = WRITE 

10 = READ 

1 1 = ILLEGAL 

XX IF IN CASCADE MODE 

AUTO-INITIALIZE 
0 = DISABLE, 1 = ENABLE 

TARGET INCREMENT/DECREMENT 

0 = INCREMENT TARGET 

1 = DECREMENT TARGET • 

X IF TARGET HOLD ENABLED 

DATA TRANSFER MODE 

00 = DEMAND MODE 

01 = SINGLE TRANSFER MODE 

10 = BLOCK MODE 

1 1 = CASCADE MODE 


290164-38 


*Target and Requester DECREMENT is allowed only for byte transfers. 
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Mode Register II (write only) 

Port Addresses— Channels 0-3—001 BH 
Channels 4-7— OODBH 


D7 

D6 

D5 

D4 

D3 

D2 

D1 

DO 

cyI 

1 RD 1 

1 TD 1 

1 RH 1 

1 Rl 1 

1 TH 1 

1 Cl 

fco 



CHANNEL SELECT 
SEE MODE REGISTER I 

TARGET HOLD 

0 = INCREMENT/DECREMENT 

1 = HOLD 

REQUESTER INCREMENT 

0 = INCREMENT 

1 = DECREMENT ♦ 

X IF REQUESTER HOLD ENABLED 

REQUESTER HOLD 
0 = INCREMENT/DECREMENT 
1. = HOLD 

• TARGET DEVICE TYPE 

REQUESTER DEVICE TYPE 

0 = MEMORY 

1 = INPUT/OUTPUT 

TRANSFER CYCLES 

0 = ONE-CYCLE (FLY-BY) 

1 = TWO-CYCLE 


^Target and Requester DECREMENT is allowed only for byte transfers. 

Software Request Register (read/write) 

Port Addresses — Channels 0-3 — 0009H 
Channels 4-7— 00C9H 

Write Format: Software DMA Service Request 


D7 

D6 

D5 

D4 

D3 

D2 

D1 

DO 


m 

Lx J 

m 

1 X 

[n 

rrn 

rrn 


CHANNEL SELECT 
SEE MODE REGISTER I 

REQUEST SERVICE 

0 = REMOVE REQUEST 

1 = ASSERT REQUEST 




82370 


iny 


Read Format; Software Requests Pending 



Mask Set/Reset Register Individual Channel Mask (write only) 

Port Addresses — Channels 0-3 — OOOAH 
Channels 4-7— OOCAH 



Mask Read/Write Register Group Channel Mask (read/write) 

Port Addresses — Channels 0-3 — OOOFH 
Channels 4-7— OOCFH 
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Status Register Channel Process Status (read only) 


Port Addresses — Channels 0-3— 0008H 


Channels 4-7— 00C8H 


D7 D6 D5 D4 D3 D2 D1 DO 



CHANNEL 0(4) EXPIRED 
CHANNEL 1(5) EXPIRED 
CHANNEL 2(6) EXPIRED 

CHANNEL 3(7) EXPIRED 
1 = EXPIRED 

CHANNEL 0(4) REQUEST 
CHANNEL 1(5) REQUEST 
CHANNEL 2(6) REQUEST 
CHANNEL 3(7) REQUEST 
1 = REQUEST PENDING 


290164-44 


Bus Size Register Set Data Path Width (write only) 

Port Addresses— Channels 0-3— 001 8H 
Channels 4-7— 00D8H 


D7 D6 D5 D4 D3 D2 D1 DO 

I RBS1 I RBSO I TBS1 | TBSO | 0 | 0 | Cl | CO | 

1__JL_ CHANNEL SELECT 

SEE MODE REGISTER I 

TARGET BUS SIZE 

REQUESTER BUS SIZE 


Bus Size Encoding: 

00 = Reserved by intei iO = io-bii Bus 

01 = 32-bit Bus* 1 1 = 8-bit Bus 

*lf programmed as 32-bit bus width, the corresponding device will be accessed In two 16-blt cycles provided that the data is 
aligned within word boundary. 


Chaining Register (read/write) 

Port Addresses — Channels 0-3—001 9H 
Channels 4-7— 00D9H 

WRITE FORMAT: SET CHAINING MODE 

D7 D6 D5 D4 D3 D2 D1 DO 

I 0 I 0 I 0 I 0 I 0 I CH I Cl I CO I 

L_J_ CHANNEL SELECT 

SEE MODE REGISTER I 

CHAINING ENABLE BIT 

0 = DISABLE CHAINING MODE 

1 = ENABLE CHAINING MODE 
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READ FORMAT: 
D7 D6 D5 


D4 D3 


CHANNEL INTERRUPT STATUS 
D2 D1 DO 


I X I X I X I X I CI3 I CI2 I CM I CIO I 


CHANNEL 0(4) BASE EMPTY 
CHANNEL 1(5) BASE EMPTY 
CHANNEL 2(6) BASE EMPTY 
CHANNEL 3(7) BASE EMPTY 


290164-47 


3.8 8237A Compatibility 

The register arrangement of the 82370 DMA Con- 
troller is a superset of the 8237A DMA Controller. 
Functionally the 82370 DMA Controller is very differ- 
ent from the 8237A. Most of the functions of the 
8237A are performed also by the 82370. The follow- 
ing discussion points out the differences between 
the 8237A and the 82370. 

The 8237A is limited to transfers between I/O and 
memory only (except In one special case, where two 
channels can be used to perform memory-to-memo- 
ry transfers). The 82370 DMA Controller can transfer 
between any combination of memory and I/O. Sev- 
eral other features of the 8237A are enhanced or 
expanded in the 82370 and other features are add- 
ed. 

The 8237A is an 8-bit only DMA device. For pro- 
gramming compatibility, all of the 8-bit registers are 
preserved in the 82370. The 82370 is programmed 
via 8-blt registers. The address registers in the 
82370 are 24-bit registers in order to support the 
80376’s 24-bit bus. The Byte Count Registers are 
24-blt registers, allowing support of larger data 
blocks than possible with the 8237A. 

All of the 8237A’s operating modes are supported 
by the 82370 (except the cumbersome two-channel 
memory-to-memory transfer). The 82370 performs 
memory-to-memory transfers using only one chan- 
nel. The 82370 has the added features of buffer 
pipelining (Buffer Chaining Process) and program- 
mable priority levels. 

The 82370 also adds the feature of address regis- 
ters for both destination and source. These address- 
es may be incremented, decremented, or held con- 
stant, as required by the application of the individual 
channel. This allows any combination of destination 
and source device. 


Each DMA channel has associated with It a Target 
and a Requester. In the 8237A, the Target is the 
device which can be accessed by the address regis- 
ter, the Requester is the device which is accessed 
by the DMA Acknowledge signals and must be an 
I/O device. 


4.0 PROGRAMMABLE INTERRUPT 
CONTROLLER (PIC) 


4.1 Functional Description 

The 82370 Programmable Interrupt Controller (PIC) 
consists of three enhanced 82C59A Interrupt Con- 
trollers. These three controllers together provide 1 5 
external and 5 Internal interrupt request inputs. Each 
external request Input can be cascaded with an ad- 
ditional 82C59A slave controller. This scheme al- 
lows the 82370 to support a maximum of 120 
(15x8) external interrupt request inputs. 

Following one or more interrupt requests, the 82370 
PIC issues an interrupt signal to the 80376. When 
the 80376 host processor responds with an interrupt 
acknowledge signal, the PIC will arbitrate between 
the pending Interrupt requests and place the Inter- 
rupt vector associated with the highest priority pend- 
ing request on the data bus. 

The major enhancement In the 82370 PIC over the 
82C59A Is that each of the interrupt request inputs 
can be individually programmed with its own inter- 
rupt vector, allowing more flexibility in interrupt vec- 
tor mapping. 

4.1.1 INTERNAL BLOCK DIAGRAM 

The block diagram of the 82370 Programmable In- 
terrupt Controller is shown in Figure 4-1. Internally, 
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the PIC consists of three 82C59A banks: A, B and C. 
The three banks are cascaded to one another: C is 
cascaded to B, B is cascaded to A. The I NT output 
of Bank A is used externally to Interrupt the 80376. 

Bank A has nine interrupt request inputs (two are 
unused), and Banks B and C have eight interrupt 
request inputs. Of the fifteen external interrupt re- 
quest inputs, two are shared by other functions. Spe- 
cifically, the Interrupt Request 3 input (IRQ3#) can 
be used as the Timer 2 output (TOUT2#). This pin 
can be used in three different ways: iRQ3# input 
only, TOUT2# output only, or using TOUT2# to 
generate an IRQ3# interrupt request. Also, the In- 
terrupt Request 9 input (IRQ9#) can be used as 
DMA Request 4 input (DREQ 4). Typically, only 
IRQ9# or DREQ4 can be used at a time. 


4.1.2 INTERRUPT CONTROLLER BANKS 

All three banks are identical, with the exception of 
the IRQ1.5 on Bank A. Therefore, only one bank will 
be discussed. In the 82370 PIC, all external requests 
can be cascaded into and each interrupt controller 
bank behaves like a master. As compared to the 
82C59A, the enhancements In the banks are: 

■— All Interrupt vectors are individually programma- 
ble. (In the 82C59A, the vectors must be pro- 
grammed In eight consecutive interrupt vector lo- 
cations.) 

— The cascade address Is provided on the Data 
Bus (D0-D7). (In the 82C59A, three dedicated 
control signals (CASO, CAS1, CAS2) are used for 
master/slave cascading.) 
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The block diagram of a bank is shown in Figure 4-2. 
As can be seen from this figure, the bank consists of 
six major blocks: the Interrupt Request Register 
(IRR), the In-Service Register (ISR), the Interrupt 
Mask Register (IMR), the Priority Resolver (PR), the 
Vector Registers (VR), and the Control Logic. The 
functional description of each block is included be- 
low. 

INTERRUPT REQUEST (IRR) AND 
IN-SERVICE REGISTER (ISR) 

The interrupts at the Interrupt Request (IRQ) input 
lines are handled by two registers in cascade, the 
Interrupt Request Register (IRR) and the In-Service 
Register (ISR). The IRR is used to store all Interrupt 
levels which are requesting service; and the ISR is 
used to store all interrupt levels which are being 
serviced. 

PRIORITY RESOLVER (PR) 

This logic block determines the priorities of the bits 
set in the IRR. The highest priority is selected and 
strobed Into the corresponding bit of the ISR during 
an Interrupt Acknowledge cycle. 


INTERRUPT MASK REGISTER (IMR) 

The IMR stores the bits which mask the Interrupt 
lines to be masked (disabled). The IMR operates on 
the IRR. Masking of a higher priority input will not 
affect the interrupt request lines of lower priority. 

VECTOR REGISTERS (VR) 

This block contains a set of Vector Registers, one 
for each interrupt request line, to store the pre-pro- 
grammed interrupt vector number. The correspond- 
ing vector number will be driven onto the Data Bus 
of the 82370 during the Interrupt Acknowledge cy- 
cle. 

CONTROL LOGIC 

The Control Logic coordinates the overall operations 
of the other internal blocks within the same bank. 
This logic will drive the Interrupt Output signal (INT) 
HIGH when one or more unmasked interrupt Inputs 
are active (LOW). The INT output signal goes direct- 
ly to the 80376 (in bank A) or to another bank to 
which this bank Is cascaded (see Figure 4-1). Also, 


IRQO# 

IRQ1# 

IRQ2# 

IRQ3# 

IRQ4# 

IRQ5# 

IRQ7# 



82380 ENHANCEMENT OVER THE 82C59A 
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Figure 4-2. Interrupt Bank Block Diagram 
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this logic will recognize ah Interrupt Acknowledge 
cycle (via M/IO#, D/C# and W/R# signals). During 
this bus cycle, the Control Logic will enable the cor- 
responding Vector Register to drive the interrupt 
vector onto the Data Bus. 

In bank A, the Control Logic is also responsible for 
handling the special ICW2 interrupt request Input 
(IRQ1.5). 


4.2 interface Signals 

4.2.1 INTERRUPT INPUTS 

There are 15 external Interrupt Request inputs and 5 
Internal Interrupt Requests. The external request in- 
puts are: IRQ3#, IRQ9#, IRQ11 # to IRQ23#. They 
are shown in bold arrows in Figure 4-1. All IRQ in- 
puts are active LOW and they can be programmed 
(via a control bit in the Initialization Command Word 
1 (ICW1)) to be either edge-triggered or level-trig- 
gered. In order to be recognized as a valid interrupt 
request, the interrupt Input must be active (LOW) un- 
til the first INTA cycle (see Bus Functional Descrip- 
tion). Note that all 1 5 external Interrupt Request in- 
puts have weak internal pull-up resistors. 

As mentioned earlier, an 82C59A can be cascaded 
to each external interrupt input to expand the inter- 
rupt capacity to a maximum of 1 20 levels. Also, two 
of the interrupt Inputs are dual functions: IRQ3# can 
be used as Timer 2 output (TOLIT2#) and IRQ9# 
can be used as DRE04 input. IRQ3# is a bidirec- 
tional dual function pin. This Interrupt request Input Is 
wired-OR with the output of Timer 2 (T0UT2#). If 
only IRQ3# function is to be used. Timer 2 should 
be programmed so that 0UT2 is LOW. Note that 
TOUT2# can also be used to generate an interrupt 
request to IRQ3# Input. 

The five internal interrupt requests serve special 
system functions. They are shown In Table 4-1. The 
following paragraphs describe these interrupts. 


Table 4-1. 82370 Internal Interrupt Requests 


Interrupt Request 

Interrupt Source 

IRQO# 

Timer 3 Output (TOUT3) 

IRQ8# 

Timer 0 Output (TOUTO) 

IRQ1 # 

DMA Chaining Request 

IRQ4# 

DMA Terminal Count 

IRQ1.5# 

ICW2 Written 


TIMER 0 AND TIMER 3 INTERRUPT REQUESTS 

IRQ8# and IRQO# interrupt requests are initiated 
by the output of Timers 0 and 3, respectively. Each 
of these requests Is generated by an edge-detector 
flip-flop. 


The flip-flops are activated by the following condi- 
tions: 

Set — Rising edge of timer output (TOUT); 

Clear — Interrupt acknowledge for this request; OR 
Request is masked (disabled); OR Hard- 
ware Reset. 

CHAINING AND TERMINAL COUNT INTERRUPTS 

These interrupt requests are generated by the 
82370 DMA Controller. The chaining request 
(IRQ1 #) indicates that the DMA Base Register is 
not loaded. The Terminal Count request (IRQ4#) in- 
dicates that a software DMA request was cleared. 

ICW2 INTERRUPT REQUEST 

Whenever an Initialization Control Word 2 (ICW2) is 
written to a Bank, a special ICW2 interrupt request is 
generated. The interrupt will be cleared when the 
newly programmed ICW2 Register Is read. This in- 
terrupt request Is In Bank A at level 1 .5. This inter- 
rupt request Is Internally ORed with the Cascaded 
Request from Bank B and Is always assigned a high- 
er priority than the Cascaded Request. 

This .special interrupt is provided to support compati- 
bility with the original 82C59A. A detailed description 
of this interrupt is discussed in the Programming 
section. 

DEFAULT INTERRUPT (IRQ7#) 

During an Interrupt Acknowledge cycle, if there is no 
active pending request, the PIC will automatically 
generate a default vector. This vector corresponds 
to the !RQ7 # vector in bank .A. 


4.2.2 INTERRUPT OUTPUT (INT) 

The INT output pin is taken directly from bank A. 
This signal should be tied to the Maskable Interrupt 
Request (INTR) of the 80376. When this signal is 
active (HIGH), it indicates that one or more internal/ 
external interrupt requests are pending. The 80376 
is expected to respond with an interrupt acknowl- 
edge cycle. 


4.3 Bus Functional Description 

The INT output of bank A will be activated as a result 
of any unmasked Interrupt request. This may be a 
non-cascaded or cascaded request. After the PIC 
has driven the INT signal HIGH, the 80376 will re- 
spond by performing two interrupt acknowledge cy- 
cles. The timing diagram in Figure 4-3 shows a typi- 
cal interrupt acknowledge process between the 
82370 and the 80376 CPU. 
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Figure 4-3. Interrupt Acknowledge Cycle 


After activating the INT signal, the 82370 monitors 
the status lines (M/IO#, D/C#, W/R#) and waits 
for the 80376 to initiate the first interrupt acknowl- 
edge cycle. In the 80376 environment, two succes- 
sive interrupt acknowledge cycles (INTA) marked by 
M/IO# = LOW, D/C# = LOW. and W/R# = LOW 
are performed. During the first INTA cycle, the PIC 
will determine the highest priority request. Assuming 
this interrupt input has no external Slave Controller 
cascaded to it, the 82370 will drive the Data Bus 
with OOH in the first INTA cycle. During the second 
INTA cycle, the 82370 PIC will drive the Data Bus 
with the corresponding pre-programmed interrupt 
vector. 

If the PIC determines (from the ICW3) that this inter- 
rupt input has an external Slave Controller cascaded 
to it, it will drive the Data Bus with the specific Slave 
Cascade Address (instead of OOH) during the first 
INTA cycle. This Slave Cascade Address is the pre- 
programmed content in the corresponding Vector 
Register. This means that no Slave Address should 
be chosen to be OOH. Note that the Slave Address 
and Interrupt Vector are different interpretations of 
the same thing. They are both the contents of the 
programmable Vector Register. During the second 
INTA cycle, the Data Bus will be floated so that the 
external Slave Controller can drive its Interrupt vec- 
tor on the bus. Since the Slave Interrupt Controller 
resides on the system bus, bus transceiver enable 
and direction control logic must take this into consid- 
eration. 


In order to have a successful interrupt service, the 
interrupt request input must be held valid (LOW) until 
the beginning of the first Interrupt acknowledge cy- 
cle. If there is no pending interrupt request when the 
first INTA cycle is generated, the PIC will generate a 
default vector, which is the IRQ7 vector (Bank A, 
level 7). 

According to the Bus Cycle definition of the 80376, 
there will be four Bus Idle States between the two 
Interrupt acknowledge cycles. These idle bus cycles 
will be initiated by the 80376. Also, during each inter- 
rupt acknowledge cycle, the internal Walt State Gen- 
erator of the 82370 will automatically generate the 
required number of wait states for internal delays. 


4.4 Modes of Operation 

A variety of modes and commands are available for 
controlling the 82370 PIC. All of them are program- 
mable; that is, they may be changed dynamically un- 
der software control. In fact, each bank can be pro- 
grammed individually to operate in different modes. 
With these modes and commands, many possible 
configurations are conceivable, giving the user 
enough versatility for almost any interrupt controlled 
application. 

This section is not intended to show how the 82370 
PIC can be programmed. Rather, it describes the 
operation in different modes. 
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4.4.1 END-OF-INTERRUPT 

Upon completion of an interrupt service routine, the 
interrupted bank needs to be notified so its ISR can 
be updated. This allows the PIC to keep track of 
which interrupt levels are in the process of being 
serviced and their relative priorities. Three different 
End-Of-Interrupt (EOl) formats are available. They 
are: Non-Specific EOl Command, Specific EOl Com- 
mand, and Automatic EOl Mode. Selection of which 
EOl to use is dependent upon the interrupt opera- 
tions the user wishes to perform. 

If the 82370 Is NOT programmed in the Automatic 
EOl Mode, an EOl command must be issued by the 
80376 to the specific 82370 PIC Controller Bank. 
Also, if this controller bank is cascaded to another 
Internal bank, an EOl command must also be sent to 
the bank to which this bank is cascaded. For exam- 
ple, If an interrupt request of Bank C in the 82370 
PIC Is serviced, an EOl should be written into Bank 
C, Bank B and Bank A. If the request comes from an 
external interrupt controller cascaded to Bank C, 
then an EOl should be written into the external con- 
troller as well. 

NON-SPECIFIC EOl COMMAND 

A Non-Specific EOl command sent from the 80376 
lets the 82370 PIC bank know when a service rou- 
tine has been completed, without specification of its 
exact Interrupt level. The respective interrupt bank 
automatically determines the interrupt level and re- 
sets the correct bit in the ISR. 

To take advantage of the Non-Specific EOl, the in- 
terrupt bank must be in a mode of operation in which 
it can predetermine its in-service routine levels. For 
this reason, the Non-Specific EOl command should 
only be used when the most recent level acknowl- 
edged and serviced is always the highest priority lev- 
el (i.e. in the Fully Nested Mode structure to be de- 
scribed below). When the interrupt bank receives a 
Non-Specific EOl command, it simply resets the 
highest priority ISR bit to indicate that the highest 
priority routine In service is finished. 

Special consideration should be taken when decid- 
ing to use the Non-Specific EOl command. Here are 
two operating conditions In which it is best NOT 
used since the Fully Nested Mode structure will be 
destroyed: 

— Using the Set Priority command within an inter- 
rupt service routine. 

— Using a Special Mask Mode. 

These conditions are covered in more detail in their 
own sections, but are listed here for reference. 


SPECIFIC EOl COMMAND 

Unlike a Non-Specific EOl command which automat- 
ically resets the highest priority ISR bit, a Specific 
EOl command specifies an exact ISR bit to be reset. 
Any one of the IRQ levels of an interrupt bank can 
be specified in the command. 

The Specific EOl command is needed to reset the 
ISR bit of a completed service routine whenever the 
interrupt bank Is not able to automatically determine 
it. The Specific EOl command can be used in all 
conditions of operation, including those that prohibit 
Non-Specific EOl command usage mentioned 
above. 

AUTOMATIC EOl MODE 

When programmed In the Automatic EOl Mode, the 
80376 no longer needs to issue a command to notify 
the Interrupt bank It has completed an interrupt rou- 
tine. The interrupt bank accomplishes this by per- 
forming a Non-Specific EOl automatically at the end 
of the second INTA cycle. 

Special consideration should be taken when decid- 
ing to use the Automatic EOl Mode because It may 
disturb the Fully Nested Mode structure. In the Auto- 
matic EOl Mode, the ISR bit of a routine in service is 
reset right after it is acknowledged, thus leaving no 
designation in the ISR that a service routine is being 
executed. If any Interrupt request within the same 
bank occurs during this time and interrupts are en- 
abled, it will get serviced regardless of Its priority. 
Therefore, when using this mode, the 80376 should 
keep Its interrupt request input disabled during exe- 
cution of a service routine. By doing this, higher pri- 
ority interrupt levels will be serviced only after the 
completion of a routine in service. This guideline re- 
stores the Fully Nested Mode structure. However, In 
this scheme, a routine In service cannot be interrupt- 
ed since the host’s interrupt request input is dis- 
abled. 


4.4.2 INTERRUPT PRIORITIES 

The 82370 PIC provides various methods for arrang- 
ing the interrupt priorities of the interrupt request in- 
puts to suit different applications. The following sub- 
sections explain these methods in detail. 

4.4.2. 1 Fully Nested Mode 

The Fully Nested Mode of operation is a general pur- 
pose priority mode. This mode supports a multi-level 
interrupt structure in which all of the Interrupt Re- 
quest (IRQ) inputs within one bank are arranged 
from highest to lowest. 
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Unless otherwise programmed, the Fully Nested 
Mode is entered by default upon initialization. At this 
time, IRQO# is assigned the highest priority 
(priority = 0) and IRQ7# the lowest (priority = 7). 
This default priority can be changed, as will be ex- 
plained later in the Rotating Priority Mode. 

When an interrupt Is acknowledged, the highest pri- 
ority request is determined from the Interrupt Re- 
quest Register (IRR) and Its vector is placed on the 
bus. In addition, the corresponding bit in the In-Serv- 
ice Register (ISR) is set to designate the routine in 
service. This ISR bit will remain set until the 80376 
issues an End Of Interrupt (EOl) command immedi- 
ately before returning from the service routine; or 
alternately, if the Automatic End Of Interrupt (AEOI) 
bit is set, the ISR bit will be reset at the end of the 
second INTA cycle. 

While the ISR bit is set, all further interrupts of the 
same or lower priority are inhibited. Higher level In- 
terrupts can still generate an interrupt, which will be 
acknowledged only if the 80376 internal interrupt en- 
able flip-flop has been reenabled (through software 
inside the current service routine). 

4.4.2.2 Automatic Rotation-Equal Priority 
Devices 

Automatic rotation of priorities serves In applications 
where the interrupting devices are of equal priority 


within an interrupt bank. In this kind of environment, 
once a device is serviced, all other equal priority pe- 
ripherals should be given a chance to be serviced 
before the original device is serviced again. This is 
accomplished by automatically assigning a device 
the lowest priority after being serviced. Thus, In the 
worst case, the device would have to wait until all 
other peripherals connected to the same bank are 
serviced before It is serviced again. 

There are two methods of accomplishing automatic 
rotation. One is used in conjunction with the Non- 
Specific EOl command and the other is used with 
the Automatic EOl mode. These two methods are 
discussed below. 

ROTATE ON NON-SPECIFIC EOl COMMAND 

When the Rotate On Non-Specific EOl command is 
issued, the highest ISR bit is reset as In a normal 
Non-Specific EOl command. However, after it is re- 
set, the corresponding Interrupt Request (IRQ) level 
is assigned the lowest priority. Other IRQ priorities 
rotate to conform to the Fully Nested Mode based 
on the newly assigned low priority. 

Figure 4-4 shows how the Rotate On Non-Specific 
EOl command affects the interrupt priorities. As- 
sume the IRQ priorities were assigned with IRQO the 
highest and IRQ7 the lowest. IRQ6 and IRQ4 are 



Figure 4-4. Rotate On Non-Specific EOl Command 
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already in service but neither is completed. Being 
the higher priority routine, IRQ4 is necessarily the 
routine being executed. During the IRQ4 routine, a 
rotate on Non-Specific EOl command is executed. 
When this happens. Bit 4 in the ISR is reset. IRQ4 
then becomes the lowest priority and IRQ5 becomes 
the highest. 

ROTATE ON AUTOMATIC EOl MODE 

The Rotate On Automatic EOl Mode works much 
like the Rotate On Nori-Specinu EOl Command. The 
main difference Is that priority rotation is done auto- 
matically after the second INTA cycle of an Interrupt 
request. To enter or exit this mode, a Rotate-On-Au- 
tomatic-EOI Set Command and Rotate-On-Automat- 
Ic-EOI Clear Command is provided. After this mode 
Is entered, no other commands are needed as In the 
normal Automatic EOl Mode. However, it must be 
noted again that when using any form of the Auto- 
matic EOl Mode, special consideration should be 
taken. The guideline presented in the Automatic EOl 
Mode also applies here. 

4.4.2.3 Specific Rotation-Specific Priority 

Specific rotation gives the user versatile capabilities 
In interrupt controlled operations. It serves In those 
applications In which a specific device’s Interrupt pri- 
ority must be altered. As opposed to Automatic Ro- 
tation which will automatically set priorities after 
each interrupt request is serviced, specific rotation Is 
completely user controlled. That is, the user selects 
which interrupt level Is to receive the lowest or the 
highest priority. This can be done during the main 
program or within Interrupt routines. Two specific ro- 


Table 4-2. Interrupt Priority Mode Summary 


Interrupt 

Priority 

Operation 

Summary 

Effect On Priority After EOl 

Mode 

Non-Specific/Automatic 

Specific 

Fully-Nested Mode 

IRQO# - Highest Priority 
IRQ7# - Lowest Priority 

No change in priority. 
Highest ISR bit is reset. 

Not Applicable. 

Automatic Rotation 
(Equal Priority Devices) 

Interrupt level just 
serviced is the lowest 
priority. 

Other priorities rotate to 
conform to Fully-Nested 
Mode. 

Highest ISR bit Is reset 
and the corresponding 
level becomes the lowest 
priority. 

Not Applicable. 

Specific Rotation 
(Specific Priority Devices) 

User specifies the 
lowest priority level. 

Other priorities rotate to 
conform to Fully-Nested 
Mode. 

Not Applicable. 

As described under 
“Operation Summary”. 


tation commands are available to the user: Set Prior- 
ity Command and Rotate On Specific EOl Com- 
mand. 

SET PRIORITY COMMAND 

The Set Priority Command allows the programmer to 
assign an IRQ level the lowest priority. All other in- 
terrupt levels will conform to the Fully Nested Mode 
based on the newly assigned low priority. 

CrsTAT!^ /Nki onc/^ici/^ crxi 
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The Rotate On Specific EOl Command Is literally a 
combination of the Set Priority Command and the 
Specific EOl Command. Like the Set Priority Com- 
mand, a specified IRQ level is assigned lowest priori- 
ty. Like the Specific EOl Command, a specified level 
will be reset in the ISR. Thus, this command accom- 
plishes both tasks in one single command. 


4.4.2.4 Interrupt Priority Mode Summary 

In order to simplify understanding the many modes 
of interrupt priority, Table 4-2 is provided to bring out 
their summary of operations. 


4.4.3 iNTERRUPT MASKING 
VIA INTERRUPT MASK REGISTER 


Each bank in the 82370 PIC has an Interrupt Mask 
Register (IMR) which enhances Interrupt control ca- 
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pabilities. This IMR allows individual IRQ masking. 
When an IRQ Is masked, its interrupt request Is dis- 
abled until it is unmasked. Each bit in the 8-bit IMR 
disables one interrupt channel if it is set (HIGH). Bit 
0 masks IRQO, Bit 1 masks IRQ1 and so forth. 
Masking an IRQ channel will only disable the corre- 
sponding channel and does not affect the others’ 
operations. 

The IMR acts only on the output of the IRR. That Is, 
if an interrupt occurs while its IMR bit is set, this 
request is not “forgotten”. Even with an IRQ input 
masked, it is still possible to set the IRR. Therefore, 
when the IMR bit is reset, an interrupt request to the 
80376 will then be generated, providing that the IRQ 
request remains active. If the IRQ request is re- 
moved before the IMR Is reset, the Default Interrupt 
Vector (Bank A, level 7) will be generated during the 
interrupt acknowledge cycle. 

SPECIAL MASK MODE 

In the Fully Nested Mode, all IRQ levels of lower 
priority than the routine in service are inhibited. How- 
ever, in some applications. It may be desirable to let 
a lower priority Interrupt request to Interrupt the rou- 
tine In service. One method to achieve this is by 
using the Special Mask Mode. Working in conjunc- 
tion with the IMR, the Special Mask Mode enables 
interrupts from all levels except the level in service. 
This is usually done inside an Interrupt service rou- 
tine by masking the level that is in service and then 
issuing the Special Mask Mode Command. Once the 
Special Mask Mode Is enabled, it remains in effect 
until it is disabled. 


4.4.4 EDGE OR LEVEL INTERRUPT 
TRIGGERING 

Each bank in the 82370 PIC can be programmed 
Independently for either edge or level sensing for the 


Interrupt request signals. Recall that all IRQ inputs 
are active LOW. Therefore, in the edge triggered 
mode, an active edge is defined as an input tran- 
sition from an inactive (HIGH) to active (LOW) state. 
The Interrupt input may remain active without gener- 
ating another interrupt. During level triggered mode, 
an interrupt request will be recognized by an active 
(LOW) Input, and there Is no need for edge detec- 
tion. However, the interrupt request must be re- 
moved before the EOl Command is issued, or the 
80376 must be disabled to prevent a second false 
interrupt from occurring. 

In either modes, the interrupt request input must be 
active (LOW) during the first INTA cycle in order to 
be recognized. Otherwise, the Default Interrupt Vec- 
tor will be generated at level 7 of Bank A. 

4.4.5 INTERRUPT CASCADING 

As mentioned previously, the 82370 allows for exter- 
nal Slave interrupt controllers to be cascaded to any 
of its external interrupt request pins. The 82370 PIC 
indicates that an external Slave Controller is to be 
serviced by putting the contents of the Vector Regis- 
ter associated with the particular request on the 
80376 Data Bus during the first INTA cycle (instead 
of OOH during a non-slave service). The external log- 
ic should latch the vector on the Data Bus using the 
INTA status signals and use it to select the external 
Slave Controller to be serviced (see Figure 4-5). The 
selected Slave will then respond to the second INTA 
cycle and place its vector on the Data Bus. This 
method requires that if external Slave Controllers 
are used in the system, no vector should be pro- 
grammed to OOH. 

Since the external Slave Cascade Address is provid- 
ed on the Data Bus during INTA cycle 1, an external 
latch Is required to capture this address for the Slave 
Controller. A simple scheme is depicted in Figure 
4-5 below. 



Figure 4-5. Slave Cascade Address Capturing 
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4.4.5. 1 Special Fully Nested Mode 

This mode will be used where cascading is em- 
ployed and the priority is to be conserved within 
each Slave Controller. The Special Fully Nested 
Mode is similar to the “regular” Fully Nested Mode 
with the following exceptions: 

— When an interrupt request from a Slave Control- 
ler is in service, this Slave Controller Is not 
locked out from the Master’s priority logic. Fur- 
ther Interrupt requests from the higher priority 
logic within the Slave Controlier will be recog- 
nized by the 82370 PIC and will initiate interrupts 
to the 80376. In comparing to the “regular” Fully 
Nested Mode, the Slave Controller is masked out 
when its request is in service and no higher re- 
quests from the same Slave Controller can be 
serviced. 

— Before exiting the interrupt service routine, the 
software has to check whether the interrupt serv- 
iced was the only request from the Slave Con- 
troller. This is done by sending a Non-Specific 
EOl Command to the Slave Controller and then 
reading Its In Service Register. If there are no 
requests In the Slave Controller, a Non-Specific 
EOl can be sent to the corresponding 82370 PIC 
bank also. Otherwise, no EOl should be sent. 


4.4.6 READING INTERRUPT STATUS 

The 82370 PIC provides several ways to read differ- 
ent status of each interrupt bank for more flexible 
interrupt control operations. These include polling 
the highest priority pending Interrupt request and 
reading the contents of different interrupt status reg- 
isters. 


4.4.6.1 Pol! Gonrimand 

The 82370 PIC supports status polling operations 
with the Poll Command. In a Poll Command, the 
pending interrupt request with the highest priority 
can be determined. To use this command, the I NT 
output Is not used, or the 80376 interrupt is disabled. 
Service to devices is achieved by software using the 
Poll Command. 


This mode is useful if there is a routine command 
common to several levels so that the INTA se- 
quence is not needed. Another application Is to use 
the Poll Command to expand the number of priority 
levels. • 

Notice that the ICW2 mechanism is not supported 
for the Poll Command. However, if the Poll Com- 
mand Is used, the programmable Vector Registers 
are of no concern since no INTA cycle will be gener- 
ated. 


4.4.6.2 Reading Interrupt Registers 

The contents of each interrupt register (IRR, ISR, 
and IMR) can be read to update the user’s program 
on the present status of the 82370 PIC. This can be 
a versatile tool in the decision making process of a 
service routine, giving the user more control over 
interrupt operations. 

The reading of the IRR and ISR contents can be 
performed via the Operation Control Word 3 by us- 
ing a Read Status Register Command and the con- 
tent of IMR can be read via a simple read operation 
of the register itself. 


4.5 Register Set Overview 

Each bank of the 82370 PIC consists of a set of 8-bit 
registers to control its operations. The address map 
of all the registers is shown in Table 4-3 below. 
Since ail three register sets are identical In functions, 
only one set will be described. 

Functionally, each register set can be divided into 
five groups. They arc: the four Initialization Com- 
mand Words (lew’s), the three Operation Control 
Words (OCw’s), the Poll/ interrupt Request/ In-Serv- 
ice Register, the Interrupt Mask Register, and the 
Vector Registers. A description of each group fol- 
lows. 
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Table 4-3. Interrupt Controller Register Address Map 


Port 

Address 

Access 

Register Description 

20H 

Write 

Bank B ICW1 , OCW2, or OCW3 


Read 

Bank B Poll, Request or In-Service 
Status Register 

21 H 

Write 

Bank B ICW2. ICW3. ICW4, OCW1 


Read 

Bank B Mask Register 

22H 

Read 

Bank B ICW2 

28H 

Read/Write 

IRQ8 Vector Register 

29H 

Read/Write 

IRQ9 Vector Register 

2AH 

Read/Write 

Reserved 

2BH 

Read/Write 

IRQ1 1 Vector Register 

2CH 

Read/Write 

IRQ1 2 Vector Register 

2DH 

Read/Write 

IRQ1 3 Vector Register 

2EH 

Read /Write 

IRQ14 Vector Register 

2FH 

Read/Write 

IRQ1 5 Vector Register 

AOH 

Write 

Bank C ICW1 , OCW2, or OCW3 


Read 

Bank C Poll, Request or In-Service 
Status Register 

A1H 

Write 

Bank C ICW2, ICW3, ICW4, OCW1 


Read 

Bank C Mask Register 

A2H 

Read 

BankCICW2 

ASH 

Read/Write 

IRQ1 6 Vector Register 

A9H 

Read/Write 

IRQ1 7 Vector Register 

AAH 

Read/Write 

IRQI 8 Vector Register 

ABH 

Read/Write 

1RQ1 9 Vector Register 

ACH 

Read/Write 

IRQ20 Vector Register 

ADH 

Read/Write 

IRQ21 Vector Register 

AEH 

Read/Write 

IRQ22 Vector Register 

AFH 

Read/Write 

IRQ23 Vector Register 

30H 

Write 

Bank A ICW1 , OCW2, or OCW3 


Read 

Bank A Poll, Request or In-Service 
Status Register 

31H 

Write 

Bank A ICW2, ICW3, ICW4, OCW1 


Read 

Bank A Mask Register 

32H 

Read 

Bank ICW2 

38H 

Read/Write 

IRQO Vector Register 

39H 

Read/Write 

IRQ1 Vector Register 

3AH 

Read/Write 

IRQI. 5 Vector Register 

3BH 

Read/ Write 

1RQ3 Vector Register 

3CH 

Read/Write 

IRQ4 Vector Register 

3DH 

Read/Write 

Reserved 

3EH 

Read/Write 

Reserved 

3FH 

Read/Write 

IRQ7 Vector Register 


4-903 




82370 


imtgT 


4.5.1 INITIALIZATION COMMAND WORDS (ICW) >CW4 


Before normal operation can begin, the 82370 PIC 
must be brought to a known state. There are four 
8-bit Initialization Command Words in each interrupt 
bank to setup the necessary conditions and modes 
for proper operation. Except for the second com- 
mand word (ICW2) which is a read/write register, the 
other three are write-only registers. Without going 
into detail of the bit definitions of the command 
words, the following subsections give a brief de- 


scription of what functions each command word 


controls. 


ICW1 

The ICW1 has three major functions. They are: 

— To select between the two IRQ input triggering 
modes (edge- or level-triggered); 

— To designate whether or not the interrupt bank is 
to be used alone or In the cascade mode. If the 
cascade mode is desired, the interrupt bank will 
accept ICW3 for further cascade mode program- 
ming. Otherwise, no ICW3 will be accepted; 

— To determine whether or not ICW4 will be issued; 
that is, if any of the ICW4 operations are to be 
used. 

ICW2 

ICW2 is provided for compatibility with the 82C59A 
only. Its contents do not affect the operation of the 
interrupt bank in any way. Whenever the ICW2 of 
any of the three banks is written into, an interrupt is 
generated from bank A at level 1.5. The interrupt 
request will be cleared after the ICW2 register has 
been read by the 90376. The user is expected to 
program the corresponding vector register or to use 
it as an indicator that an attempt was made to alter 
the contents. Note that each ICW2 register has dif- 
ferent addresses for read and write operations. 

ICW3 

The interrupt bank will only accept an ICW3 If pro- 
grammed In the external cascade mode (as indicat- 
ed in ICW1). ICW3 Is used for specific programming 
within the cascade mode. The bits in ICW3 indicate 
which interrupt request inputs have a Slave cascad- 
ed to them. This will subsequently affect the inter- 
rupt vector generation during the interrupt acknowl- 
edge cycles as described previously. 


The ICW4 is accepted only if it was selected in 
ICW1 . This command word register serves two func- 
tions: 

— To select either the Automatic EOl mode or soft- 
ware EOl mode; 

— To select if the Special Nested mode is to be 
used in conjunction with the cascade mode. 

4.5.2 OPERATiON CONTROL WORDS (OCW) 

Once initialized by the ICW’s, the interrupt banks will 
be operating in the Fully Nested Mode by default 
and they are ready to accept interrupt requests. 
However, the operations of each Interrupt bank can 
be further controlled or modified by the use of 
OeW’s. Three OCW’s are available for programming 
various modes and commands. Note that all OCW’s 
are 8-bit write-only registers. 

The modes and operations controlled by the OCW’s 
are: 

— Fully Nested Mode; 

— Rotating Priority Mode; 

— Special Mask Mode; 

— Poll Mode; 

— EOl Commands; 

— Read Status Commands. 

OCW1 

OCW1 is used solely for masking operations. It pro- 
vides a direct link to the Internal Mask Register 
Th0 30376 can write to this OCW register to 
enable or disable the interrupt inputs. Reading the 
pre-programmed mask can be done via the Interrupt 
Mask Register which will be discussed shortly. 

OCW2 

OCW2 is used to select End-Of-Interrupt, Automatic 
Priority Rotation, and Specific Priority Rotation oper- 
ations. Associated commands and modes of these 
operations are selected using the different combina- 
tions of bits in OCW2. 

Specifically, the OCW2 Is used to: 

— Designate an interrupt level (0-7) to be used to 
reset a specific ISR bit or to set a specific priori- 
ty. This function can be enabled or disabled; 

— Select which software EOl command (if any) Is to 
be executed (i.e. Non-Specific or Specific EOl); 

— Enable one of the priority rotation operations (i.e. 
Rotate On Non-Specific EOl, Rotate On Auto- 
matic EOl, or Rotate On Specific EOl). 
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OCW3 

There are three main categories of operation that 
OCW3 controls. They are summarized as follows: 

— To select and execute the Read Status Register 
Commands, either reading the Interrupt Request 
Register (IRR) or the In-Service Register (ISR); 

— To issue the Poll Command. The Poll Command 
will override a Read Register Command if both 
functions are enabled simultaneously; 

— To set or reset the Special Mask Mode. 

4.5.3 POLL/INTERRUPT REQUEST/IN-SERVICE 
STATUS REGISTER 

As the name implies, this 8-bit read-only register has 
multiple functions. Depending on the command is- 
sued in the OCW3, the content of this register re- 
flects the result of the command executed. For a 
Poll Command, the register read contains the binary 
code of the highest priority level requesting service 
(if any). For a Read IRR Command, the register con- 
tent will show the current pending interrupt re- 
quest(s). Finally, for a Read ISR Command, this reg- 
ister will specify all interrupt levels which are being 
serviced. 

4.5.4 INTERRUPT MASK REGISTER (IMR) 

This Is a read-only 8-bit register which, when read, 
will specify all interrupt levels within the same bank 
that are masked. 


4.5.5 VECTOR REGISTERS (VR) 

Each interrupt request input has an 8-blt read/write 
programmable vector register associated with it. The 
registers should be programmed to contain the inter- 
rupt vector for the corresponding request. The con- 
tents of the Vector Register will be placed on the 
Data Bus during the INTA cycles as described previ- 
ously. 


4.6 Programming 

Programming the 82370 PIC is accomplished by us- 
ing two types of command words; ICW’s and 
OCW’s. All modes and commands explained in the 
previous sections are programmable using the 
ICW’s and OCW’s. The ICW’s are Issued from the 
80376 in a sequential format and are used to setup 
the banks in the 82370 PIC in an initial state of oper- 
ation. The OCW’s are issued as needed to vary and 
control the 82370 PIC’s operations. 

Both ICW’s and OCW’s are sent by the 80376 to the 
interrupt banks via the Data Bus. Each bank distin- 
guishes between the different ICW’s and OCW’s by 
the I/O address map, the sequence they are issued 
(ICW’s only), and by some dedicated bits among the 
ICW’s and OCW’s. 

An example of programming the 82370 interrupt 
controllers is given in Appendix C (Programming the 
82370 Interrupt Controllers). 

All three Interrupt banks are programmed in a similar 
way. Therefore, only a single bank will be described 
In the following sections. 

4.6.1 INITIALIZATION (ICW) 

Before normal operation can begin, each bank must 
be initialized by programming a sequence of two to 
four bytes written Into the ICW’s. 

Figure 4-6 shows the initialization flow for an inter- 
rupt bank. Both ICW1 and ICW2 must be issued for 
any form of operation. However, ICW3 and ICW4 are 
used only if designated in ICW1. Once initialized, if 
any programming changes within the ICW’s are to 
be made, the entire ICW sequence must be repro- 
grammed, not just an individual ICW. 

Note that although the ICW2’s in the 82370 PIC do 
not effect the Bank’s operation, they still must be 
programmed in order to preserve the compatibility 
with the 82C59A. The contents programmed are not 
relevant to the overall operations of the interrupt 
banks. Also, whenever one of the three ICW2’s is 
programmed, an interrupt level 1 .5 in Bank A will be 
generated. This Interrupt request will be cleared 
upon reading of the ICW2 registers. Since the three 
ICW2’s share the same interrupt level and the sys- 
tem may not know the origin of the interrupt, all three 
ICW2’s must be read. 
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*ICW2 vector address must be programmed now. 

Other vector addresses may be programmed via !GW2 interrupt service routine: 


Figure 4-6. Initialization Sequence 


Certain internal setup conditions occur automatically 

within the interrupt bank after the first ICW (ICW1) 

has been issued. These are; 

— The edge sensitive circuit is reset, which means 
that following initialization, an interrupt request 
input must make a HIGH-to-LOW transition to 
generate an interrupt; 

— The Interrupt Mask Register (IMR) is cleared; 
that Is, all interrupt inputs are enabled; 

— IRQ7 Input of each bank is assigned priority 7 
(lowest); 

— Special Mask Mode is cleared and Status Read 
is set to IRR; 

— If no ICW4 is needed, then no Automatic-EOI is 
selected. 


4.6.2 VECTOR REGISTERS (VR) 

Each interrupt request input has a separate Vector 
Register. Thesq Vector Registers are used to store 
the pre-programmed vector number corresponding 
to their Interrupt sources. In order to guarantee prop- 
er interrupt handling, ail Vector Registers must be 
programmed with the predefined vector numbers. 
Since an interrupt request will be generated whenev- 
er an ICW2 is written during the initialization se- 
quence, It Is important that the Vector Register of 
IRQ1 .5 in Bank A should be initialized and the inter- 
rupt service routine of this vector Is set up before the 
ICW’s are written. 
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4.6.3 OPERATION CONTROL WORDS (OCW) 

After the ICW’s are programmed, the operations of 
each interrupt controller bank can be changed by 
writing into the OCW’s as explained before. There is 
no special programming sequence required for the 
OCW’s. Any OCW may be written at any time in or- 
der to change the mode of or to perform certain op- 
erations on the interrupt banks. 

4.6.3. 1 Read Status and Poll Commands (OCW3) 

Since the reading of IRR and ISR status as well as 
the result of a Poll Command are available on the 
same read-only Status Register, a special Read 
Status/Poll Command must be issued before the 
Poll/Interrupt Request/ln-Service Status Register is 
read. This command can be specified by writing the 
required control word into OCW3. As mentioned ear- 
lier, if both the Poll Command and the Status Read 
Command are enabled simultaneously, the Poll 
Command will override the Status Read. That is, af- 
ter the command execution, the Status Register will 
contain the result of the Poll Command. 


Note that for reading IRR and ISR, there Is no need 
to issue a Read Status Command to the OCW3 ev- 
ery time the IRR or ISR Is to be read. Once a Read 
Status Command is received by the interrupt bank, it 
“remembers” which register is selected. However, 
this is not true when the Poll Command is used. 

In the Poll Command, after the OCW3 is written, the 
82370 PIC treats the next read to the Status Regis- 
ter as an interrupt acknowledge. This will set the ap- 
propriate IS bit if there is a request and read the 
priority level. Interrupt Request input status remains 
unchanged from the Poll Command to the Status 
Read. 

In addition to the above read commands, the Inter- 
rupt Mask Register (IMR) can also be read. When 
read, this register reflects the contents of the pre- 
programmed OCW1 which contains information on 
which interrupt request(s) is(are) currently disabled. 


4.7 Register Bit Definition 


INITIALIZATION COMMAND WORD 1 (ICW1) 


D7 D6 D5 D4 D3 D2 D1 DO 

1 X 1 X 1 X 1 1 1 LTIM 1 X 1 SNGL | IC4 | 


0 - NO ICW4 NEEDED 

1 - ICW4 NEEDED 

T 

CASCADE 

3 NEEDED) 

FERNAL CASCADE 

3 NOT NEEDED) 

290164-54 

i 

0 - EDGE TRIGGERED 

1 - LEVEL TRIGGERED ^ 

0 - EXTERI 

(iCW 

1 - NO EX' 

(ICW 


INITIALIZATION COMMAND WORD 2 (ICW2) 



CONTENT IS NOT RELEVANT TO THE ACTUAL 
OPERATION OF THE BANK BUT CAN BE READ 
BY THE INTERRUPT SERVICE ROUTINE TO 
DETERMINE WHERE THE INTERRUPT VECTORS 
OF EACH BANK START. 


290164-55 
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INITIALIZATION COMMAND WORD 3 (ICW3) 

ICW3 for Bank A: 

D7 D6 D5 D4 D3 D2 D1 DO 

i 0 I 0 I 0 I 0 I S 3 I 0 I 0 rn 

I — ► 0 - NO SLAVE CASCADED TO BANK A 
1 - THERE IS A SLAVE CASCADED 
TO TOUT2#/IRQ3# PIN 


ICW3 for Bank B: 


D7 D6 D5 D4 D3 D2 D1 DO 





— ► 0 - NO CASCADED REQUEST TO IRON 

1 “ THERE IS A CASCADED REQUEST 

CONNECTED TO IRON (I.E. THE 

CORRESPONDING INTERRUPT 

REQUEST INPUTS) 

290164-57 


ICW3 for Bank C: 


D7 D6 D5 D4 D3 D2 D1 DO 





— ► 0 - NO CASCADED REQUEST TO IRON 

1 - THERE IS A CASCADED REQUEST 

CONNECTED TO IRQN 

290164-58 


INITIALIZATION COMMAND WORD 4 (!CW4) 


D7 

D6 

D5 

D4 

D3 

D2 

D1 

DO 

Q 

□] 

Cl 

|sfnm| 

Z] 

z 

1 AEOI 

CD 


^ 0 = NORMAL EOl 
^ 1 = AUTOMATIC EOl 

w 0 = N0T SPECIAL FULLY NESTED MODE 
^ 1 = SPECIAL FULLY NESTED MODE 


290164-59 
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OPERATION CONTROL WORD 1 (OCW1) 


D7 D6 D5 D4 D3 D2 D1 DO 





w Mi = 1 MASK SET (INTERRUPT DISABLED) 

Mi = 0 MASK RESET (INTERRUPT ENABLED) 

290164-60 


OPERATION CONTROL WORD 2 (OCW2) 


D7 

D6 

D5 

D4 

D3 

D2 

D1 

DO 

u 

1 1 

1 1 

1 ^ 1 

1 ^ 1 

1 L2 1 

1 1 



^ r 


NON-SPECIFIC EOl COMMAND 
SPECIFIC EOl COMMAND 
ROTATE ON NON-SPECIFIC EOl 
ROTATE ON AUTO-EOI MODE (SET) 
ROTATE ON AUTO-EOI MODE (CLEAR) 
ROTATE ON SPECIFIC EOl (L2-L0 USED) 
SET PRIORITY (L2-L0 USED) 

NO OPERATION 


INTERRUPT LEVEL 
■ TO BE ACTED UPON 
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OPERATION CONTROL WORD 3 (OCW3) 


D7 

D6 

D5 

D4 

D3 

D2 

D1 

DO 



1 ° 

ESMM 

SMM 

0 

1 

P 

RR 

RIS 

] 



l_ 








1 



ESMM SMM ' 

r 






n 

RR 

RIS 


0 

0 NO ACTION 



'I 

r 



0 

0 

NO ACTION 

0 

1 NO ACTION 


1 - POLL COMMAND 

0 

1 

NO ACTION 

1 

0 RESET SPECIAL MASK 

0- NO POLL COMMAND 

1 

0 

READ IR REG. 

1 

1 SET SPECIAL MASK 






1 

1 

READ IS REG. 

290164-62 


ESMM — Enable Special Mask Mode. When this bit is set to 1, it- enables the SMM bit to set or reset the 
Special Mask Mode. When this bit is set to 0, SMM bit becomes don’t care. 

SMM — Special Mask Mode. If ESMM = 1 and SMM = 1 , the interrupt controller bank will enter Special Mask 
Mode. If ESMM = 1 and SMM = 0, the bank will revert to normal mask mode. When ESMM = 0, SMM 
has no effect. 
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POLL/INTERRUPT REQUEST/IN-SERVICE STATUS REGISTER 


Poll Command Status 


D7 D6 D5 D4 

D3 D2 

D1 DO 

\ ' \ ^\ ^\ ^ 

" 1 1 

wi|wo| 



L_ 

1 


► O-NO PENDING INTERRUPT 

1 - PENDING INTERRUPT 

BINARY CODE OF 

THE HIGHEST PRIORITY 

LEVEL REQUESTING 


290164-63 


Interrupt Request Status 


D7 

D6 

D5 

D4 D3 D2 D1 

DO 


1 IRQ7 

1 IRQ6 

IRQ5 

1 IRQ4 1 IRQ3 1 IRQ2 | IRQ1 

IRQO 1 



IF IRQ BIT IS: 

O-NO REQUEST 

1 - REQUEST PENDING 


290164-64 


NOTE: 

Although all Interrupt Request inputs are active LOW, the internal logical will invert the state of the pins so that when there 
is a pending interrupt request at the input, the corresponding IRQ bit will be set to HIGH in the Interrupt Request Status 
register. 

In-Service Status 


D7 

D6 

D5 

D4 D3 D2 D1 

DO 

1 IS7 

1 1^6 1 

1 1 

IS4 1 IS3 1 IS2 1 IS1 1 

Qsn 


IF IS BIT IS: 

0 - NOT IN-SERVICE 

1 - REQUEST IS IN-SERVICE 

290164-65 


VECTOR REGISTER (VR) 




n 


I 

8-BIT VECTOR NUMBER 

290164-66 
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Table 4-4. Register Operational Summary 


Operational 

Description 

Command 

Words 

Bits 

Fully Nested Mode 

Non-specific EOl Command 

OCW-Default 

OCW2 

EOl 

Specific EOl Command 

OCW2 

SL, EOl, L0-L2 

Automatic EOl Mode 

ICW1, ICW4 

IC4, AEOI 

Rotate On Non-Specific 

OCW2 

EOl 

EOl Command 



Rotate On Automatic 

OCW2 

R, SL, EOl 

EOl Mode 



Set Priority Command 

OCW2 

L0-L2 

Rotate On Specific 

OCW2 

R, SL, EOl 

EOl Command 



Interrupt Mask Register 

OCW1 

M0-M7 

Special Mask Mode 

OCW3 

ESMM, SMM 

Level Triggered Mode 

ICW1 

LTIM 

Edge Triggered Mode 

ICW1 

LTIM 

Read Register Command, IRR 

OCW3 

RR, RIS 

Read Register Command, ISR 

OCW3 

RR. RIS 

Read IMR 

IMR 

M0-M7 

Poll Command 

OCW3 

P 

Special Fully Nested Mode 

ICW1, ICW4 

IC4, SFNM 


4.8 Register Operational Summary 

For ease of reference, Table 4-4 gives a summary of 
the different operating modes and commands with 
their corresponding registers. 


5.0 PROGRAMMABLE INTERVAL 
TIMER 


5.1 Functional Description 

The 82370 contains four independently Programma- 
ble Interval Timers; Timer 0-3. All four timers are 
functionally compatible to the Intel 82C54. The first 
three timers (Timer 0-2) have specific functions. 
The fourth timer, Timer 3, is a general purpose timer. 
Table 5-1 depicts the functions of each timer. A brief 
description of each timer’s function follows. 


Table 5-1. Programmable 
Interval Timer Functions 


Timer 

Output 

Function 

0 

IRQ8 

Event Based IRQ8 Generator 

1 

TOUT1/REF# 

Gen. Purpose/DRAM 

Refresh Req. 

2 

TOUT2/IRQ3# 

Gen, Purpose/Speaker 
Out/IRQ3# 

3 

TOUT3# 

Gen. Purpose/IRQO 
Generator 


TIMER 0— Event Based Interrupt Request 8 
Generator 

Timer 0 is intended to be used as an Event Counter. 
The output of this timer will generate an Interrupt 
Request 8 (IRQ8) upon a rising edge of the timer 
output (TOUTO). Normally, this timer is used to im- 
plement a time-of-day clock or system tick. The Tim- 
er 0 output Is not available as an external signal. 

TIMER 1— General Purpose/DRAM Refresh 
Request 

The output of Timer 1, TOUT1, can be used as a 
general purpose timer or as a DRAM Refresh Re- 
quest signal. The rising edge of this output creates a 
DRAM refresh request to the 82370 DRAM Refresh 
Controller. Upon reset, the Refresh Request func- 
tion is disabled, and the output pin is the Timer 1 
output. 

TIMER 2 — General Purpose/Speaker Out/IRQ3# 

The Timer 2 output, TOUT2#, could be used to sup- 
port tone generation to an external speaker. This pin 
is a bidirectional signal. When used as an input, a 
logic LOW asserted at this pin will generate an Inter- 
rupt Request 3 (IRQ3#) (see Programmable Inter- 
rupt Controller). 
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Figure 5-1. Block Diagram of Programmable Interval Timer 


TIMER 3— General Purpose/Interrupt Request 0 
Generator 

The output of Timer 3 is fed to an edge detector and 
generates an Interrupt Request 0 (IRQO) in the 
82370. The inverted output of this timer (TOUT3#) 
is also available as an external signal for general 
purpose use. 

5.1.1 INTERNAL ARCHITECTURE 

The functional block diagram of the Programmable 
Interval Timer section is shown In Figure 5-1. Follow- 
ing Is a description of each block. 

DATA BUFFER & READ/WRITE LOGIC 

This part of the Programmable Interval Timer Is used 
to interface the four timers to the 82370 internal bus. 
The Data Buffer Is for transferring commands and 
data between the 8-blt internal bus and the timers. 


The Read/Write Logic accepts inputs from the inter- 
nal bus and generates signals to control other func- 
tional blocks within the timer section. 

CONTROL WORD REGISTERS I & II 

The Control Word Registers are write-only registers. 
They are used to control the operating modes of the 
timers. Control Word Register I controls Timers 0, 1 
and 2, and Control Word Register 11 controls Timer 
3. Detailed description of the Control Word Regis- 
ters will be included in the Register Set Overview 
section. 

COUNTER 0, COUNTER 1, COUNTER 2, 
COUNTER 3 

Counters 0, 1 , 2, and 3 are the major parts of Timers 
0, 1,2, and 3, respectively. These four functional 
blocks are identical in operation, so only a single 
counter will be described. The internal block dia- 
gram of one counter is shown in Figure 5-2. 


4-912 




82370 


inl^ 



Figure 5-2. Internal Block Diagram of a Counter 


The four counters share a common clock input 
(CLKIN), but otherwise are fully independent. Each 
counter is programmable to operate in a different 
mode. 

Although the Control Word Register is shown in the 
figure, it is not part of the counter itself. Its pro- 
grammed contents are used to control the opera- 
tions of the counters. 

The Status Register, when latched, contains the cur- 
rent contents of the Control Word Register and 
status of the output and Null Count Flag (see Read 
Back Command). 

The Counting Element (CE) is the actual counter. It 
Is a 1 6-bit presettable synchronous down counter. 

The Output Latches (OL) contain two 8-bit latches 
(OLM and OLL). Normally, these latches “follow” 
the content of the CE. OLM contains the most signif- 
icant byte of the counter and OLL contains the least 
significant byte. If the Counter Latch Command is 
sent to the counter, OL will latch the present count 
until read by the 80376 and then return to follow the 
CE. One latch at a time is enabled by the timer’s 
Control Logic to drive the internal bus. This is how 
the 16-bit Counter communicates over the 8-bit In- 
ternal bus. Note that CE cannot be read. Whenever 
the count is read, it is one of the OL’s that is being 
read. 


When a new count is written into the counter, the 
value will be stored In the Count Registers (CR), and 
transferred to CE. The transferring of the contents 
from CR’s to CE is defined as “loading” of the coun- 
ter. The Count Register contains two 8-bit registers: 
CRM (which contains the most significant byte) and 
CRL (which contains the least significant byte). Simi- 
lar to the OL’s, the Control Logic allows one register 
at a time to be loaded from the 8-bit Internal bus. 
However, both bytes are transferred from the CR’s 
to the CE simultaneously. Both CR’s are cleared 
when the Counter is programmed. This way, if the 
Counter has been programmed for one byte count 
(either the most significant or the least significant 
byte only), the other byte will be zero. Note that CE 
canriot be written into directly. Whenever a count is 
written. It is the CR that Is being written. 

As shown In the diagram, the Control Logic consists 
of three signals: CLKIN, GATE, and OUT. CLKIN 
and GATE will be discussed in detail in the section 
that follows. OUT is the internal output of the coun- 
ter. The external outputs of some timers (TOUT) are 
the inverted version of OUT (see TOUT1, TOUT2#, 
TOUT3#). The state of OUT depends on the mode 
of operation of the timer. 
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5.2 Interface Signals 

5.2.1 CLKIN 

CLKIN is an input signal used by all four timers for 
internal timing reference. This signal can be inde- 
pendent of the 82370 system clock, CLK2. In the 
following discussion, each “CLK Pulse” Is defined 
as the time period between a rising edge and a fall- 
ing edge, in that order, of CLKIN. 

During the rising edge of CLKIN, the state of GATE 
is sampled. All new counts are loaded and counters 
are decremented on the falling edge of CLKIN. 

5.2.2 TOUT1, TOUT2#, TOUT3# 

TOUT1, TOLIT2# and TOUTS# are the external 
output signals of Timer 1 , Timer 2 and Timer 3, re- 
spectively. TOUT2# and TOUTS# are the inverted 
signals of their respective counter outputs, OUT. 
There is no external output for Timer 0. 

If Timer 2 is to be used as a tone generator of a 
speaker, external buffering must be used to provide 
sufficient drive capability. 

The Outputs of Timer 2 and 3 are dual function pins. 
The output pin of Timer 2 (TOUT2#/IRQ3#), which 
is a bidirectional open-collector signal, can also be 
used as Interrupt request Input. When the interrupt 
function is enabled (through the Programmable In- 
terrupt Controller), a LOW on this input will generate 
an Interrupt Request 3# to the 82370 Programma- 
ble Interrupt Controller. This pin has a weak Internal 
pull-up resistor. To use the IRQ3# function. Timer 2 
should be programmed so that OUT2 is LOW. Addi- 
tionally, OUT3 of Timer 3 is connected to an edge 

I r\+Arri DArtiiAol* 
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(IRQO) to the 82370 after the rising edge of OUT3 
(see Figure 5-1). 

5.2.3 GATE 

GATE is not an externally controllable signal. Rath- 
er, it can be software controlled with the Internal 
Control Port. The state of GATE is always sampled 
on the rising edge of CLKIN. Depending on the 
mode of operation, GATE Is used to enable/disable 
counting or trigger the start of an operation. 

For Timer 0 and 1, GATE is always enabled (HIGH). 
For Timer 2 and 3, GATE Is connected to Bit 0 and 
6, respectively, of an Internal Control Port (at ad- 
dress 61 H) of the 82370. After a hardware reset, the 
state of GATE of Timer 2 and 3 is disabled (LOW). 


5.3 Modes of Operation 

Each timer can be independently programmed to 
operate in one of six different modes. Timers are 
programmed by writing a Control Word into the Con- 
trol Word Register followed by an Initial Count (see 
Programming). 

The following are defined for use in describing the 
different modes of operation. 

CLK Pulse — A rising edge, then a falling edge, in 
that order, of CLKIN. 

Trigger — A rising edge of a timer’s GATE input. 

Timer/ Counter Loading — The transfer of a count 
from Count Register 
(CR) to Count Element 
(CE). 


5.3.1 MODE 0-INTERRUPT ON TERMINAL 
COUNT 

Mode 0 is typically used for event counting. After the 
Control Word is written, OUT is Initially LOW, and will 
remain LOW until the counter reaches zero. OUT 
then goes HIGH and remains HIGH until a new 
count or a new Mode 0 Control Word is written Into 
the counter. 

In this mode, GATE = HIGH enables counting; 
GATE = LOW disables counting. However, GATE 
has no effect on OUT. 

.After the Control Word and initial count are written to 
a timer, the initial count will be loaded on the next 
CLK pulse. This CLK pulse does not decrement the 
count, so for an Initial count of N, OUT does not go 
HiGH until N-t- i CLK puises after the initiai count is 
written. 

If a new count is written to the timer. It will be loaded 
on the next CLK pulse and counting will continue 
from the new count. If a two-byte count is written, 
the following happens: 

1. Writing the first byte disables counting, OUT is set 
LOW immediately (I.e. no CLK pulse required). 

2. Writing the second byte allows the new count to 
be loaded on the next CLK pulse. 

This allows the counting sequence to be synchroniz- 
ed by software. Again, OUT does not go HIGH until 
N + 1 CLK pulses after the new count of N is written. 
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CW = 10 LSB« 4 

n / 

“ jirumnj\nj\ruir 

GATE — “ 
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CW = 10 LSB=:3 

WRITE ~U~U 

“ j\ru\ruiJuiJvirLr 

GATE \ f 

rz3 I 


CW = 10 LSB = 3 ^LSB=:2 

T_rLJ LJ 

jv\su\f\j\r\i\nj\r 

GATE 

1 I 

I - 1 - 1 « I « I “a I n ; I n ; I s UM 
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NOTES: 

The following conventions apply to all mode timing diagrams. 

1 . Counters are programmed for binary (not BCD) counting and for reading/writing least significant byte (LSB) only. 

2. The counter is always selected (CS# always low). 

3. CW stands for “Control Word”; CW = 10 means a control word of 10, Hex is written to the counter. 

4. LSB stands for “Least significant byte” of count. 

5. Numbers below diagrams are count values. 

The lower number is the least significant byte. 

The upper number is the most significant byte. Since the counter is programmed to read/write LSB only, the most 
significant byte cannot be read. 

N stands for an undefined count. 

Vertical lines show transitions between count values. 


Figure 5-3. Mode 0 


If an initial count is written while GATE is LOW, the 
counter will be loaded on the next CLK pulse. When 
GATE goes HIGH, OUT will go HIGH N CLK pulses 
later; no CLK pulse is needed to load the counter as 
this has already been done. 


one-shot operation. The OUT signal will then remain 
LOW until the timer reaches zero. At this point, OUT 
will stay HIGH until the next trigger comes in. Since 
the state of GATE signals of Timer 0 and 1 are Inter- 
nally set to HIGH. 


5.3.2 MODE 1>GATE RETRIGGERABLE 
ONE-SHOT 

In this mode, OUT will be initially HIGH. OUT will go 
LOW on the CLK pulse following a trigger to start the 


After writing the Control Word and initial count, the 
timer is considered “armed”. A trigger results in 
loading the timer and setting OUT LOW on the next 
CLK pulse. Therefore, an initial count of N will result 
In a one-shot pulse width of N CLK cycles. Note 
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Figure 5-4. Mode 1 


that this one-shot operation is retriggerable; i.e. OUT 
will remain LOW for N CLK pulses after every trigger. 
The one-shot operation can be repeated without re- 
writing the same count into the timer. 

If a new count is written to the timer during a one- 
shot operation, the current one-shot pulse width will 
not be affected until the timer is retriggered. This is 
because loading of the new count to CE will occur 
only when the one-shot is triggered. 

5.3.3 MODE 2-RATE GENERATOR 

This mode is a divide-by-N counter. It is typically 
used to generate a Real Time Clock interrupt. OUT 
will initially be HIGH. When the Initial count has dec- 


remented to 1 , OUT goes LOW for one CLK pulse, 
then OUT goes HIGH again. Then the timer reloads 
the Initial count and the process is repeated. In other 
words, this mode is periodic since the same se- 
quence is repeated itself indefinitely. For an initial 
count of N, the sequence repeats every N CLK cy- 
cles. 

Similar to Mode 0, GATE = HIGH enables counting, 
where GATE = LOW disables counting. If GATE 
goes LOW during an output pulse (LOW), OUT is set 
HIGH immediately. A trigger (rising edge on GATE) 
will reload the timer with the initial count on the next 
CLK pulse. Then, OUT will go LOW (for one CLK 
pulse) N CLK pulses after the new trigger. Thus, 
GATE can be used to synchronize the timer. 
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CW = 14 LSB = 3 


WRITE 


"U^^J 

jmmuumjvij^ 


N N N N 


CW = 14 LSB = 3 


i_j — L_r 


0 0 0 0 0 0 0 

3 2 1 3 2 1 3 


WRITE 


CLK 


“L_rLJ — 

j\iu\nj^iuwju\^ 


OUT 


U~ 


N N N N 


CW=:14 LSB = 4 


0 0 0 0 0 0 0 

3 12 2 3 2 1 3 


WRITE 

CLK 

GATE 

OUT 


U 

jmiumriruvmr 


u 


N N N N 


0 0 0 0 0 0 0 

4 3 2 1 5 4 3 


NOTE: 

A GATE transition should not occur one clock prior to terminal count 


Figure 5-5. Mode 2 


After writing a Control Word and initial count, the 
timer will be loaded on the next CLK pulse. OUT 
goes LOW (for one CLK pulse) N CLK pulses after 
the initial count is written. This is another way the 
timer may be synchronized by software. 

Writing a new count while counting does not affect 
the current counting sequence because the new 
count will not be loaded until the end of the current 
counting cycle. If a trigger is received after writing a 


new count but before the end of the current period, 
the timer will bb loaded with the new count on the 
next CLK pulse after the trigger, and counting will 
continue with the new count. 


5.3.4 MODE 3-SQUARE WAVE GENERATOR 

Mode 3 is typically used for Baud Rate generation. 
Functionally, this mode is similar to Mode 2 except 
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for the duty cycle of OUT. In this mode, OUT will be 
initially HIGH. When half of the initial count has ex- 
pired, OUT goes low for the remainder of the count. 
The counting sequence will be repeated, thus this 
mode is also periodic. Note that an initial count of N 
results in a square wave with a period of N CLK 
pulses. 

The GATE Input can be used to synchronize the tim- 
er. GATE = HIGH enables counting; GATE=LOW 
disables counting. If GATE goes LOW while OUT Is 
LOW, OUT is set HIGH immediately (i.e. no CLK 
pulse is required). A trigger reloads the timer with the 
initial count on the next CLK pulse. 

After writing a Control Word and initial count, the 
timer will be loaded on the next CLK pulse. This al- 
lows the timer to be synchronized by software. 

Writing a new count while counting does not affect 
the current counting sequence. If a trigger is re- 
ceived after writing a new count but before the end 
of the current half-cycle of the square wave, the tim- 
er will be loaded with the new count on the next CLK 
pulse and counting will continue from the new count. 
Otherwise, the new count will be loaded at the end 
of the current half-cycle. 


There Is a slight difference in operation depending 
on whether the Initial count is EVEN or ODD. The 
following description is to show exactly how this 
mode Is Implemented. 

EVEN COUNTS: 

OUT is initially HIGH. The initial count is loaded on 
one CLK pulse and Is decremented by two on suc- 
ceeding CLK pulses. When the count expires (decre- 
mented to 2), OUT changes to LOW and the timer is 
reloaded with the initial count. The above process is 
repeated indefinitely. 

ODD COUNTS: 

OUT is initially HIGH. The initial count minus one 
(which is an even number) is loaded on one CLK 
pulse and is decrerfiented by two on succeeding 
CLK pulses. One CLK pulse after the count expires 
(decremented to 2), OUT goes LOW and the timer is 
loaded with the initial count minus one again. Suc- 
ceeding CLK pulses decrement the count by two. 
When the count expires, OUT goes HIGH Immedi- 
ately and the timer Is reloaded with the initial count 
minus one. The above process Is repeated Indefi- 
nitely. So for ODD counts, OUT will HIGH or 
(N + 1)/2 counts and LOW for (N-1)/2 counts. 
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5.3.5 MODE 4-INmAL COUNT TRIGGERED 
STROBE 

This mode allows a strobe pulse to be generated by 
writing an initial count to the timer. Initially, OUT will 
be HIGH. When a new initial count is written into the 
timer, the counting sequence will begin. When the 
initial count expires (decremented to 1), OUT will go 
LOW for one CLK pulse and then go HIGH again. 

Again, GATE = HIGH enables counting while 
GATE = LOW disables counting. GATE has no ef- 
fect on OUT. 


After writing the Control Word and Initial count, the 
timer will be loaded on the next CLK pulse. This CLK 
pulse does not decrement the count, so for an Initial 
count of N, OUT does not strobe LOW until N + 1 
CLK pulses after initial count is written. 

If a new count is written during counting, it will be 
loaded In the next CLK pulse and counting will con- 
tinue from the new count. 
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Figure 5-7. Mode 4 


If a two-byte count is written, the following will occur: 

1 . Writing the first byte has no effect on counting. 

2. Writing the second byte allows the new count to 
be loaded on the next CLK pulse. 

OUT will strobe LOW N + 1 CLK pulses after the 
new count of N is written. Therefore, when the 
strobe pulse will occur after a trigger depends on the 
value of the initial count loaded. 


by writing an Initial count. Initially, OUT will be HIGH. 
Counting is triggered by a rising edge of GATE. 
When the initial count has expired (decremented to 
1), OUT will go LOW for one CLK pulse and then go 
HIGH again. 

After loading the Control Word and initial count, the 
Count Element will not be loaded until the CLK pulse 
after a trigger. This CLK pulse does not decrement 
the count. Therefore, for an Initial count of N, OUT 
does not strobe LOW until N + 1 CLK pulses after a 
trigger. 


5.3.6 MODE 5-GATE RETRIGGERABLE 
STROBE 

Mode 5 Is very similar to Mode 4 except the count 
sequence is triggered by the gate signal instead of 
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The counting sequence is retriggerable. Every trig- 
ger will result in the timer being loaded with the initial 
count on the next CLK pulse. 

If the new count is written during counting, the cur- 
rent counting sequence will not be affected. If a trig- 
ger occurs after the new count is written but before 
the current count expires, the timer will be loaded 
with the new count on the next CLK pulse and a new 
count sequence will start from there. 


5.3.7 OPERATION COMMON TO ALL MODES 
5.3.7.1 GATE 

The GATE input is always sampled on the rising 
edge of CLKIN. In Modes 0, 2, 3 and 4, the GATE 
input is level sensitive. The logic level is sampled on 
the rising edge of CLKIN. In Modes 1 , 2, 3 and 5, the 
GATE input is rising edge sensitive. In these modes. 
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Summary of Gate Operations 


Mode 

GATE LOW or Going LOW 

GATE Rising 

HIGH 

0 

Disable count 

No Effect 

Enable count 

1 

No Effect 

1 . Initiate count 

2. Reset output 

No Effect 



after next clock 


2 

1 . Disable count 

2. Sets output HIGH 

Initiate count 

Enable count 


immediately 



3 

1 . Disable count 

2. Sets output HIGH 

initiate count 

L-i laui^ u>v/ui 11 


immediately 



4 

Disable count 

No Effect 

Enable count 

5 

No Effect 

Initiate count 

No Effect 


a rising edge of GATE (trigger) sets an edge sensi- 
tive flip-flop in the timer. The flip-flop is reset imme- 
diately after It is sampled. This way, a trigger will be 
detected no matter when It occurs; I.e. a HIGH logic 
level does not have to be maintained until the next 
rising edge of CLKIN. Note that in Modes 2 and 3, 
the GATE input is both edge and level sensitive. 

5.3.7.2 Counter 

New counts are loaded and counters are decre- 
mented on the falling edge of CLKIN. The largest 
possible initial count is 0. This Is equivalent to 2**16 
for binary counting and 10**4 for BCD counting. 

Note that the counter does not stop when it reaches 
zero. In Modes 0, 1, 4 and 5, the counter ‘wraps 
around’ to the highest count: either FFFF Hex for 
binary counting or 9999 for BCD counting, and con- 
tinues counting. Modes 2 and 3 are periodic. The 
counter reloads itself with the initial count and con- 
tinues counting from there. 

The minimum and maximum Initial count in each 
counter depends on the mode of operation. They 
are summarized below. 


Mode 

Min 

Max 

0 

1 

0 

1 

1 

0 

2 

2 

0 

3 

2 

0 

4 

1 

0 

5 

1 

0 


5.4 Register Set Overview 

The Programmable Interval Timer module of the 
82370 contains a set of six registers. The port ad- 
dress map of these registers is shown In Table 5-2. 


Table 5-2. Timer Register Port Address Map 


Port Address 

Description 

40H 

Counter 0 Register (read/write) 

41 H 

Counter 1 Register (read/write) 

42H 

Counter 2 Register (read/write) 

43H 

Control Word Register 1 
(Counter 0, 1 & 2) (write-only) 

44H 

Counter 3 Register (read/write) 

45H 

Reserved 

46H 

Reserved 

47H 

Control Word Register II 
(Counter 3) (write-only) 


5.4.1 COUNTER 0, 1, 2, 3 REGISTER 

These four 8-bit registers are functionally Identical. 
They are used to write the initial count value into the 
respective timer. Also, they can be used to read the 
latched count value of a timer. Since they are 8-bit 
registers, reading and writing of the 16-bit initial 
count must follow the count format specified in the 
Control Word Registers; i.e. least significant byte 
only, most significant byte only, or least significant 
byte then most significant byte (see Programming). 

5.4.2 CONTROL WORD REGISTER I & II 

There are two Control Word Registers associated 
with the Timer section. One of the two registers 
(Control Word Register I) is used to control the oper- 
ations of Counters 0, 1 and 2 and the other (Control 
Word Register II) is for Counter 3. The major func- 
tions of both Control Word Registers are listed be- 
low: 
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— Select the timer to be programmed. 

— Define which mode the selected timer is to oper- 
ate in. 

— Define the count sequence; i.e. if the selected 
timer is to count as a Binary Counter or a Binary 
Coded Decimal (BCD) Counter. 

— Select the byte access sequence during timer 
read/write operations; i.e. least significant byte 
only, most significant only, or least significant 
byte first, then most significant byte. 

Also, the Control Word Registers can be pro- 
grammed to perform a Counter Latch Command or a 

Read Back Command which will be described later. 


5.5 Programming 

5.5.1 INITIALIZATION 

Upon power-up or reset, the state of all timers is 
undefined. The mode, count value, and output of all 
timers are random. From this point on, how each 
timer operates is determined solely by how It is pro- 
grammed. Each timer must be programmed before it 
can be used. Since the outputs of some timers can 
generate interrupt signals to the 82370, all timers 
should be initialized to a known state. 

Counters are programmed by writing a Control Word 
into their respective Control Word Registers. Then, 
an Initial Count can be written into the correspond- 
ing Count Register. In general, the programming pro- 
cedure is very flexible. Only two conventions need to 
be remembered; 

1 . For each timer, the Control Word must be written 
before the initial count is written. 

2. The 1 6-bit initial count must follow the count for- 
mat specified in the Control Word (least significant 
byte only, most significant byte only, or least signifi- 
cant byte first, followed by most significant byte). 

Since the two Control Word Registers and the four 
Counter Registers have separate addresses, and 
each timer can be individually selected by the appro- 
priate Control Word Register, no special instruction 
sequence is required. Any programming sequence 
that follows the conventions above is acceptable. 

A new initial count may be written to a timer at any 
time without affecting the timer’s programmed mode 
in any way. Count sequence will be affected as de- 
scribed in the Modes of Operation section. Note that 
the new count must follow the programmed count 
format. 


If a timer Is previously programmed to read/write 
two-byte counts, the following precaution applies. A 
program must not transfer control between writing 
the first and second byte to another routine which 
also writes Into the same timer. Otherwise, the read/ 
write will result in incorrect count. 

Whenever a Control Word is written to a timer, all 
control logic for that timer(s) is immediately reset 
(I.e. no CLK pulse is required). Also, the correspond- 
ing output in, TOUT#, goes to a known Initial state. 

5.5.2 READ OPERATION 

Three methods are available to read the current 
count as well as the status of each timer. They are: 
Read Counter Registers, Counter Latch Command 
and Read Back Command. Below is a description of 
these methods. 

READ COUNTER REGISTERS 

The current count of a timer can be read by perform- 
ing a read operation on the corresponding Counter 
Register. The only restriction of this read operation 
is that the CLKIN of the timers must be inhibited by 
using external logic. Otherwise, the count may be in 
the process of changing when It is read, giving an 
undefined result. Note that since all four timers are 
sharing the same CLKIN signal, inhibiting CLKIN to 
read a timer will unavoidably disable the other timers 
also. This may prove to be impractical. Therefore, it 
is suggested that either the Counter Latch Com- 
mand or the Read Back Command can be used to 
read the current count of a timer. 

Another alternative is to temporarily disable a timer 
before reading its Counter Register by using the 
GATE input. Depending on the mode of operation, 
GATE = LOW will disable the counting operation. 
However, this option is available on Timer 2 and 3 
only, since the GATE signals of the other two timers 
are internally enabled all the time. 

COUNTER LATCH COMMAND 

A Counter Latch Command will be executed when- 
ever a special Control Word Is written into a Control 
Word Register. Two bits written into the Control 
Word Register distinguish this command from a ‘reg- 
ular’ Control Word (see Register Bit Definition). Also, 
two other bits in the Control Word will select which 
counter is to be latched. 

Upon execution of this command, the selected 
counter’s Output Latch (OL) latches the count at the 
time the Counter Latch Command Is received. This 
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count is held in the latch until it is read by the 80376, 
or until the timer is reprogrammed. The count is then 
unlatched automatically and the OL returns to “fol- 
lowing” the Counting Element (CE). This allows 
reading the contents of the counters “on the fly” 
without affecting counting in progress. Multiple 
Counter Latch Commands may be used to latch 
more than one counter. Each latched count is held 
until it Is read. Counter Latch Commands do not af- 
fect the programmed mode of the timer in any way. 

If a counter is latched, and at some time later, it is 
latched again before the prior latched count is read, 
the second Counter Latch Command is ignored. The 
count read will then be the count at the time the first 
command was issued. , 

In any event, the latched count must be read ac- 
cording to the programmed format. Specifically, if 
the timer Is programmed for two-byte counts, two 
bytes must be read. However, the two bytes do not 
have to be read right after the other. Read/write or 
programming operations of other timers may be per- 
formed between them. 

Another feature of this Counter Latch Command is 
that read and write operations of the same timer 
may be interleaved. For example, If the timer Is pro- 
grammed for two-byte counts, the following se- 
quence is valid. 

1 . Read least significant b^^e. 

2. Write new least significant byte. 

3. Read most significant byte. 

4. Write new most significant byte. 

If « '•■■mm. its r\r/^/^romrviAr4 rAQrl 
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counts, the following precaution applies. A program 
must not transfer control between reading the first 
and second byte to another routine which also reads 
from that same timer. Otherwise, an incorrect count 
will be read. 

READ BACK COMMAND 

The Read Back Command is another special Com- 
mand Word operation which allows the user to read 
the current count value and/qr the status of the se- 
lected timer(s). Like the Counter Latch Command, 
two bits In the Command Word identify this as a 
Read Back Command (see Register Bit Definition). 

The Read Back Command may be used to latch 
multiple counter Output Latches (OL’s) by selecting 
more than one timer within a Command Word. This 
single command is functionally equivalent to several 
Counter Latch Commands, one for each counter to 


be latched. Each counter’s latched count will be 
held until it is read by the 80376 or until the timer is 
reprogrammed. The counter is automatically un- 
latched when read, but other counters remain 
latched until they are read. If multiple Read Back 
commands are issued to the same timer without 
reading the count, all but the first are ignored; I.e. the 
count read will correspond to the very first Read 
Back Command issued. 

As mentioned previously, the Read Back Command 
may also be used to latch status information of the 
selected timer(s). When this function is enabled, the 
status of a timer can be read from the Counter Reg- 
ister after the Read Back Command is issued. The 
status information of a timer includes the following: 

1 . Mode of timer: 

This allows the user to check the mode of opera- 
tion of the timer last programmed. 

2. State of TOUT pin of the timer: 

This allows the user to monitor the counter’s out- 
put pin via software, possibly eliminating some 
hardware from a system. 

3. Null Count/Count available: 

The Null Count Bit in the status byte indicates if 
the last count written to the Count Register (CR) 
has been loaded into the Counting Element (CE). 
The exact time this happens depends on the 
mode of the timer and is described in the Pro- 
gramming section. Until the count Is loaded Into 
the Counting Element (CE), it cannot be read from 
the timer. If the count Is latched or read before 
this occurs, the count value will not reflect the 
new count just written. 

If multiple status latch operations of the timer(s) are 
performed without reading the status, ail but the first 
command are ignored; i.e. the status read in will cor- 
respond to the first Read Back Command Issued. 

Both the current count and status of the selected 
timer(s) may be latched simultaneously by enabling 
both functions in a single Read Back Command. 
This is functionally the same as Issuing two separate 
Read Back Commands at once. Once again, if multi- 
ple read commands are issued to latch both the 
count and status of a timer, ail but the first command 
will be ignored. 

If both count and status of a timer are latched, the 
first read operation of that timer will return the 
latched status, regardless of which was latched first. 
The next one or two (If two count bytes are to be 
read) read operations return the latched count. Note 
that subsequent read operations on the Counter 
Register will return the unlatched count (like the first 
read method discussed). 
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5.6 Register Bit Definitions 

COUNTER 0, 1, 2, 3 REGISTER (READ/WRITE) 


Port Address 

Description 

40H 

Counter 0 Register (read/write) 

41 H 

Counter 1 Register (read/write) 

42H 

Counter 2 Register (read/write) 

44H 

Counter 3 Register (read/write) 

45H 

Reserved 

46H 

Reserved 


Note that these 8-bit registers are for writing and 
reading of one byte of the 1 6-bit count value, either 
the most significant or the least significant byte. 

CONTROL WORD REGISTER I & II (WRITE- 
ONLY) 


Port Address 

Description 

43H 

Control Word Register 1 
(Counter 0, 1 , 2 (write-only) 

47H 

Control Word Register 11 
(Counter 3) (write-only) 
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COUNTER LATCH COMMAND FORMAT 


(Write to Control Word Register) 
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6.0 WAIT STATE GENERATOR 


6.1 Functional Description 

The 82370 contains a programmable Wait State 
Generator which can generate a pre-programmed 
number of wait states during both CPU and DMA 
initiated bus cycles. This Wait State Generator is ca- 
pable of generating 1 to 1 6 wait states in non-pipe- 
lined mode, and 0 to 15 wait states in pipelined 
mode. Depending on the bus cycle type and the two 
Wait State Control inputs (WSC 0-1), a pre-pro- 
grammed number of wait states in the selected Wait 
State Register will be generated. 

The Wait State Generator can also be disabled to 
allow the use of devices capable of generating their 
own READY# signals. Figure 6-1 is a block diagram 
of the Wait State Generator. 


6.2 Interface Signals 

The following describes the interface signals which 
affect the operation of the Wait State Generator. 
The READY#, WSCO and WSC1 signals are inputs. 
READYO# is the ready output signal to the host 
processor. 


6.2.1 READY# 

READY# is an active LOW Input signal which indi- 
cates to the 82370 the completion of a bus cycle. In 
the Master mode (e.g. 82370 initiated DMA transfer), 
this signal Is monitored to determine whether a pe- 
ripheral or memory needs wait states inserted in the 
current bus cycle. In the Slave mode, it is used (to- 
gether with the ADS# signal) to trace CPU bus cy- 
cles to determine if the current cycle is pipelined. 


6.2.2 READYO# 

READYO# (Ready Out#) is an active LOW output 
signal and is the output of the Wait State Generator. 
The number of wait states generated depends on 
the WSC(O-I) inputs. Note that special cases are 
handled for access to the 82370 internal registers 
and for the Refresh cycles. For 82370 internal regis- 
ter access, READYO# will be delayed to take Into 
the command recovery time of the register. One or 
more wait states will be generated In a pipelined cy- 
cle. During refresh, the number of wait states will be 
determined by the preprogrammed value in the Re- 
fresh Wait State Register. 

In the simplest configuration, READYO# can be 
connected to the READY# input of the 82370 and 
the 80376 CPU. This is, however, not always the 
case. If external circuitry is to control the READY# 
Inputs as well, additional logic will be required (see 
Application Issues). 


6.2.3 WSC(O-I) 

These two Wait State Control inputs, together with 
the M/IO# Input, select one of the three pre-pro- 
grammed 8-bit Wait State Registers which deter- 
mines the number of wait states to be generated. 
The most significant half of the three Wait State 
Registers corresponds to memory accesses, the 
least significant half to I/O accesses. The combina- 
tion WSC(O-I) = 1 1 disables the Wait State Gener- 
ator. 


WSCO 

WSC1 

M/IO# 


INTERNAL WAIT STATE 


READYO# 



PROGRAMMABLE WAIT STATE 
REGISTERS 


290164-81 


Figure 6-1. Wait State Generator Biock Diagram 
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6.3 Bus Function 

6.3.1 WAIT STATES IN NON-PIPELINED CYCLE 

The timing diagram of two typical non-pipelined cy- 
cles with 82370 generated wait states is shown in 
Figure 6-2. In this diagram, it is assumed that the 
internal registers of the 82370 are not addressed. 
During the first T2 state of each bus cycle, the Wait 
State Control and the M/IO# inputs are sampled to 
determine which Wait State Register (if any) is se- 
lected. If the WSC inputs are active (i.e. not both are 
driven HIGH), the pre-programmed number of wait 
states corresponding to the selected Wait State 
Register will be requested. This is done by driving 
the READYO# output HIGH during the end of each 
T2 state. 

The WSC (0-1) inputs need only be valid during the 
very first T2 state of each non-pipelined cycle. As a 
general rule, the WSC Inputs are sampled on the 
rising edge of the next clock (82384 CLK) after the 
last state when ADS# (Address Status) is asserted. 

The number of wait states generated depends on 
the type of bus cycle, and the number of wait states 
requested. The various combinations are discussed 
below. 

1 . Access the 82370 internal registers; 2 to 5 wait 
states, depending upon the specific register ad- 
dressed. Some back-to-back sequences to the Inter- 
rupt Controller will require 7 wait states. 


2. Interrupt Acknowledge to the 82370: 5 wait states. 

3. Refresh: As programmed In the Refresh Wait 
State Register (see Register Set Overview). Note 
that if WCS (0-1) = 11, READYO# will stay inac- 
tive. 

4. Other bus cycles: Depending on WCS (6-1) and 
M/IO# inputs, these inputs select a Walt State Reg- 
ister in which the number of wait states will be equal 
to the pre-programmed wait state count In the regis- 
ter plus 1 . The Wait State Register selection is de- 
fined as follows (Table 6-1). 


Table 6-1. Wait State Register Seiection 


M/IO# 

WSC(0-1) 

Register Selected 

0 

00 

WAIT REG 0 (I/O half) 

0 

01 

WAIT REG 1 (I/O half) 

0 

10 

WAIT REG 2 (I/O half) 

1 

00 

WAIT REG 0 (MEM half) 

1 

01 

WAIT REG 1 (MEM half) 

1 

10 

WAIT REG 2 (MEM half) 

X 

11 

Walt State Gen. Disabled 


The Wait State Control signals, WSC (0-1), can be 
generated with the address decode and the Read/ 
Write control signals as shown in Figure 6-3. 



Figure 6-2. Wait States in Non-Pipelined Cycies 
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Address Decode " — ► 



W/R# ► 

Logic 

^ WSC (0-1) 



290164-83 


Figure 6-3. WSC (0-1) Generation 


The number of wait states generated in a pipelined 
cycle is selected in a similar manner as in the non- 
pipelined case discussed in the previous section. 
The only difference here is that the actual number of 
wait states generated will be one less than that of 
the non-pipelined cycle. This is done automatically 
by the Walt State Generator. 


Note that during HALT and SHUTDOWN, the num- 
ber of wait states will depend on the WSC (0-1) 
Inputs, which will select the memory half of one of 
the Wait State Registers (see CPU Reset and Shut- 
down Detect). 


6.3.2 WAIT STATES IN PIPELINED CYCLES 

The timing diagram of two typical pipelined cycles 
with 82370 generated wait states is shown In Figure 
6-4. Again, In this diagram, it Is assumed that the 
82370 Internal registers are not addressed. As de- 
fined In the timing of the 80376 processor, the Ad- 
dress (A1-23), Byte Enable (BHE#, BLE#), and 
other control signals (M/IO#, ADS#) are asserted 
one T-state earlier than in a non-pipelined cycle; I.e. 
they are asserted at T2P. Similar to the non-pipe- 
lined case, the Wait State Control (WSC) inputs are 
sampled in the middle of the state after the last state 
the ADS# signal is asserted. Therefore, the WSC 
inputs should be asserted during the T1P state of 
each pipelined cycle (which is one T-state earlier 
than in the non-pipelined cycle). 


6.3.3 EXTENDING AND EARLY TERMINATING 
BUS CYCLE 

The 82370 allows external logic to either add wait 
states or cause early termination of a bus cycle by 
controlling the READY # input to the 82370 and the 
host processor. A possible configuration Is shown in 
Figure 6-5. 



Figure 6-5. External ‘READY’ Control Logic 



Figure 6-4. Wait States in Pipelined Cycies 
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The EXT. RDY# (External Ready) signal of Figure 6- 
5 allows external devices to cause early termination 
of a bus cycle. When this signal Is asserted LOW, 
the output of the circuit will also go LOW (even 
though the READYO# of the 82370 may still be 
HIGH). This output Is fed to the READY# Input of 
the 80376 and the 82370 to Indicate the completion 
of the current bus cycle. 

Similarly, the EXT. NOT READY (External Not 
Ready) signal Is used to delay the READY# input of 
the processor and the 82370. As long as this signal 
is driven HIGH, the output of the circuit will drive the 
READY# input HIGH. This will effectively extend the 
duration of a bus cycle. However, It Is Important to 


note that if the two-level logic is not fast enough to 
satisfy the READY# setup time, the OR gate should 
be eliminated. Instead, the 82370 Wait State Gener- 
ator can be disabled by driving both WSC (0-1) 
HIGH. In this case, the addressed memory or I/O 
device should activate the external READY# Input 
whenever it is ready to terminate the current bus 
cycle. 

Figures 6-6 and 6-7 show the timing relationships of 
the ready signals for the early termination and exten- 
sion of the bus cycles. Seclion 6-7, Application Is- 
sues, contains a detailed timing analysis of the ex- 
ternal circuit. 
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Due to the following implications, it should be noted 
that early termination of bus cycles in which 82370 
internal registers are accessed is not recommended. 

1 . Erroneous data may be read from or written into 
the addressed register. 

2. The 82370 must be allowed to recover either be- 
fore HLDA (Hold Acknowledge) is asserted or before 
another bus cycle into an 82370 internal register is 
initiated. 

The recovery time, in clock periods, equals the re- 
maining wait states that were avoided plus 4. 


6.4 Register Set Overview 

Altogether, there are four 8-bit Internal registers as- 
sociated with the Wait State Genertor. The port ad- 
dress map of these registers is shown below in Ta- 
ble 6-2. A detailed description of each follows. 


Table 6-2. Register Address Map 


Port Address 

Description 

72H 

Wait State Reg 0 (read/write) 

73H 

Wait State Reg 1 (read/write) 

74H 

Walt State Reg 2 (read/write) 

75H 

Ref. Wait State Reg (read/write) 


WAIT STATE REGISTER 0, 1, 2 

These three 8-bit read/write registers are functional- 
ly identical. They are used to store the pre-pro- 
grammed wait state count. One half of each register 
contains the wait state count for I/O accesses while 
the other half contains the count for memory ac- 
cesses. The total number of wait states generated 
will depend on the type of bus cycle. For a non-pipe- 
lined cycle, the actual number of wait states request- 
ed is equal to the wait state count plus 1. For a 
pipelined cycle, the number of wait states will be 
equal to the wait state count in the selected register. 
Therefore, the Wait State Generator is capable of 
generating 1 to 16 wait states in non-pipelined 
mode, and 0 to 15 wait states in pipelined mode. 

Note that the minimum wait state count in each reg- 
ister is 0. This is equivalent to 0 wait states for a 
pipelined cycle and 1 wait state for a non-pipelined 
cycle. 

REFRESH WAIT STATE REGISTER 

Similar to the Wait State Registers discussed above, 
this 4-bit register is used to store the number of wait 
states to be generated during a DRAM refresh cycle. 


Note that the Refresh Wait State Register is not se- 
lected by the WSC inputs. It will automatically be 
chosen whenever a DRAM refresh cycle occurs. If 
the Wait State Generator is disabled during the re- 
fresh cycle (WSC (0-1) = 11), READYO# will stay 
Inactive and the Refresh Wait State Register is ig- 
nored. 


6.5 Programming 

Using the Wait State Generator is relatively straight- 
forward. No special programming sequence is re- 
quired. In order to ensure the expected number of 
wait states will be generated when a register is se- 
lected, the registers to be used must be pro- 
grammed after power-up by writing the appropriate 
wait state count into each register. Note that upon 
hardware reset, all Wait State Registers are initial- 
ized with the value FFH, giving the maximum num- 
ber of wait states possible. Also, each register can 
be read to check the wait state count previously 
stored in the register. 


6.6 Register Bit Definition 

WAIT STATE REGISTER 0, 1, 2 


Port Address 

Description 

72H 

Wait State Register 0 (read/write) 

73H 

Wait State Register 1 (read/write) 

74H 

Wait State Register 2 (read/write) 
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6.7 Application Issues 

6.7.1 EXTERNAL READY’ CONTROL LOGIC 

As mentioned in section 6.3.3, wait state cycles gen- 
erated by the 82370 can be terminated early or ex- 
tended longer by means of additional external logic 
(see Figure 6-5). In order to ensure that the 
READY# input timing requirement of the 80376 and 
the 82370 is satisfied, special care must be taken 
when designing this external control logic. This sec- 
tion addresses the design requirements. 

A simplified block diagram of the external logic along 
with the READY # timing diagram is shown in Figure 
6-8. The purpose is to determine the maximum delay 


time allowed in the external control logic in order to 
satisfy the READY # setup time. 

First, it will be assumed that the 80376 is running at 
16 MHz (I.e. CLK2 is 32 MHz). Therefore, one bus 
state (two CLK2 periods) will be equivalent to 
62.5 ns. According to the AC specifications of the 
82370, the maximum delay time for valid READYO# 
signal is 31 ns after the rising edge of CLK2 In the 
beginning of T2 (for non-pipelined cycle) or T2P (for 
pipelined cycle). Also, the minimum READY# setup 
time of the 80376 and the 82370 should be 19 ns 
before the rising edge of CLK2 at the beginning of 
the next bus state. This limits the total delay time for 
the external READY# control logic to be 12.5 ns 
(62.5-31-19) in order to meet the READY# setup 
timing requirement. 
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A = PHI1 + PH12 = 62.5 ns 
B = Maximum READYO# Valid Delay = 35 ns 
C = ready # Setup Time = 20 ns 

D = Maximum Ready Control Logic Delay = A - B - C = 7.5 ns 
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Figure 6-8. ‘READY’ Timing Consideration 
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7.0 DRAM REFRESH CONTROLLER 


7.1 Functional Description 

The 82370 DRAM Refresh Controller consists of a 
24-bit Refresh Address Counter and Refresh Re- 
quest logic for DRAM refresh operations (see Figure 
7-1). TIMER 1 can be used as a trigger signal to the 
DRAM Refresh Request logic. The Refresh Bus Size 
can be programmed to be 8- or 16-bit wide. Depend- 
ing on the Refresh Bus Size, the Refresh Address 
Counter will be incremented with the appropriate val- 
ue after every refresh cycle. The Internal logic of the 
82370 will give the Refresh operation the highest 
priority in the bus control arbitration process. Bus 
control is not released and re-requested if the 82370 
is already a bus master. 


7.2 Interface Signals 

7.2.1 TOUT1/REF# 

The dual function output pin of TIMER 1 
(TOUT1/REF#) can be programmed to generate 
DRAM Refresh signal. If this feature is enabled, the 
rising edge of TIMER 1 output (TOUT1 #) will trigger 
the DRAM Refresh Request logic. After some delay 
for gaining access of the bus, the 82370 DRAM Con- 
troller will generate a DRAM Refresh signal by driv- 
ing REF# output LOW. This signal is cleared after 
the refresh cycle has taken place, or by a hardware 
reset. 


If the DRAM Refresh feature is disabled, the 
TOUT1/REF# output pin is simply the TIMER 1 out- 
put. Detailed information of how TIMER 1 operates 
is discussed in section 6 — Programmable Interval 
Timer, and will not be repeated here. 


7.3 Bus Function 

7.3.1 ARBITRATION 

In order to ensure data Integrity of the DRAMs, the 
82370 gives the DRAM Refresh signal the highest 
priority in the arbitration logic. It allows DRAM Re- 
fresh to Interrupt DMA in progress In order to per- 
form the DRAM Refresh cycle. The DMA service will 
be resumed after the refresh Is done. 

In case of a DRAM Refresh during a DMA process, 
the cascaded device will be requested to get off the 
bus. This is done by de-asserting the EDACK signal. 
Once DREQn goes inactive, the 82370 will perform 
the refresh operation. Note that the DMA controller 
does not completely relinquish the system bus dur- 
ing refresh. The Refresh Generator simply “steals” 
a bus cycle between DMA accesses. 

Figure 7-2 shows the timing diagram of a Refresh 
Cycle. Upon expiration of TIMER 1 , the 82370 will try 
to take control of the system bus by asserting 
HOLD. As soon as the 82370 see HLDA go active, 
the DRAM Refresh Cycle will be carried out by acti- 
vating the REF# signal as well as the address and 
control signals on the system bus (Note that REF# 
will not be active until two CLK periods HLDA is as- 
serted). The address bus will contain the 24-bit ad- 
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Figure 7-1. DRAM Refresh Controller 
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dress currently in the Refresh Address Counter. The 
control signals are driven the same way as in a 
Memory Read cycle. This “read” operation is com- 
plete when the READY# signal is driven LOW. 
Then, the 82370 will relinquish the bus by de-assert- 
ing HOLD. Typically, a Refresh Cycle without wait 
states will take five bus states to execute. If “n” wait 
states are added, the Refresh Cycle will last for five 
plus “n” bus states. 

How often the Refresh Generator will initiate a re- 
fresh cycle depends on the frequency of CLKIN as 
will as TIMER 1’s programmed mode of operation. 
For this specific application, TIMER 1 should be pro- 
grammed to operate in Mode 2 to generate a con- 
stant clock rate. See section 6— Programmable In- 
terval Timer for more information on programming 
the timer. One DRAM Refresh Cycle will be generat- 
ed each time TIMER 1 expires (when TOUT1 chang- 
es from LOW to HIGH). 

The Walt State Generator can be used to insert wait 
states during a refresh cycle. The 82370 will auto- 
matically insert the desired number of wait states as 
programmed in the Refresh Wait State Register (see 
Walt State Generator). ‘ 


7.4 Modes Of Operation 

7.4.1 WORD SIZE AND REFRESH ADDRESS 
COUNTER 

The 82370 supports 8- and 1 6-bit refresh cycle. The 
bus width during a refresh cycle Is programmable 
(see Programming). The bus size can be pro- 
grammed via the Refresh Control Register (see Reg- 
ister Overview). If the DRAM bus size is 8- or 16-bits, 
the Refresh Address Counter will be Incremented by 
1 or 2, respectively. 

The Refresh Address Counter is cleared by a hard- 
ware reset. 


7.5 Register Set Overview 

The Refresh Generator has two internal registers to 
control its operation. They are the Refresh Control 
Register and the Refresh Wait State Register. Their 
port address map is shown in Table 7-1 below. 
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Table 7-1. Register Address Map 


Port Address 

Description 

1CH 

75H 

Refresh Control Reg. (read/write) 
Ref. Wait State Reg. (read/write) 


The Refresh Wait State Register is not part of the 
Refresh Generator. It is only used to program the 
number of wait states to be inserted during a refresh 
cycle. This register is discussed in detailed in section 
7 (Wait State Generator) and will not be repeated 
here. 

REFRESH CONTROL REGISTER 

This 2-bit register serves two functions. First, it is 
used to enable/disable the DRAM Refresh function 
output. If disabled, the output of TIMER 1 is simply 
used as a general purpose timer. The second func- 
tion of this register is to program the DRAM bus size 
for the refresh operation. The programmed bus size 
also determines how the Refresh Address Counter 
will be incremented after each refresh operation. 


7.6 Programming 

Upon hardware reset, the DRAM Refresh function is 
disabled (the Refresh Control Register is cleared). 
The following programming steps are needed before 
the Refresh Generator can be used. Since the rate 
of refresh cycles depends on how TIMER 1 Is pro- 
grammed, this timer must be initialized with the de- 
sired mode of operation as well as the correct 
refresh interval (see Programming Interval Timer). 
Whether or not wait states are to be generated dur- 
ing a refresh cycle, the Refresh Wait State Register 
must also be programmed with the appropriate val- 
ue. Then, the DRAM Refresh feature must be en- 
abled and the DRAM bus width should be defined. 
These can be done In one step by writing the appro- 


priate control word into the Refresh Control Register 
(see Register Bit Definition). After these steps are 
done, the refresh operation will automatically be in- 
voked by the Refresh Generator upon expiration of 
Timer 1 . 

In addition to the above programming steps, it 
should be noted that after reset, although the 
TOUT1/REF# becomes the Time 1 output, the 
state of this pin in undefined. This is because the 
Timer module has not been initialized yet. Therefore, 
if this output is used as a DRAM Refresh signal, this 
pin should be disqualified by external logic until the 
Refresh function Is enabled. One simple solution Is 
to logically AND this output with HLDA, since HLDA 
should not be active after reset. 


7.7 Register Bit Definition 

REFRESH CONTROL REGISTER 

Port Address: 1 CH (Read/Write) 


8.0 RELOCATION REGISTER AND 
ADDRESS DECODE 


8.1 Relocation Register 

All the integrated peripheral devices in the 82370 
are controlled by a set of Internal registers. These 
registers span a total of 256 consecutive address 
locations (although not all the 256 locations are 
used). The 82370 provides a Relocation Register 
which allows the user to map this set of Internal reg- 
isters Into either the memory or I/O address space. 
The function of the Relocation Register is to define 
the base address of the internal register set of the 
82370 as well as If the registers are to be memory- 
or I/O-mapped. The format of the Relocation Regis- 
ter is depicted in Figure 9-1 . 



1 D7 1 D6 1 05 
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Figure 8-1. Relocation Register 


Note that the Relocation Register is part of the inter- 
nal register set of the 82370. It has a port address of 
7FH. Therefore, any time the content of the Reloca- 
tion Register is changed, the physical location of this 
register will also be moved. Upon reset of the 82370, 
the content of the Relocation Register will be 
cleared. This implies that the 82370 will respond to 
Its I/O addresses in the range of OOOOH to OOFFH. 


Address signals BHE#, BLE#, A1-A7 will be used 
to select one of the internal registers to be ac- 
cessed. Bit 1 to Bit 7 of the Relocation Register will 
correspond to A17-A23, respectively. A16 is as- 
sumed to be ‘O’, and A8-A15 are ignored. Consider 
the following example. 

Example 


8.1.1 I/O-MAPPED 82370 

As shown in the figure. Bit 0 of the Relocation Regis- 
ter determines whether the 82370 registers are to be 
memory-mapped or I/O mapped. When Bit 0 is set 
to ‘O’, the 82370 will respond to I/O Addresses. Ad- 
dress signals BHE#, BLE#, A1--A7 will be used to 
select one of the Internal registers to be accessed. 
Bit 1 to Bit 7 of the Relocation Register will corre- 
spond to A9 to Ai 5 of the Address bus, respectively. 
Together with A8 implied to be ‘O’, A15 to A8 will be 
fully decoded by the 82370. The following shows 
how the 82370 is mapped into the I/O address 
space. 

Example 

Relocation Register = 1 1 001 1 1 0 (OCEH) 

82370 will respond to I/O address range from 
OCEOOH to OCEFFH. 

Therefore, this I/O mapping mechanism allows the 
82370 internal registers to be located on any even, 
contiguous, 256 byte boundary of the system I/O 
space. 

8.1.2 MEMORY-MAPPED 82370 

When Bit 0 of the Relocation Register is set to ‘1’, 
the 82370 will respond to memory addresses. Again, 


Relocation Register = 10100111 (0A7H) 

The 82370 will respond to memory addresses in 
the range of A6XX00H to A60XXFFH (where ‘X’ is 
don’t care). 

This scheme implies that the internal registers can 
be located In any even, contiguous, 2**16 byte page 
of the memory space. 


8.2 Address Decoding 

..^1. . 4-u^ ooo-7r\ 

/no IllCIIUUliOU pi OVIU/UOiy, ll IV? KJC.sJI\J IlllCSIllCtl l <S^IO- 

ters do not occupy the entire contiguous 256 ad- 
dress locations. Some of the locations are 'unoccu- 
pied*. The 82370 always decodes the lower 8 ad- 
dress signals (BHE#, BLE#, AI -A7) to determine If 
any one of its registers is being accessed. If the ad- 
dress does not correspond to any of its registers, the 
82370 will not respond. This allows external devices 
to be located within the ‘holes’ in the 82370 address 
space. Note that there are several unused address- 
es reserved for future Intel peripheral devices. 

8.3 Chip-Select (CHPSEL#) 

The Chip-Select signal (CHPSEL#) will go active 
when the 82370 is addressed in a Slave bus 
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Figure 8-2. CHPSEL# Timing 


cycle (either read or write), or in an interrupt ac- 
knowledge cycle in which the 82370 will drive the 
Data Bus. For a given bus cycle, CHPSEL# be- 
comes active and valid in the first T2 (in a non-pipe- 
lined cycle) or in T1P (in a pipelined cycle). It will 
stay valid until the cycle is terminated by READY# 
driven active. As CHPSEL# becomes valid well be- 
fore the 82370 drives the Data Bus, it can be used to 
control the transceivers that connect the local CPU 
bus to the system bus. The timing diagram of 
CHPSEL# is shown in Figure 8-2. 


9.0 CPU RESET AND SHUTDOWN 
DETECT 

The 82370 will activate the CPURST signal to reset 
the host processor when one of the following condi- 
tions occurs: 

— 82370 RESET Is active; 

— 82370 detects a 80376 Shutdown cycle (this fea- 
ture can be disabled); 

— CPURST software command is issued to 80376. 

Whenever the CPURST signal is activated, the 
82370 will reset its own internal Slave-Bus state ma- 
chine. 


9.1 Hardware Reset 

Following a hardware reset, the 82370 will assert Its 
CPURST output to reset the host processor. This 
output will stay active for as long as the RESET Input 
is active. During a hardware reset, the 82370 internal 
registers will be initialized as defined in the corre- 
sponding functional descriptions. 


9.2 Software Reset 

CPURST can be generated by writing the following 
bit pattern into 82370 register location 64H. 

D7 . . . DO 
1 1 1 1 X X X 0 

The Write operation into this port is considered as 
an 82370 access and the Internal Wait State Gener- 
ator will automatically determine the required num- 
ber of wait states. The CPURST will be active follow^ 
ing the completion of the Write cycle to this port. 
This signal will last for 62 CLK2 periods. The 82370 
should not be accessed until the CPURST Is deacti- 
vated. 

This internal port is Write-Only and the 82370 will 
not respond to a Read operation to this location. 
Also, during a software reset command, the 82370 
will reset its Slave-Bus state machine. However, its 
Internal registers remain unchanged. This allows the 
operating system to distinguish a ‘warm’ reset by 
reading any 82370 internal register previously pro- 
grammed for a non-default value. The Diagnostic 
registers can be used for this purpose (see Internal 
Control and Diagnostic Ports). 


9.3 Shutdown Detect 

The 82370 is constantly monitoring the Bus Cycle 
Definition signals (M/IO#, D/C#, W/R#) and is 
able to detect when the 80376 is in a Shutdown bus 
cycle. Upon detection of a processor shutdown, the 
82370 will activate the CPURST output for 62 CLK2 
periods to reset the host processor. This signal is 
generated after the Shutdown cycle is terminated by 
the READY # signal. 
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Although the 82370 Wait State Generator will not 
automatically respond to a Shutdown (or Halt) cycle, 
the Wait State Control inputs (WSCO, WSC1) can be 
used to determine the number of wait states in the 
same manner as other non-82370 bus cycles. 

This Shutdown Detect feature can be enabled or dis- 
abled by writing a control bit In the Internal Control 
Port at address 61 H (see Internal Control and Diag- 
nostic Ports). This feature is disabled upon a hard- 
ware reset of the 82370. As in the case of Software 
Reset, the 82370 will reset Its Slave-Bus state ma- 
chine but will not change any of Its internal register 
contents. 


10.0 INTERNAL CONTROL AND 
DIAGNOSTIC PORTS 


10.1 Internal Control Port 

The format of the Internal Control Port of the 82370 
is shown in Figure 10-1. This Control Port is used to 
enable/disable the Processor Shutdown Detect 
mechanism as well as controlling the Gate inputs of 
the Timer 2 and 3. Note that this is a Write-Only port. 
Therefore, the 82370 will not respond to a read op- 
eration to this port. Upon hardware reset, this port 
'Will be cleared; i.e., the Shutdown Detect feature 
and the Gate inputs of Timer 2 and 3 are disabled. 

Port Address: 61 H (Write only) 


10.2 Diagnostic Ports 

Two 8-blt read/write Diagnostic Ports are provided 
in the 82370. These are two storage registers and 
have no, effect on the operation of the 82370. They 
can be used to store checkpoint data or error codes 
in the power-on sequence and in the diagnostic 
service routines. As mentioned in the CPU RESET 
AND SHUTDOWN DETECT section, these Diagnos- 
tic Ports can be used to distinguish between ‘cold’ 
and ‘warm’ reset. Upon hardware reset, both Diag- 
nostic Ports are cleared. The address map of these 
Diagnostic Ports is shown in Figure 1 0-2. 


Port 

Address 

Diagnostic Port 1 

(Read/Write) 

80H 

Diagnostic Port 2 

(Read/Write) 

88H 


Figure 10-2. Address Map of Diagnostic Ports 


11.0 INTEL RESERVED I/O PORTS 

There are nineteen I/O ports in the 82370 address 
space which are reserved for Intel future peripheral 
device use only. Their address locations are: 10H, 
12H, 14H, 16H, 2AH, 3DH, 3EH, 45H, 46H, 76H, 
77H. 7DH, 7EH, CCH, CDH, DOH, D2H, D4H, and 
D6H. These addresses should not be used in the 
system since the 82370 will respond to read/write 
operations to these locations and bus contention 
may occur If any peripheral is assigned to the same 
address location. 
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Figure 10-1. internal Control Port 
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12.0 PACKAGE THERMAL 
SPECIFICATIONS 

The Intel 82370 Integrated System Peripheral is 
specified for operation when case temperature is 
within the range of O^C to 78“C for the ceramic 
132-pln PGA package, and 68°C for the 100-pin 
plastic package. The case temperature may be mea- 
sured in any environment, to determine whether the 
82370 is within specified operating range. The case 
temperature should be measured at the center of 
the top surface opposite the pins. 

The ambient temperature Is guaranteed as long as 
Tc is not violated. The ambient temperature can be 


calculated from the 0jc and 0ja from the following 
equations; 

Tj = Tc + P*0ic 

Ta “ Tj — P*0ja 

Tc = Ta + P*[0ia “ ^jd 

Values for 0ja and 0jc are given in Table 12.1 for the 
100-lead fine pitch. 0ja is given at various airflows. 
Table 12.2 shows the maximum Ta allowable (with- 
out exceeding Tc) at various airflows. Note that " 
can be Improved further by attaching “fins” or 
“heat sink” to the package. P is calculated using the 
maximum hot Ice- 


Table 12.1 82370 Package Thermal Characteristics 
Thermal Resistances f’C/Watt) 0jc and djg 


Package 

8jc 

0 

(0) 

1 1 

a Versu 

200 

(1.01) 

1 1 

s Airflo 

400 

(2.03) 

1 3 1 

w-ft3/n 

600 

(3.04) 

1 3 1 

flin (m3i 

800 

(4.06) 

^sec) 

1000 

(5.07) 

100L Fine Pitch 

7 

33 

27 

24 

21 

18 

17 

132L PGA 

2 

21 

17 

14 

12 

11 

10 


Table 12.2 82370 Maximum Allowable Ambient 
Temperature at Various Airflows 


Package 

^jc 

Ta( 

0 

(0) 

1 

c) Vers 

200 

(1.01) 

US AirfI 

400 

(2.03) 

3 

OW-ft3/ 

600 

(3.04) 

3 

min (m 

800 

(4.06) 

I/sec) 

1000 

(5.07) 

1 0OL Fine Pitch 

7 

63 

74 

79 

85 

91 

92 

132L PGA 

2 

74 

83 

88 

93 

97 

99 


100L PQFP Pkg: 

Tc == Tq + P*(0ja ~ ^jc) 
Tc = 63 + 1.21(33 - 7) 
Tc = 63 + 1.21(26) 

Tc = 63 + 31.46 
Tc = 94“C 


132L PGA Pkg: 

Tc = Tg + P*(0ja — 0jc) 

Tc = 74 +1.21(21 - 2) 
Tc = 74 + 1.21(19) 

Tc = 74 + 22.99 
Tc = 96 “C 
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13.0 ELECTRICAL SPECIFICATIONS 


82370 D.C. Specifications Functional Operating Range: 

Vcc = 5.0V ±10%; Tcase = 0°C to 96X for 132-pin PGA, 0°C to 94"C for 100-pin plastic 


Symbol 

Parameter Description 

Min 

: Max 

Units 

Notes 

V|L 

Input Low Voltage 

-0.3 

0.8 

V 

(Note 1) 

VlH 

Input High Voltage 

2.0 

Vcc + 0.3 

V 


Vij_c 

CLK2 Input Low Voltage 

-0.3 

0.8 

V 

(Note 1) 

V|HC 

CLK2 Input High Voltage 

0 

1 

0 

bo 

Vcc + 0.3 

V 


VoL 

Output Low Voltage 
lOL = 4 mA: 

Ai-23> Do-15, BHE#, BLE# 
Iql = 5 mA: 

All Others 


0.45 

0.45 

V 

V 


VoH 

Output High Voltage 





lOH = fTlA 

A23-A1, D15 — Dq, BHE#, BLE# 

2.4 


V 

(Note 5) 

lOH = mA 

A23-A1, D15-D0, BHE#, BLE# 

Vcc - 0.5 


V 

(Note 5) 

Iqh “ ~0.9 mA 

All Others 

2.4 


V 


lOH ~ ~0.18 mA 

All Others 

d 

1 

0 

0 

> 


V 


Ili 

Input Leakage Current 

All Inputs Except: 

IRQ11#-IRQ23# 

EOP#,TOUT2/IRQ3# 

DREQ4/IRQ9# 


±15- 



«LI1 

Input Leakage Current 

Inputs: 

IRQ11#-IRQ23# 

EOP # , TOUT2/ ! RQ3 
DREQ4/IRQ9 

10 

-300 


0 < V|N < Vcc 
(Note 3) 

•lo 

Output Leakage Current 


±15 

fxA 

0 < V|N < Vcc 

icc 

Supply Current (CLK2 = 32 MHz) 


220 



C| 

Input Capacitance 


12 

PF 

(Note 2) 

CCLK 

CLK2 Input Capacitance 


20 

PF 

(Note 2) 


NOTES: 

1. Minimum value is not 100% tested. 

2. fc = 1 MHz; sampled only. 

3. These pins have weak internal pullups. They sould not be left floating. 

4. Ice is specified with inputs driven to CMOS levels, and outputs driving CMOS loads. Ice be higher if inputs are driven 
to TTL levels, or if outputs are driving TTL loads. 

5. Tested at the minimum operating frequency of the part. 
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290164-97 

LEGEND: 

A — Maximum output delay specification 
B — Minimum output delay specification 
C — Minimum input setup specification 
D — Minimum input hold specification 


Figure 13-1. Drive Levels and Measurement Points for A.C. Specification 


82370 A.C. Specifications These A.C. timings are tested at 1 .5V thresholds, except as noted. 
Functional Operating Range: Vcc = 5.0V ±10%; Tcase = to 96°C for 132-pin PGA, 0°C to 94°C for 
1 00-pin plastic 


Symbol 

Parameter Description 

Min 

Max 

Units 

Notes 


Operating Frequency 1/(t1a x 2) 

4 

1.6 

MHz 


t1 

CLK2 Period 

31 

125 

ns 


t2a 

CLK2 High Time 

9 


ns 

At 2.0V 

t2b 

CLK2 High Time 

5 


ns 

At Vcc - 0-8V 

t3a 

CLK2 Low Time 

9 


ns 

At 2.0V 

t3b 

CLK2 Low Time 

7 


ns 

At 0.8V 

t4 

CLK2 Fall Time 


7 

ns 

Vcc - 0.8V to 0.8V 

t5 

CLK2 Rise Time 


7 

ns 

0.8V to Vcc - 0-8V 

t6 

A1-A23,BHE#,BLE# ' 
EDACK0-EDACK2 Valid Delay 

4 

36 

ns 

Cl=120pF 

t7 

A1-A23, BHE#,BLE# 
EDACK0-EDACK3 Float Delay 

4 

40 

ns 

(Note 1) 

t8 

A1-A23, BHE#, BLE# Setup Time 

6 


ns 


t9 

A1 -A23, BHE#, BLE# Hold Time 

4 


ns 


tio 

W/R#, M/IO#, D/C# Valid Delay 

4 

33 

ns 

Cl = 75 pF 

til 

W/R#, M/IO#, D/C# Float Delay 

4 

35 

ns 

(Note 1) 
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82370 A.C. Specifications These A.C. timings are tested at 1.5V thresholds, except as noted. 
Functional Operating Range: Vcc = 5 0V ±10%; Tcase = 0“C to 96°C for 132-pln PGA, 0®C to 94°C for 
100-pin plastic (Continued) 

Symbol Parameter Description Min Max Units Notes 


W/R#, M/IO#, D/C# Setup Time 
' W/R#, M/IO#, D/C# Hold Time 


ADS# Valid Delay 
ADS# Float Delay 


rvuotr iiiiie 

ADS# Hold Time 


Slave Mode D0-D15 Read Valid 
Slave Mode D0-D1 5 Read Float 

Slave Mode D0-D15 Write Setup 
Slave Mode D0-D15 Write Hold 


Master Mode D0-D1 5 Write Valid 
Master Mode D0-D15 Write Float 


Master Mode D0-D15 Read Setup 
Master Mode D0-D15 Read Hold 


READY# Setup Time 
READY# Hold Time 

WSC0-WSC1 Setup Time 
WSC0-WSC1 Hold Time 



CL = 50 pF 
(Notel) 





















































T0UT1# /REF# Valid Delay 
from CLK2 (Refresh) 
from CLKIN (Timer) 


TOUT2# Valid Delay 

(from CLKIN, Falling Edge Only) 

TOUT2# Float Delay 


TOUTS# Valid Delay 
(from CLKIN) 


CHPSEL# Valid Delay 
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Figure 13-4. Input Setup and Hold Timing 
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Tx 



Tx 


CLK2 

CPURST 



Figure 13-5. Reset Timing 


Tx Tx Tx 



Figure 13-6. Address Output Delays 
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APPENDIX A 

PORTS LISTED BY ADDRESS 


Port Address 
(HEX) 

Description 

00 

Read/ Write DMA Channel 0 Target Address, A0-A15 

01 

Read/Write DMA Channel 0 Byte Count, B0-B15 

02 

Read/Write DMA Channel 1 Target Address, A0-A15 

03 

Read/Write DMA Channel 1 Byte Count, B0-B15 

04 

Read/Write DMA Channel 2 Target Address, A0-A1 5 

05 > 

Read/ Write DMA Channel 2 Byte Count, B0-B1 5 

06 

Read/Write DMA Channel 3 Target Address, A0-A1 5 

07 

Read/Write DMA Channel 3 Byte Count, B0-B15 

08 

Read/Write DMA Channel 0-3 Status/Command 1 Register 

09 

Read/Write DMA Channel 0-3 Software Request Register 

OA 

Write DMA Channel 0-3 Set-Reset Mask Register 

OB 

Write DMA Channel 0-3 Mode Register 1 

OC 

Write Clear Byte-Pointer FF 

OD 

Write DMA Master-Clear 

OE 

Write DMA Channel 0-3 Clear Mask Register 

OF 

Read/ Write DMA Channel 0-3 Mask Register 

10 

Intel Reserved 

11 

Read/Write DMA Channel 0 Byte Count, B1 6-B23 

12 

Intel Reserved 

13 

Read/Write DMA Channel 1 Byte Count, B16-B23 

14 

Intel Reserved 

15 

Read/Write DMA Channel 2 Byte Count, B16-B23 

16 

jnfcil Qocor\/oH 

17 

Read/Write DMA Channel 3 Byte Count, B16-B23 

18 

Write DMA Channel 0-3 Bus Size Register 

19 

Read/Write DMA Channel 0-3 Chaining Register 

1A 

Write DMA Channel 0-3 Command Register 11 

IB 

Write DMA Channel 0-3 Mode Register II 

1C 

Read/Write Refresh Control Register 

IE 

Reset Software Request Interrupt 

20 

Write Bank B ICW1 , OCW2 or OCW3 

Read Bank B Poll, Interrupt Request or In-Service 

Status Register 

21 

Write Bank B ICW2, ICW3, ICW4 or OCW1 

Read Bank B Interrupt Mask Register 

22 

Read Bank B ICW2 

28 

Read/Write IRQ8 Vector Register 

29 

Read/Write IRQ9 Vector Register 

2A 

Reserved 
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Port Address 
(HEX) 

Description 

2B 

Read/Write IRQ1 1 Vector Register 

2C 

Read/Write IRQ1 2 Vector Register 

2D 

Read/Write IRQ13 Vector Register 

2E 

Read/Write IRQ1 4 Vector Register 

2F 

Read/Write IRQ1 5 Vector Register 

30 

Write Bank A ICW1 , OCW2 or OCW3 

Read Bank A Poll, Interrupt Request or In-Service 


Status Register 

31 

Write Bank A ICW2, ICW3, ICW4 or OCW1 

Read Bank A Interrupt Mask Register 

32 

Read BankAICW2 

38 

Read/Write IRQO Vector Register 

39 

Read/Write IRQ1 Vector Register 

3A 

Read/Write IRQ1 .5 Vector Register 

3B 

Read/ Write 1RQ3 Vector Register 

3C 

Read/Write IRQ4 Vector Register 

3D 

Reserved 

3E 

Reserved 

3F 

Read/Write IRQ7 Vector Register 

40 

Read/Write Counter 0 Register 

41 

Read/Write Counter 1 Register 

42 

Read/Write Counter 2 Register 

43 

Write Control Word Register 1 — Counter 0, 1 , 2 

44 

Read /Write Counter 3 Register 

45 

Reserved 

46 

Reserved 

47 

Write Word Register II— Counter 3 

61 

Write Internal Control Port 

64 

Write CPU Reset Register (Data— 1 1 1 1XXX0H) 

72 

Read/Write Wait State Register 0 

73 

Read/Write Wait State Register 1 

74 

Read/Write Wait State Register 2 

75 

Read/Write Refresh Wait State Register 

76 

Reserved 

77 

Reserved 

7D 

Reserved 

7E 

Reserved 

7F 

Read/Write Relocation Register 

80 

Read/Write Internal Diagnostic Port 0 

81 

Read/Write DMA Channel 2 Target Address, A16~A23 

82 

Read/Write DMA Channel 3 Target Address, A16-A23 

83 

Read/Write DMA Channel 1 Target Address, A16-A23 

87 

Read/Write DMA Channel 0 Target Address, A16-A23 

88 

Read/Write Internal Diagnostic Port 1 

89 

Read/Write DMA Channel 6 Target Address, A16-A23 

8A 

Read/Write DMA Channel 7 Target Address, A16-A23 

8B 

Read/Write DMA Channel 5 Target Address, A16-A23 

8F 

Read/Write DMA Channel 4 Target Address, A16-A23 
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Port Address 
(HEX) 

Description 

90 

Read/Write DMA Channel 0 Requester Address, A0-A1 5 

91 

Read/Write DMA Channel 0 Requester Address, A1 6- A23 

92 

Read/Write DMA Channel 1 Requester Address, A0-A15 

93 

Read/Write DMA Channel 1 Requester Address, A16-A23 

94 

Read/Write DMA Channel 2 Requester Address, A0-A1 5 

95 

Read/Write DMA Channel 2 Requester Address, A16-A23 

96 

Read/Write DMA Channel 3 Requester Address, A0-A15 

97 

Read/Write DMA Channel 3 Requester Address, A1 6- A23 

98 

Read/Write DMA Channel 4 Requester Address, A0-A1 5 

99 

Read/Write DMA Channel 4 Requester Address, A16-A23 

9A 

Read/Write DMA Channel 5 Requester Address, A0-A1 5 

9B 

Read/Write DMA Channel 5 Requester Address, A1 6-A23 

9C 

Read/Write DMA Channel 6 Requester Address, A0-A15 

9D 

Read/Write DMA Channel 6 Requester Address, A1 6-A23 

9E 

Read/Write DMA Channel 7 Requester Address, A0-A15 

9F 

Read/Write DMA Channel 7 Requester Address, A1 6-A23 

AO 

Write Bank C ICW1 , OCW2 or OCW3 

Read Bank C Poll, Interrupt Request or In-Service 

Status Register 

A1 

Write Bank C ICW2, ICW3, ICW4 or OCW1 

Read Bank C Interrupt Mask Register 

A2 

Read Bank C ICW2 

A8 

Read/Write IRQ1 6 Vector Register 

A9 

Read/Write IRQ1 7 Vector Register 

AA 

Read/Write IRQ1 8 Vector Register 

AB 

Read/Write IRQ1 9 Vector Register 

AC 

Read/Write IRQ20 Vector Register 

AD 

Read/Write IRQ21 Vector Register 

AE 

Read/Write IRQ22 Vector Register 

AF 

Read/ Write IRQ23 Vector Register 

CO 

Read/ Write DMA Channel 4 Target Address, A0-A15 

C1 

Read/Write DMA Channel 4 Byte Count, B0-B1 5 

C2 

Head/Wriie uMA Channel 5 Target Address, A0-A15 

C3 

Read/Write DMA Channel 5 Byte Count, B0-B15 

C4 

Read/Write DMA Channel 6 Target Address, A0-A15 

C5 

Read/Write DMA Channel 6 Byte Count, B0-B15 

C6 

Read/Write DMA Channel 7 Target Address, A0-A1 5 

C7 

Read/Write DMA Channel 7 Byte Count, B0-B1 5 

C8 

Read DMA Channel 4-7 Status/Command 1 Register 

C9 

Read/Write DMA Channel 4-7 Software Request Register 

CA 

Write DMA Channel 4-7 Set-Reset Mask Register 

CB 

Write DMA Channel 4-7 Mode Register 1 

CC 

Reserved 

CD 

Reserved 

CE 

Write DMA Channel 4-7 Clear Mask Register 

CF 

Read/Write DMA Channel 4-7 Mask Register 

DO 

Intel Reserved 

D1 

Read/Write DMA Channel 4 Byte Count, B16-B23 

D2 

Intel Reserved 

D3 

Read/Write DMA Channel 5 Byte Count, B16-B23 
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Port Address 
(HEX) 

Description 

D4 

Intel Reserved 

D5 

Read/Write DMA Channel 6 Byte Count, B16~B23 

D6 

Intel Reserved 

07 

Read/Write DMA Channel 7 Byte Count, B16-B23 

D8 

Write DMA Channel 4-7 Bus Size Register 

D9 

Read/Write DMA Channel 4-7 Chaining Register 

DA 

Write DMA Channel 4-7 Command Register II 

DB 

Write DMA Channel 4-7 Mode Register II 
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APPENDIX B 

PORTS LISTED BY FUNCTION 


Port Address 
(HEX) 

Description 

DMA CONTROLLER 

OD 

Write DMA Master-Clear 

OC 

Write DMA Clear Byte-Pointer FF 

08 

Read/Write DMA Channel 0-3 Status/Command 1 Register 

C8 

Read/ Write DMA Channel 4-7 Status/Command 1 Register 

1A 

Write DMA Channel 0-3 Command Register II 

DA 

Write DMA Channel 4-7 Command Register II 

OB 

Write DMA Channel 0-3 Mode Register 1 

CB 

Write DMA Channel 4-7 Mode Register 1 

1B 

Write DMA Channel 0-3 Mode Register II 

DB 

Write DMA Channel 4-7 Mode Register 11 

09 

Read/Write DMA Channel 0-3 Software Request Register 

C9 

Read/Write DMA Channel 4-7 Software Request Register 

1E 

Reset Software Request Interrupt 

OE 

Write DMA Channel 0-3 Clear Mask Register 

CE 

Write DMA Channel 4-7 Clear Mask Register 

OF 

Read/Write DMA Channel 0-3 Mask Register 

CF 

Read/Write DMA Channel 4-7 Mask Register 

OA 

Writs DMA Channel 0-3 Set-Reset Mask Register 

CA 

Write DMA Channel 4-7 Set-Reset Mask Register 

18 

Write DMA Channel 0-3 Bus Size Register 

D8 

Write DMA Channel 4-7 Bus Size Register 

19 

Read/Write DMA Channel 0-3 Chaining Register 

D9 

Read/Write DMA Channel 4-7 Chaining Register 

00 

Read/Write DMA Channel 0 Target Address, A0-A1 5 

87 

Read/Write DMA Channel 0 Target Address, A16-A23 

01 

Read/Write DMA Channel 0 Byte Count, B0-B15 

11 

Read/Write DMA Channel 0 Byte Count, B16-B23 

90 

Read/Write DMA Channel 0 Requester Address, AO- A1 5 

91 

Read/Write DMA Channel 0 Requester Address, A16-A23 
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Port Address 
(HEX) 

Description 

DMA CONTROLLER (Continued) 

02 

Read/Write DMA Channel 1 Target Address, A0-A15 

83 

Read/Write DMA Channel 1 Target Address, A16-A23 

03 

Read/Write DMA Channel 1 Byte Count, B0-B15 

13 

Read/Write DMA Channel 1 Byte Count, B16-B23 

92 

Read/Write DMA Channel 1 Requester Address, A0-A15 

93 

Read/Write DMA Channel 1 Requester Address, A1 6- A23 

04 

Read/Write DMA Channel 2 Target Address, A0-A15 

81 

Read/ Write DMA Channel 2 Target Address, A16~A23 

05 

Read/Write DMA Channel 2 Byte Count, B0-B15 

15 

Read/Write DMA Channel 2 Byte Count, B16-B23 

94 

Read/Write DMA Channel 2 Requester Address, A0-A1 5 

95 

Read/Write DMA Channel 2 Requester Address, A16-A23 

06 

Read/Write DMA Channel 3 Target Address, A0-A1 5 

82 

Read/Write DMA Channel 3 Target Address, A16-A23 

07 

Read/Write DMA Channel 3 Byte Count, BQ-B15 

17 

Read/Write DMA Channel 3 Byte Count, B16-B23 

96 

Read/Write DMA Channel 3 Requester Address, A0--A15 

97 

Read/Write DMA Channel 3 Requester Address, A16-A23 

CO 

Read/ Write DMA Channel 4 Target Address, A0-A1 5 

8F 

Read/Write DMA Channel 4 Target Address, A16-A23 

Cl 

Read/ Write DMA Channel 4 Byte Count, B0“B15 

D1 

Read/ Write DMA Channel 4 Byte Count, B16-B23 

98 

Read/Write DMA Channel 4 Requester Address, A0-A15 

99 

Read/Write DMA Channel 4 Requester Address, A16~A23 

C2 

Read/Write DMA Channel 5 Target Address, A0-A15 

8B 

Read/ Write DMA Channel 5 Target Address, A16-A23 

C3 

Read/Write DMA Channel 5 Byte Count, B0-B15 

D3 

Read/Write DMA Channel 5 Byte Count, B16-B23 

9A 

Read/Write DMA Channel 5 Requester Address, A0-A15 

9B 

Read/Write DMA Channel 5 Requester Address, A16-A23 

C4 

Read/Write DMA Channel 6 Target Address, A0-A1 5 

89 

Read/Write DMA Channel 6 Target Address, A1 6-A23 

C5 

Read/Write DMA Channel 6 Byte Count, B0-B15 

D5 

Read/Write DMA Channel 6 Byte Count, B16-B23 

9C 

Read/Write DMA Channel 6 Requester Address, A0-A15 

9D 

Read/Write DMA Channel 6 Requester Address, A16-A23 

C6 

Read/ Write DMA Channel 7 Target Address, A0-A15 

8A 

Read/Write DMA Channel 7 Target Address, A16-A23 

C7 

Read/Write DMA Channel 7 Byte Count, B0-B15 

D7 

Read/Write DMA Channel 7 Byte Count, B16-B23 

9E 

Read/Write DMA Channel 7 Requester Address, A0-A15 

9F 

Read/Write DMA Channel 7 Requester Address, A16-A23 
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Port Address 
(HEX) 

Description 

INTERRUPT CONTROLLER 

20 

Write Bank B ICW1 , OCW2 or OCW3 

Read Bank B Poll, Interrupt Request or In-Service 

Status Register 

21 

Write Bank B ICW2, ICW3, ICW4 or OCW1 

Read Bank B Interrupt Mask Register 

22 

Read Bank B ICW2 

28 

Read/Write iRQ8 vector Register 

29 

Read/ Write IRQ9 Vector Register 

2A 

Reserved 

2B 

Read/Write IRQ1 1 Vector Register 

2C 

Read/ Write IRQ1 2 Vector Register 

2D 

Read/Write IRQ13 Vector Register 

2E 

Read/ Write IRQ1 4 Vector Register 

2F 

Read/Write IRQ1 5 Vector Register 

AO 

Write Bank C ICW1 , OCW2 or OCW3 

Read Bank C Poll, Interrupt Request or In-Service 

Status Register 

A1 

Write Bank C ICW2, ICW3, ICW4 or OCW1 


Read Bank C Interrupt Mask Register 

A2 

Read Bank C ICW2 

A8 

Read/Write 1RQ1 6 Vector Register 

A9 

Read/Write IRQ1 7 Vector Register 

AA 

Read/Write IRQ1 8 Vector Register 

AB 

Read/Write IRQ1 9 Vector Register 

AC ] 

Read/ Write IRQ20 Vector Register 

AD 

Read/Write IRQ21 Vector Register 

AE 1 

Read/ Write IRQ22 Vector Register 

AF 1 

Read/Write IRQ23 Vector Register 

30 

Write Bank A ICW1 , OCW2 or OCW3 


Read Bank A Poii, interrupt Request or In-Service 

Status Register 

31 

Write Bank A ICW2, ICW3, ICW4 or OCW1 

Read Bank A Interrupt Mask Register 

32 

Read BankAICW2 

38 

Read/Write IRQO Vector Register 

39 

Read/Write IRQ1 Vector Register 

3A 

Read/Write IRQ1 .5 Vector Register 

on 

OD 

Read/ Write IRQ3 Vector Register 

3C 

Read/Write IRQ4 Vector Register 

3D 

Reserved 

3E 

Reserved 

3F 

Read/Write IRQ7 Vector Register 
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Port Address 
(HEX) 

Description 

PROGRAMMABLE INTERVAL TIMER 

40 

Read/Write Counter 0 Register 

41 

Read/Write Counter 1 Register 

42 

Read/Write Counter 2 Register 

43 

Write Control Word Register 1— Counter 0, 1 , 2 

44 

Read/Write Counter 3 Register 

47 

Write Word Register II— Counter 3 

CPU RESET 

64 

Write CPU Reset Register (Data— 1 1 1 1XXX0H) 

WAIT STATE GENERATOR 

72 

Read/Write Wait State Register 0 

73 

Read/Write Wait State Register 1 

74 

Read/Write Wait State Register 2 

75 

Read/Write Refresh Wait State Register 

DRAM REFRESH CONTROLLER 

1C 

Read/Write Refresh Control Register 

INTERNAL CONTROL AND DIAGNOSTIC PORTS 

61 

Write Internal Control Port 

80 

Read/Write Internal Diagnostic Port 0 

88 

Read/Write Internal Diagnostic Port 1 

RELOCATION REGISTER 

7F 

Read/Write Relocation Register 

INTEL RESERVED PORTS 

10 

Reserved 

12 

Reserved 

14 

Reserved 

16 

Reserved 

2A 

Reserved 

3D 

Reserved 

3E 

Reserved 

45 

Reserved 

46 

Reserved 

76 

Reserved 

77 

Reserved 

7D 

Reserved 

7E 

Reserved 

CC 

Reserved 

CD 

Reserved 

DO 

Reserved 

D2 

Reserved 

D4 

Reserved 

D6 

Reserved 
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APPENDIX C 

PROGRAMMING THE 82370 INTERRUPT CONTROLLERS 


This Appendix describes two methods of programming and Initializing the Interrupt Controllers of the 82370. A 
simple Interrupt service routine is also shown which provides compatibility with the 82C59 Interrupt Controller. 

The two methods of programming the 8237® Interrupt Controllers are needed to provide simple initialization 
procedures in different software environments. For new applications, a simple initialization and programming 
sequence can be used. For PC-DOS or other applications which expect 8259s, an interrupt handler for 
initialization traps must be provided. Once the handler Is in place, all three 82370 Interrupt Controller banks 
can be programmed or initialized In the same manner as an 8259. 

The ICW2 interrupt is generated by the 82370 when writing the ICW2 command to any of the interrupt 
controller banks. This interrupt Is supplied to provide compatibility to existing code that expects to be program- 
ming 82C59S. The ICW2 value is stored in the ICW2 register of the associated bank, but is ignored by the 
controller. It is the responsibility of the ICW2 interrupt handler to read the ICW2 register and use its value to 
program the individual vector registers accordingly. 


NEW APPLICATIONS 

New applications do not generally require compatibility with previous code, or at least the code Is usually easily 
modifiable. If the application fits this description, then the ICW2 interrupt can be ignored. This is done by 
initializing the interrupt controller as necessary, and before enabling CPU interrupts, removing the ICW2 
interrupt request by reading the ICW2 register. Listing 1 shows the code for doing this for bank A. The same 
procedure can be used for the other banks. 
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Listing 1. 

Initialization of an 82370 Interrupt Controller Bank 
Without ICW2 Interrupts 

INIT_BANK«A proc near 

cli ;disable all interrupts 

;initialize controller logic 


mov 

al,ICWl 

;begin sequence 

out 

30h,al 


mov 

al,ICW2 

;send dummy ICW2 

out 

31h,al 


mov 

al,ICW3 

;send ICW3 if necessary 

out 

31h,al 


mov 

al,ICW4 

;send ICW4 

out 

31h,al 


mov 

al,BANK_A_MASK 

;write to mask register (OCWl) 

out 

31h,al 


program 

vector registers 


mov 

al,ICW2 

;IRQ0 

out 

38h,al 


mov 

al,ICW2+l 

;IRQ1 

out 

39h,al 


mov 

al,ICW2_VECT0R 

;IRQ1.5 (probably never used in 

out 

3Ah,al 

; this system) 

mov 

al,ICW2+3 

;IRQ3 

out 

3Bh,al 


mov 

al,ICW2+4 

;IRQ4 

out 

3Ch,al 


mov 

al,ICW2+7 

;IRQ7 

out 

3Fh,al 

- 

remove ICW2 interrupt request 

in 

al,31h 

;read mask register to work around 
; A-step errata 

in 

al,32h 

;read ICW2 register to clear 
; interrupt request 


;return to calling program 


sti ;re-enable interrupts 

ret 

INIT_BANK_A endp 
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OLD APPLICATIONS 

In applications where 8259 compatibility is required, the ICW2 interrupt handier must be invoked whenever an 
interrupt controller Is initialized (ICW1-ICW2-ICWn sequence). The handler’s purpose Is to read the ICW2 
value from the ICW2 read register and write the appropriate sequence of vectors to the vector registers. Listing 
2 shows the typical initialization sequence (this Is not changed from the 8259), and the required Initialization for 
operation of the ICW2 Interrupt handler. Listing 2 shows the ICW2 interrupt handler. 



Listing 2. 

iiiiiiaiiAaiivii VI 0ctiii\ iwi iwvwsi iilt.Sr ■ UpIS 

cli 

disable all interrupts 

;initialize controller logic 

mov al.ICWl 
out 30h,al 

begin sequence 

mov al,ICW2 

send dummy ICW2 

out 31h,al 


mov al,ICW3 

send ICW3 if necessary 

out 31h,al 

note that using ICW3 for 
cascading bank B is not required 

» 

and will affect the way EOIs are 
required for nesting. It is 
advised that ICW3 not be used. 

mov al,ICW4 
out ;31h,al 

‘send ICW4 

mov al , Bank_A«.Mask 

‘write to mask register (0CWl=7Bh) 

out 31h,al 

‘don't mask off IRQ1.5 or Default 
interrupt (IRQ7) 

;program necessary vectoi 

registers 

mov al,ICW2_VECT0R 
out 3Ah , al 

;IRQ1.5 

mov al , IRQ7-.DEFAULT. 
out 3Fh,al 

.VECTOR 

;remove ICW2 interrupt request for bank A 

in al,31h 

;read mask register to v/ork around 

A-step errata 

in , al.32h 

;read ICW2 register to clear 
interrupt request 

;at this point install interrupt call vector for ICW2, if 

;not already done somewhere else in the code 

sti 

;re-enable interrupts 
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ICW2_INT_HANDLER 

Listing 3. 

iCW2 interrupt Service Routine 

proc near 


push ax 

;save registers 


push cx 
push dx 

; service bank B 

in al,21h 

;read mask register for A-step 

errata 

in al,22h 

;read ICW2 


mov cx,8 

;count vectors 


mov dx,28h 

;point to vectors 


BANK^B.LOOP ; 

out dx,al 

;write vector 


inc al 

;next vector 


inc dx 

;next vector I/O address 


loop BANK_B«L00P 



; service bank C 



in al,0Alh 

;read mask register for A-step 

errata 

in al , 0A2h 

;read ICW2 


mov cx,8 

;count vectors 


mov dx , 0A8h 

;point to vectors 


BANK-C_L00P : 

out dx,al 

;write vector 


inc al 

;next vector 


inc dx 

;next vector i/o address 


loop BANK_C_L00P 

pop dx 

;restore registers 


pop cx 
pop ax 

iret 

;return 


ICW2_INT.HANDLER 

endp 
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Table 1. Interrupt Controller Registers 

Bank 

A; 






30H 

write 

ICWl, 0CW2, 0CW3 




read 

Poll, IRR, ISR 



31H 

write 

ICW2, ICW3, ICW4, OCWl 




read 

IMR 



32H 

read 

ICW2 read register 



38H 

read/write 

IRQO vector 



39H 

read/write 

IRQl vector 



3AH 

read/write 

IRQ1.5 vector 



3BH 

read/write 

IRQ3 vector 



3CH 

read/write 

IRQ4 vector 



3DH 

RESERVED 



3EH 

RESERVED 



3FH 

read/write 

IRQ? vector 

Bank 

B: 






20H 

write 

ICWl, 0CW2, 0CW3 




read 

Poll, IRR, ISR 



21H 

write 

ICW2, ICW3, ICW4, OCWl 




read 

IMR 



22H 

read 

ICW2 read register 



28H 

read/write 

IRQ8 vector 



29H 

read/write 

IRQ9 vector 



2AH 

RESERVED 



2BH 

read/write 

IRQll vector 



2CH 

read/write 

IRQ12 vector 



2DH 

read/write 

IRQ13 vector 



2EH 

read/write 

IRQ14 vector 



2FH 

read/write 

IRQ15 vector 

Bank 

C; 






AOH 

write 

ICWl, 0CW2, 0CW3 




read 

Poll, IRR, ISR 



AlH 

write 

ICW2, ICW3, ICW4, OCWl 




read 

IMR 



A2H 

read 

ICW2 read register 



A8H 

read/write 

IRQ16 vector 



A9H 

read/write 

IRQl? vector 



AAH 

read/write 

IRQ18 vector 



ABH 

read/write 

IRQ19 vector 



ACH 

read/write 

IRQ20 vector 



ADH 

read/write 

IRQ21 vector 



AEH 

read/write 

IRQ22 vector 



AFH 

read/write 

IRQ23 vector 
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APPENDIX D 
SYSTEM NOTES 


1. BHE# IN MASTER MODE. 

In Master Mode, BHE# will be activated during DMA to/from 8-bit devices residing at even locations when 
the remaining byte count is greater than 1 . ' 

For example, if an 8-bit device is located at 00000000 Hex and the number of bytes to be transferred is > 1 , 
the first address/BHE# combination will be 00000000/0. In some systems this will cause the bus controller 
to perform two 8-bit accesses, the first to 0000000 Hex and the second to 00000001 Hex. However, the 
82370’s DMA will only read/write one byte. This may or may not cause a problem in the system depending 
on what is located at 00000001 Hex. 

Solution: 

There are two solutions if BH# active is unacceptable. Of the two, number 2 is the cleanest and most 
recommended. 

1 . If there is an 8-bit device that uses DMA located at an even address, do not use that address + 1 . The 
limitation of this solution is that the user must have complete control over what addresses will be used in 
the end system. 

2. Do not allow the Bus Controller to split cycles for the DMA. 

2. RESET OUTPUT OF 82370: 

The 80376 requires its RESET line to be active for 80 clock cycles. The 82370 generates holds the RESET 
line active for 62 clock cycles. 

The following design example shows how the user can extend the active high of the RESET line to 80 clock 
cycles. 


Extending the RESET Output of the 82370 

This section deschhfis a hardware solution for using the 82370’s CPURST output and the software reset 
command to cause the 80376 to enter Into a self-test. 

The 80376 requires two simultaneous events in order to Initiate the self-test sequence. The RESET input of 
the processor must be held active for at least 80 CLK2 periods and the BUSY # input must be low 8 CLK2 
periods prior to and 8 CLK2 periods subsequent to RESET going inactive. 

A system which does not have an 80387SX will simply have the BUSY # Input to the 80376 tied low. A system 
which contains the 80387SX will require extra logic between the BUSY# output of the 80387SX and the 
BUSY # Input of the 80376 in order to force self-test on reset. The extra BUSY # logic required will not be 
described here. 

The 82370 CPURST output is Intended to be retimed with faster TTL components in order to meet the RESET 
input setup time requirements of the 80376 and 80387SX. This requires a 74F379 (quad flip-flop with enable) 
or equivalent. The flip-flops required are described in TECHBIT (Ed Grochowski, April 10, 1987). 

The 82370 does not meet the RESET pulse duration requirements for causing self-test of the 80376 when a 
software reset command is issued to the 82370. The 82370 provides a RESET pulse width of 62 CLK2 
periods, the 80376 requires 80 CLK2 periods as mentioned earlier. 

In order to cause the 80376 to do a self-test after a software reset, the CPURST output pulse of the 82370 
must be lengthened. Figure 1 shows a circuit which will do this. 
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Note that the CPURST output is the OR of the 82370 RESET input and the output of the software reset 
command logic, and thus will have the same duration as the RESET input during power-on. 

The additional circuitry required consists of an OR gate, a one-shot, a capacitor, and a resistor more than is 
found in a system without the 82370. The one-shot (74121) is inserted between the CPURST output of the 
82370 and the input of the retiming flip-flops (74F379). The period of the one-shot should be long enough to 
guarantee the 80 'CLK2 periods that the 80376 requires. 

The OR gate (74F32) is required to guarantee that the 80376 is held In a RESET state while the 82370 is being 
reset. This is done to be sure that BE3# is held low when the RESET Input to the 82370 goes inactive. BE3# 
is used during the reset to determine whether it is necessary to enter a special factory test mode. It must be 
low when the RESET input goes inactive, and the 80376 drives it low during reset. 
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82370 TIMER UNIT NOTES 

The 82370 DMA Controller with Integrated System Peripherals is functionally Inconsistent with the data sheet. 
This document explains the behavior of the 82370 Timer Unit and outlines subsequent limitations of the timer 
unit. This document also provides recommended workarounds. 

Overview: 

There are two areas in which the 82370 timer unit exhibits non-specified behavior: 

1. Mode 0 operation 

2. Write Cycles to the 82370 Timer Unit 


1.0 MODE 0 OPERATION 

1.1 Description 

For Mode 0 operation, the 82370 timer is specified as follows in the Intel 1989 Microprocessor and Peripheral 
Handbook Vol. I Page 4-240: 

1 . Writing the first byte disables counting, OUT is set LOW immediately ... 

Due to mode 0 errata, this should read as follows: 

1 . Writing the first byte sets OUT LOW Immediately. If the counter has not yet expired, writing the first byte also 
disables counting. However, If the counter has expired, writing the first count does not disable counting, 
although OUT still behaves correctly (set LOW immediately). 

1.2 Consequences 

Software errors will occur If algorithms depend on the 82370 timer unit to stop counting after writing the first 
byte. Thus, software that Is based on the 8254 core will not function reliably on the 82370 timer unit. 

Note, however, that the external signal of the timer behaves correctly. 


1.3 Solution 

As long as software algorithms are aware of this behavior, there should be no problems, as the external signal 
behaves correctly. 

1.4 Long Term Plans 

Currently, Intel has no plans to fix this behavior of the 82370 timer unit. 


2.0 WRITE CYCLES TO THE 82370 TIMER UNIT: 

This errata applies only to SLAVE WRITE cycles to the 82370 timer unit. During these cycles, the data being 
written into the 82370 timer unit may be corrupted if CLKIN is not inhibited during a certain “window” of the 
write cycle. 
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2.1 Description 

Please refer to Figure D-2. 

During write cycles to the 82370 timer unit, the 82370 translates the 80376 interface signals such as #ADS, 
#W/R, #M/IO, and #D/C Into several internal signals that control the operation of the internal sub-blocks 
(e.g. Timer Unit). 

The 82370 timer uint is controlled by such Internal signals. These internal signals are generated and sampled 
with respect to two separate clock signals: CLK2 (the system clock) and CLKIN (the 82370 timer unit clock). 

Since the CLKIN and CLK2 clock signals are used internally to generate control signals for the Interface to the 
timer unit, some timing parameters must be met in order for the interface logic to function properly. 

Those timing parameters are met by inhibiting the CLKIN signal for a specific window during Write Cycles to 
the 82370 Timer Unit. 

The CLKIN signal must be inhibited using external logic, as the GATE function of the 82370 timer unit is not 
guaranteed to totally inhibit CLKIN. 


2.2 Consequences 

This CLKIN inhibits circuitry guarantees proper write cycles to the 82370 timer unit. 

Without this solution, write cycles to the 82370 timer unit could place corrupted data into the timer unit 
registers. This, in turn, could yield inaccurate results and improper timer operation. 

The proposed solution would involve a hardware modification for existing systems. 


2.3 Solution 

A timing waveform (Figure D-3) shows the specific window during which CLKIN must be inhibited. Please note 
that CLKIN must only be inhibited during the window shown in Figure D-3. This window is defined by two AC 
timing parameters: 

ta = 9 ns 

tb = 28 ns 

The proposed solution provides a certain amount of system “guardband” to make sure that this window is 
avoided. 

PAL equations for a suggested workaround are also included. Please refer to the comments in the PAL codes 
for stated assumptions of this particular workaround. A state diagram (Figure D-4) is provided to help clarify 
how this PAL is designed. 

Figure D-5 shows how this PAL would fit into a system workaround. In order to show the effect of this work- 
around on the CLKIN signal, Figure D-6 shows how CLKIN is inhibited. Note that you must still meet the CLKIN 
AC timing parameters (e.g. (min), t 48 (min)) in order for the timer unit to function properly. 

Please note that this workaround has not been tested. It is provided as a suggested solution. Actual solutions 
will vary from system to system. 
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2.4 Long Term Plans 

Intel has no plans to fix this behavior in the 82370 timer unit, 
module Timer.82370_Fix 

flag •-r2*, *-q2», *-fl*, •-wl, 3, 6, 5, 4, 16, 7, 12, 17. 18,15,14’ 

title ’82370 Timer Unit CLKIN 

INHIBIT signal PAL Solution ’ 

Timer.Unit.Fix device ’P16R6’ ; 


"This PAL inhibits the CLKIN signal (that comes from an oscillator) 
"during Slave Writes to the 82370 Timer unit, 

n 

"ASSUMPTION: This PAL assumes that an external system address 
" decoder provides a signal to indicate that an 82370 

" Timer Unit access is taking place. This input 

" signal is called TMR in this PAL. This PAL also 

" assumes that this TMR signal occurs during a 

" specific T-State. Please see Figure 2 of this 

" document to see when this signal is expected to 

" be active by this PAL. 

n 

"NOTE: This PAL does not support pipelined 82370 SLAVE 

" cycles. 

n 

"(c) Intel Corporation 1989. This PAL is provided as a proposed 
"method of solving a certain 82370 Timer Unit problem. This PAL 
"has not been tested or validated. Please validate this solution 
"for your system and application. 

n 

"Input Pins" 


CLK2 

pixx 

1 . 
j- » 

RESET 

pin 

2; 

TMR 

pin 

5; 


IRDY 

pin 

4 

IADS 

pin 

5 

CLK 

pin 

6 

W_R 

pin 

7 

ncl 

pin 

8 

nc3 

pin 

9 

GNDa 

pin 

10 

GNDb 

pin 

11 

CLKIN-IN 

pin 

12 

"Output Pins" 

Q-O 

pin 

18; 

CLKIN_0UT 

pin 

17; 

INHIBIT 

pin 

16; 

SO 

pin 

15; 

SI 

pin 

14; 


"Declarations" 


"Microprocessor RESET signal 
"Input from Address Decoder, indicating 
"an access to the timer unit of the 
"82370. 

"End of Cycle indicator 
"Address and control strobe 
"PHI2 clock 
"Write/Read Signal" 

"No Connect 0" 

"No Connect 1" 

"Tied to ground, documentation only 
"Output enable, documentation only 
"Input -CLKIN directly from oscillator 


"Internal signal only, fed back to 
"PAL logic" 

"CLKIN signal fed to 82370 Timer Unit 
"CLKIN Inhibit signal 
"Unused State Indicator Pin 
"Unused State Indicator Pin 
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Valid_ADS = ADS & CLK ; "#ADS sampled in PHIl of 80376 T-State 

Valid-.RDY = RDY & CLK ; •’#RDY sampled in PHIl of 80376 T-State 

Timer^Acc = TMR & CLK ; "Timer Unit Access, as provided by 

"external Address Decoder" 

State.Diagram [INHIBIT, SI, SO] 

state 000: if RESET then 000 

else if Valid.ADS & W.R then 001 
else 000 ; 

state 001; if RESET then 000 

else if Timer.Acc then 010 
else if lTimer_Acc then 000 
else 001; 

state 010; if RESET then 000 

else if CLK then 110 
else 010; 

state 110; if RESET then 000 

else if CLK then 111 
else 110; 

state 111; if RESET then 000 

else if CLK then Oil 
else 111; 

state Oil: if RESET then 000 

else if Valid.RDY then 000 
else Oil; 

state 100: if RESET then 000 

else 000 ; 

state 101; if RESET then 000 

else 000 ; 

EQUATIONS 

Q-0 := CLKIN_IN ; "Latched incoming clock. This signal is used 
"internally to feed into the MUX-ing logic" 


CLKIN.OUT := (INHIBIT & CLKIN.OUT & IRESET) 

+( lINHIBIT & Q_0 & ’RESET) ; 

"Equation for CLKIN-OUT. This 

"feeds directly to the 82370 Timer Unit." 

END 
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82370 Timer Unit CLKIN 

INHIBIT signal PAL Solution 
Equations for Module Timer__82370_«Fix 

Device Timer Unit Fix 

— Reduced Equations: 

lINHIBIT := (!CLK & lINHIBIT # CLK & SO # RESET # !S1); 

!S1 := (RESET 

# iNHiBIT & iS1 

# CLK & lINHIBIT & ! RDY & SO & S1 

# ICLK & !S1 

# !S1 & ITMR 

# ISO & IS1); 


ISO := (RESET 

# INHIBIT & IS1 

# CLK & lINHIBIT & l~RDY & S1 
#IINHIBIT&IS0&S1 

# ICLK & ISO 

# lINHIBIT & ISO & S1 

# SO & IS1 

# IS1 & IW J 

# ~ADS&IS1); 


IQ^O := (ICLKIN__IN); 

ICLKIN_OUT := (RESET # ICLKIN_OUT & INHIBIT # lINHIBIT & IQ_0); 
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82370 Timer Unit CLKIN 
INHIBIT signal PAL Solution 
Chip diagram for Module Tlmer__82370__Flx 

Device Timer Unit Fix 


P16R6 


CLK2- 

— ^ 

1 

-D 

20 


RESET- 

2 

19 

- 

TMR- 

3 

18 

-Q_0 

R^- 

4 

17 

-CLKIN_0UT 

ADS- 

5 

16 

-INHIBIT 

CLK- 

6 

15 

-SO 

W_R- 

7 

14 

-SI 

ncl— 

8 

13 

- 

nc3 — 

9 

12 

-CLKINJN 

GNDa- 

10 

11 

-GNDb 




2901 64- A9 


end of module Timer__82370_^Fix 



Figure D-2. Translation of 80376 Signals to Internal 82370 Timer Unit Signals 
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CLK2 

CLK 

ADS# 

W/R# 

M/IO# 

ADDR2-31 

D0-D7 

READYO# 

INHIBIT# i 

CLKIN 
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Figure D-3. 82370 timer Unit Write Cycie 
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NOTE: 

This solution does not support pipelined 82370 SLAVE Cycles. 


Figure D-5. System with 82370 Timer Unit “INHIBiT” Circuitry 


/ 

FIGURE D-5 (a): Inhibited CLKIN In an 82370 Timer Unit & CLKIN Minimum HIGH time. 
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CLKIN (oriqinaO V 


Figure D-6. Inhibited CLKIN in an 82370 Timer Unit and CLKIN Minimum LOW Time 
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1860™ 64-Bit Microprocessor 


■ Parallel Architecture that Supports Up 
to Three Operations per Clock 
■—One Integer or Control Instruction 

per Clock 

— Up to Two Floating-Point Results per 
Clock 

■ High Performance Design 

— 33.3/40 MHz Clock Rates 

— 80 Peak Single Precision MFLOPs 

— 60 Peak Double Precision MFLOPs 

— 64-Bit External Data Bus 

— 64-Bit Internal Instruction Cache Bus 

— 128-Bit Internal Data Cache Bus 

■ High Level of Integration on One Chip 

— 32-Bit Integer and Control Unit 

— 32/64-Bit Pipelined Floating-Point 
Adder and Multiplier Units 

— 64-Bit 3-D Graphics Unit 

— Paging Unit with Translation 
Lookaside Buffer 

— 4 Kbyte Instruction Cache 

— 8 Kbyte Data Cache 


■ Compatible with Industry Standards 
— ANSI/IEEE Standard 754-1985 for 

Binary Floating-Point Arithmetic 
— 386 TM/I 486 TM Microprocessor Data 
Formats and Page Table Entries 
— JEDEC 168-pin Ceramic Pin Grid 
Array Package (see Packaging 
Outlines and Dimensions, order 
#231369) 

■ Easy to Use 

— On-Chip Debug Register 
— Assembler, Linker, Simulator, 
Debugger, C and FORTRAN 
Compilers, FORTRAN Vectorizer, 
Scalar and Vector Math Libraries for 
both OS/2* and UNIX* Environments 


The Intel i860TM Microprocessor (order codes A80860-33 and A80860-40) delivers supercomputing perform- 
ance in a single VLSI component. The 64-bit design of the i860 microprocessor balances integer, floating 
point, and graphics performance for applications such as engineering workstations, scientific computing, 3-D 
graphics workstations, and multiuser systems. Its parallel architecture achieves high throughput with RISC 
design techniques, pipelined processing units, wide data paths, large on-chip caches, million-transistor design, 
and fast one-micron CHMOS IV silicon technology. 


A31-A3 D63-D0 CONTROL 



240296-1 


Figure 0.1. Block Diagram 


Intel, intgl, 386, i486, i860, Multibus II and Parallel System Bus are trademarks of Intel Corporation. 

*UNIX is a registered trademark of AT&T. OS/2 is a trademark of International Business Machines Corporation. 
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1.0 FUNCTIONAL DESCRIPTION 

As shown by the block diagram on the front page, 
the i860 microprocessor consists of 9 units: 

1 . Core Execution Unit 

2. Floating-Point Control Unit 

3. Floating-Point Adder Unit 

4. Floating-Point Multiplier Unit 

5. Graphics Unit 

6. Paging Unit 

7. Instruction Cache 

8. Data Cache 

9. Bus and Cache Control Unit 

The core execution unit controls overall operation of 
the i860 microprocessor. The core unit executes 
load, store, Integer, bit, and control-transfer opera- 
tions, and fetches instructions for the floating-point 
unit as well. A set of 32 x 32-bit general-purpose 
registers are provided for the manipulation of integer 
data. Load and store instructions move 8-, 16-, and 
32-blt data to and from these registers. Its full set of 
integer, logical, and control-transfer instructions give 
the core unit the ability to execute complete systems 
software and applications programs. A trap mecha- 
nism provides rapid response to exceptions and ex- 
ternal interrupts. Debugging is supported by the abili- 
ty to trap on data or instruction reference. 

The floating-point hardware is connected to a sepa- 
rate set of floating-point registers, which can be 
accessed as 16 x 64-bit registers, or 32 x 32-bit reg- 
isters. Special load and store instructions can also 
access these same registers as 8 x 1 28-bit registers. 
All floating-point Instructions use these registers as 
their source and destination operands. 

The floating-point control unit controls both the float- 

inn_r»rkir»t orlHor onH flrkotinn-rirklni' mi iltinlior icci i- 

• 11^ ... w.. .w ..WVA»..g .w — 

ing instructions, handling all source and result 
exceptions, and updating status bits In the floating- 
point status register. The adder and multiplier can 
operate in parallel, producing up to two results per 
clock. The floating-point data types, floating-point in- 
structions, and exception handling all support the 
IEEE Standard for Binary Floating-Point Arithmetic 
(ANSI/IEEE Std 754-1985). 

The floating-point adder performs addition, subtrac- 
tion, comparison, and conversions on 64- and 32-bit 
floating-point values. An adder instruction executes 
in three clocks; however, in pipelined mode, a new 
result is generated every clock. 

The floating-point multiplier performs floating-point 
and integer multiply and floating-point reciprocal op- 
erations on 64- and 32-bit floating-point values. A 
multiplier instruction executes in three to four clocks; 


however. In pipelined mode, a new result can be 
generated every clock for single-precision and every 
other clock for double precision. 

The graphics unit has special integer logic that sup- 
ports three-dimensional drawing in a graphics frame 
buffer, with color Intensity shading and hidden sur- 
face elimination via the Z-buffer algorithm. The 
graphics unit recognizes the pixel as an 8-, 16-, or 
32-bit data type. It can compute Individual red, blue, 
and green color intensity values within a pixel; but It 
does so with parallel operations that take advantage 
of the 64-blt internal word size and 64-bit external 
bus. The graphics features of the i860 microproces- 
sor assume that the surface of a solid object Is 
drawn with polygon patches whose shapes approxi- 
mate the original object. The color intensities of the 
vertices of the polygon and their distances from the 
viewer are known, but the distances and intensities 
of the other points must be calculated by interpola- 
tion. The graphics instructions of the I860 microproc- 
essor directly aid such interpolation. 

The paging unit implements protected, paged, virtual 
memory via a 64-entry, four-way set-associative 
memory called the TLB (Translation Lookaside Buff- 
er). The paging unit uses the TLB to perform the 
translation of logical address to physical address, 
and to check for access violations. The access pro- 
tection scheme employs two levels of privilege: user 
and supervisor. 

The instruction cache is a two-way set-associative 
memory of four Kbytes, with 32-byte blocks. It trans- 
fers up to 64 bits per clock (320 Mbyte/sec at 
40 MHz). 

The data cache is a two-way set-associative memo- 
ry of eight Kbytes, with 32-byte blocks. It transfers 
up to 128 bits per clock (640 Mbyte/sec at 40 MHz). 
The I860 microprocessor normally uses writeback 
caching, i.e. memory writes update the cache (If ap- 
plicable) without necessarily updating memory Im- 
mediately; however, caching can be inhibited by 
software where necessary. 

The bus and cache control unit performs data and 
instruction accesses for the core unit. It receives cy- 
cle requests and specifications from the core unit, 
performs the data-cache or instuction-cache miss 
processing, controls TLB translation, and provides 
the interface to the external bus. Its pipelined struc- 
ture supports up to three outstanding bus cycles. 


The programmer-visible aspects of the architecture 
of the I860 microprocessor include data types, regis- 
ters, Instructions, and traps. 


2.0 PROGRAMMING INTERFACE 


5-2 



i860TM MICROPROCESSOR 


(PI^ilLD[MOM^iY 


inter 


2.1 Data Types 

The i860 microprocessor provides operations for in- 
teger and floating-point data. Integer operations are 
performed on 32-bit operands with some support 
also for 64-bit operands. Load and store instructions 
can reference 8-bit, 16-bit, 32-bit, 64-bit, and 128-bit 
operands. Floating-point operations are performed 
on IEEE-standard 32- and 64-bit formats. Graphics 
oriented instructions operate on arrays of 8-, 16-, or 
32-bit pixels. 

2.1.1 tNTEGER 

An integer is a 32-bit signed value in standard two’s 
complement form. A 32-blt integer can represent a 
value in the range -2,147,483,648 (-231) to 
2,147,483,647 ( + 231 - 1). Arithmetic operations on 
8- and 1 6-bit integers can be performed by sign-ex- 
tending the 8- or 16-bit values to 32 bits, then using 
the 32-bit operations. 

There are also add and subtract Instructions that op- 
erate on 64-blt long integers. 

Load and store instructions may also reference (in 
addition to the 32- and 64-bit formats previously 
mentioned) 8- and 16-bit items In memory. When an 
8- or 16-bit item Is loaded into a register, it is con- 
verted to an integer by sign-extending the value to 
32 bits. When an 8- or 16-bit item Is stored from a 
register, the corresponding number of low-order bits 
of the register are used. 


2.1.2 ORDINAL 

Arithmetic operations are available for 32-bit ordi- 
nals. An ordinal Is an unsigned integer. An ordinal 
can represent values in the range 0 to 
4,294,967,295 ( + 232 - 1). 

Also, there are add and subtract instructions that op- 
erate on 64-bit ordinals. 


2.1.3 SINGLE- AND DOUBLE-PRECISION REAL 

Figure 2.1 shows the real number formats. A single- 
precision real (also called “single real”) data type is 
a 32-bit binary floating-point number. Bit 31 is the 
sign bit; bits 30. 23 are the exponent; and bits 22..0 
are the fraction. In accordance with ANSI/IEEE 
standard 754, the value of a single-precision real is 
defined as follows: 

1 . If e = 0 and f # 0 or e = 255 then generate a 
floating-point source-exception trap when en- 
countered in a floating-point operation. 

2. If 0 < e < 255, then the value is (-1)® X 1.f x 
26-127. 

3. If e = 0 and f = 0, then the value is signed zero. 

A double-precision real (also called “double real”) 
data type is a 64-bit binary floating-point number. Bit 
63 is the sign bit; bits 62..52 are the exponent; and 
bits 51 ..0 are the fraction. In accordance with ANSI/ 
IEEE standard 754, the value of a double-precision 
real is defined as follows: 

1 . If e = 0 and f 0 or e = 2047, then generate a 
floating-point source-exception trap when en- 
countered in a floating-point operation. 

2. If 0 < e < 2047, then the value is (-l)s x l.f x 
26-1023. 



Figure 2.1. Real Number Formats 
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3. If e = 0 and f = 0, then the value is signed zero. 

The special values infinity, NaN (“Not a Number”), 
indefinite, and denormal generate a trap when en- 
countered. The trap handler implements IEEE-stan- 
dard results. 

A double real value occupies an even/odd pair of 
floating-point registers. Bits 31 ..0 are stored In the 
even-numbered floating-point register; bits 63.. 32 
are stored in the next higher odd-numbered floating- 
point register. 

2.1.4 PIXEL 

A pixel may be 8, 1 6, or 32 bits long depending on 
color and intensity resolution requirements. Regard- 
less of the pixel size, the i860 microprocessor al- 
ways operates on 64 bits worth of pixels at a time. 
The pixel data type Is used by two kinds of Instruc- 
tions: 

• The selective pixel-store instruction that helps im- 
plement hidden surface elimination. 

• The pixel add instruction that helps Implement 
3-D color intensity shading. 

a 

To perform color intensity shading efficiently in a va- 
riety of applications, the I860 microprocessor de- 
fines three pixel formats according to Table 2.1. 

Figure 2.2 illustrates one way of assigning meaning 
to the fields of pixels. These assignments are for 
illustration purposes only. The i860 microprocessor 
defines only the field sizes, not the specific use of 
each field. Other ways of using the fields of pixels 
are possible. 


Table 2.1. Pixel Formats 


Pixel 
Size 
(in bits) 

Bits of 
Color 1 
Intensity 

Bits of 
Coior 2 
Intensity 

Bits of 
Color 3 
Intensity 

Bits of 
Other 
Attribute 
(Texture) 

8 

N 8) bits of intensity* 

8 - N 

16 

6 

6 

4 


32 

8 

8 

8 

8 


The intensity attribute fields may be assigned to colors in 
any order convenient to the application. 


*With 8-bit pixels, up to 8 bits can be used for intensity; the 
remaining bits can be used for any other attribute, such as 
color. The intensity bits must be the low-order bits of the 
pixel. 


2.2 Register Set 

As Figure 2.3 shows, the i860 microprocessor has 
the following registers: 

• An integer register file 

• A floating-point register file 

• Six control registers (psr, epsr, db, dirbase, fir, 
and fsr) 

• Four special-purpose registers (KR, Kl, T, and 
MERGE) 

The control registers are accessible only by load 
and store control-register instructions; the Integer 
and floating-point registers are accessed by arithme- 
tic operations and load and store instructions. The 
special-purpose registers KR, Kl, T, and MERGE are 
used by a few specific instructions. 


7 5 0 
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9 
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16-BIT PIXEL 
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G 
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31 

23 

15 


7 


0 

R 

G 

B 

T 


240296-4 

I — Intensity, R — Red intensity, G — Green intensity, B — Blue intensity, C — Color, T — ^Texture 

These assignments of specific meanings to the fields of pixels are for illustration purposes only. Only the field sizes are 
defined, not the specific use of each field. 


Figure 2.2. Pixel Format Example 
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2.2.1 INTEGER REGISTER FILE 

There are 32 integer registers, each 32 bits wide, 
referred to as rO through r31, which are used for 
address computation and scalar integer computa- 
tions. Register rO always returns zero when read, 
Independently of what is stored in it. 

2.2.2 FLOATING-POINT REGISTER FILE 

There are 32 floating-point registers, each 32-bits 
wide, referred to as fO through f31, which are used 
for floating-point computations. Registers fO and f1 
always return zero when read, independently of 
what is stored in them. The floating-point registers 
are also used by a set of graphics operations, pri- 
marily for 3D graphics computations. 

When accessing 64-blt floating-point or integer val- 
ues, the i860 microprocessor uses an even/odd pair 
of registers. When accessing 1 28-blt values, it uses 
an aligned set of four registers (fO, f4, f8, . . . , f28). 
The instruction must designate the lowest register 
number of the set of registers containing 64- or 1 28- 
bit values. Misaligned register numbers produce un- 
defined results. The register with the lowest number 
contains the least significant part of the value. For 
1 28-blt values, the register pair with the lower num- 
bers contain the least significant 64 bits while the 
register pair with the higher numbers contain the 
most significant 64 bits. 


The 128-bit load and store instructions, along with 
the 1 28-blt data path between the floating-point reg- 
isters and the data cache help to sustain the extraor- 
dinarily high rate of computation. 

2.2.3 PROCESSOR STATUS REGISTER 

The processor status register (psr) contains miscel- 
laneous state Information for the current process. 
Figure 2.4 shows the format of the psr. 

• BR (Break Read) and BW (Break Write) enable a 
data access trap when the operand address 
matches the address in the db register and a 
read or write (respectively) occurs. 

• Various instructions set CC (Condition Code) ac- 
cording to tests they perform. The branch-on- 
condition-code instructions test its value. The bla 
instruction sets and tests LCC (Loop Condition 
Code). 

• IM (Interrupt Mode) enables external interrupts if 
set; disables interrupts if clear. 

• U (User Mode) is set when the i860 microproces- 
sor is executing In user mode; it is clear when the 
i860 microprocessor is executing In supervisor 
mode. In user mode, writes to some control regis- 
ters are Inhibited. This bit also controls the mem- 
ory protection mechanism. See section 2.4.4.3 
for a description of memory protection in user 
and supervisor modes. 
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WRITE- PROTECT MODE ■ 
DATA CACHE SIZE 


24 22 


15 13 


(RESERVED) 


STEPPING 

NUMBER 


PROCESSOR 

TYPE 


- (RESERVED) 

- PAGE-TABLE BIT MODE 

- BIG ENDIAN MODE 

- OVERFLOW FLAG 
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Figure 2.5 Extended Processor Status Register 


PIM (Previous Interrupt Mode) and PU (Previous 
User Mode) save the corresponding status bits 
(IM and U) on a trap, because those status bits 
are changed when a trap occurs. They are re- 
stored into their corresponding status bits when 
returning from a trap handler with a branch indi- 
rect instruction when a trap flag is set in the psr. 

FT (Floating-Point Trap), DAT (Data Access 
Trap), lAT (Instruction Access Trap), IN (Inter- 
rupt), and IT (Instruction Trap) are trap flags. 
They are set when the corresponding trap condi- 
tion occurs. The trap handler examines these bits 
to determine which condition or conditions have 
caused the trap. 


DS (Delayed Switch) is set if a trap occurs during 
the instruction before dual-instruction mode is en- 
tered or exited. If DS is set and DIM (Dual Instruc- 
tion Mode) is clear, the i860 microprocessor 
switches to dual-instruction mode one instruction 
after returning from the trap handler. If DS and 
DIM are both set, the i860 microprocessor 
switches to single-instruction mode one instruc- 
tion after returning from the trap handler. 

When a trap occurs, the i860 microprocessor 
sets DIM If it is executing in dual-instruction 
mode; it clears DIM if It is executing in single-in- 
struction mode. If DIM is set after returning from a 
trap handler, the i860 microprocessor resumes 
execution in dual-instruction mode. 
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• When KNF (Kill Next Floating-Point Instruction) is 
set, the next floating-point instruction is sup- 
pressed (except that its dual-instruction mode bit 
is interpreted). A trap handler sets KNF if the 
trapped floating-point instruction should not be 
reexecuted. 

• SC (Shift Count) stores the shift count used by 
the last right-shift instruction. It controls the num- 
ber of shifts executed by the double-shift Instruc- 
tion. 

• PS (Pixel Size) and PM (Pixel Mask) are used by 
the pixel-store Instruction and by the graphics in- 
structions. The values of PS control pixel size as 
defined by Table 2.2. The bits in PM correspond 
to pixels to be updated by the pixel-store instruc- 
tion pst.d. The low-order bit of PM corresponds 
to the low-order pixel of the 64-bit source oper- 
and of pst.d. The number of low-order bits of PM 
that are actually used Is the number of pixels that 
fit into 64-bits, which depends upon PS. If a bit of 
PM Is set, then pst.d stores the corresponding 
pixel. Refer also to the pst.d instruction in section 
8 . 


Table 2.2. Values of PS 


Value 

Pixel Size 
in bits 

Pixel Size 
in bytes 

00 

8 

1 

01 

16 

2 

10 

32 

4 

11 

(undefined) 

(undefined) 


2.2.4 EXTENDED PROCESSOR STATUS 
REGISTER 

The extended processor status register (epsr) con- 
tains additional state Information for the current pro- 
cess beyond that stored In the psr. Figure 2.5 shows 

the format of the epsr. 

• The processor type Is one for the i860 microproc- 
essor. 

• The stepping number has a unique value that dis- 
iinguishes among different revisions of the proc- 
essor. 

• IL (Interlock) is set if a trap occurs after a lock 
instruction but before the load or store following 
the subsequent unlock instruction. IL indicates to 
the trap handler that a locked sequence has 
been interrupted. This does not apply if a st.c 
dirbase was used to set the BL bit. 

• WP (write protect) controls the semantics of the 
W bit of page table entries. A clear W bit in either 
the directory or the page table entry causes 
writes to be trapped. When WP Is clear, writes 
are trapped in user mode, but not in supervisor 
mode. When WP Is set, writes are trapped in both 
user and supervisor modes. 

• INT (Interrupt) Is the value of the I NT Input pin. 

• DCS (Data Cache Size) is a read-only field that 
tells the size of the on-chip data cache. The num- 
ber of bytes actually available is 212 + DCS; there- 
fore, a value of zero Indicates 4 Kbytes, one indi- 
cates 8 Kbytes, etc. 


ADDRESS TRANSLATION ENABLE 

DRAM PAGE SIZE 

BUS LOCK 

I-CACHE, TLB INVALIDATE 

(RESERVED) 

CODE SIZE 8-BIT 

REPLACEMENT BLOCK 

REPLACEMENT CONTROL 


31 12 10 8 7 4 1 0 


DIRECTORY TABLE BASE (DTB) 

RC 

RB 

1 

B 

fl 

B 

DPS 

i 

4c 

4c 

4c 

4c 

4c 

4c 

4c 

4c 

4c 
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*Can be changed only from supervisor level 


Figure 2.6. Directory Base Register 
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• PBM (Page-Table Bit Mode) determines which bit 
of page-table entries is output on the PTB pin. 
When PBM is clear, the PTB signal reflects bit CD 
of the page-table entry used for the current cycle. 
When PBM is set, the PTB signal reflects bit WT 
of the page-table entry used for the current cycle. 

• BE (Big Endian) controls the ordering of bytes 
within a data Item in memory. Normally (i.e. when 
BE is clear) the i860 microprocessor operates in 
little endian mode, in which the addressed byte is 
the low-order byte. When BE is set (big endian 
mode), the low-order three bits of all load and 
store addresses are complemented, then 
masked to the appropriate boundary for align- 
ment. This causes the addressed byte to be the 
most significant byte. Section 2.3 discusses little 
and big endian addressing. 

• OF (Overflow Flag) Is set by adds, addu, subs, 
and subu when integer overflow occurs. For 
adds and subs, OF is set if the carry from bit 31 
Is different than the carry from bit 30. For addu, 
OF is set if there is a carry from bit 31 . For subu, 
OF is set if there is no carry from bit 31 . Under all 
other conditions, it is cleared by these Instruc- 
tions. OF controls the function of the intovr 
instruction. 


2.2.5 DATA BREAKPOINT REGISTER 

The data breakpoint register (db) is used to gener- 
ate a trap when the i860 microprocessor makes a 
data-operand access to the address stored in this 
register. The trap is enabled by BR and BW in psr. 
The db register can only be changed from supervi- 
sor level. When comparing, a number of low order 
bits of the address are Ignored, depending on the 
size of the operand. For example, a 16-bit access 
ignores the low-order bit of the address when com- 
paring to db; a 32-bit access ignores the low-order 
two bits. This ensures that any access that overlaps 
the address contained in the register will generate a 
trap. The DAT occurs before the data Is accessed 
and prevents the load or store from completing. 

2.2.6 DIRECTORY BASE REGISTER 

The directory base register dirbase (shown In Figure 
2.6) controls address translation, caching, and bus 
options. The dirbase register can only be changed 
from supervisor level. The BL bit is changed from 
user level with the lock and unlock instructions. 

• ATE (Address Translation Enable), when set, en- 
ables the virtual-address translation algorithm. 
The data cache must be flushed before changing 
the ATE bit. 


• DPS (DRAM Page Size) controls how many bits 
to ignore when comparing the current bus-cycle 
address with the previous bus-cycle address to 
generate the NENE# signal. This feature allows 
for higher speeds when using static column or 
page-mode DRAMs and consecutive reads and 
writes access the row. The comparison ignores 
the low-order 12 + DPS bits. A value of zero is 
appropriate for one bank of 256K X n RAMs, 1 
for 1 M X RAMS, etc. 

• When BL (Bus Lock) is set, external bus access- 
es are locked. The LOCK# signal is asserted the 
next bus cycle whose internal bus request is gen- 
erated after BL is set. It remains set on every 
subsequent bus cycle as long as BL remains set. 
The LOCK# signal is deasserted on the next in- 
ternal bus request generated after BL is cleared. 
Traps immediately clear BL. The lock and unlock 
instructions control the BL bit. 

• ITI (l-Cache, TLB Invalidate), when set in the val- 
ue that is loaded into dirbase, causes the instruc- 
tion cache and address-translation cache (TLB) 
to be flushed. The ITI bit does not remain set In 
dirbase. ITI always appears as zero when read- 
ing dirbase. Section 2.5 discusses flushing the 
data cache before invalidating the TLB. 

• When CS8 (Code Size 8-Blt) is set, instruction 
cache misses are processed as 8-bit bus cycles. 
When this bit is clear, instruction cache misses 
are processed as 64-bit bus cycles. This bit can 
not be set by software; hardware sets this bit at 
initialization time. It can be cleared by software 
(one time only) to allow the system to execute out 
of 64-bit memory after bootstrapping from 8-blt 
EPROM. A nondelayed branch to code in 64-bit 
memory should directly follow the st.c (store con- 
trol register) Instruction that clears CS8, in order 
to make the transition from 8-bit to 64-bit memory 
occur at the correct time. The branch must be 
aligned on a 64-blt boundary. 

• RB (Replacement Block) identifies the cache 
block to be replaced by cache replacement algo- 
rithms. The high-order bit of RB is ignored by the 
instruction and data caches. RB conditions the 
cache flush instruction flush, which is discussed 
in Section 8. Table 2.3 explains the values of RB. 

• RC (Replacement Control) controls cache re- 
placement algorithms. Table 2.4 explains the sig- 
nificance of the values of RC. 

• DTB (Directory Table Base) contains the high-or- 
der 20 bits of the physical address of the page 
directory when address translation Is enabled (i.e. 
ATE = 1). The low-order 12 bits of the address 
are zeros. 
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Figure 2.7. Floating-Point Status Register 


Table 2.3. Values of RB 


Value 

Replace 
TLB Block 

Replace Instruction 
and Data Cache Block 

0 0 

0 

0 

0 1 

1 

1 

1 0 

2 

0 

1 1 

3 

1 


2.2.7 FAULT INSTRUCTION REGISTER 

When a trap occurs, this register contains the ad- 
dress of the trapping instruction (not necessarily the 
instruction that created the conditions that required 
the trap). The fir is a read only register. The address 
of the ici.c insiruciion used to read the fir is returnsd 
in rdest when reading the fir at any time other than 
the first Id.c fir after a tr^p. 


Table 2.4. Values of RC 


Value 

Meaning 

00 

Selects the normal replacement 
algorithm where any block in the set 
may be replaced on cache misses in all 
caches. 

01 

Instruction, data, and TLB cache 
misses replace the block selected by 

RB. The instruction and data caches 
ignore the high-order bit of RB. This 
mode is used for instruction cache and 
TLB testing. 

10 

Data cache misses replace the block 
selected by the low-order bit of RB. 

11 

Disables data cache replacement. 


2.2.8 FLOATING-POINT STATUS REGISTER 

The floating-point status register (fsr) contains the 
floating-point trap and rounding-mode status for the 
current process. Figure 2.7 shows Its format. The fsr 
is writable In user level. 

« If FZ (Flush Zero) is clear and underflow occurs, 
a result-exception trap Is generated. When FZ Is 
set and underflow occurs, the result is set to zero, 
and no trap due to underflow occurs. 

• If Tl (Trap Inexact) Is clear, inexact results do not 
cause a trap. If Tl Is set, inexact results cause a 
trap. The sticky inexact flag (SI) is set whenever 
an inexact result is produced, regardless of the 
setting of Tl. 

• RM (Rounding Mode) , specifies one of the four 
rounding modes defined by the IEEE standard. 
Given a true result b that cannot be represented 
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Table 2.5. Values of RM 


Value 

Rounding Mode 

Rounding Action 

00 

Round to nearest or even 

Closer Xobo^a or c\ if equally 
close, select even number 
(the one whose least 
significant bit is zero). 

01 

Round down (toward — oo) 

a 

10 

Round up (toward + 

c 

11 

Chop (toward zero) 

Smaller in magnitude of a or c. 


by the target data type, the i860 microprocessor 
determines the two representable numbers a 
and c that most closely bracket b in value (a < b 
< c). The i860 microprocessor then rounds 
(changes) b\o a ox c according to the mode se- 
lected by RM as defined in Table 2.5. Rounding 
introduces an error in the result that is less than 
one least-significant bit. 

• The U-bit (Update Bit), if set in the value that is 
loaded into fsr by a st.c instruction, enables up- 
dating of the result-status bits (AE, AA, Al, AO, 
AU, MA, Ml, MO, and MU) in the first-stage of the 
floating-point adder and multiplier pipelines. If this 
bit is clear, the result-status bits are unaffected 
by a st.c instruction; st.c ignores the correspond- 
ing bits in the value that Is being loaded. A st.c 
always updates fsr bits 21.. 17 and 8..0 directly. 
The U-bit does not remain set; It always appears 
as zero when read. 

• The FTE (Floating-Point Trap Enable) bit, if clear, 
disables all floating-point traps (invalid input oper- 
and, overflow, underflow, and inexact result). 

• SI (Sticky Inexact) is set when the last stage re- 
sult of either the multiplier or adder is inexact (i.e. 
when either Al or Ml Is set). SI is “sticky” in the 
sense that It remains set until reset by software. 
Al and Ml, on the other hand, can by changed by 
the subsequent floating-point instruction. 

• SE (Source Exception) Is set when one of the 
source operands of a floating-point operation is 
invalid; it is cleared when all the Input operands 
are valid. Invalid input operands Include denor- 
mals, infinities, and all NaNs (both quiet and sig- 
naling). 

• When read from the fsr, the result-status bits MA, 
Ml, MO, and MU (Multiplier Add-One, Inexact, 
Overflow, and Underflow, respectively) describe 
the last stage result of the multiplier. 

When read from the fsr, the result-status bits AA, 
Al, AO, AU, and AE (Adder Add-One, Inexact, 
Overflow, Underflow, and Exponent, respectively) 
describe the last stage result of the adder. The 
high-order three bits of the 1 1 -bit exponent of the 
adder result are stored in the AE field. 

The Adder Add One and Multiplier Add One bits 
indicate that the absolute value of the result frac- 


tion grew by one least-significant bit due to 
rounding. AA and MA are not influenced by the 
sign of the result. 

After a floating-point operation in a given unit (ad- 
der or multiplier), the result-status bits of that unit 
are undefined until the point at which result ex- 
ceptions are reported. 

When written to the fsr with the U-bit set, the 
result-status bits are placed into the first stage of 
the adder and multiplier pipelines. When the 
processor executes pipelined operations, it prop- 
agates the result-status bits of a particular unit 
(multiplier or adder) one stage for each pipelined 
floating-point operation for that unit. When they 
reach the last stage, they replace the normal re- 
sult-status bits in the fsr. When the U-bit is not 
set, result-status bits in the word being writeen to 
the fsr are ignored. 

In a floating-point dual-operation instruction (e.g. 
add-and-multiply or subtract-and-multiply), both 
the multiplier and the adder may set exception 
bits. The result-status bits for a particular unit re- 
main set until the next operation that uses that 
unit. 

• RR (Result Register) specifies which floating- 
point register (f0-f31) was the destination regis- 
ter when a result-exception trap occurs due to a 
scalar operation. 

• LRP (Load Pipe Result Precision), IRP (Integer 
(Graphics) Pipe Result Precision), MRP (Multiplier 
Pipe Result Precision), and ARP (Adder Pipe Re- 
sult Precision) aid in restoring pipeline state after 
a trap or process switch. Each defines the preci- 
sion of the last stage result in the corresponding 
pipeline. One of these bits is set when the result 
in the last stage of the corresponding pipeline Is 
double precision; it is cleared if the result is single 
precision. These bits cannot be changed by soft- 
ware. 


2.2.9 KR, Kl, T, AND MERGE REGISTERS 

The KR, Kl, and T registers are special-purpose reg- 
isters used by the dual-operation floating-point 
instructions pfam, pfmam, pfsm, and pfmsm, 
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which initiate both an adder (A-unit) operation and a 
multiplier (M-unit) operation. The KR, Kl, and T regis- 
ters can store values from one dual-operation in- 
struction and supply them as inputs to subsequent 
dual-operation instructions. (Refer to Figure 2.14.) 

The MERGE register is used only by the graphics 
instructions. The purpose of the MERGE register is 
to accumulate (or merge) the results of multiple-ad- 
dition operations that use as operands the color-in- 
tensity values from pixels or distance values from a 
Z-buffer. The accumulated results can then be 
stored In one 64-bit operation. 

Two multiple-addition Instructions and an OR in- 
struction use the MERGE register. The addition in- 
structions are designed to add interpolation values 
to each color-intensity field in an array of pixels or to 
each distance value in a Z-buffer. 

Refer to the Instruction descriptions in section 8 for 
more information about these registers. 


2.3 Addressing 

Memory is addressed In byte units with a paged vir- 
tual-address space of 232 bytes. Data and instruc- 
tions can be located anywhere in this address 
space. Address arithmetic is performed using 32-bit 
input values and produces 32-blt results. The low-or- 
der 32 bits of the result are used in case of overflow. 

Normally, multibyte data values are stored in memo- 
ry In little endian format, i.e., with the least significant 
byte at the lowest memory address. As an option, 
the ordering can be dynamically selected by soft- 
ware iii vid\ji iiiv^uc. The iSSC microprocessor 
also offers big endian mode, in which the most sig- 
nificant byte of a data item is at the lowest address. 
Figure 2.8 shows the difference between the two 
storage modes. Big endian and little endian data ar- 
eas should not be mixed within a 64-bit data word. 
Illustrations of data structures in this data sheet 
show data stored in little endian mode, i.e., the low- 
order byte Is at the lowest memory address. 


Code accesses are always done with little endian 
addressing. This implies that code will appear differ- 
ently than documented here when accessed as big 
endian data. Intel recommends that disassemblers 
running in a big endian system, convert instructions 
which have been read as data back to little endian 
form and present them In the format documented 
here. . 

Alignment requirements are as follows (any violation 
results in a data-access trap): 

• 128-bit values are aligned on i 6-byte boundaries 
when referenced in memory (i.e. the four least 
significant address bits must be zero). 

• 64-bit values are aligned on 8-byte boundaries 
when referenced in memory (i.e. the three least 
significant address bits must be zero). 

• 32-bit values are aligned on 4-byte boundaries 
when referenced in memory (I.e. the two least 
significant address bits must be zero). 

• 16-blt values are aligned on 2-byte boundaries 
when referenced in memory (i.e. the least signifi- 
cant address bit must be zero). 


2.4 Virtual Addressing 

When address translation is enabled, the i860 micro- 
processor maps instruction and data virtual address- 
es into physical addresses before referencing mem- 
ory. This address transformation is compatible with 
that of the 386 microprocessor and implements the 
basic features needed for page-oriented virtual- 
memory systems and page-level protection. 

The address translation is optional. Address transla- 
tion is In effect only when the ATE bit of uirbase Is 
set. This bit is typically set by the operating system 
during software Initialization. The ATE bit must be 
set if the operating system is to Implement page-orl- 
ented protection or page-oriented virtual memory. 
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Figure 2.8 Little and Big Endian Accesses 
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Figure 2.9. Format of a Virtual Address 


Address translation is disabled when the processor 
is reset. It is enabled when a store to dirbase sets 
the ATE bit. It is disabled again when a store clears 
the ATE bit. 


2.4.1 PAGE FRAME 

A page frame is a 4-Kbyte unit of contiguous ad- 
dresses of physical main memory. Page frames be- 
gin on 4-Kbyte boundaries and are fixed in size. A 
page is the collection of data that occupies a page 
frame when that data is present in main memory. 
The data may also occupy some location in second- 
ary storage when there is not sufficient space in 
main memory. 

2.4.2 VIRTUAL ADDRESS 

A virtual address refers indirectly to a physical ad- 
dress by specifying a page table, a page within that 


table, and an offset within that page. Figure 2.9 
shows the format of a virtual address. 

Figure 2.10 shows how the i860 microprocessor 
converts the DIR, PAGE, and OFFSET fields of a 
virtual address into tho physical address by consult- 
ing two levels of page tables. The addressing mech- 
anism uses the DIR field as an index into a page 
directory, uses the PAGE field as an Index into the 
page table determined by the page directory, and 
uses the OFFSET field to address a byte within the 
page determined by the page table. 

2.4.3 PAGE TABLES 

A page table is simply an array of 32-bit page specifi- 
ers. A page table is itself a page, and therefore con- 
tains 4 Kbytes of memory or at most 1 K 32-bit en- 
tries. 
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Two levels of tables are used to address a page of 
memory. At the higher level is a page directory. The 
page directory addresses up to 1K page tables of 
the second level. A page table of the second level 
addresses up to 1 K pages. All the tables addressed 
by one page directory, therefore, can address 1M 
pages (220). Because each page contains 4 Kbytes 
(212 bytes), the tables of one page directory can 
span the entire physical address space of the i860 
microprocessor (220 x 212 = 232). 

The physical address of the current page directory is 
stored in DTB field of the dirbase register. Memory 
management software has the option of using one 
page directory for all processes, one page directory 
for each process, or some combination of the two. 

2.4.4 PAGE-TABLE ENTRIES 

Page-table entries (PTEs) in either level of page ta- 
bles have the same format. Figure 2.11 illustrates 
this format. 


2.4.4. 1 Page Frame Address 

The page frame address specifies the physical start- 
ing address of a page. Because pages are located 
on 4K boundaries, the low-order 12 bits are always 
zero. In a page directory, the page frame address is 
the address of a page table. In a second-level page 
table, the page frame address is the address of the 
page frame that contains the desired memory oper- 
and. 


2.4.4.2 Present Bit 

The P (present) bit indicates whether a page table 
entry can be used in address translation. P = 1 indi- 


cates that the entry can be used. When P = 0 in 
either level of page tables, the entry Is not valid for 
address translation, and the rest of the entry is avail- 
able for software use; none of the other bits in the 
entry is tested by the hardware. If P = 0 in either 
level of page tables when an attempt is made to use 
a page-table entry for address translation, the proc- 
essor signals either a data-access fault or an in- 
struction-access fault. In software systems that sup- 
port paged virtual memory, the trap handler can 
bring the required page Into physical memory. 

Note that there is no P bit for the page directory 
itself. The page directory may be not-present while 
the associated process Is suspended, but the oper- 
ating system must ensure that the page directory 
indicated by the dirbase image associated with the 
process is present in physical memory before the 
process is dispatched. 

2.4.4.3 Writable and User Bits 

The W (writable) and U (user) bits are used for page- 
level protection, which the i860 microprocessor per- 
forms at the same time as address translation. The 
concept of privilege for pages is implemented by as- 
signing each page to one of two levels; 

1 . Supervisor level (U = 0) — for the operating sys- 
tem and other systems software and related data. 

2. User level (U = 1) — for applications procedures 
and data. 

The U bit of the psr indicates whether the I860 mi- 
croprocessor is executing at user or supervisor level. 
The I860 microprocessor maintains the U bit of psr 
as follows; 
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Figure 2. 11. Format of a Page Table Entry 
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• The i860 microprocessor clears the psr U bit to 
indicate supervisor level when a trap occurs (in- 
cluding when the trap instruction causes the 
trap). The prior value of U is copied into PL). 

• The i860 microprocessor copies the psr PU bit 
into the U bit when an indirect branch is executed 
and one of the trap bits is set. If PU was one, the 
i860 microprocessor enters user level. 

With the U bit of psr and the W and U bits of the 
page table entries, the i860 microprocessor imple- 
ments the following protection rules: 

• When at user level, a read or write of a supervi- 
sor-level page causes a trap. 

• When at user level, a write to a page whose W bit 
is clear causes a trap. 

• When at user level, st.c to certain control regis- 
ters is ignored. 

When the i860 microprocessor is executing at super- 
visor level, all pages are addressable, but, when it is 
executing at user level, only pages that belong to the 
user-level are addressable. 


When the i860 microprocessor is executing at super- 
visor level, all pages are readable. Whether a page 
Is writable depends upon the write-protection mode 
controlled by WP of epsr: 

WP = 0 All pages are writable. 

WP = 1 A write to a page whose W bit is 

clear causes a trap. 


When the I860 microprocessor Is executing at user 
level, only pages that belong to user level and are 
marked writable are actually writable; pages that be- 


rjQj+hQr r'0QHoKj0 Wfl- 


table from user level. 


2.4.4.4 Write-Through Bit 

The I860 microprocessor does not implement a 
write-through caching policy for the on-chip data 
cache; however, the WT (write-through) bit in the 
second-level page-table entry does determine Inter- 
nal caching policy. If WT Is set In a PTE, on-chip 
caching of data from the corresponding page is in- 
hibited. The i860 CPU may place pages having 
WT = 1 Into the instruction cache. Future Imple- 
mentations of the i860 architecture may adhere to a 
write-through data caching policy. Therefore, they 
may cache pages having the WT bit of the PTE set. 
If WT is clear, the normal write-back policy is applied 
to data from the page in the on-chip caches. The WT 
bit of page directory entries is not referenced by the 
processor, but is reserved. 

The WT bit is independent of the CD bit; therefore, 
data may be placed in a second-level coherent 
cache, but kept out of the on-chip caches. 


2.4.4.5 Cache Disable Bit 

If the CD (cache disable) bit In the second-level 
page-table entry Is set, data from the associated 
page Is not placed in Instruction or data caches. 
Clearing CD permits the cache hardware to place 
data from the associated page into caches. The CD 
bit of page directory entries Is not referenced by the 
processor, but Is reserved. 


To control external caches, the i860 microprocessor 


PBM bit of epsr determines which bit is output. 


2.4.4.6 Accessed and Dirty Bits 

The A (accessed) and D (dirty) bits provide data 
about page usage In both levels of the page tables. 

The i860 microprocessor sets the corresponding ac- 
cessed bits in both levels of page tables before a 
read or write operation to a page. The processor 
tests the dirty bit In the second-level page table be- 
fore a write to an address covered by that page table 
entry, and, under certain conditions, causes traps. 
The trap handler then has the opportunity to main- 
tain appropriate values In the dirty bits. The dirty bit 
in directory entries is not tested by the i860 micro- 
processor. The precise algorithm for using these bits 
is specified In Section 2.4.5. 

An operating system that supports paged virtual 
memory can use these bits to determine what pages 
to eliminate from physical memory when the de- 
mand for memory exceeds the physical memory 
available. The D and A bits In the PTE (page-table 
entry) are normally initialized to zero by the operat- 
ing system. The processor sets the A bit when a 
page Is accessed either by a read or write operation. 
When a data- or instruction-access fault occurs, the 
trap handler sets the D bit If an allowable write is 
being performed, then re-executes the instruction. 

The operating system is responsible for coordinating 
its updates to the accessed and dirty bits with up- 
dates by the CPU and by other processors that may 
share the page tables. The I860 microprocessor au- 
tomatically asserts the LOCK# signal while setting 
the A bit. If an A-bit of a PTE is found not set during 
a locked sequence (created by the lock instruction), 
a trap will occur and the processor will not update 
the A-bit. 


2.4.4.7 Combining Protection of Both Levels of 
Page Tables 

For any one page, the protection attributes of its 
page directory entry may differ from those of its 
page table entry. The i860 microprocessor com- 
putes the effective protection attributes for a page 
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by examining the protection attributes in both the 
directory and the page table. Table 2.6 shows the 
effective protection provided by the possible combi- 
nations of protection attributes. 

2.4.5 ADDRESS TRANSLATION ALGORITHM 

The algorithm below defines the translation of each 
virtual address to a physical address. Let DIR, 
PAGE, and OFFSET be the fields of the virtual ad- 
dress; let PFA1 and PFA2 be the page frame ad- 
dress fields of the first and second level page tables 
respectively; DTB is the page directory table base 
address stored in the dirbase register. 

1 . Read the PTE (page table entry) at the physical 
address formed by DTB:DIR:00. 

2. If P in the PTE is zero, generate a data- or instruc- 
tion-access fault. 

3. If W in the PTE is zero, the operation is a write, 
and either the U-bit of the PSR is set or WP = 1 , 
generate a data or instruction access fault. 

4. If the U-bit in the PTE is zero and the U-bit in the 
psr is set, generate a data or instruction access 
fault. 

5. If A In the PTE is zero, and if the TLB miss oc- 
curred while the bus was locked (due to a lock 


Instruction, or st.c dirbase with BL = 1), gener- 
ate a data or instruction access fault. (The trap 
allows software to set A to one and restart the 
sequence. This avoids ambiguity In determining 
what address corresponds to a locked sema- 
phore for external bus hardware use.) 

6. If A In the PTE is zero, and if the TLB miss oc- 
curred while the bus was not locked, assert 
LOCK#. Re-fetch and check the PTE, set A, and 
store the PTE. Deassert LOCK# during the store. 

7. Locate the PTE at the physical address formed by 
PFA1:PAGE:00. 

8. Perform the P, W, U, and A checks as in steps 2 
through 5 with the second-level PTE. 

9. If D in the PTE is clear and the operation Is a 
write, generate a data or instruction access fault. 

10. Form the physical address as PFA2:OFFSET. 

The i860 microprocessor looks only In external 
memory for Page Directories and Page Tables, in 
the translation process. The data cache is not 
searched. Therefore, any code which modifies Page 
Directories or Page Tables must keep them out of 
the cache. The tables should be kept in non-cache- 
able memory, or flushed from the cache. 


Table 2.6. Combining Directory and Page Protections 


Page Directory 

Entry 

Page Table 

Entry 

Combined Protection 

User 

Access 

Supervisor 

Access 

U-bit 

W-bit 

U-bit 

w-bit 

WP = X 

WP = 0 

WP = 1 


0 

0 

0 

N 

R/W 
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0 

0 

1 

N 

R/W 
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0 

1 

0 

N 

R/W 
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0 

1 

1 

N 

R/W 

R 

0 

1 

0 

0 

N 

R/W 

R 

0 

1 

0 

1 

N 

R/W 

R/W 

0 

1 

1 

0 

N 

R/W 

R 

0 

1 

1 

1 

N 

R/W 

R/W 

1 

0 

0 

0 

N 

R/W 

R 

1 

0 

0 

1 

N 

R/W 

R 

1 

0 

1 

0 

R 

R/W 

R 

1 

0 

1 

1 

R 

R/W 

R 

1 

1 

0 

0 

N 

R/W 

R 

1 

1 

0 

1 

N 

R/W 

R/W 

1 

1 

1 

0 

R 

R/W 

R 

1 

1 

1 

1 

R/W 

R/W 

R/W 


NOTES: 

N = No access allowed R/W = Both reads and writes allowed 
R = Read access only X = Don’t care 
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The i860 microprocessor expects Page Directories 
and Page Tables to be in little endian format. The 
operating system must maintain these tables in little 
endian format by either setting BE = 0 when manip- 
ulating the tables or by complementing bit 2 of the 
address when loading or storing entries. 

2.4.6 ADDRESS TRANSLATION FAULTS 

The address translation fault is one instance of the 
data-acccss fault. The instruction causing the fault 
can be re-executed upon returning from the trap 
handler. 


2.4.7 PAGE TRANSLATION CACHE 

For greatest efficiency in address translation, the 
i860 microprocessor stores the most recently used 
page-table data in an on-chip cache called the TLB 
(translation lookaside buffer). Only if the necessary 
paging information is not in the cache must both lev- 
els of page tables be referenced. 


2.5 Caching and Cache Flushing 

The I860 microprocessor has the ability to cache In- 
struction, data, and address-translation information 
in on-chip caches. Caching uses virtual-address 
tags. The effects of mapping two different virtual ad- 
dresses In the same address space to the same 
physical address are undefined. 

Instruction, data, and address-translation caching on 
the i860 microprocessor are not transparent. Writes 
do not immediately update memory, the TLB, nor the 
instruction caciie. Writes to memory by other bus 
devices do not update the caches. Under certain cir- 
cumstances, such as I/O references, self-modifying 
code, page-table updates, or shared data in a multi- 
processing system, it Is necessary to bypass or to 
flush the caches. The I860 microprocessor provides 
the following methods for doing this; 

• Bypassing Instruction and Data Caches, if 

deasserted during cache-miss processing, the 
KEN# pin disables instruction and data caching 
of the referenced data. If the CD bit of the associ- 
ated second-level PTE is set, caching of data and 
instructions is disabled. The i860 CPU may place 


pages having WT = 1 into the instruction cache. 
Future implementations of the I860 architecture 
may adhere to a write-through data cache policy. 
Thus, they may cache pages having the WT bit of 
the PTE set. The value of the CD bit or the WT bit 
is output on the PTB pin for. use by external 
caches. 

• Flushing Instruction and Address-Translation 
Caches. Storing to the dirbase register with the 
ITI bit set Invalidates the contents of the Instruc- 
tion and address-translation caches. This bit 
should be set when a page table or a page con- 
taining code Is modified or when changing the 
DTB field of dirbase. Note that in order to make 
the instruction or address-translation caches con- 
sistent with the data cache, the data cache must 
be flushed before invalidating the other caches. 

NOTE: 

The mapping of the page containing the currently 
executing Instruction and the next six instructions 
should not be different in the new page tables 
when st.c dirbase changes DTB or activates ITI. 
The six Instructions following the st.c should be 
nops and should lie in the same page as the st.c. 

• Fiushing the Data Cache. The data cache is 
flushed by a software routine using the fiush in- 
struction. The data cache must be flushed prior to 
flushing the instruction or address-translation 
caches (as controlled by the ITI bit of dirbase) or 
enabling or disabling address translation (via the 
ATE bit). The data cache does not need flushing 
if the program Is modifying only the P, U, W, A, or 
D bits of a PTE (as long as the Page Frame Ad- 
dress is not changed and the PTE itself was not 
In the data cache.) The i860 CPU does not check 
these protection bits on cache line writeback. 
Thus, a trap handler can service a DAT for D-bit- 
zero by setting D = 1 and then ITI = 1. In the 
case of setting the P or A bits active, there is no 
need to invalidate or flush any caches because 
the processor does not load entries into the TLB 
that have P = 0 or A = 0. The I860 microproces- 
sor searches only external memory for Page Di- 
rectories and Page Tables in the translation pro- 
cess. The data cache is not searched. Therefore, 
Page Tables and Directories should be kept In 
non-cacheable memory, or flushed from the 
cache by any code which accesses them. 
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2.6 Instruction Set 

Table 2.7 shows the complete set of instructions 
grouped by function within processing unit. Refer to 
Section 8 for an algorithmic definition of each in- 
struction. 

The architecture of the i860 microprocessor uses 
parallelism to increase the rate at which operations 
may be introduced into the unit. Parallelism In the 
I860 microprocessor is not transparent; rather, pro- 
grammers have complete control over parallelism 
and therefore can achieve maximum performance 
for a variety of computational problems. 

2.6.1 PIPELINED AND SCALAR OPERATIONS 

One type of parallelism used within the floating-point 
unit is “pipelining”. The pipelined architecture treats 
each operation as a series of more primitive opera- 
tions (called “stages”) that can be executed in par- 
allel. Consider just the floating-point adder unit as an 
example. Let A represent the operation of the adder. 
Let the stages be represented by Ai, A 2 , and A 3 . 
The stages are designed such that Aj-i - 1 for one ad- 
der instruction can execute in parallel with Aj for the 
next adder Instruction. Furthermore, each A| can be 
executed In just one clock. The pipelining within the 
multiplier and graphics units can be described simi- 
larly, except that the number of stages may be differ- 
ent. 

Figure 2.12 Illustrates three-stage pipelining as 
found in the floating-point adder (also in the floating- 
point multiplier when single-precision input operarids 
are employed). The columns of the figure represent 
the three stages of the pipeline. Each stage holds 
intermediate results and also (when introduced into 
first stage by software) holds status information per- 
taining to those results. The figure assumes that the 
instruction stream consists of a series of consecu- 
tive floating-point instructions, all of one type (i.e. all 
adder instructions or all single-precision multiplier in- 
structions). The instructions are represented as i, 
i + 1, etc. The rows of the figure represent the states 
of the unit at successive clock cycles. Each time a 
pipelined operation Is performed, the result of the 
last stage of the pipeline Is stored in the destination 
register rdest, the pipeline Is advanced one stage, 
and the input operands src1 and src2 are trans- 
ferred to the first stage of the pipeline. 


In the i860 microprocessor, the number of pipeline 
stages ranges from one to three. A pipelined opera- 
tion with a three-stage pipeline stores the result of 
the third prior operation. A pipelined operation with a 
two-stage pipeline stores the result of the second 
prior operation. A pipelined operation with a one- 
stage pipeline stores the result of the prior opera- 
tion. 

There are four floating-point pipelines: one for the 
multiplier, one for the adder, one for the graphics 
unit, and one for floating-point loads. The adder 
pipeline has three stages. The number of stages In 
the multiplier pipeline depends on the precision of 
the source operands in the pipeline. Single precision 
has three stages and double precision has two 
stages. The graphics unit has one stage for all preci- 
sions. The load pipeline has three stages for all pre- 
cisions. 

Changing the FZ (flush zero), RM (rounding mode), 
or RR (result register) bits of fsr while there are re- 
sults in either the multiplier or adder pipeline produc- 
es effects that are not defined. 


2.6.1. 1 Scalar Mode 

In addition to the pipelined execution mode, the i860 
microprocessor also can execute floating-point in- 
structions in “scalar” mode. Most floating-point In- 
structions have both pipelined and scalar variants, 
distinguished by a bit In the Instruction encoding. In 
scalar mode, the floating-point unit does not start a 
new operation until the previous floating-point oper- 
ation is completed. The scalar operation passes 
through all stages of Its pipeline before a new opera- 
tion is introduced, and the result is stored automati- 
cally. Scalar mode is used when the next operation 
depends on results from the previous few floating- 
point operations (or when the compiler or program- 
mer does not want to deal with pipelining). 

2.6. 1.2 Pipelining Status Information 

Result status Information in the fsr consists of the 
AA, AI, AO, AU, and AE bits, in the case of the ad- 
der, and the MA, Ml, MO, and MU bits, in the case of 
the multiplier. This Information arrives at the fsr via 
the pipeline in one of two ways: 
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Table 2.7. Instruction Set 


Core Unit 

Mnemonic 

Description 

Load and Store Instructions 

Id.x 

Load integer 

st.x 

Store integer 

fid.y 

F-P load 

pfid.z 

Pipelined F-P load 

fst.y 

F-P store 

n.Qt H 

p. w ^ 

Pixel store 

Register to Register Moves 

ixfr 

Transfer Integer to F-P register 

fxfr 

Transfer F-P to integer register 

Integer Arithmetic Instructions 

addu 

Add unsigned 

adds 

Add signed 

subu 

Subtract unsigned 

subs 

Subtract signed 

Shift Instructions 

shl 

Shift left 

shr 

Shift right 

shra 

Shift right arithmetic 

shrd 

Shift right double 

Logical Instructions 

and 

Logical AND 

andh 

Logical AND high 

andnot 

Logical AND NOT 

andnoth 

Logical AND NOT high 

or 

Logical OR 

orh 

Logical OR high 

xor 

Logical exclusive OR 

xorh 

Logical exclusive OR high 

Control-Transfer Instructions j 

trap 

Software trap 

intovr 

Software trap on integer overflow 

br 

Branch direct 

bri 

Branch indirect 

be 

Branch on CC 

bc.t 

Branch on CC taken 

bnc 

Branch on not CC 

bnc.t 

Branch on not CC taken 

bte 

Branch if equal 

btne 

Branch If not equal 

bla 

Branch on LCC and add 

call 

Subroutine call 

call! 

Indirect subroutine call 

System Control Instructions 

flush 

Cache flush 

Id.c 

Load from control register 

st.c 

Store to control register 

lock 

Begin interlocked sequence 

unlock 

End Interlocked sequence 


Floating-Point Unit 

Mnemonic 

Description 

F-P Multiplier Instruction 

fmul.p 

pfmul.p 

pfmulS.dd 

fmlow.p 

frep.p 

frsqr.p 

F-P multiply 

Pipelined F-P multiply 

3-Stage pipelined F-P multiply 

F-P multiply low 

F-P reciprocal 

F-P reciprocal square root 

F-P Adder Instructions 

fadd.p 

pfadd.p 

famov.r 

pfamov.r 

fsub.p 

pfsub.p 

pfgtp 

pfeq.p 

fix.p 

pfix.p 

ftrunc.p 

pftrunc.p 

F-P add 

Pipelined F-P add 

F-P adder move 

Pipelined F-P adder move 

F-P subtract 

Pipelined F-P subtract 

Pipelined F-P greater-than compare 
Pipelined F-P equal compare 

F-P to Integer conversion 

Pipelined F-P to integer conversion 
F-P to Integer truncation 

Pipelined F-P to integer truncation 

Dual-Operation Instructions 

pfam.p 

pfsm.p 

pfmam.p 

pfmsm.p 

Pipelined F-P add and multiply 
Pipelined F-P subtract and multiply 
Pipelined F-P multiply with add 
Pipelined F-P multiply with subtract 

Long Integer Instructions 

fisub.z 

pfisub.z 

fladd.z 

pfiadd.z 

Long-Integer subtract 

Pipelined long-integer subtract 
Long-Integer add 

Pipelined long-integer add 

1 Graphics Instructions | 

fzchks 

pfzchks 

fzchki 

pfzchki 

faddp 

pfaddp 

faddz 

pfaddz 

form 

pform 

1 6-bit Z-buffer check 

Pipelined 1 6-bit Z-buffer check 

32-bit Z-buffer check 

Pipelined 32-bit Z-buffer check 

Add with pixel merge 

Pipelined add with pixel merge 

Add with Z merge 

Pipelined add with Z merge 

OR with MERGE register 

Pipelined OR with MERGE register 


Assembler Pseudo-Operations 

Mnemonic 

Description 

mov 

Integer register-register move 

fmov.r 

F-P reg-reg move 

pfmov.r 

Pipelined F-P reg-reg move 

nop 

Core no-operation 

fnop 

F-P no-operation 

pfie.p 

Pipelined F-P less-than or equal 
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Figure 2.12. Pipelined Instruction Execution 


1. It is calculated by the last stage of the pipeline. 
This is the normal case. 

2. It is propagated from the first stage of the pipe- 
line. This method is used when restoring the state 
of the pipeline after a preemption. When a store 
instruction updates the fsr and the value of the 
U bit in the word being written into the fsr is set, 
the store updates the result status bits in the first 
stage of both the adder and multiplier pipelines. 
When software changes the result-status bits of 
the first stage of a particular unit (multiplier or ad- 
der), the updated result-status bits are propagat- 
ed one stage for each pipelined floating-point op- 
eration for that unit. In this case, each stage of the 
adder and multiplier pipelines holds its own copy 
of the relevant bits of the fsr. When they reach 
the last stage, they override the normal result- 
status bits computed from the last stage result. 


At the next floating-point instruction (or at certain 
core Instructions), after the result reaches the last 
stage, the I860 microprocessor traps if any of the 
status bits of the fsr indicate exceptions. Note that 
the instruction that creates the exceptional condition 
is not the Instruction at which the trap occurs. 

2.6.1.3 Precision in the Pipelines 

In pipelined mode, when a floating-point operation is 
initiated, the result of an earlier pipelined floating- 
point operation is returned. The result precision of 
the current instruction applies to the operation being 
initiated. The precision of the value stored in rdest is 
that which was specified by the instruction that initia- 
ted that operation. 
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Figure 2.13. Dual-Instruction Mode Transitions 


If rdest is the same as src1 or src2, the value being 
stored in rdost is used as the input operand. !n this 
case, the precision of rdest must be the same as the 
source precision. 

The multiplier pipeline has two stages when the 
source operand is double-precision and three stages 
when the precision of the source operand is single. 
This means that a pipelined multiplier operation 
stores the result of the second previous multiplier 
operation for double-precision inputs and third previ- 
ous for single-precision inputs (except when chang- 
ing precisions). 


2.6.1. 4 Transition between Scalar and Pipelined 
Operations ^ 

When a scalar operation is executed, it passes 
through all stages of the pipeline; therefore, any un- 
stored results in the affected pipeline are lost. To 
avoid losing information, the last pipelined opera- 
tions before a scalar operation should be dummy 
pipelined operations that unload unstored results 
from the affected pipeline. 


After a scalar operation, the values of all pipeline 
stages of the affected unit (evcnpt the la.st) are un- 
defined. No spurious result-exception traps result 


by pipelined operations; however, the values should 
not be referenced as source operands. 


For best performance a scalar operation should not 
immediately precede a pipelined operation whose 
rdest is nonzero. 


2.6.2 DUAL-INSTRUCTION MODE 

Another form of parallelism results from the fact that 
the i860 microprocessor can execute both a floating- 
point and a core instruction simultaneously. Such 
parallel execution Is called dual-instruction mode. 
When executing in dual-instruction mode, the in- 
struction sequence consists of 64-blt aligned Instruc- 
tions with a floating-point instruction in the lower 32 
bits and a core instruction in the upper 32 bits. Table 
2.7 Identifies which instructions are executed by the 
core unit and which by the floating-point unit. 
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Programmers specify dual-instruction mode either 
by including in the mnemonic of a floating-point in- 
struction a d. prefix or by using the Assembler direc- 
tives .dual . . . .enddual. Both of the specifications 
cause the D-bit of floating-point instructions to be 
set. If the i860 microprocessor is executing in single- 
instruction mode and encounters a floating-point in- 
struction with the D-bit set, one more 32-bit instruc- 
tion is executed before dual-mode execution begins. 
If the i860 microprocessor is executing in dual-in- 
struction mode and a floating-point instruction is en- 
countered with a clear D-bit, then one more pair of 
instructions is executed before resuming single-in- 
struction mode. Figure 2.13 illustrates two variations 
of this sequence of events: one for extended se- 
quences of dual-instructions and one for a single in- 
struction pair. 

When a 64-bit dual-instruction pair sequentially fol- 
lows a delayed branch Instruction in dual-instruction 
mode, both 32-bit instructions are executed. 

2.6.3 DUAL-OPERATION INSTRUCTIONS 

Special dual-operation floating-point instructions 
(add-and-multiply, subtract-and-multiply) use both 
the multiplier and adder units within the floating- 
point unit in parallel to efficiently execute such com- 
mon tasks as evaluating systems of linear equa- 
tions, performing the Fast Fourier Transform (FFT), 
and performing graphics transformations. 

The instructions pfam src1, src2, rdest (add and 
multiply), pfsm src1, src2, rdest (subtract and multi- 
ply), pfmam scrl, src2, rdest (multiply and add), and 
pfmsm src1, src2, rdest (multiply and subtract) initi- 
ate both an adder operation and a multiplier opera- 
tion. Six operands are required, but the instruction 
format specifies only three operands; therefore, 
there are special provisions for specifying the oper- 
ands. These special provisions consist of: 

• Three special registers (KR, Kl, and T), that can 
store values from one dual-operation instruction 
and supply them as inputs to subsequent dual- 
operation instructions. 

1 . The constant registers KR and Kl can store the 
value of src1 and subsequently supply that val- 
ue to the multiplier pipeline in place of src1. 

2. The transfer register T can store the last stage 
result of the multiplier pipeline and subse- 
quently supply that value to the adder pipeline 
In place of srcl. 

• A four-bit data-path control field in the opcode 
(DPC) that specifies the operands and loading of 
the special registers. 

1. Operand-1 of the multiplier can be KR, Kl, or 
srcl. 

2. Operand-2 of the multiplier can be src2 or the 
last stage result of the adder pipeline. 


3. Operand-1 of the adder can be srcl, the T-reg- 
Ister, or the last stage result of the adder pipe- 
line. 

4. Operand-2 of the adder can be src2, the last 
stage result of the multiplier pipeline, or the 
last stage result of the adder pipeline. 

Figure 2.14 shows all the possible data paths sur- 
rounding the adder and multiplier. A DPC field in 
these instructions select different data paths. Sec- 
tion 8 shows the various encodings of the DPC field. 



Note that the mnemonics pfam.p, pfsm.p, 
pfmam.p, and pfmsm.p are never used as such in 
the assembly language; these mnemonics are used 
here to designate classes of related instructions. 
Each value of DPC has a unique mnemonic associ- 
ated with it. 


2.7 Addressing Modes 

Data access is limited to load and store instructions. 
Memory addresses are computed from two fields of 
load and store instructions: src1 and src2. 

src1 either contains the identifier of a 32-bit inte- 
ger register or contains an immediate 16-bit ad- 
dress offset. 

2. src2 always specifies a register. 
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Table 2.8. Types of Traps 


Type 

Indication 

Caused by 

PSR,ESPR 

FSR 

Condition 

Instruction 

Instruction 

Fault 

IT OF 

IL 


Software traps 

Missing uniock 

trap, intovr 

Any 

Floating 

Point 

Fault 

FT 

SE 

AO, MO 
AU, MU 
Ai, Ml 

Floating-point source exception 
Floating-point result exception 
overflow 
underflow 
inexact result 

Any M- or A-unIt except fmlow 

Any M- or A-unit except fmlow, pfgt, 
and pfeq. Reported on any F-P 
instruction plus pst, fst, and 
sometimes flu, pfld, Ixfr 

Instruction 
Access Fault 

lAT 


Address translation exception 
during instruction fetch 

Any 

Data Access 
Fault 

DAT* 


Load/store address translation 
exception 

Misaligned operand address 
Operand address matches 
db register 

Any load/store 

Any load/store 

Any load/store 

Interrupt 

IN 

External Interrupt 

Reset 

No trap bits set 

Hardware RESET signal 


NOTES: 

*These cases can be distinguished by examining the operand addresses. 

The IL bit of the epsr must be checked by the trap handler to tell if the bus is currently in a locked sequence. 


Because either src1 or src2 may be null (zero), a 
variety of useful addressing modes result: 

offset + register Useful for accessing fields within 
a record, where register points 
to the beginning of the record. 
Useful for accessing items in a 
stack frame, where register is 
r3, the register used for pointing 
to the beginning of the stack 
frame. 

register + register Useful for two-uirnensional ar- 
rays or for array access within 
the stack frame. 

Useful as the end result of any 
arbitrary address calculation. 

Absolute address into the first or 
last 32K of the logical address 
space. 

In addition, the floating-point load and store instruc- 
tions may select autoincrement addressing. In this 
mode src2 is replaced by the sum of src1 and src2 
after performing the load or store. This mode makes 
stepping through arrays more efficient, because it 
eliminates one address-calculation instruction. 

2.8 Traps and Interrupts 

Traps are caused by exceptional conditions detect- 
ed in programs or by external interrupts. Traps 


cause interruption of normal program flow to exe- 
cute a special program known as a trap handler. 
Traps are divided into the types shown in Table 2.8. 
Interrupts and traps start execution in single Instruc- 
tion mode at virtual address OxFFFFFFOO in supervi- 
sor level (U = 0). 

2.8.1 TRAP HANDLER INVOCATION 

This section applies to traps other than reset. VVfien 
a trap occurs, execution of the current instruction is 
aborted. The Instruction Is restartable. The proces- 
sor takes the following steps while transferring con- 
trol to the trap handler: 

1 . Copies U (user mode) of the psr Into PU (previous 

U). 

2. Copies IM (interrupt mode) into PIM (previous IM). 

3. Sets U to zero (supervisor mode). 

4. Sets IM to zero (interrupts disabled). 

5. If the processor is In dual instruction mode, it sets 
DIM; otherwise it clears DIM. 

6. If the processor is in single-instruction mode and 
the next Instruction will be executed in dual- 
instruction mode or if the processor is in dual-in- 
struction mode and the next instruction will be 
executed In single-instruction mode, DS is set; 
otherwise, it Is cleared. 


register 

offset 
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7. The appropriate trap type bits in psr are set (IT, 
IN, I AT, DAT, FT). Several bits may be set if the 
corresponding trap conditions occur simulta- 
neously. 

8. An address is placed in the fault instruction regis- 
ter (fir) to help locate the trapped instruction. In 
single-instruction mode, the address in fir is the 
address of the trapped instruction itself. In dual-in- 
struction mode, the address in fir is that of the 
floating-point half of the dual instruction. If an in- 
struction or data access fault occurred, the asso- 
ciated core instruction is the high-order half of the 
dual instruction (fir + 4). In dual-instruction 
mode, when a data access fault occurs in the ab- 
sence of other trap conditions, the floating-point 
half of the dual instruction will already have been 
executed. 

The processor begins executing the trap handler 
by transferring execution to virtual address 
OxFFFFFFOO. The trap handler begins execution in 
single-instruction mode. The trap handler must ex- 
amine the trap-type bits in psr (IT, IN, I AT, DAT, FT) 
to determine the cause or causes of the trap. 

2.8.2 INSTRUCTION FAULT 

This fault is caused by any of the following condi- 
tions. In all cases the processor sets the IT bit be- 
fore entering the trap handler. 

• By the trap instruction. 

• By the intovr instruction. The trap occurs only if 
OF in epsr is set when intovr is executed. The 
trap handler should clear OF before returning. 

• By the lack of an unlock instruction within 32 in- 
structions of a lock. In this case IL is also set. 
When the trap handler finds IL set, it should scan 
backwards for the lock instruction and restart at 
that point. The absence of a lock instruction with- 
in 32 Instructions of the trap Indicates a program- 
ming error. 

2.8.3 FLOATING-POINT FAULT 

The floating-point fault occurs on floating-point in- 
structions, pst, fst, and sometimes fid, pfid, Ixfr. 
The floating-point faults of the i860 microprocessor 
support the floating-point exceptions defined by the 
IEEE standard as well as some other useful classes 
of exceptions. The i860 microprocessor divides 
these into two classes: source exceptions and result 
exceptions. The numerics library supplied by Intel 
provides the IEEE standard default handling for all 
these exceptions. 

2.8.3. 1 Source Exception Faults 

When used as Inputs to the multiplier or adder, all 
exceptional operands. Including infinities, denormal- 


ized numbers and NaNs, cause a floating-point fault 
and set SE in the fsr. Source exceptions are report- 
ed on the instruction that initiates the operation. For 
pipelined operations, the pipeline is not advanced. 

The SE value is undefined for faults on fid, pfId, fst, 
pst, and ixfr instructions when in single-instruction 
mode or when in dual-instruction mode and the com- 
panion instruction is not a multiplier or adder opera- 
tion. 

2.8.3.2 Result Exception Faults 

The class of result exceptions includes any of the 
following conditions: 

• Overflow. The absolute value of the rounded 
true result would exceed the largest positive finite 
number in the destination format. 

• Underflow (when FZ is clear). The absolute val- 
ue of the rounded true result would be smaller 
than the smallest positive finite number in the 
destination format. 

• Inexact result (when Tl is set). The result is not 
exactly representable in the destination format. 
For example, the fraction Vs cannot be precisely 
represented in binary form. This exception occurs 
frequently and indicates that some (generally ac- 
ceptable) accuracy has been lost. 

The point at which a result exception is reported de- 
pends upon whether pipelined operations are being 
used: 

• Scalar (nonpipelined) operations. Result ex- 
ceptions are reported on the next floating-point, 
fst.x, or pst.x (and sometimes fid, pfid, Ixfr) in- 
struction after the scalar operation. When a trap 
occurs, the last stage of the affected unit con- 
tains the result of the scalar operation. 

• Pipelined operations. Result exceptions are re- 
ported when the result is in the last stage and the 
next floating-point, fst.x or pst.x (and sometimes 
fid, pfid, ixfr) instruction is executed. When a 
trap occurs, the pipeline is not advanced, and the 
last stage results (that caused the trap) remain 
unchanged. 

When no trap occurs (either because FTE is clear or 
because no exception occurred), the pipeline is ad- 
vanced normally by the new floating-point operation. 
The result-status bits of the affected unit are unde- 
fined until the point that result exceptions are report- 
ed. At this point, the last stage result-status bits (bits 
29..22 and 16.. 9 of the fsr) reflect the values In the 
last stages of both the adder and multiplier. For ex- 
ample, if the last stage result in the multiplier has 
overflowed and a pipelined floating-point pfadd Is 
started, a trap occurs and MO is set. 
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For scalar operations, the RR bits of fsr specify the 
register in which the result was stored. RR is updat- 
ed when the scalar instruction is initiated. The trap, 
however, occurs on a subsequent instruction. Pro- 
grammers must prevent intervening stores to fsr 
from modifying the RR bits. Prevention may take one 
of the following forms: 

• Before any store to fsr when a result exception 
may be pending, execute a dummy floating-point 
operation to trigger the result-exception trap. 

• Always read from fsr before storing to it, and 
mask updates so that the RR bits are not 
changed. 

For pipelined operations, RR is cleared and the re- 
sult is in the last stage of the pipeline of the appro- 
priate unit. The trap handler must flush the pipeline, 
saving the results and the status bits. 

In either pipelined or scalar mode, the trap handler 
must then compute the trapping result. In either 
case, the result has the same fraction as the true 
result and has an exponent which is the low-order 
bits of the true result. The trap handler can inspect 
the result, compute the result appropriate for that 
instruction (a NaN or an Infinity, for example), and 
store the correct result. The result Is either stored in 
the register specified by RR (if nonzero) or (if RR = 
0) the trap handler must reload the pipeline with the 
saved results and status bits. The trap handler must 
clear the result status for the last stage and then 
reexecute the trapping instruction. 

Result exceptions may be reported for both the ad- 
der and multiplier units at the same time. In this 
case, the trap handler should fix up the last stage of 
both pipelines. 

2.8.4 INSTRUCTION ACCESS FAULT 

This trap results from a page-not-present exception 
during Instruction fetch. If a supervisor-level page is 
fetched in user mode, an exception may or may not 
occur. 

2.8.5 DATA ACCESS FAULT 

This trap results from an abnormal condition detect- 
ed during data operand fetch or store. Such an ex- 
ception can be due only to one of the following caus- 
es: 

• An attempt is being made to write to a page 
whose D (Dirty) bit is clear. 

• A memory operand is misaligned (is not located 
at an address that is a multiple of the length of 
the data). 

• The address stored in the db register Is equal to 
one of the addresses spanned by the operand. 

• The operand is in a not-present page. 


• An attempt is being made from user level to write 
to a read-only page or to access a supervisor-lev- 
el page. 

• The operand was in a page whose PTE had 
A = 0, and the access occurred during a locked 
sequence. (I.e., between lock and unlock.) 

• Write protection (determined by epsr bit WP = 1) 
is violated In supervisor mode. 

2.8.6 INTERRUPT TRAP 

An interrupt is an event that is signaled from an ex- 
ternal source. If the processor is executing with In- 
terrupts enabled (IM set in the psr), the processor 
sets the interrupt bit IN in the psr, and generates an 
interrupt trap. Vectored Interrupts are Implemented 
by interrupt controllers and software. 

2.8.7 RESET TRAP 

When the I860 microprocessor is reset, execution 
begins in single-instruction mode at physical ad- 
dress OxFFFFFFOO. This is the same address as for 
other traps. The reset trap can be distinguished from 
other traps by the fact that no trap bits are set. The 
instruction cache is flushed. The bits DPS, BL, and 
ATE in dirbase are cleared. CS8 is initialized by the 
value at the I NT pin at the end of reset. The read- 
only fields of the espr are set to identify the proces- 
sor, while the IL, WP, and PBM bits are cleared. The 
bits U, IM, BR, and BW in psr are cleared. All other 
bits of psr and all other register contents are 
undefined. 

The software must ensure that the data cache is 
flushed and control registers are properly initialized 
before performing operations that depend on iiie 
values of the cache or registers. The data cache has 
no “validity” bits, so memory accesses before the 
flush may result in false data cache hits. 

Reset code must initialize the floating-point pipeline 
state to zero with floating-point traps disabled to en- 
sure that no spurious floating-point traps are gener- 
ated. 

After a RESET the i860 microprocessor starts exe- 
cution at supervisor level (U = 0). Before branching 
to the first user-level instruction, the RESET trap 
handler or subsequent initialization code has to set 
PU and a trap bit so that an indirect branch Instruc- 
tion will copy PU to U, thereby changing to user lev- 
el. 


2.9 Debugging 

The i860 microprocessor supports debugging with 
both data and instruction breakpoints. The features 
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of the i860 architecture that support debugging in- 
clude: 

• db (data breakpoint register) which permits speci- 
fication of a data addresses that the i860 micro- 
processor will monitor. 

• BR (break read) and BW (break write) bits of the 
psr, which enable trapping of either reads or 
writes (respectively) to the address In db. 

• DAT (data access trap) bit of the psr, which al- 
lows the trap handler to determine when a data 
breakpoint was the cause of the trap. 

• trap Instruction that can be used to set break- 
points in code. Any number of code breakpoints 
can be set. The values of the src1 and src2 fields 
help identify which breakpoint has occurred. 

• IT (instruction trap) bit of the psr, which allows 
the trap handler to determine when a trap 
instruction was the cause of the trap. 

3.0 HARDWARE INTERFACE 

In the following description of hardware interface, 
the # symbol at the end of a signal name indicates 
that the active or asserted state occurs when the 
signal is at a low voltage. When no # is present after 
the signal name, the signal is asserted when at the 
high voltage level. 

3.1 Signal Description 

Table 3.1 Identifies functional groupings of the pins, 
lists every pin by its Identifier, gives a brief descrip- 
tion of its function, and lists some of its characteris- 
tics. All output pins are tristate, except HLDA and 
BREQ. All inputs are synchronous, except HOLD 
and INT. 

3.1.1 CLOCK (CLK) 

The CLK input determines execution rate and timing 
of the i860 microprocessor. Timing of other signals 
is specified relative to the rising edge of this signal. 
The i860 microprocessor can utilize a clock rate of 
33.3 MHz or 40 MHz. The internal operating frequen- 
cy is the same as the external clock. This signal is 
TTL compatible. 

3.1.2 SYSTEM RESET (RESET) 

Asserting RESET for at least 16 CLK periods causes 
initialization of the i860 microprocessor. Refer to 
section 3.2 “Initialization” for more details related to 
RESET. 

3.1.3 BUS HOLD (HOLD) AND BUS HOLD 
ACKNOWLEDGE (HLDA) 

These pins are used for I860 microprocessor bus 
arbitration. At some clock after the HOLD signal is 


asserted, the i860 microprocessor releases control 
of the local bus and puts all bus Interface outputs 
(except BREQ and HLDA) into a floating state, then 
asserts HLDA — all during the same clock period. It 
maintains this state until HOLD is deasserted. In- 
struction execution stops only if required instructions 
or data cannot be read from the on-chip instruction 
and data caches. 

The time required to acknowledge a hold request Is 
one clock plus the number of clocks needed to finish 
any outstanding bus cycles. HOLD Is recognized 
even while RESET or LOCK# are asserted. 

When leaving a bus hold, the i860 microprocessor 
deactivates HLDA and, in the same clock period, ini- 
tiates a pending bus cycle, if any. 

Hold is an asynchronous input. 

3.1.4 BUS REQUEST (BREQ) 

This signal is asserted when the i860 microproces- 
sor has a pending memory request, even when 
HLDA is asserted. This allows an external bus arbi- 
ter to implement an “on demand only” policy for 
granting the bus to the i860 microprocessor. BREQ 
Is asserted the clock after the i860 microprocessor 
realizes an internal request for the bus. BREQ is 
deasserted with the last ADS# for which there Is a 
pending request. 

3.1.5 INTERRUPT/CODE-SIZE (INT/CS8) 

This input allows interruption of the current instruc- 
tion stream. If interrupts are enabled (IM set in psr) 
when INT is asserted, the i860 microprocessor 
fetches the next instruction from address 
OxFFFFFFOO. To assure that an interrupt is recog- 
nized, INT should remain asserted until the software 
acknowledges the interrupt (by writing, for example, 
to a memory-mapped port of an Interrupt controller). 
The maximum time between the assertion of INT 
and execution of the first instruction of the trap han- 
dler Is 10 clocks, plus the time for twenty nonplpe- 
llned read cycles (six TLB misses, with four refetch- 
es when the A bit is zero) plus the time for eight 
nonpipelined writes (updates to the A bit), plus the 
time for four sets of four pipelined read cycles and 
two sets of four pipelined writes (instruction and data 
cache misses and write-back cycles to update mem- 
ory) for non-locked sequences. 

If the bus Is locked from a lock instruction, the INT 
pin is ignored and the INT bit of epsr is always zero. 
The lock instruction can only assert LOCK# for 30- 
33 clock cycles before trapping. If the bus is locked 
from a st.c dirbase with BL = 1 then interrupts are 
fully functional and the timing of service is the same 
as for non-locked sequences. 
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Table 3.1. Pin Summary 


Pin 

Name 

Function 

Active 

State 

Input/ 

Output 

Execution Control Pins 

CLK 

CLOCK 


1 

RESET 

System reset 

High 

1 

HOLD 

Bus hold 

High 

1 

HLDA 

Bus hold acknowledge 

High 

0 

BREQ 

Bus request 

High 

0 

INT/CS8 

Interrupt; code-size 

High 

1 

Bus Interface Pins 

A31-A3 

Address bus 

High 

0 

BE7#-BE0# 

Byte Enables 

Low 

0 

D63-D0 

Data bus 

High 

I/O 

LOCK# 

Bus lock 

Low 

0 

W/R# 

Write/Read bus cycle 

Hl/Low 

0 

NENE# 

NExt NEar 

Low 

0 

NA# 

Next Address request 

Low 

1 

READY# 

Transfer Acknowledge 

Low 

1 

ADS# 

ADdress Status 

Low 

0 

Cache Interface Pins 

KEN# 

Cache ENable 

Low 

1 

PTB 

Page Table Bit 

High 

0 

Testability Pins 

SHI 

Boundary Scan Shift Input 

High 

1 

BSCN 

Boundary Scan Enable 

High 

1 

SCAN 

Shift Scan Path 

High 

1 

Intel-Reserved Configuration Pins 

CC1-CC0 

Configuration 

High 

1 

Power and Ground Pins 

Vcc 

bystem power 



Vss 

System ground 




A # after a pin name indicates that the signal is active when at the low voltage level. 


If INT is asserted during the clock before the falling 
edge of RESET, the eight-bit code-size mode is se- 
lected. For more about this mode, refer to section 
3.2 “Initialization”. 

INT is an asynchronous input. 

3.1.6 ADDRESS PINS (A31-A3) AND BYTE 
ENABLES (BE7#-BE0#) 

The 29-bit address bus (A31 - A3) identifies address- 
es to a 64-bit location. Separate byte-enable signals 
(BE7#-BE0#) Identify which bytes should be ac- 
cessed within the 64-blt location. Cache reads retdrn 
64 bits without regard for the byte-enable signals. 

Instruction fetches (W/R# is low) are distinguished 
from data accesses by the unique combinations of 


BE7#-BE0# defined in Table 3.2. For an eight-bit 
code fetch in eight-bit code-size (CSS) mode, 
BE2#-BE0# are redefined to be A2-A0 of the ad- 
dress. In this case BE7#-BE3# form the code 
shown in Table 3.2 that Identifies an instruction 
fetch. The A2 In the table does not represent a phys- 
ical pin, just a conceptual internal address line value. 
The “x”under A2 for CSS mode means “not applica- 
ble”, or “don’t care”. All other combinations of byte 
enables indicate data accesses. 


3.1.7 DATA PINS (D63-D0) 

The bus Interface has 64 bidirectional data pins 
(D63-D0) to transfer data in eight- to 64-bit quanti- 
ties. Pins D7-D0 transfer the least significant byte; 
pins D63-D56 transfer the most significant byte. 
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In write bus cycles, the point at which data is driven 
onto the bus depends on the type of the preceding 
cycle. If there was no preceding cycle (i.e. the bus 
was idle), data Is driven with the address. If the pre- 
ceding cycle was a write, data is driven as soon as 
READY# is returned from the previous cycle. If the 
preceding cycle was a read, data is driven one clock 
after READY# is returned from the previous cycle, 
thereby allowing time for the bus to be turned 
around. 

3.1.8 BUS LOCK (LOCK#) 

This signal is used to provide atomic (indivisible) 
read-modify-write sequences In multiprocessor sys- 
tems. A multiprocessor bus arbiter must permit only 
one processor a locked access to the address which 
is on the bus when LOCK# first activates. The sys- 
tem must maintain the lock of that location until 
LOCK# deactivates. 

The i860 microprocessor coordinates the external 
LOCK# signal with the software-controlled BL bit of 
the dirbase register. Programmers do not have to 
be concerned about the fact that bus activity is not 
always synchronous with instruction execution. 
LOCK# is asserted with ADS# for the first bus cycle 
that results from an instruction executed after the BL 
bit Is set. Pending bus cycles are locked according 
to the BL bit when the instruction was executed. 
Even if the BL bit Is changed between the time that 
an instruction generates an Internal bus request and 
the time that the cycle appears on the bus, the i860 
microprocessor still asserts LOCK# for that bus cy- 
cle. 

If ADS# Is active when LOCK# deactivates, then 
that request should complete before the hardware 
relinquishes the lock. If ADS# is not active, the lock- 
ing of the location can immediately end when 
LOCK# deactivates. Of course the simplest arbitra- 
tion hardware can just lock the entire bus against all 
other accesses during LOCK# assertion. 

The deassertion of LOCK# depends on how the BL 
bit was deasserted. If the BL bit is deasserted with 
the unlock instruction, LOCK# is deasserted with 
the next Id or st but after any pending bus cycles. 
Between locked sequences, at least one cycle of 


no LOCK# is guaranteed by the behavior of the 
unlock instruction. LOCK# deassertion may occur 
Independently of ADS# for the case of a trap or a 
cache hit after unlock. 

If BL is deasserted with a st.c dirbase instruction, 
LOCK# is only deasserted for a following Id or st 
instruction that causes a cache miss. LOCK# stays 
asserted for pending bus cycles and intervening 
cache hits. 

The i860 microprocessor also asserts LOCK# dur- 
ing TLB miss processing for updates of the ac- 
cessed bit in page-table entries. The maximum time 
that LOCK# can be asserted in this case is five 
clocks plus the time required by software to perform 
a read-modify-write sequence. Instruction fetches do 
not alter the LOCK# pin. 

Between lock and unlock instructions, the INT pin is 
ignored and the INT bit of epsr is always zero when 
read by Id.c epsr. 

3.1.9 WRITE/READ BUS CYCLE (W/R#) 

This pin specifies whether a bus cycle is a read 
(LOW) or write (HIGH) cycle. 

3.1.10 NEXT NEAR (NENE#) 

This signal allows higher-speed reads and writes in 
the case of consecutive reads and writes that ac- 
cess static column or page-mode DRAMs. The i860 
microprocessor asserts NENE# when the current 
address is In the same DRAM page as the previous 
bus cycle. The I860 microprocessor determines the 
DRAM page size by Inspecting the DPS field in the 
dirbase register. The page size can range from 29 to 
216 64-blt words, supporting DRAM sizes from 256K 
X 1, 256K X 4, and up. NENE# is never asserted 
on the next bus cycle after HLDA Is deasserted. 

3.1.11 NEXT ADDRESS REQUEST (NA#) 

NA# makes address pipelining possible. The sys- 
tem asserts NA# to Indicate that It is ready to ac- 


Table 3.2. Identifying Instruction Fetches 


Code 

Fetch 

A2 

BE7# 

BE6# 

BE5# 

BE4# 

BE3# 

BE2# 

BE1# 

BEO# 

Normal 

(Non-CS8) 

0 

1 

1 

1 

1 

1 

0 

1 

0 

Normal 

(Non-CS8) 

1 

1 

0 

1 

0 

1 

1 

1 

1 

CS8 

Mode 

X 

1 

0 

1 

0 

1 

Low-order address bits 
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cept the next address from the i860 microprocessor. 
NA# may be asserted before the current cycle 
ends. (If the system does not implement pipelining, 
NA# does not have to be activated.) The i860 mi- 
croprocessor samples NA# every clock, starting 
one clock after the prior activation of ADS#. When 
NA# is active, the i860 microprocessor is free to 
drive address and bus-cycle definition for the next 
pending bus cycle. The i860 microprocessor remem- 
bers that NA# was asserted when no Internal re- 
quest is pending; therefore, NA# can be deactivat- 
sd after the next rising edge of the GLK signal. Up to 
three bus cycles can be outstanding simultaneously. 

3.1.12 TRANSFER ACKNOWLEDGE (READY#) 

The system asserts the READY# signal during read 
cycles when valid data is on the data pins and during 
a write cycles when the system has accepted data 
from the data pins. READY# is sampled one clock 
after prior ADS# or prior READY# in case of pipe- 
lining. 

3.1.13 ADDRESS STATUS (ADS#) 

The i860 microprocessor asserts ADS# during the 
first clock of each bus cycle to identify the clock 
period during which it begins to assert outputs on 
the address bus. This signal is not held active during 
a pipelined bus cycle. This allows two-level pipelin- 
ing, for a maximum of three outstanding cycles. 

3.1.14 CACHE ENABLE (KEN#) 

The I860 microprocessor samples KEN# to deter- 
mine whether the data being read for the current 
cache-miss cycle is to be cached. This pin is Inter- 
nally NORed with the CD and WT bits to control 
caoheability on a page by page basis (refer to Table 
3.3). 

If the address Is one that is permitted to be in the 
cache, KEN # must be continuously asserted during 
the sampling period starting from the clock after 
ADS# is asserted, through the clock NA# or 
READY# is asserted. The entire 64 bits of the data 
bus will be used for the read, regardless of the state 
of the byte-enable pins. Three additional 64-bit bus 
cycles will be generated to fill the rest of the 32-byte 
cache block. 

If KEN# is found deasserted at any clock from the 
clock after ADS# through the clock of the first NA# 
or READY#, the data being read will not be cached 
and two scenarios can occur: 1 ) if the cycle is due to 
data-cache miss, no subsequent cache-fill cycles 
will be generated; 2) if the cycle is due to an instruc- 
tion-cache miss, additional cycle(s) will be generat- 
ed until the address reaches a 32-byte boundary. To 
avoid caching a line, external hardware must de- 


assert KEN# during or before the first NA# or 
READY#. 

3.1.15 PAGE TABLE BIT (PTB) 

Depending on the setting of the PBM (page-table bit 
mode) bit of the epsr, the PTB reflects the value of 
either the CD (cache disable) bit or the WT (write 
through) bit of the page-table entry used for the cur- 
rent cycle. When paging is disabled, PTB remains 
inactive. 


Table 3.3. Cacheability based on 
KEN# and CDOR’edWT 


CD OR’ed WT 

KEN# 

Meaning 

0 

0 

Cacheable access 

0 

1 

Noncacheable access 

1 

0 

Noncacheable page 

1 

1 

Noncacheable page 


3.1.16 BOUNDARY SCAN SHIFT INPUT (SHI) 

This pin is used with the testability features. Refer to 
section 3.3. 


3.1.17 BOUNDARY SCAN ENABLE (BSCN) 

This pin is used with the testability features. Refer to 
section 3.3. 

3.1.18 SHIFT SCAN PATH (SCAN) 

This pin is used with the testability features. Refer to 
section 3.3. 


3.1.19 CONFIGURATION (OOl-CuO) 

These two pins are reserved by Intel. Strap both pins 
LOW. 

3.1.20 SYSTEM POWER (Vcc) AND GROUND 
(Vss) 

The i860 microprocessor has 48 pins for power and 
ground. All pins must be connected to the appropri- 
ate low-inductance power and ground signals in the 
system. 


3.2 Initialization 

Initialization of the i860 microprocessor is caused by 
assertion of the RESET signal for at least 1 6 clocks. 
Table 3.4 shows the status of output pins during the 
time that RESET is asserted. Note that HOLD re- 
quests are honored during RESET and that the 
status of output pins depends on whether a HOLD 
request is being acknowledged. 


5-30 




int^ i 860 TM MICROPROCESSOR 


Table 3.4. Output Pin Status during Reset 


Pin Name 

Pin Value 

HOLD 

Not 

Acknowledged 

HOLD 

Acknowledged 

ADS#, LOCK# 

HIGH 

Tri-State OFF 

W/R#,PTB 

LOW 

Tri-State OFF 

BREQ 

LOW 

LOW 

HLDA 

LOW 

HIGH 

D63-D0 

Tri-State OFF 

Tri-State OFF 

A31-A3, 

BE7#-BE0#, 

NENE# 

Undefined 

Tri-State OFF 


After a reset, the i860 microprocessor begins exe- 
cuting at physical address OxFFFFFFOO. The pro- 
gram-visible state of the i860 microprocessor after 
reset is detailed in section 2.8.7. 

Eight-bit code-size mode is selected when INT/CS8 
Is asserted during the clock before the falling edge 
of RESET. While in eight-bit code-size mode, in- 
struction cache misses are byte reads (transferred 
on D7-D0 of the data bus) instead of eight-byte 
reads. This allows the i860 microprocessor to be 
bootstrapped from an eight-bit EPROM. For these 
code reads, byte enables BE2#-BE0# are rede- 
fined to be the low order three bits of the address, 
so that a complete byte address Is available. These 
reads update the instruction cache if KEN# is as- 
serted (refer to section 3.1.14) and are not pipelined 
even If NA# is asserted. While in this mode. Instruc- 
tions must reside in an eight-bit wide memory, while 
data must reside in a separate 64-blt wide memory. 
After the code has been loaded into 64-blt memory, 
Initialization code can initiate 64-bit code fetches by 
clearing the CS8 bit of the dirbase register (refer to 
section 2). Once eight-bit code-size mode Is dis- 
abled by software. It cannot be reenabled except by 
resetting the i860 microprocessor. 


3.3 Testability 

The i860 microprocessor has a boundary scan mode 
that may be used in component- or board-level test- 
ing to test the signal traces leading to and from the 
i860 microprocessor. Boundary scan mode provides 
a simple serial interface that makes it possible to 
test all signal traces with only a few probes. Probes 
need be connected only to CLK, BSCN, SCAN, SHI, 
BREQ, RESET, and HOLD. 

The pins BSCN and SCAN control the boundary 
scan mode (refer to Table 3.5). When BSCN is as- 


serted, the I860 microprocessor enters boundary 
scan mode on the next rising clock edge. Boundary 
scan mode can be activated even while RESET is 
active. When BSCN Is deasserted while in boundary 
scan mode, the i860 microprocessor leaves bounda- 
ry scan mode on the next rising clock edge. After 
leaving boundary scan mode, the Internal state is 
undefined; therefore, RESET should be asserted. 


Table 3.5. Test Mode Selection 


BSCN 

SCAN 

Testability Mode 

LO 

LO 

No testability mode selected 

LO 

HI 

(Reserved for Intel) 

HI 

LO 

Boundary scan mode, normal 

HI 

HI 

Boundary scan mode, shift 

SHI as Input; BREQ as 
output 


For testing purposes, each signal pin has associated 
with It an internal latch. Table 3.6 Indentifles these 
latches by name and classifies them as input, out- 
put, or control. The Input and output latches carry 
the name of the corresponding pins. 


Table 3.6. Test Mode Latches 


Input 

Latch 

Output 

Latch 

Associated 

Control 

Latch 

SHI 

BSCN 

SCAN 

RESET 

D0-D63 

D0-D63 

DATAt 

CC1-CC0 

A31-A3 

ADDRt 


NENE# 

NENEt 


PTB# 

PTBt 


W/R# 

W/Rt 


ADS# 

ADSt 


HLDA 

LOCK# 

LOCKt 

READY# 

KEN# 

NA# 

INT/CS8 

HOLD 

BE7#-BE0# 

BREQ 

BEt 


Within boundary scan mode the i860 microproces- 
sor operates in one of two submodes: normal mode 
or shift mode, depending on the value of the SCAN 
input. A typical test sequence Is . . . 
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1. Enter shift mode to assign values to the latches 
that correspond with the pins. 

2. Enter normal mode. In normal mode the I860 mi- 
croprocessor transfers the latched values to the 
output pins and latches the values that are being 
driven onto the Input pins. 

3. Reenter shift mode to read the new values of the 
input pins. 

3.3.1 NORMAL MODE 

When SCAN is deasserted, the normal mode is se- 
lected. For each input pin (RESET, HOLD, 
INT/CS8, NA#, READY#, KEN#, SHI, BSCN, 
SCAN, CC1, and CCO), the corresponding latch is 
loaded with the value that is being driven onto the 
pin. 

The tristate output pins (A31-A3, BE7#-BE0#, 
W/R#, NENE#, ADS#, LOCK#, and PTB) are en- 
abled by the control latches ADDRt (for A31 - A3), 
BEt, W/Rt, NENEt, ADSt, LOCKt, and PTBt. If a con- 
trol latch is set, the corresponding output latches 
drive their output pins; otherwise the pins are not 
driven. 

The I/O pins (D63-D0) are enabled by the control 
latch DAT At, which is similar to the other control 
latches. In addition, when DATAt is not set, the data 
pins are treated as input pins and their values are 
latched. 


3.3.2 SHIFT MODE 

When SCAN is asserted, the shift mode is selected. 
In shift mode, the pins are organized into a boundary 
scan chain. The scan chain is configured as a shift 
register that is shifted on the rising edge of CLK. The 
SHI pin is connected to the input of one end of the 
boundary scan chain. The value of the most signifi- 
cant bit of the scan chain is output on the BREQ pin. 
To avoid glitches while the values are being shifted 
along the chain, the tester should assert both the 
RESET and HOLD pins. Then all trIstate outputs are 
disabled. The order of the pins within the chain is 
shown in Figure 3.1. 


A tester causes entry into this mode for one of two 
purposes: 

1. To assign values to output latches to be driven 
onto output pins upon subsequent entry Into nor- 
mal mode. 

2. To read the values of input pins previously latched 
in normal mode. 


4.0 BUS OPERATION 

A bus cycle begins when ADS# is activated and 
ends when READY# is sampled active. READY# is 
sampled one clock after assertion of ADS# and 
thereafter until it becomes active. New cycles can 
start as often as every other clock until three cycles 
are outstanding. A bus cycle is considered outstand- 
ing as long as READY# has not been asserted to 
terminate that cycle. After READY# becomes ac- 
tive, it is not sampled again for the following (out- 
standing) cycle until the second clock after the one 
during which it became active. READY # is assumed 
to be Inactive when it Is not sampled. 

With regard to how a bus cycle is generated by the 
i860 microprocessor, there are two types of cycles: 
pipelined and nonpipelined. Both types of cycles can 
be either read or write cycles. A pipelined cycle is 
one that starts while one or two other bus cycles are 
outstanding. A nonpipelined cycle is one that starts 
when no other bus cycles are outstanding. 


4.1 ripeifnlng 

A m-n read or write cycle is a cycle with a total cycle 
time of m clocks and a cycle-to-cycle time of n 
clocks (m ^ n). Total cycle time extends from the 
clock in which ADS# Is activated to the clock in 
which READY# becomes active, whereas, cycle-to- 
cycle time extends from the time that READY# is 
sampled active for the previous cycle to the time 
that it Is sampled active again for the current cycle. 
When m = n, a nonpipelined cycle is implied; m > n 
implies a pipelined cycle. 
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Figure 3.1. Order of Boundary Scan Chain 
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Pipelining may occur for the next bus cycle any time 
the current bus cycle requires more than two clock 
periods to finish (m > 2). The next cycle can be 
Initiated when NA# is sampled active, even if the 
current cycle has not terminated. In this case, pipe- 
lining occurs. NA# is recognized only in the clock 
when ADS# has become Inactive. 

To allow high transfer rates in large memory sys- 
tems, two-level pipelining is supported (I.e., there 
may be up to three cycles in progress at one time). 
Pipelining enables a new word of data to be trans- 
ferred every two clocks, even though the total cycle 
time may be up to six clocks. 


4.2 Bus State Machine 

The operation of the bus is described In terms of a 
bus state machine using a state transition diagram. 
Figure 4.1 illustrates the I860 microprocessor bus 
state machine. A bus cycle is composed of two or 
more states. Each bus state lasts for one CLK peri- 
od. 

The I860 microprocessor supports up to two levels 
of address pipelining. Once It has started the first 
bus cycle, it can generate up to two more cycles as 
long as READY# remains Inactive. To start a new 
bus cycle while other cycles are still outstanding, 
NA# must be active for at least one clock cycle 
starting with the clodk after the previous ADS#. 
NA# is latched internally. 

States Tj and Tjk, for j = {1,2,3iandk= (1,2), are 
used to describe the state of the i860 microproces- 
sor Bus State Machine. Index j indicates the number 
of outstanding bus cycles while index k distinguishes 
the intermediate states for the j-th outstanding cycle. 


Therefore there can be up to three outstanding cy- 
cles, and there are two possible intermediate states 
for each level of pipelining. Tji is the next state after 
Tj, as long as j cycles are outstanding. Tj2 is entered 
when NA# is active but the i860 microprocessor is 
not ready to start a new cycle. 

Five conditions have to be met to start a new cycle 
while one or more cycles are already pending: 

1. READY# Inactive 

2. NA# having been active 

3. An internal request pending (BREQ active) 

4. HOLD not active 

5. Fewer than three cycles outstanding 

Note that BREQ is asserted on the clock after the 
i860 microprocessor realizes an internal request for 
the bus. 

Upon hardware RESET, the bus control logic enters 
the idle state T| and awaits an Internal request for a 
bus cycle. If a bus cycle is requested while there Is 
no hold request from the system, a bus cycle begins, 
advancing to state T^. On the next cycle, the state 
machine automatically advances to state Tii. If 
READY# is active in state T^, the bus control logic 
returns either to T|, if no new cycle is started, or to 
T-i, if a new cycle request is pending internally. In 
fact, if an internal bus request is pending each time 
READY# is active, the state machine continues to 
cycle between Tii and T-i. 

However, if READY# is not active but the next ad- 
dress request Is pending (as indicated by an active 
NA#), the state machine advances either to state 
T 2 (if an internal bus request is pending, signifying 
that two bus cycles are now outstanding), or to state 
T-I 2 (if no bus internal request is pending, signifying 
NA# has been found active). Transitions from state 
T-I 2 are similar to those from T-^. 
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If two bus cycles are already outstanding (as indicat- 
ed by T 2 k for k = (1,2)) and NA# is latched active 
but READY# is not active, one more bus request 
causes entry into state T 3 . Transitions from this 
state are similar to those from T 2 . 

In general, if there is an internal bus request each 
time both READY# and NA# are active, the state 


machine continues to oscillate between Tm and Ti, 
forj=(2,3). 

When NA# is sampled active while there is a pend- 
ing bus request, ADS# is activated in the next clock 
period (provided no more than two cycles are al- 
ready outstanding). 
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Internal pending bus requests start new bus cycles 
only if no HOLD request has been recognized. Th is 
entered from the idle state T|, Tn, and T-| 2 - HLDA is 
active In this state. There is a one clock delay to 
synchronize the HOLD input when the signal meets 
the respective minimum setup and hold time require- 
ments. The state machine uses the synchronized 
HOLD to move from state to state. 


4.3 Bus Cycles 

Figures 4.2 through 4.10 illustrate combinations of 
bus cycles. 


4.3.1 NONPIPELINED READ CYCLES 

A read cycle begins with the clock in which ADS# is 
asserted. The i860 microprocessor begins driving 
the address during this clock. It samples READY# 
for active state every clock after the first clock. A 
minimum of two clocks is required per cycle. Data is 
latched when READY# is found active when sam- 
pled at the end of a clock period. Figure 4.2 Illus- 
trates nonpipelined read cycles with zero wait 
states. 

Normally, all 64 bits of the data bus are latched; 
however, in the case of noncacheable bus cycles, 
the byte enables BE7#-BE0# determine which 
bytes are used. In CSS mode, only the low-order 
eight bits are latched. 
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Figure 4.3. Fastest Write Cycles 


4.3.2 NONPIPELINED WRITE CYCLES 

The ADS# and READY# activity for write cycles 
follows the same logic as that for read cycles, as 
Figure 4.3 illustrates for back-to-back, nonpipelined 
write cycles with zero wait-states. The byte enables 
BE7#-BE0# indicate which bytes on the data bus 
are valid. 

The fastest write cycle takes only two clocks to com- 
plete. However, when a read cycle immediately pre- 


cedes a write cycle, the write cycle must contain a 
wait state, as illustrated in Figure 4.4. Because the 
device being read might still be driving the data bus 
during the first clock of the write cycle, there Is a 
potential for bus contention. To help avoid such con- 
tention, the i860 microprocessor does not drive the 
data bus until the second clock of the write cycle. 


time necessary to terminate the write cycle. In other 
read-write combinations, the i860 microprocessor 
does not require a wait state. 
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Figure 4.6. Pipelined Write Followed by Pipelined Read 


4.3.3 PIPELINED READ AND WRITE CYCLES 

Figures 4.5 and 4.6 illustrate combinations of non- 
pipelined and pipelined read and write cycles. The 
following description applies to both diagrams. While 
Cycle 1 Is still in progress, two new cycles are initiat- 
ed. By the time READY # first becomes active, the 
state machine has moved through states Th. T-j-t, 
^2. T21, and T3. Cycles 3 and 4 show how activating 
READY # terminates the corresponding outstanding 
cycle, and yet activating NA# while there is an inter- 
nal request pending adds a new outstanding cycle. 

In Figure 4.5, Cycle 3 Is a write cycle following a read 
cycle; therefore, one wait state must be inserted. 
The i860 microprocessor does not drive the data 
bus until one clock after the read data is returned 
from the preceding read cycle. During Cycles 3 and 
4, the state machine oscillates between states T3 


and T31 maintaining full bus capacity (two levels of 
pipelining; three outstanding cycles). Cycles 2, 3, 
and 4 in Figure 4.6 are 5-2 cycles; i.e. each requires 
a total cycle time of five clocks while the throughput 
rate is one cycle every two clocks. 

Figure 4.7 illustrates in a more general manner hovv 
the NA# signal controls pipelining. Cycle 1 is a 2-2 
cycle, the fastest possible. The next cycle cannot be 
started any earlier; therefore, there Is no need to 
activate NA# to start the next cycle early. Cycle 2, a 
3-3 read, is different. Cycle 3 can be started during 
the third state (a wait state) of Cycle 2, and NA# is 
asserted to accomplish this. 

NA# is not activated following the ADS# clock of 
Cycle 3, thereby allowing Cycle 3 to terminate be- 
fore the start of Cycle 4. As a result. Cycle 4 is a 
nonpipelined cycle. 
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Figure 4.7. Pipelining Driven by NA# 
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Figure 4.8. NA# Active with No Internal Bus Request 
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Figure 4.9. Locked Cycles 


When there is no internal bus request, activating 
NA# does not start a new cycle; the i860 microproc- 
essor, however, remembers that NA# has been ac- 
tivated. Figure 4.8 illustrates the situation where 
NA# is active but no internal bus request is pending. 
NA# is activated when two cycles are outstanding. 
Because there is no interna! request pending until 
after one idle state, no new bus cycle is started dur- 
ing that period. 

4.3.4 LOCKED CYCLES 

The LOCK# signal Is asserted when the current bus 
cycle is to be locked with the next bus cycle. Asser- 
tion of LOCK# may be initiated by a program’s set- 
ting the BL bit of the dirbase register using the Sock 
instruction or st.c dirbase with BL = 1 (refer to sec- 
tion 2) or by the i860 microprocessor Itself during 
page table updates. 

In Figure 4.9, the first read cycle is to be locked with 
the following write cycle. If there were idle states 
between the cycles, the LOCK# signal would re- 
main asserted. This is the case for a read/modify/ 
write operation. The second write cycle is not locked 


because LOCK# Is no longer asserted when the 
first write cycle starts. 

4.3.5 HOLD AND BREQ ARBITRATION CYCLES 

The HOLD, HLDA, and BREQ signals permit bus ar- 
bitration between the i860 microprocessor and an- 
other bus master. 

See Figure 4.10. When HOLD is asserted, the i860 
microprocessor does not relinquish control of the 
bus until all outstanding cycles are completed. If 
HOLD were asserted one clock earlier, the last i860 
microprocessor bus cycle before HLDA would not 
be started. 

The outputs (except HLDA and BREQ) float when 
HLDA is asserted. HOLD is sampled at the end of 
the clock In which It is activated. Recommended set- 
up and hold times must be met to guarantee sam- 
pling one clock after external HOLD activation. 
When HOLD Is sampled active, a one clock delay for 
internal synchronization follows. HLDA may be 
deasserted as early as the clock following deasser- 
tion of HOLD. 
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Figure 4.10. HOLD, HLDA, and BREQ 


If, during a HOLD cycle, an internal bus request Is SET. If INT/CS8 is sampled active, the i860 micro- 

generated, BREQ Is activated even though HLDA is processor enters CS8 mode. No inputs (except for 

asserted. It remains active at least until the clock HOLD, INT/CS8, and CC1-CC0) are sampled dur- 

after ADS# is activated for the requested cycle. ing RESET. 

Note that, because HOLD is recognized even while 
4.4 Bus States During RESET reset is active, the HLDA output signal may also 

become active during RESET. Refer to Table 3.4 
Figure 4.11 shows how INT/CS8 is sampled during “Output Pin Status during Reset”, 
the clock period just before the falling edge of RE- 



Figure 4.11. Reset Activities 
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5.0 MECHANICAL DATA 

Figures 5.1 and 5.2 show the locations of pins; Tables 5.1 and 5.2 help to locate pin identifiers. 


SRQPNMLKJHGFE DCBA 



Figure 5.1. Pin Configuration— View from Top Side 
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Table 5.1. Pin Cross Reference by Location 


Location 

Signal 

Location 

Signal 

Location 

Signal 

Location 

' 

Signal 

A1 

Vcc 

C9 

047 

J15 

017 

Q10 

..BE6# 

A2 

Vss 

CIO 

043 

J16 

014 

Q11 

..BE4# 

A3 

Vcc 

C11 

039 

J17 

016 

Q12 

..BEO# 

A4 

.....Vss 

C12 

037 

K1 

A21 

Q13 

..BSCN 

A5 

D56 

C13 

035 

K2 

A18 

Q14 

01 

A6 

D52 

C14 

033 

K3 

A16 

Q15 

.....02 

A7 

D50 

C15 

032 

K15...... 

013 

Q16 

Vss 

A8 

048 

Ci6 ..... . 


/> 

ni.c 

017 










A9 

046 

C17 

Vcc 

K17 

012 

R1 

Vss 

A10 

044 

01 

Vss 

LI 

A19 

R2 

. . .Vcc 

All 

040 

02 

..Vcc 

L2 

A15 

R3 

Vss 

A12 

038 

03 

062 

L3 

A14 

R4 

Vcc 

A13 

Vcc 

015 

031 

L15 

Oil 

R5 

A4 

A14 

Vss 

016 

030 

L16 

08 

R6 

NENE# 

A15 

Vcc 

017 

Vss 

L17...... 

DIO 

R7 

..HLDA 

A16 

Vss 

El 

Vcc 

Ml 

A17 

R8 

..KEN# 

A17 

Vcc 

E2 

cco 

M2 

A13 

R9 

...NA# 

B1 

Vss 

E3 

CC1 

M3. 

All 

RIO...,:. 

..BE7# 

B2 ....... . 

Vcc 

E15 

029 

M15 

07 

R11 

..BE2# 

B3 

Vss 

E16 

028 

M16 

09 

R12 

..BE1# 

B4 . ....... 

059 

E17 

026 

M17 

06 

R13 

..SCAN 

B5 

058 

FI 

A31 

N1 

A12 

R14 

DO 

B6 

054 

F2 

A28 

N2 

A10 

R15 

• --Vss 

B7 

053 

F3 

A30 

N3 

A9 

R16 

....Vcc 

B8 

049 

F15 

027 

N15 

05 

R17 

• • • -Vss 

B9 

045 

F16 

025 

N16 

04 

SI 

....Vcc 

BIO 

042 

F17 

024 

N17 

Vcc 

S2 

• •••Vss 

B11 

041 

G1 

A29 

PI 

Vss 

S3 

Vcc 

B12; 

036 

G2 

....;. A27 

P2 

A8 

S4 

• •••Vss 

B13 

034 

G3 

A26 

P3 

....... M 

S5 

....Vcc 

R14 

Vr'r* 

G15 

023 

P15 

03 

S6 

..W/R# 

B15 

Vss 

G16 

022 

P16 

Vcc 

S7 

..ADS# 

B16 

V’cc 

G17 


04 -7 

r 1 f 

\/ 

* oo 

Qft 

.LOCK# 

B17 

Vss 

HI 

A25 

Q1 

Vcc 

S9 

NT/CS8 

Cl 

Vcc 

H2 

A24 

Q2 

Vss 

S10 

..BE5# 

C2 

Vss 

H3 

A22 

Q3 

A6 

S11 

..BE3# 

C3 

060 

H15 

021 

Q4 

A5 

S12 

....SHI 

C4 

063 

H16 

019 

Q5 

A3 

S13 

.RESET 

C5 

061 

H17 

018 

Q6 

PTB 

S14 

....Vss 

C6 

057 

J1 

A23 

Q7 

....BREQ 

S15 

...Vcc 

C7 

055 

J2 

A20 i 

Q8 

.READY# 

S16 

....Vss 

C8 

051 

J3 

CLK 

Q9 

....HOLD 

S17 

Vcc 
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Table 5.2. Pin Cross Reference by Pin Name 


Signal 

Location 

Signal 

Location 

Signal 

Location 

Signai 

Location 

A3 

Q5 

CLK .... 

J3 

D41 

B11 

Vcc 

B16 

A4 

R5 

DO 

R14 

D42 

B10 

Vcc 

C1 

A5 

Q4 

D1 

Q14 

D43 

C10 

Vcc 

C17 

A6 

Q3 

D2 

Q15 

D44 

A10 

Vcc 

D2 

A7 

P3 

D3 

P15 

D45 

B9 

Vcc • ■ • • 

E1 

A8 

P2 

D4 

N16 

D46 

A9 

Vcc 

N17 

A9 

N3 

D5 

N15 

D47 

C9 

Vcc 

P16 

A10 

N2 

D6 

M17 

D48 

A8 

Vcc--- 

01 

A11 

M3 

D7 

M15 

D49 

B8 

Vcc - -- 

Q17 

A12 

N1 

D8 

L16 

D50 

A7 

Vcc 

R2 

A13 

M2 

D9 

M16 

D51 

C8 

Vcc 

R4 

A14 .... 

L3 

D10.... 

L17 

D52 

A6 

Vcc 

R16 

A15 .... 

L2 

D11 .... 

L15 

D53 

B7 

Vcc 

S1 

A16.... 

K3 

D12 

K17 

D54 

B6 

Vcc - - - - 

S3 

A17 

M1 

D13 

K15 

D55 

C7 

Vcc 

S5 

A18.... 

K2 

D14 .... 

J16 

D56 

A5 

Vcc - - - - 

S15 

A19 .... 

L1 

D15.... 

K16 

D57 

C6 

Vcc 

S17 

A20 . . . . 

J2 

D16 .... 

J17 

D58 

B5 

Vss 

A2 

A21 . . . . 

K1 

D17 .... 

J15 

D59 

B4 

Vss 

A4 

A22 . . . . 

H3 

D18 

H17 

D60 

C3 

Vss - - - - 

A14 

A23 . . . . 

J1 

D19 

H16 

D61 

C5 

Vss - - - - 

A16 

A24 . . . . 

H2 

D20 .... 

G17 

D62 

D3 

Vss - - - - 

B1 

A25 . . . . 

H1 

D21 

H15 

D63 

C4 

Vss - - - - 

B3 

A26 . . . . 

G3 

D22 .... 

G16 

HLDA . . . . 

R7 

Vss - - - - 

B15 

A27 . . . . 

G2 

D23 .... 

G15 

HOLD . . . . 

09 

Vss - - - - 

B17 

A28 . . . . 

F2 

D24 

F17 

INT/CS8 . 

S9 

Vss - - - - 

02 

A29.... 

G1 

D25 

F16 

KEN# ... 

R8 

Vss - - - - 

016 

A30 . . . . 

F3 

D26 

E17 

LOCK# .. 

S8 

Vss - - - - 

D1 

A31 . . . . 

F1 

D27 

F15 

NA# 

R9 

Vss 

D17 

ADS# . . 

S7 

D28 

E16 

NENE# .. 

R6 

Vss 

PI 

BEO#.. 

Q12 

D29 

E15 

PTB 

Q6 

Vss - - - - 

P17 

BE1# .. 

R12 

D30 

D16 

READY# . 

08 

Vss - - - - 

02 

BE2# . . 

R11 

D31 

D15 

RESET . . . 

S13 

Vss - - - - 

Q16 

BE3# .. 

S11 

D32 

C15 

SCAN . . . . 

R13 

Vss - - - - 

R1 

BE4# . . 

Q11 

D33 

C14 

SHI 

S12 

Vss - - - - 

R3 

BE5# .. 

S10 

D34 

B13 

Vcc 

A1 

Vss - - - - 

R15 

BE6#.. 

Q10 

D35 

C13 

Vcc 

A3 

Vss - - - - 

R17 

BE7# .. 

R10 

D36 

B12 

Vcc 

A13 

Vss - - - - 

S2 

BREQ.. 

Q7 

D37 

C12 

Vcc 

A15 

Vss - - - - 

S4 

BSCN . . 

Q13 

D38 

A12 

Vcc 

A17 

Vss - - - - 

S14 

CCO.... 

E2 

D39 

C11 

Vcc 

B2 

VsS - - - - 

S16 

CC1 . . . . 

E3 

D40 

A11 

Vcc 

B14 

W/R# . 

S6 
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Table 5.3. Ceramic PGA Package Dimension Symbois 


Letter or 

Symboi 

Description of Dimensions 

A 

Distance from seating plane to highest point of body 

Ai 

Distance between seating plane and base plane (lid) 

A2 

Distance from base plane to highest point of body 

A3 

Distance from seating plane to bottom of body 

B 

Diameter of terminal lead pin 

D 

Largest overall package dimension of length 

Di 

A body length dimension, outer lead center to outer lead center 

ei 

Linear spacing between true lead position centerlines 

L 

Distance from seating plane to end of lead 

S1 

Other body dimension, outer lead center to edge of body 


NOTES: 

1 . Controlling dimension: millimeter. 

2. Dimension “ei” (“e”) is non-cumulative. 

3. Seating plane (standoff) is defined by P.C. board hole size: 0.0415-0.0430 inch. 

4. Dimensions “B”, “Bi” and “C” are nominal. 

5. Details of Pin 1 identifier are optional. 
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6.0 PACKAGE THERMAL 
SPECIFICATIONS 

The i860 microprocessor is specified for operation 
when Tc (the case temperature) is within the range 
of 0“C-85°C. Tc may be measured in any environ- 
ment to determine whether the i860 microprocessor 
is within specified operating range. The case tem- 
perature should be measured at the center of the 
top surface opposite the pins. 

T/\ (the ambient temperature) can be calculated 
from Oca (thermal resistance from case to ambient) 
with the following equation: 

Ta = Tc - P*^CA 

Typical values for Oqa at various airflows are given 
in Table 6.1 for the 1.75 sq. in., 168 pin, ceramic 
PGA. 

Table 6.2 shows the maximum Ta allowable (without 
exceeding Tc) at various airflows and operating fre- 
quencies (fcLK)- 


Note that Ta is greatly Improved by attaching “fins” 
or a “heat sink” to the package. P (the maximum 
power consumption) Is calculated by using the maxi- 
mum Ice at 5V as tabulated in the DC Characteris- 
tics of section 7. 

Table 6.1. Thermal Resistance (8 ca) at Various 
Airfiows 


In X/Watt 



Airflow-ft/mln (m/sec) 

0 

(0) 

200 

(1.01) 

400 

(2.03) 

600 

(3.04) 

800 

(4.06) 

1000 

(5.07) 

ScA With 

Heat Sink* 

13 

9 

5.5 

5.0 

3.9 

3.4 

Oca without 
Heat Sink 

17 

14 

11 

9 

7.1 

6.6 


*0.285" high unidirectional heat sink (Al alloy 6061 , 50 mil 
fin width, 150 mil center-to-center fin spacing). 


Table 6.2. Maximum Ta at Various Airflows 
In X 




Airflow-ft/min (m/sec) 


fCLK 

(MHz) 

0 

(0) 

200 

(1.01) 

400 

(2.03) 

600 

(3.04) 

800 

(4.06) 

1000 

(5.07) 

Ta with 

33.3 

46 

58 

69 

70 

73 

75 

Heat Sink* 

40.0 

43 

56 

67 

69 

72 

74 

Ta without 

33.3 

34 

43 

52 

58 

64 

65 

Heat Sink 

40.0 

30 

40 

49 

56 

62 

64 


*0.285" high unidirectional heat sink (Al alloy 6061. 50 mil fin width. 150 mil 
center-to-center fin spacing). 
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7.0 ELECTRICAL DATA 

Inputs and outputs are TTL compatible. All input and 
output timings are specified relative to the 1.5 volt 
level of the rising edge of CLK and refer to the point 
that the signals reach 1 .5V. 


7.1 Absolute Maximum Ratings 


Case Temperature Tc under Bias 0°C to 85°C 

Storage Temperature -65°C to + 150‘’C 

Voltage on Any Pin 

with Respect to Ground -0.5 to 6.5V 


7.2 D.C. Characteristics 


* Notice: Stresses above those listed under “Abso- 
lute Maximum Ratings” may cause permanent dam- 
age to the device. This is a stress rating only and 
functional operation of the device at these or any 
other conditions above those indicated in the opera- 
tional sections of this specification is not implied. Ex- 
posure to absolute maximum rating conditions for 
extended periods may affect device reliability. 

NOTICE: Specifications contained within the 
following tables are subject to change. 


Table 7.1. DC Characteristics 

Tc = O^C to 85‘’C, Vcc = 5V ±5% 


Symbol 

Parameter 

Min 

Max 

Units 

Notes 

V|L 

Input LOW Voltage 

-0.3 

+ 0.8 

V 


V|H 

Input HIGH Voltage 

2.0 

Vcc + 0.3 

V 


V|LC 

CLK Input LOW Voltage 

-0.3 

+ 0.8 

V 


V|HC 

CLK Input HIGH Voltage 

3.0 

Vcc + 0.3 

V 


VoL 

Output LOW Voltage 


0.45 

V 

(Note 1) 

Vqh 

Output HIGH Voltage 

2.4 


V 

(Note 2) 

•cc 

Power Supply Current 






CLK = 33.3 MHz 


600 

mA 

Vcc @5V 


CLK = 40.0 MHz 


650 

mA 

Vcc @5V 

III 

Input Leakage Current 


±15 

jjlA 

No pullup 
or pulldown 

•lo 

Output Leakage Current 


±15 

jllA 


Qn 

Input Capacitance 


15 

pF 

(Note 3) 

Co 

I/O or Output Capacitance 


15 

PF 

(Note 3) 

CcLK 

Clock Capacitance 


20 

pF 

(Note 3) 


NOTES: 

1. This parameter is measured at 4.0 mA for A31-A3, D63-D0, BE7#-BE0#; at 5.0 mA for all other outputs. 

2. This parameter is measured at 1.0 mA for A31-A3, D63-D0, BE7#-BE0#; at 0.9 mA all other outputs. 

3. These are not tested. They are guaranteed by design characterization. 
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7.3 A.C. Characteristics 


Table 7.2. A.C. Characteristics 

Tc = 0"C to 85°C. Vcc = 5V ±5% 

All timings measured at CLK = 1 .5V unless otherwise specified. 


Symboi 

Parameter 

33.3 MHz 

40.0 MHz 

Test 

Conditions 

Min 

(ns) 

Max 

(ns) 

Min 

(ns) 


t1 

CLK period 

30 

125 

25 

125 


t2 

CLK high time 

7 


5 


o\/ 

ai V 

t3 

CLK low time 

7 


5 


at 0.8V 

t4 

CLK fall time 


4 


4 

2V to 0.8V 

t5 

CLK rise time 


4 


4 

0.8V to 2V 

tea 

A31-A3, PTB, W/R#, NENE# valid delay 

3.5 

23 

3.5 

19 

50 pF load 

teb 

BEn#* valid delay 

3.5 

25 

3.5 

21 

50 pF load 

t7 

Float time, all outputs 

3.5 

30 

3.5 

25 

(Note 1) 

te 

ADS # , BREQ, LOCK # , HLDA valid delay 

3.5 

20 

3.5 

15 

50 pF load 

t9 

D63-D0 valid delay 

3.5 

35 

3.5 

31 

50 pF load 

t10 

Setup time, all inputs except INT, HOLD 

11 


8 



t11 

Hold time, all Inputs except INT, HOLD 

4 


3 



t12 

INT, HOLD setup time 



8 


(Note 2) 

t13 

INT, HOLD hold time 

4 


4 


(Note 2) 


NOTES: 

1 . Float condition occurs when maximum output current becomes less than Ilo ii^ magnitude. Float delay is not tested. 

2. INT and HOLD are asynchronous Inputs. The setup and hold specifications are given for test purposes or to assure 
recognition on a specific rising edge of CLK. 

= 0. 1, ... , 7 


5-50 










illiiHiKB 



5-51 




! 860 Tm microprocessor 




inter 



LOAD CAPACITANCE, Cl (pf) 


240296-26 


NOTES: 

Graphs are not linear outside the Cl range shown, 
nom = nominal value given in the AC timing table. 
*Typical part under worst-case conditions. 


Figure 7.2. Typical Output Delay vs Load Capacitance under Worst-Case Conditions 



LOAD CAPACITANCE. Cl (pf) 


240296-27 


NOTES: 

Graphs are not linear outside the Cl range shown. 
*Typical part under worst-case conditions. 


Figure 7.3. Typical Slew Time vs Load Capacitance under Worst-Case Conditions 
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NOTES: 

Graphs are not linear outside the frequency range 
shown. 

*Worst-case supply current at 5V. 


Figure 7.4. Typical Ice vs Frequency 


8.0 INSTRUCTION SET 


Key to abbreviations: 


srcl 

A register (integer or floating-point 
depending on class of instruction) 
or a 16-bit immediate value. The 
Immediate value is sign-extended 
for add and subtract operations 
and zero-extended for logical oper- 
ations. 

sreini 

Same as src1 except that no im- 
mediate value is permitted. 

src2 

A register (integer or floating-point 
depending on class of instruction). 

rdest 

A register (integer or floating-point 
depending on class of instruction). 

freg 

A floating-point register. 

ireg 

An integer register. 

ctrlreg 

One of the control registers fir, 
psr, epsr, dirbase, db, or fsr. 

# const 

A 16-bit immediate address offset 
that the i860 microprocessor sign- 
extends to 32 bits when computing 
the effective address. 


mem.x(address) The contents of the memory loca- 
tion indicated by address with a 
size of X. 


Table 8.1. Precision 
Specification 


Suffix 

Source 

Precision 

Result 

Precision 

.ss 

single 

single 

.sd 

single 

double 

.dd 

double 

double 

.ds 

double 

single 


Unless otherwise specified, float- 
ing-point operations accept single- 
or double-precision source oper- 
ands and produce a result of equal 
or greater precision. Both input op- 
erands must have the same preci- 
sion. The source and result preci- 
sion are specified by a two-letter 
suffix to the mnemonic of the oper- 
ation. 


■P 

Precision specification .ss, .sd, or 
.dd (.ds not permitted). Refer to 
Table 8.1. 

.r 

Precision specification .ss, .sd, 
.ds, or .dd. Refer to Table 8-1. 

.w 

.ss (32 bits), or .dd (64 bits) 

.X 

.b (8 bits), .s (16 bits), or .1 (32 bits) 

-y 

.1 (32 bits), .d (64 bits), or .q (128 
bits) 

.z 

.1 (32 bits), or .d (64 bits) 

Ibroff 

A signed, 26-blt, immediate, rela- 
tive branch offset 

sbroff 

A signed, 16-blt, immediate, rela- 
tive branch offset 

brx 

A function that computes the tar- 
get address of a branch by shifting 
the offset (either /broff or sbroff) 
left by two bits, sign-extending it to 
32 bits, and adding the result to 
the address of the current control- 
transfer instruction plus four. 

srcis 

An integer register or a 5-bit imme- 
diate that is zero-extended to 32 
bits. 

PM 

The pixel mask, which is consid- 
ered as an array of eight bits 
PM [0].. PM [7], where PM[0] is the 
least significant bit. 
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8.1 instruction Definitions in Aiphabeticai Order 

adds src 1, src2, rdest 

rdest <— src1 + src2 

OF <r- (bit 31 carry # bit 30 carry) 

CC set if src2 < -srcl (signed) 

CC clear if src2 ^ -src1 (signed) 

addu src1, src2, rdest 

rdest <— src1 + src2 
OF bit 31 carry 

CC bit 31 carry 

and srcl, src2, rdest 

rdest 4— src1 and src2 

CC set if result is zero, cleared otherwise 

andh * const, src2, rdest 

rdest <r- (#^70/75/ shifted left 16 bits) and src2 
CC set if result Is zero, cleared otherwise 

andnot srct, src2, rdest 

rdest not src1 and src2 

CC set if result Is zero, cleared otherwise 

andnoth # const, src2, rdest 

rdest not (#coA75f shifted left 16 bits) and src2 
CC set if result Is zero, cleared otherwise 

be Ibroff 

IF , CC = 1 

THEN continue execution at brx(lbroff) 

FI 

bc.t Ibroff 

IF CC = 1 

THEN execute one more sequential instruction 
continue execution at brx(lbroff) 

ELSE skip next sequential Instruction 
FI 

bla sreini, src2, sbroff 

LCC-temp clear if src2 < -sreini (signed) 
LCC-temp set if src2 ^ —sreini (signed) 
src2 — sreini + src2 
Execute one more sequential instruction 
IF LCC 

THEN LCC ^ LCC-temp 

continue execution at brx(sbroff) 

ELSE LCC ^ LCC-temp 
FI 

bnc ibroff 

IF CC = 0 

THEN continue execution at brx(lbroff) 

FI 

bnc.t ibroff 

IF CC = 0 

THEN execute one more sequential Instruction 
continue execution at brx(lbroff) 

ELSE skip next sequential instruction 
FI 

br ibroff 

Execute one more sequential instruction. 

Continue execution at brx(lbroff). 


Add Signed 

Add Unsigned 

Logicai AND 

Logical AND High 

Logical AND NOT 

Logical AND NOT High 

Branch on CC 

Branch on CC, Taken 

Branch on LCC and Add 

Branch on Not CC 

Branch on Not CC, Taken 

Branch Direct Unconditionally 
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bri [srdni] Branch Indirect Unconditionally 

Execute one more sequential instruction 
IF any trap bit in psr is set 

THEN copy PL) to U, PIM to IM in psr 

clear trap bits 

IF DS is set and DIM is reset 
THEN enter dual-instruction mode after executing one 
instruction in single-instruction mode 
ELSE IF DS Is set and DIM is set 

THEN enter single-instruction mode after executing one 
instruction In dual-instruction mode 
ELSE IF DIM is set 

THEN enter dual-instruction mode 
for next two instructions 
ELSE enter single-instruction mode 
for next two instructions 
FI 
FI 
FI 
FI 

Continue execution at address in srdni 
(The original contents of srdni Is used even if the next Instruction 
modifies srdni. Does not trap If srdni Is misaligned.) 


bte srds, src2, sbroff Branch If Equal 

IF srds = src2 

THEN continue execution at brx(sbroff) 

FI 


btne srds, src2, sbroff 

IF srds ^ src2 

THEN continue execution at brx(sbroff) 

FI 

call ibroff 

r1 address of next sequential instruction + 4 

Execute one more sequential instruction 
Continue execution at brx(lbroff) 

call! [srdni] 

r1 address of next sequential instruction + 4 

Execute one more sequential instruction 
Continue execution at address in srdni 

(The original contents of srdni is used even If the next instruction 
modifies srdni. Does not trap if srdni \s misaligned. 

The register srdni must not be r1.) 

fadd.p srd, src2, rdest 

rdest srd src2 


Branch If Not Equal 


Subroutine Call 


Indirect Subroutine Call 


Floating-Point Add 


faddp srd, src2, rdest Add with Pixel Merge 

rdest ^ srd + src2 

Shift and load MERGE register as defined In Table 8.2 

faddz srd, src2, rdest Add with Z Merge 

rdest <— srd + src2 

Shift MERGE right 16 and load fields 31..16 and 63..48 

famov.r srd, rdest Floating-Point Adder Move 

rdest srd 

Send srd through the floating-point adder. (Preserves -0 (minus zero) when srd is -0. src2 
must be coded as fO by the assembler.) 


fiadd.w srd, src2, rdest 
rdest srd + src2 


Long-Integer Add 
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f isub. w src 1, src2, rdest Long-Integer Subtract 

rdest <— srcl - src2 

f ix.p src 1, rdest Floating-Point to Integer Conversion 

rdest 64- bit value with low-order 32 bits equal to integer part of src1 rounded 

Floating-Point Load 

fid.y src1(src2), freg (Normal) 

f Id.y src 1(src2) + + , freg (Autoincrement) 

freg mem.y (src1 + src2) 

IF autoincrement 
THEN src2 sro/ + src2 
FI 

flush #const[src2) 

flush *const(src2)-\- + 

Replace block in data cache with address (* const + src2) 

Contents of block undefined. 

IF autoincrement 
THEN src2 <— * const + src2 
FI 

fmlow.dd src1, src2, rdest 

rdest low-order 53 bits of src1 mantissa x src2 mantissa 
rdest bit 53 ^ most significant bit of mantissa 

fmov.r srcl, rdest 

Assembler pseudo-operation 

fmov.ss srcl, rdest = fiadd.ss srcl, fO, rdest 
fmov.dd srcl, rdest = fiadd.dd srcl, fO, rdest 
fmov.sd srcl, rdest = famov.sd srcl, rdest 
fmov.ds srcl, rdest = famov.ds srcl, rdest 

fmul.p src1, src2, rdest 

rdest srcl X src2 

fnop 

Assembler pseudo-operation 
fnop = shfu fO, fO, rO 

form srcl, rdest 

rdest src1 OR MERGE 
MERGE 0 

frcp.p src2, rdest Floating-Point Reciprocal 

rdest i /src2 with maximum mantissa error < 2-f 

f rsqr.p src2, rdest Floating-Point Reciprocai Square Root 

rdest 1 /SORT {src2) with maximum mantissa error < 2-7 

Fioating-Point Store 

fst.y freg, src1(src2) (Normai) 

fst.y freg, src1(src2) 4- + (Autoincrement) 

mem.y (src2 -f src1) freg 
IF autoincrement 
THEN src2 srcl -F src2 
FI 

f sub.p src 1, src2, rdest Fioating-Point Subtract 

rdest src1 - src2 

ftrunc.p src 1, rdest Fioating-Point to integer Conversion 

rdest ^ 64-bit value with low-order 32 bits equal to integer part of src1 
fxfr src 1, ireg T ransf er F-P to Integer Register 

ireg src1 


. .Fioating-Point Muitiply Low 
Floating-Point Reg-Reg Move 

Fioating-Point Muitiply 

. . Floating-Point No Operation 

OR with MERGE Register 


Cache Flush 

(Normal) 

(Autoincrement) 
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fzchki src1, src2, rdest 32-Bit Z-Buffer Check 

Consider src1, src2, and rdest as arrays of two 32-bit 

fields s^c1(0)..src1(^), src2(0)..src2(^), and rdest(0)..rdest(^) 
where zero denotes the least-significant field. 

PM PM shifted right by 2 bits 
FOR i = 0 to 1 
DO 

PM [i + 6] src2{j) ^ srcHj) (unsigned) 
rdestiS) <— smaller of src2{j) and srclijt) 

OD 

MERGE 0 

fzchks src1, src2, rdest ' 16-Bit Z-Buffer Check 

Consider srcl, src2, and rdest as arrays of four 16-bit 

fields src1(0)..src1(^), src2(0),.src2(2>), and rdest(0)..rdest(2) 
where zero denotes the least-significant field. 

PM PM shifted right by 4 bits 
FOR i = 0 to 3 
DO 

PM [i + 4] src2{j) ^ srdiji) (unsigned) 
rdestiS) <r- smaller of src2(}) and srclij) 

OD 

MERGE <- 0 

intovr Software Trap on Integer Overflow 

If OF in epsr = 1 , generate trap with IT set in psr. 

ixfr src 1ni, freg T ransfer Integer to F-P Register 

freg <— srdni 

Id.c ctrireg, rdest Load from Control Register 

rdest ctrireg 

Id.x srd(src2), rdest Load Integer 

rdest mem.x(srd + src2) 

lock Begin interlocked Sequence 

Set BL in dirbase. The next load or store locks the bus. 

Disable interrupts until the bus is unlocked. 

mov src2, rdest Register-Register Move 

Assembler pseudo-operation 

mov src2, rdest = shl rO, src2, rdest 


nop Core-Unit No Operation 

Assembler pseudo-operation 
nop = shl rO, rO, rO 

or srd, src2, rdest Logical OR 

rdest srd OR src2 

CC set if result is zero, cleared otherwise 

orh # const, src2, rdest Logical OR High 

rdest <— const shifted left 16 bits) OR src2 
CC set if result is zero, cleared otherwise 

pfadd.p srd, src2, rdest Pipelined Floating-Point Add 

rdest <— last stage Adder result 
Advance A pipeline one stage 
A pipeline first stage ^ srd + src2 

pfaddp srd, src2, rdest Pipelined Add with Pixel Merge 

rdest last stage Graphics result 
last stage Graphics result srd + src2 

Shift and load MERGE register from last stage Graphics result as defined in Table 8.2 
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pfaddz src1, src2, rdest Pipelined Add with Z Merge 

rdest last stage Graphics result 
last stage Graphics result srcl src2 

Shift MERGE right 16 and load fields 31.. 16 and 63..48 from last stage Graphics result 

pfam.p src1, src2, rdest Pipelined Floating-Point Add and Multiply 

rdest <r- last stage Adder result 

Advance A and M pipeline one stage (operands accessed before advancing pipeline) 

A pipeline first stage A-opI + A-op2 
M pipeline first stage M-opI X M-op2 

pfamov.r src 1, rdest Pipelined Floating-Point Adder Move 

rdest ^ — last stage .Adder result 
Advance A pipeline one stage 
A pipeline first stage <r- src 1 

pfeq.p src1, src2, rdest Pipelined Floating-Point Equal Compare 

rdest <r- last stage Adder result 
CC set if src1 = src2, else cleared 
Advance A pipeline one stage 

A pipeline first stage is undefined, but no result exception occurs 

pfgt.p srcl, src2, rdest Pipelined Floating-Point Greather-Than Compare 

(Assembler clears R-bit of instruction) 
rdest last stage Adder result 
CC set if srcl > src2, else cleared 
Advance A pipeline one stage 

A pipeline first stage is undefined, but no result exception occurs 

pf iadd. w src 1, src2, rdest Pipelined Long-Integer Add 

rdest <r— last stage Graphics result 
last stage Graphics result src1 + src2 

pfisub.w src1, src2, rdest Pipelined Long-Integer Subtract 

rdest <— last stage Graphics result 
last stage Graphics result src1 - src2 

pfix.p src1, rdest Pipelined Floating-Point to Integer Conversion 

rdest <— last stage Adder result 
Advance A pipeline one stage 

A pipeline first stage 64-bit value with low-order 32 bits 
equal to Integer part of src1 rounded 


pilU.i^ f/C7^ 

pfid.z src1(src2) + + , freg 

freg <— mem.z (third previous pfid’s (src1 + src2)) 
(where .z Is precision of third previous pfid.z) 

If autoincrement 

THEN src2 srcl + src2 

FI 


Pipelined Floating-Point Load 

/Klrirmah 



(Autoincrement) 


pfie.p src1, src2, rdest Pipelined F-P Less-Than or Equal Compare 

Assembler pseudo-operation, identical to pfgt.p except that 
assembler sets R-bit of instruction. 
rdest <r- last stage Adder result 
CC clear if src1 ^ src2, else set 
Advance A pipeline one stage 

A pipeline first stage is undefined, but no result exception occurs 

pfmam.p src1, src2, rdest Pipelined Floating-Point Add and Multiply 

rdest <r- last stage Multiplier result 

Advance A and M pipeline one stage (operands accessed before advancing pipeline) 

A pipeline first stage A-opI - A-op2 
M pipeline first stage M-opI x M-op2 
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pfmov.r srcl, rdest Pipelined Floating-Point Reg-Reg Move 

Assembler pseudo-operation 

pfmov.ss srcl, rdest = pfiadd.ss srcl, fO, rdest 
pfmov.dd srcl, rdest = pfiadd.dd src1, 10, rdest 
pfmov.sd src1, rdest = pfamov.sd src1, rdest 
pfmov.ds srcl, rdest = pfamov.ds srcl, rdest 

pfmsm.p src1, src2, rdest Pipelined Floating-Point Subtract and Multiply 

rdest <— last stage Multiplier result 

Advance A and M pipeline one stage (operands accessed before advancing pipeline) 

A pipeline first stage A-op1 - A-op2 
M pipeline first stage M-op1 x M-op2 

pfmul.p srcl, src2, rdest Pipelined Floating-Point Multiply 

rdest <— last stage Multiplier result 
Advance M pipeline one stage 
M pipeline first stage srcl x src2 

pfmulS.p src1, src2, rdest Three-Stage Pipelined Multiply 

rdest last stage Multiplier result 
Advance 3-Stage M pipeline one stage 
M pipeline first stage srcl X src2 

pform src1, rdest Pipelined OR to MERGE Register 

rdest <r- last stage Graphics result 

last stage Graphics result src1 OR MERGE 

MERGE 0 

pfsm.p src1, src2, rdest Pipelined Floating-Point Subtract and Multiply 

rdest last stage Adder result 

Advance A and M pipeline one stage (operands accessed before advancing pipeline) 

A pipeline first stage A-op1 - A-op2 
M pipeline first stage M-op1 x M-op2 

pfsub.p src1, src2, rdest Pipelined Floating-Point Subtract 

rdest last stage Adder result 

Advance A pipeline one stage 
A pipeline first stage s/r/ + src2 

pftrunc.p srcl, rdest Pipelined Floating-Point to Integer Conversion 

rdest last stage Adder result 

Advance A pipeline one stage 

A pipeline first stage 64-bit value with low-order 32 bits 
equal to integer part of srcl 

pfzchki srcl, src2, rdest Pipelined 32-Bit Z-Buffer Check 

Consider srcl, src2, and rdest, as arrays of two 32-bit 

fields src1(0).,src1{^), src2(0)..src2(1), and rdest{0)..rdest{^) 
where zero denotes the least significant field. 

PM PM shifted right by 2 bits 
FOR i = 0 to 1 
DO 

PM [i + 6] ^ src2(\) ^ srcli}) (unsigned) 

rdest(\) ^ last stage Graphics result 

last stage Graphics result ^ smaller of src2(i) and src1(\) 

OD 

MERGE 0 
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pfzchks src1, src2, rdest 

Consider src1, src2, and rdest, as arrays of four 16-bjt 

fields s/r/(0)..src/(3), src2{Q)..src2(3), and rdest{0)..rdest{3) 
where zero denotes the least significant field. 

PM PM shifted right by 4 bits 
FOR i = 0 to 3 
DO 

PM [I + 4] src2(\) ^ src1(\) (unsigned) 

rdest{\) last stage Graphics result 
last stage Graphics result smaller of src2(\) and src1(\) 
OD 

MERGE 0 

pst.d freg, #const(src2) 

pst.d freg, *const(src2)-\- + 

Pixels enabled by PM in mem.D (src2 + * const) <r- freg 

Shift PM right by 8/pixel size (in bytes) bits 

IF autoincrement 

THEN src2 if const + src2 

FI 

shl srdd, src2, rdest 

rdest <r- src2 shifted left by srcl bits 

shr srcl, src2, rdest 

SC (in psr) srcl 

rdest src2 shifted right by srcl bits 

shra srcl, src2, rdest 

rdest src2 arithmetically shifted right by srcl bits 

shrd src1 , src2, rdest 

rdest <— low-order 32 bits of src1:src2 shifted right by SC bits 

st.c srcini, ctrireg 

ctrireg <— srcini 

st.x srcini, *const(src2) 

mem.x (src2 + if const) srcini 

subs srcl, src2, rdest 

rdest ir- srcl — src2 
OF (bit 31 carry bit 30 carry) 

CC set if src2 > srcl (signed) 

CC clear if src2 srcl (signed) 

subu srcl, src2, rdest 

rdest <r- srcl — src2 
OF NOT (bit 31 carry) 

CC bit 31 carry 

(i.e. CC set if src2 ^ srcl (unsigned) 

CC clear if src2 > srcl (unsigned) 

trap srcl, src2, rdest 

Generate trap with IT set in psr 

unlock 

Clear BL In dirbase. The next load or store unlocks the bus. 
Enable interrupts after bus is unlocked. 

xor srcl , src2, rdest 

rdest <— srcl XOR src2 

CC set If result Is zero, cleared otherwise 

xorh if const, src2, rdest 

rdest ^ (if const shifted left 16 bit) XOR src2 
CC set if result is zero, cleared otherwise 


Pipelined 16-Bit Z-Buffer Check 


Pixel Store 

Pixel Store Autoincrement 

Shift Left 

Shift Right 

Shift Right Arithmetic 

Shift Right Doubie 

.Store to Controi Register 

Store Integer 

Subtract Signed 

Subtract Unsigned 

Software Trap 

End Interlocked Sequence 

Logical Exclusive OR 

Logical Exclusive OR High 
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Table 8.2. FADDP MERGE Update 


Pixel 

Size 

(from PS) 

Fields Loaded From 
Result into MERGE 

Right Shift 
Amount 
(Field Size) 

8 

63..56, 47..40, 31..24, 15..8 

8 

16 

63..58, 47..42, 31..26, 15..10 

6 

32 

63..56, 31. .24 

8 


8.2 Instruction Format and Encoding 

All instructions are one word long and begin on a 
word boundary. When operands are registers, the 
register encodings shown in Table 8.3 are used. 
There are general core-instruction formats, 
REG-format and CTRL-format, as well as a separate 
format for floating-point instructions. 

8.2.1 REG-FORMAT INSTRUCTIONS 

Within the REG-format are several variations as 
shown in Figure 8.1. Table 8.4 gives the encodings 
for these instructions. One encoding is an escape 
code that defines yet another variation; the core es- 
cape instructions. Figure 8.2 shows the format of 
this group, and Table 8.5 shows the encodings. 

In these instructions, the src2 field selects one of 
the 32 Integer registers (most instructions) or five 
control registers (st.c and Id.c). Dost selects one of 
the 32 integer registers (most instructions) or float- 
ing-point registers (fid, fst, pfid, pst, ixfr). For in- 
structions where src1 is optionally an immediate val- 
ue, bit 26 of the opcode (l-bit) indicates whether src1 
is an immediate. If bit 26 is clear, an integer register 
is used; if bit 26 is set, srcl is contained in the low- 
order 16 bits, except for bte and btne instructions. 
For bte and btne, the five-bit immediate value Is 
contained In the srcl field. For st, bte, btne, and 
bla, the upper five bits of the offset or broffset are 
contained in the dost field instead of src1, and the 
lower 1 1 bits of offset are the lower 1 1 bits of the 
instruction. 


Table 8.3. Register Encoding 


Register 

Encoding 

rO 

0 

r31 

31 

fO 

0 

f31 

31 

Fault Instruction 

0 

Processor Status 

1 

Directory Base 

2 

Data Breakpoint 

3 

Floating-Point Status 

4 

Extended Process Status 

5 


For Id and st, bits 28 and zero determine operand 
size as follows: 


Bit 28 

BitO 

Operand Size 

0 

0 

8-blts 

0 

1 

8-bits 

1 

0 

1 6-bits 

1 

1 

32-bits 


When src1 Is an immediate and bit 28 is set, bit zero 
of the immediate value is forced to zero. 


For fid, fst, pfId, pst, and flush, bit 0 selects autoln- 
crement addressing if set. Bits one and two select 
the operand size as follows: 


Bit 1 

Bit 2 

Operand Size 

0 

0 

64-bits 

0 

1 

128-bits 

1 

0 

32-bits 

1 

1 

32-bits 


When srcl is an immediate value, bits zero and one 
of the immediate value are forced to zero to main- 
tain alignment. When bit one of the immediate value 
is clear, bit two is also forced to zero. 
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Table 8.4. REG-Format Opcodes 

31 26 


ld.x 

Load Integer 

0 

0 

0 

L 

0 

I 

st.x 

Store Integer 

0 

0 

0 

L 

1 

1 

ixfr 

Integer to F-P Reg Transfer 

0 

0 

0 

0 

1 

0 


(reserved) 

0 

0 

0 

1 

1 

0 

fid.x, fst.x 

Load/Store F-P 

0 

0 

1 

0 

LS 

1 

flush 

Flush 

0 

0 

1 

1 

0 

1 

pst.d 

Pixel Store 

0 

0 

1 

1 

1 

1 

Id.c, st.c 

Load/Store Control Register 

0 

0 

1 

1 

LS 

0 

bri 

Branch Indirect 

0 

1 

0 

0 

0 

0 

trap 

Trap 

0 

1 

0 

0 

0 

1 


(Escape for F-P Unit) 

0 

1 

0 

0 

1 

0 


(Escape for Core Unit) 

0 

1 

0 

0 

1 

1 

bte, btne 

Branch Equal or Not Equal 

0 

1 

0 

1 

E 

1 

pfid.y 

Pipelined F-P Load 

0 

1 

1 

0 

0 

1 


(CTRL-Format Instructions) 

0 

1 

1 

X 

X 

X 

addu, -s, subu, -s, 

Add/Subtract 

1 

0 

0 

so 

AS 

1 

shl, shr 

Logical Shift 

1 

0 

1 

0 

LR 

1 

shrd 

Double Shift 

1 

0 

1 

1 

0 

0 

bla 

Branch LCC Set and Add 

1 

0 

1 

1 

0 

1 

shra 

Arithmetic Shift 

1 

0 

1 

1 

1 

I 

and(h) 

AND 

1 

1 

0 

0 

H 

I 

andnot(h) 

ANDNOT 

1 

1 

0 

1 

H 

I 

or(h) 

OR 

1 

1 

1 

0 

H 

I 

xor(h) 

XOR 

1 

1 

1 

1 

H 

I 


(reserved) 

1 

1 

X 

X 

1 

0 


L 

Integer Length 

AS 

Add/Subtract 


0 — 8 bits 


0 —Add 


1 —1 6 or 32 bits (selected by bit 0) 


1 — Subtract 

LS 

Load/Store 

LR 

Left/ Right 


0 —Load 


0 —Left Shift 


1 —Store 


1 — Right Shift 

SO 

Signed/Ordinal 

E 

Equal 


0 —Ordinal 


0 — Branch on Not Eqi 


1 —Signed 


1 — Branch on Equal 

H 

High 

1 

Immediate 


0 — and, or, andnot, xor 


0 — src1 is register 


1 — andh, orh, andnoth, xorh 


1 — src1 is immediate 


31 26 15 10 5 0 


0 10 0 11 

reserved 

SRC1 

reserved 

OPCODE 


Figure 8.2. Core Escape instruction Format 
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Table 8.5. Core Escape Opcodes 

4 0 


(reserved) 

0 

0 

0 

0 

0 

lock Begin Interlocked Sequence 

0 

0 

0 

0 

1 

call! Indirect Subroutine Call 

0 

0 

0 

1 

0 

(reserved) 

0 

0 

0 

1 

1 

Intovr Trap on Integer Overflow 

0 

0 

1 

0 

0 

(reserved) 

0 

0 

1 

0 

1 

(reserved) 

0 

0 

1 

1 

0 

unlock End Interlocked Sequence 

0 

0 

1 

1 

1 

(reserved) 

0 

1 

X 

X 

X 

(reserved) 

1 

0 

X 

X 

X 

(reserved) 

1 

1 

X 

X 

X 


8.2.2 CTRL-FORMAT INSTRUCTIONS 

The CTRL instructions do not refer to registers, so instead of the register fields, they have a 26-bit relative 
branch offset. Figure 8.3 shows the format of these instructions and Table 8.6 defines the encodings. 


31 



28 

25 

0 

0 

1 

1 

OPC 

BROFFSET 


BROFFSET is a signed 26-bit relative branch offset. 


Figure 8.3. CTRL Instruction Format 


Table 8.6. CTRL-Format Opcodes 

28 26 


br 

Branch Direct 

0 

1 

0 

call 

Call 

0 

1 

1 

bc{.t) 

Branch on CC Set 

1 

0 

T 

bnc(.t) 

Branch on CC Clear 

1 

1 

T 


0 —be or bnc 

1 — bc.t or bnc.t 
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8.2.3 FLOATING-POINT INSTRUCTIONS 

The floating-point instructions also constitute an escape series. All these instructions begin with the bit se- 
quence 010010. Figure 8.4 shows the format of the floating point instructions, and Table 8.7 gives the encod- 
ings. Within the dual-operation instructions is a subcode DPC whose values are given in Table 8.8 along with 
the mnemonic that corresponds to each. 



31 

25 

20 

15 




7 

0 


0 10 0 10 

SRC2 

DEST 

SRC1 

p 

D 

s 

R 

OPCODE 


SRC1 , SRC2 — Source; one of 32 floating-point registers 







DEST — Destination register 









(instructions other than fxfr) one of 32 floating-point registers 







(fxfr) one of 32 integer registers 







P 

Pipelining 



S Source Precision 





1 —Pipelined instruction mode 


1 — Double-precision source operands 


0 — Scalar instruction mode 


0 — Single-precision source operands 

D 

Dual-Instruction Mode 


R Result Precision 





1 -Dual-instruction mode 


1 — Double-precision result 


0 -Single-instruction mode 


0 — Single-precision result 


Figure 8.4. Floating-Point Instruction Encoding 


Table 8.7. Floating-Point Opcodes 

6 0 


pfam 

Add and Multiply* 








pfmam 

Multiply with Add* 

0 

0 

0 


DPC 


pfsm 

Subtract and Multiply* 

0 

0 

1 


DPC 


pfmsm 

Multiply with Subtract* 



(p)fmul 

Multiply 

0 

1 

0 

0 

0 

0 

0 

fmlow 

Multiply Low 

0 

1 

0 

0 

0 

0 

1 

frcp 

Reciprocal 

0 

1 

0 

0 

0 

1 

0 

frsqr 

Reciprocal Square Root 

0 

1 

0 

0 

0 

1 

1 

(p)fadd 

Add 

0 

1 

1 

0 

0 

0 

0 

(p)fsub 

Subtract 

0 

1 

. 1 

0 

0 

0 

1 

(p)fix 

Fix 

0 

1 

1 

0 

0 

1 

0 

(p)famov 

Adder Move 

0 

1 

1 

0 

0 

1 

1 

pfgt/pfle** 

Greater Than 

0 

1 

1 

0 

1 

0 

0 

pfeq 

Equal 

0 

1 

1 

0 

1 

0 

1 

(p)ftrunc 

Truncate 

0 

1 

1 

1 

0 

, 1 

0 

fxfr 

Transfer to Integer Register 

1 

0 

0 

0 

0 

0 

0 

(p)fladd 

Long-Integer Add 

1 

0 

0 

1 

0 

0 

1 

(p)fisub 

Long-Integer Subtract 

1 

0 

0 

1 

1 

0 

1 

(p)fzchkl 

Z-Check Long 

1 

0 

1 

0 

1 

1 

1 

(p)fzchks 

Z-Check Short 

1 

0 

1 

1 

1 

1 

1 

(p)faddp 

Add with Pixel Merge 

1 

0 

1 

0 

0 

0 

0 

(p)faddz 

Add with Z Merge 

1 

0 

1 

0 

0 

0 

1 

(p)form 

OR with MERGE Register 

1 

0 

1 

1 

0 

1 

0 


*pfam and pfsm have P-bit set; pfmam and pfmsm have P-bit clear. 
**pfgt has R bit cleared; pfie has R bit set. 
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The following table shows the opcode mnemonics that generate the various encodings of DPC and explains 
each encoding. 


Table 8.8. DPC Encoding 


DPC 

PFAM 

PFSM 

M-Unit 

M-Unit 

A-Unit 

A-Unit 

T 

K 

Mnemonic 

Mnemonic 

opt 

op2 

opi 

op2 

Load 

Load* 

0000 

r2p1 

r2s1 

KR 

src2 

srcl 

M result 

No 

No 

0001 

r2pt 

r2st 

KR 

src2 

T 

M result 

No 

Yes 

0010 

r2ap1 

r2as1 


src2 

srcl 

A result 

Yes 

No 

0011 

r2apt 

r2ast 

KR 

src2 

T 

A result 

Yes 

Yes 

0100 

i2p1 

i2s1 

Kl 

src2 

srcl 

M result 

No 

No 

0101 

i2pt 

i2st 

Kl 

src2 

T 

M result 

No 

Yes 

0110 

i2ap1 

i2as1 


src2 

srcl 

A result 

Yes 

No 

0111 

i2apt 

i2ast 


src2 

T 

A result 

Yes 

Yes 

1000 

rat1p2 

rat1s2 

KR 

A result 

srcl 

src2 

Yes 

No 

1001 

m12apm 

m12asm 

srcl 

src2 

A result 

M result 

No 

No 

1010 

ra1p2 

ra1s2 

KR 

A result 

srcl 

src2 

No 

No 

1011 

m12ttpa 

m12ttsa 

srcl 

src2 

T 

A result 

Yes 

No 

1100 

iat1p2 

iat1s2 

Kl 

A result 

srcl 

src2 

Yes 

No 

1101 

m12tpm 

ml2tsm 

srcl 

src2 

T 

M result 

No 

No 

1110 

ia1p2 

ia1s2 

Kl 

A result 

srcl 

src2 

No 

No 

1111 

m12tpa 

m12tsa 

srcl 

src2 

T 

A result 

No 

No 





DPC 

PFMAM 

PFMSM 

M-Unit 

M-Unit 

A-Unit 

A-Unit 

T 

K 

Mnemonic 

Mnemonic 

opi 

op2 

opi 

op2 

Load 

Load* 

0000 

mr2p1 

mr2s1 

KR 

src2 

srcl 

M result 

No 

No 

0001 

mr2pt 

mr2st 

KR 

src2 

T 

M result 

No 

Yes , 

0010 

mr2mp1 

mr2ms1 

KR 

src2 

srcl 

M result 

Yes 

No 

0011 

mr2mpt 

mr2mst 

KR 

src2 

T 

M result 

Yes 

Yes 

0100 

mi2p1 

mi2s1 

Kl 

src2 

srcl 

M result 

No 

No 

0101 

mi2pt 

mi2st 

Kl 

src2 

T 

M result 

No 

Yes 

0110 

mi2mp1 

mi2ms1 

Kl 

src2 

srcl 

M result 

Yes 

No 

0111 

mi2mpt 

mi2mst 

Kl 

src2 

T 

M result 

Yes 

Yes 

1000 

mrmt1p2 

mrmt1s2 

KR 

M result 

srcl 

src2 

Yes 

No 

1001 

mm12mpm 

mm12msm 

srcl 

src2 

M result 

M result 

No 

No 

1010 

mrm1p2 

mrm1s2 

KR 

M result 

srcl 

src2 

No 

No 

1011 

mm12ttpm 

mm12ttsm 

srcl 

src2 

T 

A result 

Yes 

No 

1100 

mimt1p2 

mimt1s2 

Kl 

M result 

srcl 

src2 

Yes 

No 

1101 

mm12tpm 

mm12tsm 

srcl 

src2 

T 

M result 

No 

No 

1110 

mim1p2 

mim1s2 

Kl 

M result 

srcl 

src2 

No 

No 

1111 




Intel-Reserved 





*lf K-load is set, KR is loaded when operand-1 of the multiplier is KR; Kl is loaded when operand-1 of the multiplier is Kl. 
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8.3 Instruction Timings below. Freezes due to multiple simulta- 

^ neous cache misses result in a delay that is the sum 

i860 microprocessor instructions take one clock to of the delays for processing each miss by itself. 0th- 

execute unless a freeze condition is invoked. Freeze er multiple freeze conditions usually add only the de- 
conditions and their associated delays are shown in lay of the longest individual freeze. 


Freeze Condition 

Delay 

Instruction-cache miss 

Number of clocks to read instruction (from ADS 
clock to first READY # clock) plus time to last 
READY# of block when jump or freeze occurs 
during miss processing plus two clocks if data- 
cache being accessed when Instruction-cache 
miss occurs. 

Reference to destination of Id instruction that 
misses 

One plus number of clocks to read data (from 

ADS# clock to first READY# clock) minus number 
of instructions executed since load (not counting 
instruction that references load destination) 

fid miss 

One plus number of clocks from ADS # to first 
READY# 

call/calli/ixfr/fxfr/ld.c/st.c and data cache miss 
processing In progress 

One plus number of clocks until first READY # 
returned 

Id/st/pfid/fid/fst and data cache miss 
processing in progress 

One plus number of clocks until last READY# 
returned 

Reference to dest of Id, call, calli, fxf r, or Id.c in 
the next instruction 

One clock 
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Freeze Condition 

Delay 

Reference to destoi fid/pfid/ixfr in the next two 
instructions 

Two clocks in the first instruction; one in the 
second instruction 

bc/bnc/bc.t/bnc.t following fadd/fsub/pfeg/ 
pfgt 

One clock 

Src1 of multiplier operation refers to result of 
previous operation 

One clock 

Floating-point or graphics unit instruction or fst, 
and scalar operation in progress other than frcp or 

frSqr 

If the scalar operation is fadd, fix, fmlow, fmul.ss, 
fmul.sd, ftrunc, or fsub, two minus the number of 
insuuciions already executed after the scalar 
operation. If the scalar operation is fmul.dd, three 
minus the number of instructions executed after It. 
Add one if the precision of the result of the 
previous scalar operation is different than that of 
the source. Add one if the floating-point operation 
is pipelined and its destination is not fO. If the sum 
of the above terms is negative, there is no delay. 

Multiplier operation preceded by a double- 
precision multiply 

One clock 

Multiplier operation with data pattern requiring 
extra rounding operation 

One clock 

TLB miss 

Five plus the number of clocks to finish two reads 
plus the number of clocks to set A-bits (if 
necessary) 

pfid when three pfid’s are outstanding 

One plus the number of clocks to return data from 
first pfid 

pfid hits in the data cache 

Two plus the number of clocks to finish ail 
outstanding accesses 

Store pipe full (two internal plus outstanding bus 
cycles) and st/fst miss, Id miss, or flush with 
modified block 

One plus the number of clocks until READY # 
active on next write data 

Address pipe full (one internal pius outstanding 
bus cycles) and Id/fid/plfd/st/fst 

Number of clocks until next address can be issued 

Id/fid following st/fst hit 

One clock 

Delayed branch not taken 

One clock 

Nondelayed branch taken: 

be, bnc 
bte, btne 

One clock 

Two clocks 

Branch indirect bri 

One clock 

st.c 

Two clocks 

Result of graphics-unit instruction (other than 
fmov) used in next instruction when the next 
instruction is an adder- or multiplier-unit instruction 

One clock 

Result of graphics-unit instruction used In next 
instruction when the next instruction is a graphics- 
unit Instruction 

One clock 

flush followed by flush 

Three clocks 

fst followed by pipelined floating-point operation 
that overwrites the register being stored 

One clock 
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8.4 Instruction Characteristics 

The following table lists some of the characteristics 
of each instruction. The characteristics are: 

• What processing unit executes the instruction. 
The codes for processing units are: 

A Floating-point adder unit 

E Core execution unit 

G Graphics unit 

M Floating-point multiplier unit 

• Whether the instruction is pipelined or not. A P 
indicates that the instruction is pipelined. 

• Whether the instruction is a delayed branch in- 
struction. A D marks the delayed branches. 

• Whether the instruction changes the condition 
code CC. A CC marks those instructions that 
change CC. 

• Which faults can be caused by the instruction. 
The codes used for exceptions are: 

IT Instruction Fault 

SE Floating-Point Source Exception 

RE Floating-Point Result Exception, including 

overflow, underflow. Inexact result 
DAT Data Access Fault 

The instruction access fault lAT and the interrupt 
trap IN are not shown in the table because they 
can occur for any instruction. 

• Performance notes. These comments regarding 
optimum performance are recommendations 
only. If these recommendations are not followed, 
the i860 microprocessor automatically waits the 
necessary number of clocks to satisfy internal 
hardware requirements. The following notes de- 
fine the numeric codes that appear In the Instruc- 
tion table; 

1 . The following instruction should not be a con- 
ditional branch (be, bnc, bc.t, or bnc.t). 

2. The destination should not be a source oper- 
and of the next two instructions. 

3. A load should not directly follow a store that is 
expected to hit in the data cache. 

4. When the prior instruction Is scalar, src1 
should not be the same as the rdest of the 
prior operation. 


5. The freg should not reference the destination 
of the next instruction If that instruction is a 
pipelined floating-point operation. 

6. The destination should not be a source oper- 
and of the next instruction. 

7. When the prior operation is scalar and multipli- 
er op1 Is sre/, src2 should not be the same as 
the rdest of the prior operation. 

8. When the prior operation is scalar, src1 and 
src2 of the current operation should not be the 
same as rdest of the prior operation. 

9. A pfid should not immediately follow a pfid. 

• Programming restrictions. These indicate combi- 
nations of conditions that must be avoided by 
programmers, assemblers, and compilers. The 
following notes define the alphabetic codes that 
appear In the instruction table: 

a. The sequential Instruction following a delayed 
control-transfer instruction may not be another 
control-transfer instruction (except In the case 
of external interrupts), nor a trap instruction, 
nor the target of a control-transfer instruction. 

b. When using a bri to return from a trap handler, 
programmers should take care to prevent traps 
from occurring on that or on the next sequen- 
tial Instruction. IM should be zero (Interrupts 
disabled) when the bri is executed. 

c. If rdest is not zero, srcl must not be the same 
as rdest. 

d. When srcl goes to the multiplier op/, KR, or 
Kl, srcl must not be the same as rdest. 

e. If rdest is not zero, srcl and src2 must not be 
the same as rdest. 

f. srcl must not be the same as src2 for the 
autoincrementing form of this instruction. 
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Table 8.9 instruction Characteristics 


Instruction 

Execution 

Pipelined? 

Sets 

Faults 

Performance 

Programming 

Unit 

Delayed? 

CC? 

Notes 

Restrictions 

adds 

E 


cc 


1 


addu 

E 


CC 


1 


and 

E 


cc 




andh 

E 


cc 




andnot 

E 


cc 




andnoth 

E 


cc 




be 

E 






bc.t 

E 

D 




a 

bla 

E 

D 




a, f 

bnc 

E 






bnc.t 

E 

D 




a 

br 

E 

D 




a 

bri 

E 

D 




a, b 

bte 

E 






btne 

E 






call 

E 

D 



6 

a 

call! 

E 

D 



6 

a 

fadd.p 

A 



SE, RE 



faddp 

G 




8 


faddz 

G 




8 


famov.r 

A 



SE 



fiadd.z 

G 




8 


fisub.z 

G 




8 


fix.p 

A 



SE, RE 



fld.y 

E 



DAT 

2,3 

f 

flush 

E 






fmlow.p 

M 




4 


fmiil n 

M 



SE. RE 

4 


form 

frep.p 

G 

M 



orr oc: 
C7C., nu. 

8 


frsqr.p 

M 



SE, RE 



fst.y 

E 



DAT 

5 

f 

fsub.p 

A 



SE. RE 



ftrunc.p 

A 



SE, RE 



fxfr 

G 




6,8 


fzchki 

G 




8 


fzchks 

G 




8 


intovr 

E 



IT 



ixfr 

E 




2 


Id.c 

E 






ld.x 

E 



DAT 

6 


or 

E 


cc 




orh 

E 


cc 




pfadd.p 

A 

P 


SE, RE^ 



pfaddp 

G 

P 



8 

e 
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Instruction 

Execution 

Pipelined? 

Sets 

Faults 

Performance 

Programming 

Unit 

Delayed? 

CC? 

Notes 

Restrictions 

pfaddz 

G 

P 



8 

e 

pfam.p 

A&M 

P 


SE, RE 

7 

d 

pfamov.r 

A 

P 


SE 



pfeq.p 

A 

P 

cc 

SE 

1 


pfgt.p 

A 

P 

CC 

SE 

1 


pfiadd.z 

G 

P 



8 

e 

pfisub.z 

G 

P 



8 

e 

pfix.p 

A 

P 


SE. RE 



pfld.z 

E 

P 


DAT 

2,9 

f 

pfmam.p 

A&M 

P 


SE. RE 

7 

d 

pfmsm.p 


P 


SE. RE 

7 

d 

pfmul.p 


P 


SE. RE 

4 

c 

pform 


P 



8 

e 

pfsm.p 


P 


SE. RE 

7 

d 

pfsub.p 


P 


SE. RE 





P 


SE, RE 





P 



8 




P 



8 






DAT 


f 








shr 

E 






shra 

E 






shrd 

E 






st.c 

E, 






st.x 

E 



DAT 



subs 

E 


cc 


1 


subu 

E 


cc 


1 


trap 

E 



IT 



xor 

E 


cc 




xorh 

E 


cc 
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DATA SHEET REVISION REVIEW 

The following list represents the key differences be- 
tween version 002 and version 001 of the i860 Mi- 
croprocessor Data Sheet. 

1 . Big-endian description in section 2.3 has been ex- 
panded. 

2. Bit 17 of the Extended Processor Status Register 
(EPSR) is the INT bit which reflects the value on 
the Interrupt pin (INT), as described In section 
2.2,4 entitled “EXTENDED PROCESSOR 
STATUS REGISTER”. This is a documentation 
update only. 

3. The cacheability of a page is controlled by 
NOR’ing the value of the CD, WT bits and the 
KEN # Input pin, as described in section 2.5 enti- 
tled “Caching and Cache Flushing” and section 
3.1.14 entitled “Cache Enable (KEN#)”. This is a 
documentation update only. 

4. The NOTE section in section 2.5 entitled “Cach- 
ing and Cache Flushing” has been updated to 
clarify the paging requirement on changing the 
DTB field in the dirbase register. 

5. Information on register encoding is added in sec- 
tion 8.2 entitled “Instruction Format and Encod- 
ing”. This Is a documentation update only. 

The following list represents the key differences be- 
tween this version and version 002 of the I860 Mi- 
croprocessor Data Sheet. 

Specification Changes: 

1 . Specification changes for improved AC perform- 
ance are in section 7.3. 

2. HOLD is acknowledged during locked bus cy- 
cles. See section 3.1.8. 

3. Additicna! paths have been added to the bus 
state diagram to allow direct transitions from 
states T12 and T1 1 to state TH. See Figures 4.1 
and 4.10. 

4. Two new instructions, (p)famov.r, have been 
added. These replace (p)fadd.ds and 
(p)fadd.sd in the assembler pseudo-ops 
(p)fmov.r. These changes are in section 8.1 and 
tables 2.7, 8.7, and 8.9. 


Documentation Changes: 

1. Big and little endian description has been ex- 
panded In sections 2.2.2, 2.3, and Figure 2.8. 

2. The actions and explanations of the lock, un- 
lock, and st.c dirbase changing the BL bit have 
been updated In sections 2.2.4, 3.1.5, 3.1.8, 
4.3.4, 4.3.5, and 8.1. 

3. The explanation of the AA and MA bits of the 
fpsr have been expanded In section 2.2.8. 

4. The explanation of the WT bit of the Page Table 
Entries has been expanded in sections 2.4.4.4 
and 2.5. 

5. A change concerning the locking of the bus dur- 
ing address translation is explained In sections 
2.4.5 and 2.8.5. 

6. A further explanation on when to flush the data 
cache is given In section 2.5. 

7. The explanation of the floating point multiplier 
pipeline has been expanded In section 2.6.1. 

8. The explanation of BREQ has been expanded in 
section 3.1.4 and Figure 4.1. 

9. The explanation of result exceptions has been 
expanded in sections 2.8 and 3.2. 

10. Instruction fetch Identification has been clarified 
in section 3.1.6 and table 3.2. 

11. Bus cycle diagrams In Figures 4.7, 4.8, and 4.10 
have been clarified/corrected. 

12. Precision specification .r has been added to sec- 
tion 8.0 and table 8.1. 

13. In section 8.4, performance note 9 has been 
added, programming restriction d has been 
changed, and programming restriction f has 
been added. Table 8.9 has been updated to re- 
flect these changes. 

14. The description of testability has changed in 
sections 3.3. and 3.3.2. RESET and HOLD must 
be asserted by the tester to force the chip out- 
puts to float (tri-state). 
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8086/80186 SOFTWARE DEVELOPMENT PACKAGES 



COMPLETE SOFTWARE DEVELOPMENT SUPPORT FOR THE 
8086/80186 FAMILY OF MICROPROCESSORS 

Intel supports application development for the 8086/80186 family of microprocessors 
(8086, 8088, 80186, 80188 and real mode 80286 and 80386 designs) with a complete set 
of development languages and utilities. These tools include a macro assembler and 
compilers for C, PL/M, FORTRAN and Pascal. A linker/relocator program, library 
manager, numerics support libraries, and object-to-hex utility are also available. Intel 
software tools generate fast and efficient code. They are designed to give maximum 
control over the processor. Most importantly, they are designed to get your application up 
and running in an embedded system fast and with maximum design productivity. 


FEATURES 

• Macro assembler for speed-critical code 

• NEW windowed, interactive source level 
debugger works with all Intel languages 

• ANSI Compatible iC-86 package for 
structured C programming, with many 
processor specific extensions 

• PL/M compiler for high-level language 
programs with support for many low- 
level hardware functions 

• FORTRAN for ANSI-compatible, 
numeric intensive applications 

• Pascal for developing modular, portable 
applications that are easy to maintain 

• Linker program for linking modules 
generated by Intel compilers and 
assemblers 


• Locator for generating programs with 
absolute addresses for execution from 
ROM based systems 

• AEDIT Source Code and text editor 

• Library manager for creating and 
maintaining object module libraries 

• Complete numeric support libraries 
including a software emulator for the 
8087 

• Object-to-hex conversion utility for 
burning code into (E)PROMS 

• Hosted on IBM PC XT/AT* or 
compatibles running DOS, DEC VAX* 
or MicroVAX* systems running VMS, 
and Intel Systems 86/3XX or 286/3XX 
running iRMX® Operating System 
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CREATE AND 
MAINTAIN 
LIBRARIES WITH 




Figure 1: The Application Development Process 

ASM-86 MACRO ASSEMBLER 

ASM-86 is the macro assembler for the 8086/80186 
family of components. It is used to translate symbolic 
assembly language source into relocatable object 
code where utmost speed, small code size and 
hardware control are critical. Intel’s exclusive macro 
facility in ASM-86 saves development and 
maintenance time, since common code sequences 
need only be developed once. The assembler’s 
simplified instruction set reduces the number of 
mncmonicG that the programmer needs to remernher 
This assembler also saves development time by 
penorming exierisive checks or i consistent usage of 
variables and labels. Inconsistencies are detected 
when the program is assembled, before linking or 
debugging is started. 

NEW FOR 1989: SOURCE LEVEL 
DEBUGGER 

DB-86 is an on-host software execution environment 
with source level debug capabilities for object 
modules produced by iC-86, ASM-86, PL/M-86, 
Pascal-86 and FORTRAN-86. Its powerful, source- 
oriented interface allows users to focus their efforts on 
finding bugs rather than spending time learning and 
manipulating the debug environment. 


• Ease of learning. Drop-down menus make the 
tool easy to learn for new or casual users. A 
command line interface is also provided for more 
complex problems. 

• Extensive debug modes. Watch windows, 
conditional breakpoints (breakpoints triggered by 
program conditions), trace points, and fixed and 
temporary breakpoints can be set and modified as 
needed. 

• See into your program. You can browse source 
and call stack, observe processor registers, output 
screen, and waicn wiiiciuw variables accessed by 
either the pull down menu or by a single keystroke 
using function keys. 

• Full debug symbolics for maximum 
productivity. The user need not know whether a 
variable is an unsigned integer, a real, or a 
structure: the debugger utilizes the wealth of 
variable typing information available in Intel 
languages to display program variables in their 
respective type formats. 

• Support for overlaid programs and the numeric 
cop.»’ocessor. 
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/C-86 SOFTWARE PACKAGE 

Intel’s iC-86 brings the full power of the C program- 
ming language to 8086, 8088, 80186 and 80188- 
based microprocessor systems. It can also be used 
to develop real mode programs for execution on the 
80286 or 80386. iC-86 has been developed 
specifically for embedded microprocessor-based 
applications. iC-86 meets the draft proposed ANSI C 
standard. Key features of the iC-86 compiler include; 

• Highly Optimized. Four levels of optimization are 
available. Important optimization features include a 
jump optimizer and improved register manipulation 
via register history. 

• ROMable Code and Libraries. The iC-86 compiler 
produces ROMable code which can be loaded 
directly into embedded target systems. Libraries 
are also completely ROMable, retargetable and 
reentrant. 

• Supports Small, Medium, Compact, and Large 
memory segmentation models. 

• Symbolics. The iC-86 compiler boosts program- 
ming productivity by providing extensive debug 
information, including type information and 
symbols. The symbolics information can be used 
to debug using Intel ICE™ emulators and the new 
DB-86 Source level debugger. 

• Built-in functions. iC-86 is loaded with built-in 
functions. The flags register, I/O ports, interrupts, 
and numerics chip can be controlled directly, 
without the need for assembly language coding. 
You spend more of your productive time 
programming in C and less with Assembler. Built-in 
functions also improve compile-time and run-time 
performance since the compiler generates in-line 
code instructions instead of function calls to 
assembly instructions. 

• Standard Language. iC-86 conforms to the 1988 
Draft Proposed ANSI standard for the C language. 
iC-86 code is fully linkable with other modules 
written in other Intel 8086/186 languages, allowing 
programmers to use the optimal language for any 
task. 


PL/M-86 SOFTWARE PACKAGE 

PL/M-86 is a high-level programming language 
designed to support the software requirements of 
advanced 16-bit microprocessors. PL/M-86 provides 
the productivity advantages of a high-level language 
while providing the low-level hardware access 
features of assembly language. Key features of 
PL/M-86 include: 

• Structured programming. PL/M-86 supports 
modular and structured programming, making 
programs easier to understand, maintain and 
debug. 

• Built-in functions. PL/M-86 includes an extensive 
list of functions, including TYPE CONVERSION 
functions, STRING manipulations, and functions for 
interrogating 8086/186 hardware flags. 

• Interrupt handling. The INTERRUPT attribute 
allows you to define interrupt handling procedures. 
The compiler generates code to save and restore 
all registers for INTERRUPT procedures. 

• Compiler controls. Compile-time options increase 
the flexibility of the PL/M-86 compiler. They include: 
optimization, conditional compilation, the inclusion 
of common PL/M source files from disk, cross- 
reference of symbols, and optional assembly 
language code in the listing file. 

• Data types. PL/M-86 supports seven data types, 
allowing the compiler to perform three different 
kinds of arithmetic: signed, unsigned and floating 
point. 

• Language compatibility. PL/M-86 object modules 
are compatible with all other object modules 
generated by Intel 8086/186 languages. 



6-3 



FORTRAN-86 SOFTWARE PACKAGE 

FORTRAN-86 meets the ANSI FORTRAN 77 
Language Subset Specification and includes almost 
all of the features of the full standard. This 
compatibility assures portability of existing FORTRAN 
programs and shortens the development process, 
since programmers are immediately productive 
without retraining. 

FORTRAN-86 provides extensive support for numeric 
processing tasks and applications, with features such 
as: 

• Support for single, double, double extended 
precision, complex, and double complex floating- 
point data types 

• Support for proposed REALiViATH IEEE fioating 
point standard 

• Full support for all other data types:, integer, logical 
and character 

• Optional hardware (8087 numeric data processor) 
or software (simulator) floating-point support at link 
time 

PASCAL-86 SOFTWARE PACKAGE 

Pascal-86 conforms to the ISO Pascal standard, 
facilitating application portability, training and 
maintenance. It has also been enhanced with 
microcomputer support features such as. interrupt 
handling, direct port I/O and separate compilation. 

A well-defined and documented run-time operating 
system interface allows the user to execute 
applications under user-designed operating systems 
as an alternate to the development system 
environment. Program modules compiled under 
Pascal-86 are compatible and linkable with modules 
written in other Intel 8086/186 languages, so 
developers can implement each module in the 
language most appropriate for the task at hand. 

Pascal-86 object modules contain symbol and type 
information for program debugging using Intel ICE™ 
emulators and the DB-86 debugger. 

LINK-86 LINKER 

Intel’s LINK-86 utility is used to combine multiple 
object modules into a single program and resolve 
references between independently compiled 
modules. The resulting linked module can be either a 
bound load-time-locatable module or simply a 
relocatable module. A .EXE option allows modules to 
be generated which can be executed directly on a 
DOS system. 

LINK-86 greatly increases productivity by allowing 
you to use modular programming. The incremental 
link capability allows new modules to be easily added 
to existing software. Because applications can be 
broken into separate modules, they’re easier to 
design, test and maintain. Standard modules can be 
reused in different applications, saving software 
development time. 


LOC-86 LOCATOR 

The LOC-86 utility changes relocatable 8086/186 
object modules into absolute object modules. Its 
default address assignment algorithm will 
automatically assign absolute addresse.s to the object 
modules prior to loading of the code into the target 
system. This frees you from concern about the final 
arrangement of the object code in memory. You still 
have the power to override the control and specify 
absolute addresses for various Segments, Classes, 
and Groups in memory. You may also reserve various 
parts of memory. 

LOC-86 is a powerful tool for embedded 
development because it simplifies set up of the 
bootstrap loader and initialization cods for execution 
from ROM based systems. The locator will also 
optionally generate a print file containing diagnostic 
information to assist in program debugging. 

NUMERICS SUPPORT LIBRARY 

The Numerics Support Library greatly facilitates the 
use of floating-point calculations from programs 
written in Assembler, PL/M, and C. It adds to these 
languages many of the functions that are built into 
applications programming languages, such as Pascal 
and FORTRAN. A full 8087 software emulator and 
interface libraries are included for precision floating 
point calculations without the use of the 8087 
component. The decimal conversion library aids the 
translation between decimal and binary formats. A 
Common Elementary Function library provides 
support for transcendental, rounding and other 
common functions, not directly handled by the 
numeric processor. An Error Handler Module makes 
it easy to write interrupt routines that recover from 
floating-point error conditions. 



6-4 



LIB-86 LIBRARIAN 

The Intel LIB-86 utility creates and maintains libraries 
of software object modules. Standard modules can 
be placed in a library and linked to your application 
using the LINK-86 utility. 

AEDIT SOURCE CODE AND TEXT EDITOR 

AEDIT is a full-screen text editing system designed 
specifically for software engineers and technical 
writers. With the facilities for automatic program block 
indentation, HEX display and input, and full macro 
support, AEDIT is an essential tool for any 
programming environment. And with AEDIT, the 
output file is the pure ASCII text (or HEX code) you 
input- no special characters or proprietary formats. 

Dual file editing means you can create source code 
and its supporting documents at the same time. Keep 
your program listing with its errors in the background 
for easy reference while correcting the source in the 
foreground. Using the split-screen windowing 
capability, it is easy to compare two files, or copy text 
from one to the other. The DOS system-escape 
command eliminates the need to leave the editor to 
compile a program, get a directory listing, or execute 
any other program executable at the DOS system 
level. 



OH-86 OBJECT-TO-HEXADECIMAL 
CONVERTER 

The OH-86 utility converts Intel 8086/186 object 
modules into standard hexadecimal format, allowing 
the code to be loaded directly into PROM using 
industry standard PROM programmers. 

SERVICE, SUPPORT AND TRAINING 

Intel augments its 8086/186 family development tools 
with a full array of seminars, classes and workshops. 
In addition, on-site consulting services, field 
application engineering expertise, telephone hotline 
support, and software and hardware maintenance 
contracts are available to help assure your design 
success. 
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ORDERING INFORMATION 


D86ASM86NL 

ASM-86 

Assembler for PC XT 
or AT system (or 
compatible) running 
DOS 3.0 or higher 

VVSASM86 

ASM-86 

Assembler for VAX/ 
VMS 

MVVSASM86 

ASM-86 

Assembler for 
MicroVAX/VMS 

R86ASM86SU 

ASM-86 

Assembler for Intel 
86/3XX systems 

ri inninn iRMX RB 

' 'o — 

operating system 

R286ASM86EU 

ASM-86 

Assembler for Intel 
286/3XX systems 
running iRMX N™ 
operating system 

Note: 

ASM-86 includes Macro Assembler, 
Link-86, Loc-86, Lib-86, Cross- 
Reference utility, OH-86, Numerics 
Support, and DB-86 Source Level 
Debugger. (DB-86 available in DOS 
version only.) 

D86C86NL 

iC-86 

Software Package for 
IBM PC XT/AT 
running PC DOS 3.0 
or higher 

VVSC86 

iC-86 

Software Package for 
VAX/VMS 

MVVSC86 

iC-86 

Software Package for 
MicroVAX/VMS 

R86C86SU 

iC-86 

Software Package for 
Intel System, 

8086/3XX running 

•r-\K 4\/ r\/^ ^ 

iniViA ou Ujjciaui ly 

system 

D86PLM86NL 

PL/M-86 

Software Package for 
IBM PC XT/AT 
running PC DOS 3.0 
or higher 

VVSPLM86 

PL/M-86 

Software Package for 
VAX/VMS 


MVVSPLM86 

PL/M-86 

Software Package for 
MicroVAX/VMS 

R86PLM86SU 

PL/M-86 

Software Package for 
Intel System 

8086/3XX running 
iRMX 86 operating 
system 

D86FOR86NL 

FORTRAN-86 

Software Package for 
PC XT/AT (or 
compatible) running 
PC-DOS 3.0 or 
higher 

VVSFORT86 

FOHrRAN-86 

Software Package for 
VAX/VMS 4.3 and 
later 

MVVSFORT86 

FORTRAN-86 

Software Package for 
MicroVAX/VMS 

R86FOR86SU 

FORTRAN-86 

Software Package for 
Intel System 86/3XX 
running iRMX 86 
operating system 

D86PAS86NL 

PASCAL-86 

Software Package for 
IBM PC XT/AT 
running PC DOS 3.0 
or higher 

VVSPAS86 

PASCAL-86 

Software Package for 
VAX/VMS 

MVVPAS86 

PASCAL-86 

Software Package for 
MicroVAX/VMS 

R86PAS86SU 

PASCAL-86 

Softv/are Package for 
Intel System 86/3XX 
running iRMX 86 

D86EDNL 


AbDiT Source Code 
Editor for IBM PC 
XT/AT running PC 
DOS 3.0 or higher 


ICE is a trademark and iRMX a registered trademark of Intel 
Corporation. 

VAX and VMS are registered trademarks of Digital Equipment 
Corporation. 

IBM PC XT/AT is a trademark of International Business Machines 
Corporation. 
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INTEL iC-86/286 C COMPILER 



INTEL iC-86/286 COMPILER 

The Intel iC-86/286 compiler is the C compiler to use for 8086/186/286 embedded 
microprocessor designs. In addition to outstanding execution speed, Intel’s iC-86/286 
compiler generates compact, efficient code which can be easily loaded into ROM-based 
systems. The iC-86/286 compiler is also fully supported by the Intel DB86 windowed 
source-level software debugger and in-circuit emulation tools. 

iC-86/286 COMPILER FEATURES 

• Optimized for embedded systems 

• Built-in functions for automatic machine 
code generation 

• ROMable code and libraries 

• Integrated debugging with Intel ICE™ 
and |2|CE™ 

• Compliance with draft ANSI standard 

• Supports Small, Medium, Compact, and 
Large memory models 

• PL/M compatible subsystems 


• Selector data type support 

• Linkable with other Intel 8086/286 
languages such as ASM and PL/M 

• ROMable and reentrant libraries 

• Ability to mix memory models with 
“near” and “far” pointers 

• C and PL/M calling conventions for 
compatibility with PL/M and other C 
programs 

• iRMX® interface libraries included 
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BUILT-IN FUNCTIONS 


INTEGRATED DEBUG TOOLS 


The iC-86/286 compiler features more than 35 
prQces'sor-specific functions that directly generate 
machine code within the C language. 

Built-in functions eliminate the need for in-line 
assembly language coding or making calls to 
assembly functions. This increases code performance 
and reduces programming time. 

With built-ins you can enable or disable interrupts and 
directly control hardware I/O without having to exit C 
for assembler. This means you can write high 
performance software for real time applications 
without having to keep track of every architectural • 
detail, as you would in assembiy language. Fur 
example, to generate an I NT instruction, you simply 
type: 

cause interrupt (number) 

Or, the following iC-86 instruction will cause the 
processor to come to a halt with interrupts enabled: 

halt( ) 

EMBEDDED COMPONENT SUPPORT 

iC-86/286 compiler was designed specifically for 
embedded microprocessor applications. It produces 
ROMable code which can be loaded directly into 
target systems via Intel ICE emulators and debugged 
without modification for fast, easy, development and 
debugging. 

HIGHLY OPTIMIZED 

The iC-86/286 compiler has four levels of optimization 
for tailoring performance to your application. 

Important optimization features include a jump 
optimizer and improved register manipulation using 
register history. 

RUN-TIME SUPPORT 

Ru.n-ti.me libraries for the in-86/286 compiler are de- 
signed for use in many environments. Both DOS and 
iRMX interface libraries arc included so programs 
executing on those systems can take advantage of 
operating system features. The interface libraries 
conform to the ANSI standard. They also meet the 
IEEE standard POSIX interface so you can easily 
retarget the libraries for use in applications that do 
not run on DOS or iRMX. 

The libraries are completely ROMable and re-entrant 
making it easy to adapt them for embedded, multi- 
tasking or real-ti.me applications. 

Both the DOS and iRMX-l operating system interface 
libraries are provided with iC-86 hosted on DOS. The 
iRMX-l hosted version of iC-86 includes the iRMX 
interface libraries only. 

iC-286 compiler includes iRMX-ll interface libraries 
only. 


The iC-86/286 compiler is part of a completely 
integrated set of development tools from Intel (Fig. 1). 

Code output from the compiler can be easily linked 
with modules written in assembler and high-level 
languages, such as PL/M, Fortran, and Pascal. 

Linked modules and programs can be debugged 
using Intel’s DB86 windowed source-level software 
debugger. The debugger uses an advanced interface 
with windows and pull-down menus for the ultimate in 
debug productivity. Watch windows can be opened to 
observe changing program variables and processor 
registers. You can readily switch between program 
modules and view the calling sequence and call 
stack. 



Intel’s DB86 Software Debugger 


Naturally code generated by iC-86/286 works 
completely with Intel’s I^ICE, ICE-186, ICE-286 and 
ICE-386 family of in-circuit emulators as well as the 
iPAT™ performance analysis tool. This complete set of 
tools gives you the power to quickly debug, test, 
integrate and optimize your application code for the 
target system. 



ICE-186, iPAT 
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Figure 1: The Application Development Process 

SERVICE AND SUPPORT 

Intel’s development tools are backed by our 
worldwide service and support organization 
dedicated to solving any problems encountered by 
our customers. Several hardware and software 
service programs are available 


which include hotline support, consulting, training, 
technical newsletters, bulletin boards and other 
services. The iC-86/286 compiler includes 90 days of 
software support under warranty. 


SPECIFICATIONS 


ENViRONMENT 


ORDERING INFORMATION 


Hardware DOS Version: 
Requirements 


iRMX Version: 


Memory DOS Version: 
Requirements irmx Version: 

Media DOS Version: 

iRMX Version: 


IBM PC XT or AT (or 
100% Compatible) 
running DOS 3.1 or 
greater. 

iRMX-l system for iC-86 
iRMX-ll system for 
iC'286 

256 KB 
374 KB 

5V4" DS/DD Diskettes 
3V2" DS/DD Diskettes 

DS/DD iRMX Standard 
Format 


STANDARDS 

iC-86/286 conforms to the X3J11 ANSI draft proposal 
for the C programming language. 


Order Code 

Host Environment Target Code 

D86C86NL 

DOS 

8086/186 

D86C286NL 

DOS 

80286 

R86C86 

iRMX-l 

8086/186 

R286C286 

iRMX-ll 

80286 

Other programming tools: 

Host 


Order Code 

Environment 

Description 

D86PAK86NL 

DOS 

8086/186 
Assembler, DB86 
Debugger, Utilities 
AEDIT text editor 

D86ASM86KIT 

DOS 

8086/186 
Assembler, DB86 
Debugger, Utilities 

D86ASM286NL DOS 

80286 Assembler 

R86ASM86 

iRMX-l 

8086/186 
Assembler, Utilities 

R286ASM286 

iRMX-ll 

80286 Assembler, 
Utilities 

RMXIISFTSCP 

iRMX-ll 

80286 Softscope 
Debugger 
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Ada: CROSS-DEVELOPMENT FOR THE 80386 MICROPROCESSOR 



Intel’s Ada *-386 Cross-Compilation Package comprises a rich set of Ada language tools 
for the programmer wanting to develop Ada applications targeted to the industry’s leading 
32-bit architecture, the 80386 microprocessor. This tool set includes an Ada cross 
compiler which generates compact, highly optimized, code for embedded real-time 
80386 applications. The cross compiler and other tools making up the Cross-Compilation 
Package form a complete development environment designed specifically to support 
large scale, mission critical Ada programming development projects. 

Intel’s Ada-386 Cross-Compilation Package runs under VAX/VMS, and features, in 
addition to the cross compiler, a number of tools which make the programmer’s job more 
efficient. These tools include a VMS hosted and targeted compiler to enable the 
programmer to do unit testing on the VAX early in the development cycie. Also included 
with each of the compilers is an Ada symbolic debugger to facilitate the debug process, 
and sophisticated code generation tools, such as the Linker and Global Optimizer, to help 
make the target code smaller and more efficient. An object module Importer is included 
with the cross compiler to allow the programmer to save and make use of program 
modules written in other Intel 80386 languages. 
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KEY COMPILATION PACKAGE 
FEATURES 

• Tight, efficient, 32-bit 80386 code 
-Generated code designed and optimized for the 

80386 architecture 

• Built-in support for the 80386 

-Full representation specifications, including 
address clauses 
-Machine code insertion 

• 80387 coprocessor support 
-Full IEEE numerics support 

• pragma INTERFACE 

— Call modules written in other Intel languages: 
ASM-386, PL/M-386 & C-386 

• Ffighly optimized interrupt handling 

-Fast execution of interrupt handlers without 
requiring a context switch 

• Pre-emptive delay 

-Force synchronization at the end of programmed 
“delays” 

• Optional download and debug paths using the 
VAX-hosted Ada debugger 

— With a ROM-resident target debug monitor 
(included), or 

— ICE-386 (80386 In-Circuit Emulator) for less 
intrusive debugging 

• Modular, configurable runtime system 
-Linker excludes routines not required by the 

embedded application (no overhead penalty) 
-Easily configured for different hardware 
environments 

REAL TIME Ada FROM INTEL 

Intel’s Ada development environment makes 
developing real-time embedded applications 
convenient and easy All steps in the development 
process can proceed, start to finish, from a VAX 
terminal — from initial unit testing with the VMS- 
targeted compiler to compiling and linking using the 
80386-targeted cross compiler. Downloading to the 
80386 target and debugging can also be 
accomplished from the VAX terminal. 

COMPILATION PACKAGE COMPONENTS 

• Compilers & Library Tools 

Both compilers, the VMS targeted version and the 
80386 cross targeted version, use the same user 
interface, commands and library management 
tools so the programmer learns them only once. 
The cross compiler has an optional switch which 
directs the compiler to produce assembly 
language text interspersed with Ada source text as 
comments. This feature gives the programmer a 
convenient way to hand-inspect the code. The 
assembly language text can also be assembled 
using the Intel 80386 Assembler. 

The cross compiler has important optimizations to 
help meet real-time needs. For example, when 
response times to interrupts are critical, the 


programmer can speed up response times by 

- invoking the “function mapped” optimization via a 
special compiler directive, “pragma INTERRUPT.” 
This function mapping enables an interrupt handler 
to execute without first requiring a task switch, i.e., 
within the context of the interrupted task. 

• Global Optimizer 

The Global Optimizer is used to reduce the size 
and increase the speed of embedded application 
code. This tool is invoked at the user’s option, but 
usually after most of the coding and debugging is 
complete. Some key functions performed by the 
Global Optimizer include; 

• Linker 

The Linker combines separately compiled Ada 
modules, imported non-Ada modules (see 
Importer below), and the Ada runtime system 
into one executable image. To reduce target 
code size, the Linker also eliminates 
subprograms in the application code and in the 
runtime system that are not actually required by 
the application. The programmer may also use 
the Linker to produce output in a format suitable 
for burning PROMs. 

• Importer 

The Importer can help preserve previous software 
investments. The Importer converts object modules 
from Intel’s OMF-386 format to a format suitable for 
linking with Ada modules. An Ada application can 
call these imported non-Ada modules through 
“pragma INTERFACE.” Pragma INTERFACE is 
supported for Intel’s ASM-386, PL/M-386 and 
C-386 languages. 

• Ada Runtime System 

All the necessary low-level support routines for 
executing programs on a bare 80386 
microprocessor are provided in the Ada Runtime 
System. These routines are responsible for 
managing tasking, interrupts, the real-time clock 
and memory. Also included are predefined Ada 

packages, such as Text I/O, 10 Exceptions, 

Unchecked Conversion and Calendar. The Ada 

Runtime System is written almost entirely in Ada, 
with a small number of packages written in 80386 
assembly language to support key low-level 
functions. The Runtime System is easily configured 
for different 80386 hardware environments, and 
source code is provided for this purpose. 
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• Symbolic Debugger 

A VAX- resident symbolic debugger is supplied for 
each compiler. The debugger allows the 
programmer to debug at the source level while the 
code is executing on the target. Log and script files 
may be used to automate repetitive debug 
sessions. Important debugger features include; 


Feature Benefit 


machine level 
interface 

step through machine 
instructions: read/write to 
registers, memory, and I/O ports 

single/multiple 

step 

step through source code by 
Single or multiple statements 

breakpoints 

halt execution at specified points 

call chain 
display 

display the dynamic nesting of a 
program at a particular point in 
time 

task status 
display 

determine the status of a task at 
a particular point in time 

variable display 

examine values of program 
variables 

trap unhandled 
exceptions 

examine state of the target 
program when an unhandled 
exception occurs 


Language Tools 

Intel’s Ada development environment includes tools 
that help development projects run more smoothly. 
A Cross Referencer provides a cross-reference 
listing of all source file locations where a user- 
defined symbol in an Ada compilation unit is 
defined. A Source Dependency Lister produces a 
valid compilation order list for compilation units in 
an Ada program and lists dependencies among 
units. A Source Formatter (or “pretty printer’’) takes 
as input a non-formatted Ada source file and 
outputs a formatted version of the same text that 
adheres to standardized language conventions. 


A small debug monitor, supplied in PROM, is used 
with the Symbolic Debugger. The code can also be 
downloaded and debugged using Intel’s ICE-386 
in-circuit emulator. 
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WORLDWIDE SERVICE AND SUPPORT 

Complete hardware and software support is provided. The Ada-386 Compilation Package comes with Intel’s 
standard 90-day warranty plus an extended one-year maintenance agreement, ensuring uninterrupted 
support for a full 15 months. One-year maintenance contract renewals are available from Intel annually 


ORDERING INFORMATION 


Order Code 

VVSAda386-75 

-82 

-83 

-85 

-88 


Host Configuration 

VAX 730, 750 
VAX 78X, 8200 
VAX 8300 

VAX 85XX, 86XX, 8700 
VAX 8800 


MVVSAda386-VS VAXStationll 
-02 MicroVAXII 


Product 

Ada-386 Cross-Compilation Package. Included are the following 
tools hosted on VAX/VMS: 

• 80386-targeted Ada cross compiler & library tools 

• VMS self-targeted Ada compiler & library tools 

• For each compiler a Symbolic Debugger, a Global Optimizer 
and Language Tools 

• Ada-386 Linker and Importer 

• Ada-386 Runtime System 

The Compilation Package also includes full documentation, Intel’s 
standard 90-day warranty, and an extended one-year 
maintenance contract. 


ICE386HW N/A 80386 In-Circuit Emulator {hardware only). Used with the VAX- 

hosted Symbolic Debugger, the ICE-386 offers the programmer 
an alternative download method to using the ROM-resident 
debug kernel supplied with the Compilation Package. 


Note: Ada-386 software license required for each host CPU. Multiple copies require multiple licenses. 

‘VAX/VMS IS a registered trademark of Digital Equipment Corporation 
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INTEL386™ FAMILY DEVELOPMENT SUPPORT 



CO!^PREHEI\lStVE DEVELOP3iEl%IT SUPPORT FOR THE 
mTEL38€^^ FAmiY OF MMCROPROCESSORS 

The perfect complement to the Intel386™ Family of microprocessors is the optimum 
development solution. From a single source, Intel, comes a complete, synergistic hardware and 
software development toolset, delivering full access to the power of the lntel386 architecture in 
a way that only Intel can. 

Intel development tools are easy to use, yet powerful, with contemporary user interface 
techniques and productivity boosting features such as symbolic debugging. And you’ll find Intel 
first to market with the tools needed to start development, and with lasting product quality and 
comprehonsive support, to keep development on-track. 

If what interests you is getting the best product to market in as little time as possible, Intel Is 
the choice. 

FEATURES 

• Comprehensive support for the full 32 bit 
lntel386 architecture, including protected 
mode and 4 gigabyte physical memory 
addressing 

• Source display and symbolics allow 
debugging in the context of the original 
program 

• Architectural extensions in Intel high-level 
languages provides for manipulating 
hardware directly without assembly 
language routines 

inM 

Intel Corporation assumes no responsibility for the use of any circuitry other than circuitry embodied in an Intel product. No other circuit patent licenses 
are implied. Information contained herein supersedes previously published specifications on these devices from Intel and is subject to change without 
notice. 


• A common object code format (OMF-386™) 
supports the intermixing of modules 
written in various languages 

• ROM-able code is output directly from the 
language tools, significantly reducing the 
effort necessary to integrate software into 
the final target system 

• Support for the 80387 numeric 
coprocessor 

• Operation in DOS and VAX*/VMS* 
environments 


© Intel Corporation 1989 
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Figure I. Inlel Microprocessor Developmcnl F^nvironmenl 


jiSM-386^^ MACRO ASSEMBLER 

ASM-386™ is a “high-level” macro assembler for the 
Intel386 Family. ASM-386 offers many features normally 
found only in high-level languages. The macro facility in 
ASM-386 saves development time by allowing common 
program sequences to be coded only once. The assembly 
language is strongly typed, performing extensive checks 
on the usage of variables and labels. 

Other ASM-386 features include: 

• “High-level” assembler mnemonics to simplify the 
language 

• Structures and records for data representation 

• Upward compatibility with ASM-286 

PL/M-38e^^ COMPtLER 

PL/M-386™ is a structured high-level system 
implementation language for the lntel386 Family. 
PL/M-386 supports the implementation of protected 
operating system software by providing built-in 
procedures and variables to access the Intel386 
architecture. 

For efficient code generation, PL/M-386 features four 
levels of optimization, a virtual symbol table, and four 
models of program size and memory usage. 

Other PL/M-386 features include: 


€-386^^ COMPiLER 

C-386™ brings the C language to the Intel386 Family. For 
code efficiency, C-386 features two levels of optimization, 
three models of program size and memory usage, and an 
extremely efficient register allocator. The C-386 compiler 
eliminates common code, eliminates redundant loads and 
stores, and resolyes span dependencies (shortens 
branches) within a program. 

C-386 allows full access to the Intel386 architecture 
through control of bit fields, pointers, addresses, and 
register allocations. 

Other C-386 features include: 

® An interrupt directive defining a function as an 
interrupt function 

• Built-in functions allow direct access to the 
microprocessor through the inline insertion of machine 
code 

® Structure assignments, functions taking structure 
arguments, and returning structures, and the void and 
enum data types 

The C-386 runtime library is implemented in layers. The 
upper layers include the standard I/O library (STDIO), 
memory management routines, conversion routines, and 
string manipulation routines. The lowest layer, operating 
system interface routines, is documented for adaptation 
to the target environment. 


• The ability to define a procedure as an interrupt 
handler as well as facilities for generating interrupts 

• Direct support of byte, half-word, and word input and 
output from microprocessor ports 

• Upward compatibility with PL/M-286 and PL/M-86 
source code 

PL/M-386 combines the benefits of a high-level language 
with the ability to access the Intel386 architecture. For 
the development of systems software, PL/M-386 is a cost- 
effective alternative to assembly language programming. 
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RLL-386^^ RELOCATIOl^, UJMKAGE, 
Am UBRARV TOOLS 

The RLL-386™ relocation, linkage, and library tools 
are a cohesive set of utilities featuring comprehen- 
sive support of the full Intel386 architecture. 
RLL-386 provides for a variety of functions— from 
linking separate modules, building an object library, 
or linking in 80387 support, to building a task to 
execute under protected mode or the multi-tasking, 
memory protected system software itself. 

The RLL-386 relocation, linkage, and library tools 
package includes a program binder for linking ASM, 
PL/M, and C modules together, a system builder for 
configuring protected, muiti-lask systems, a ci’oss 
reference mapper, a program librarian, an 80387 
numeric coprocessor support library, and a 
conversion utility for outputing hex format code for 
PROM programming. 

Ada-386^ CROSS COIRPILATWIA 
PACKAGE 

The Ada-386™ Cross-Compilation Package is a 
complete development environment for embedded 
real-time Ada applications for the 386™ 
microprocessor. The Ada cross compiler, which runs 
under VAX/VMS, generates code highly optimized for 
the 80386. The Ada-386 Cross-Compilation Package 
also features a VMS hosted and targeted compiler 
and tools to support software debugging before the 
target system is available. Sophisticated code 
generation tools, such as the Global Optimizer, help 
make the target code smaller and more efficient. 

Ada-386 includes a source level symbolic debugger 
working in unison with a small debug monitor 
supplied in PROM. Code can also be downloaded 
and debugged using Intel’s ICE™-386 In-Circuit 
Emulator. 

Other Ada-386 features include: 

• i ne aoiiity to directly call inters iRMK real-time 
kernel 

• An object module importer allows program 
modules written in other Intel386 Family 
languages to be linked with Ada modules 

• Built in support for the 386, including machine 
code insertion and full representation 
specifications 

• Highly optimized interrupt handling— fast 
execution of interrupt handlers without requiring 
a context switch 

LATEL386^^ FAlRtLY HA-CiRCCtT 
EMVLATORS 

Intel386 Family in-circuit emulators embody 
exclusive technology that gives the emulator access 
to internal processor states that are accessible in no 
other way. Intel386 microprocessors fetch and 
execute instructions in parallel; fetched instructions 
are not necessarily executed. Because of this, an 
emulator without this access to internal processor 


states is prone to error in determining what actually^ 
occurred inside the microprocessor. With inu^l’s 
exclusive technology, Intcl386 Family emulators arc 
one hundred percent accurate. 

Other features of lntel386 Family in-circuit 
emulators include: 

• Unparalleled support of the Intel386 architecture, 
notably the native protected mode 

• Emulation at clock speeds to 25MHz and full- 
featured trigger and trace capabilities 

• Non-intrusive operation 

• Convertible to support any lntel386 
microprocessor 

With symbolic debugging, memory locations can be 
examined or modified using symbolic references to 
the original program, such as a procedure or a vari- 
able name, line number, or program label. Source 
code associated with a given line number can be 
displayed, as can the type information of variables, 
such as byte, word, record, or array. Microprocessor 
data structures, such as registers, descriptor tables, 
and page tables, can also be examined and modified 
using symbolic names. The symbolic debugging 
information for use with Intel development tools is 
produced only by Intel languages. 


DOS-REStDElVT SOFTWARE 
DEBUGGER 


DB386™ is an on-host software execution 
environment with source-level symbolic debug 
capabilities for object modules produced by Intel’s 
ASM-386, iC-386, and PL/M-386 translators. This 
software debug environment allows 386 code to be 
executed and debugged directly on a 386 or 
386SX-™microprocessor based PC, without any 
additional target hardware required. With Intel’s 
standard windowed human interface, users can 
focus their efforts on finding bugs rather than 
spending time learning and manipulating the debug 
enviroiiineiil. 


architecture. A run-time interface allows 
protected-mode 386 programs to be executed 
directly on a 386- or 386SX-based PC. 

• Ease of learning. Drop-down menus make the 
tool easy to learn for new or casual users. A 
command line interface is also provided for more 
complex problems. 

• Extensive debug modes. Watch windows 
(display user-specified variables), trace points, 
and breakpoints (including fixed, temporary, and 
conditional) can be set and modified as needed, 
even during a debug session. 

• See into the 386 application. The user can 
browse source and call stacks, observe processor 
registers, and access watch window variables by 
either the pull down menu or by a single 
keystroke using the function keys. An easy-to-use 
disassembler and single-line assembler can also 
speed the debug process. 
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DOS-REStDE!%T SOFTmRE 
DEBEGGER (coniinucd) 

• Full debug symbolics for maximum productivity. 

The iis('r need nol know whether a variable is an 
unsigned integer, a real, or a structure. The debugger 
utilizes the wealth of typing information available in 
Intel languages to display program variables in their 
respective type formats. 

JROMTOR-SBG^^ SOFTWARE 
DEBEGGER 

MONITOR-386™ is a software debugger primarily for 
non-PC 386 and 386SX microprocessor based target 
systems. The monitor allows 386 software applications 
to be downloaded and symbolically debugged on 
virtually any target system using the 386 architecture. 
MONITOR-386, used in conjunction with Intel single 
board computers iSBC® 386/22 and iSBC 386/116, can 
debug software before a functional prototype of the 
target system is available. 

• Breakpoints. Both hardware and software 
breakpoints can be set at symbolic addresses. 

• Program Execution. Users can single-step through 
assembly or high-level language applications. 

• Debug Procedures. MONITOR-386 command 
sequences can be defined as macros, significantly 
reducing the amount of repetitive information which 
needs to be entered. 

• Disassembler/Single Line Assembler. Users can 
display and patch memory with 80386/80387 
mnemonics. 

iPAT-386^^ PERFORIUAIICE AI\AL¥SES 
TOOL 

iPAT-386™ performance analysis tool provides analysis of 
real-time software executing on a 386-based target 
system. With iPAT-386, it is possible to speed-tune 
applications, optimize use of operating systems, 
determine response characteristics, and identify code 
execution coverage. 

By examining iPAT-386 histogram and tabular 
information about procedure usage (with the option of 
including interaction with other procedures, hardware, 
the operating system, or interrupt service routines) for 
critical functions, performance bottlenecks can be 
identified. With iPAT-386 code execution coverage 
information, the completeness of testing can be 
confirmed. iPAT-386 can be used in conjunction with 
Intel’s ICE-386™ in-circuit emulator to control test 
conditions. 

iPAT-386 provides real-time analysis up to 20MHz, 
performance profiles of up to 125 partitions, and code 
execution coverage analysis over 252K. 


Inlel386, 386, 386SX, 376, ICK, and iSF3C are trademarks of Intel Corporation. 
VAX and VMS are reftistered trademarks of Digital Equipment Corporation. 


SERVECE, SEPPORT AAID TRAEJAEIAG 

To augment its development tools, Intel offers a full 
array of seminars, classes, and workshops, field 
application engineering expertise, hotline technical 
support, and on-site service. 

PRODECT SEPPORT IfEATREJK 


Product 

Component 

Host 

386 

386SX 

376 

DOS 

VAX/VIHS 

ASM-386 McKto Assembler 


y' 

y' 

y' 

y' 

PUM-386 Compiler 



y' 



C-386 Compiler 




y 

y' 

RLE-386 Reloculioii, 

Link(i;>(‘. and Library looks 






, Ada-386 Cross Compilalion 
Package 





y' 

Inlel386 Family In-Cireuil 
Emulators 


y' 

y' 



Windowed Software 

DebuKser 






Monilor-386 Software 
l)ebu{«{ier 




y' 


iPAT-386 Performanee 
Analysis Tool 




y^ 



ORDEREJMG EIMFORIUATEOIM 

For direct information on Intel’s Development Tools, or 
for the number of your nearest sales office or distribulor, 
call 800-874-6835 (U.S.). For information or literature on 
additional Intel products, call 800-548-4725 (U.S. and 
Canada). 

UNITED STATES, Intel Corporation 
3065 Bowers Ave., Santa Clara, CA 95051 
Tel: (408) 765-8080 

JAPAN, Intel Japan K.K. 

5-6 Tokodai, Tsukuba-shi, 

Ibaraki, 300-26 
Tel: 029747-8511 

FRANCE, Intel Corporation S.A.R.L. 

1, Rue Edison, BP 303, 

78054 Saint-Quentin-en-Yvelines Cedex 
Tel: (33) 1-30 57 70 00 

UNITED KINGDOM, Intel Corporation (U.K.) Ltd. 

Pipers Way, Swindon, Wiltshire, England SN3 IRJ 
Tel: (0793) 696000 

WEST GERMANY, Intel Semiconductor GmbH 
Dornacher Strasse 1, 8016 Feldkirchen bei Muenchen 
Tel: 089/90 99 20 

HONG KONG, Intel Semiconductor Ltd. 

10/F East Tower, Bond Center, 

Oueensway, Central 
Tel: (5) 8444-555 

CANADA, Intel Semiconductor of Canada, Ltd. 

190 Attwell Drive, Suite 500 
Rexdale, Ontario MOW 6H8 
Tel. (416) 675-2105 


Printed In USA/p9018/0289/10K/WCP/VJC 
Development Tools Operation 
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AEDIT SOURCE CODE AND TEXT EDITOR 



PROGRAMMER SUPPORT 

AEDIT, is a full-screen text editing system designed specifically for software engineers and 
technical writers. With the facilities for automatic program block indentation, HEX display 
and input, and full macro support, AEDIT is an essential tool for any programming 
environment. And with AEDIT, the output file is the pure ASCII text (or HEX code) you 
input— no special characters or proprietary formats. 

Dual file editing means you can create source code and its supporting documents at the 
same time. Keep your program listing with its errors in the background for easy reference 
while correcting the source in the foreground. Using the split-screen windowing capability, 
it is easy to co.nnpare two files, or copy text from one to the other. Thp DOS systena-p-scapp 
command eliminates the need to leave the editor to compile a program, get a directory 

l:_i: .4.^ ^4.1 .4.^UI^ ^4- r^/^O 1^. 1^1 

ll^^Uliy, Ul CAC^UIC any UII ici ^.Jiuyiaiii cii me i-zwo oyoiem levei. 

There are no limits placed on the size of the file or the length of the lines processed with 
AEDIT. It even has a batch mode for those times when you need to make automatic string 
substitutions or insertions in a number of separate text files. 

AEDIT FEATURES 

• Complete range of editing support- 
from document processing to HEX 
code entry and modification 

• Supports system escape for quick 
execution of PC- DOS System level 
commands 

• Full macro support for complex or 
repetitive editing tasks 


• Hosted on PC-DOS and RMX operating 
systems 

• Dual file support with optional split- 

» screen windowing 

• No limit to file size or line length 

• Quick response with an easy to use 
menu driven interface 

• Configurable and extensible for 
complete control of the editing process 


Intel Corporation 1989 
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FEATURES 


POWERFUL TEXT EDITOR 

As a text editor, AEDIT is versatile and complete. In 
addition to simple character insertion and cursor 
positioning commands, AEDIT supports a number of 
text block processing commands. Using these 
commands you can easily move, copy, or delete both 
small and large blocks of text. AEDIT also provides 
facilities for forward or reverse string searches, string 
replacement and query replace. 

AEDIT removes the restriction of only inserting 
characters when adding or modifying text. When 
adding text with AEDIT you may choose to either 
insert characters at the current cursor location, or 
over-write the existing text as you type. This flexibility 
simplifies the creation and editing of tables and 
charts. 

USER INTERFACE 

The menu-driven interface AEDIT provides makes it 
unnecessary to memorize long lists of commands 
and their syntax. Instead, a complete list of the 
commands or options available at any point is always 
displayed at the bottom of the screen. This makes 
AEDIT both easy to learn and easy to use. 

FULL FLEXIBILITY 

In addition to the standard PC terminal support 
provided with AEDIT, you are able to configure AEDIT 
to work with almost any terminal. This along with user- 
definable macros and full adjustable tabs, margins, 
and case sensitivity combine to make AEDIT one of 
the most flexible editors available today. 


MACRO SUPPORT 

AEDIT will create macros by simply keeping track of 
the command and text that you type, “learning” the 
function the macro is to perform. The editor 
remembers your actions for later execution, or you 
may store them in a file to use in a later editing 
session. 

Alternatively, you can design a macro using AEDIT’s 
powerful macro language. Included with the editor is 
an extensive library of useful macros which you may 
use or modify to meet your individual editing needs. 

TEXT PROCESSING 

For your documentation needs, paragraph filling or 
justification simplifies the chore of document 
formatting. Automatic carriage return insertion means 
you can focus on the content of what you are typing 
instead of how close you are to the edge of the 
screen. 

SERVICE, SUPPORT, AND TRAINING 

Intel augments its development tools with a full array 
of seminars, classes, and workshops; on-site 
consulting services; field application engineering 
expertise; telephone hot-line support; and software 
and hardware maintenance contracts. This full line of 
services will ensure your design success. 


SPECIFICATIONS 


HOST SYSTEM 

AEDIT for PC-DOS has been designed to run on the 
IBM* PC XT IBM PC AT, and compatibles. It has 
been tested and evaluated for the PC-DOS 3.0 or 
greater operating system. 

Versions of AEDIT are available for the iRMX™-86 and 
RMX II Operating System. 

ORDERING INFORMATION 

D86EDINL AEDIT Source Code Editor Release 

2.2 for PC-DOS with supporting 
documentation 

122716 AEDIT-DOS Users Guide 

122721 AEDIT-DOS Pocket Reference 

RMX864WSU AEDIT for iRMX-86 Operating 

System 

R286EDI286EU AEDIT for iRMX II Operating System 


For direct information on Intel’s Development Tools, or 
for the number of your nearest sales office or 
distributor, call 800-874-6835 (U.S.). For information 
or literature on additional Intel products, call 
800-548-4725 (U.S. and Canada). 
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iPAT™ PERFORMANCE ANALYSIS TOOL 



REAL-TIME SOFTWARE ANALYSIS FOR THE 8086/88, 80186/188, 

80286, AND 80386 

Intel’s iPAT™ Performance Analysis Tool enables OEMs developing applications based on 
the 8086/88, 80186/188, 80286, or 80386 microprocessors to analyze real-time software 
execution in their prototype systems at speeds up to 20 MHz. Through such analysis, it is 
possible to speed-tune applications with real-time data, optimize use of operating systems 
(such as Intel’s iRMX® II Real-Time Multitasking Executive for the 80286 and 80386, and 
iRMK'” Real-Time Multitasking Kernel for the 80386), characterize response characteristics, 
and determine code execution coverage by real-time test suites. Analysis is performed 
symbolically, non-intrusively, and in real-time with 100% sampling in the microprocessor 
prototype environment. iPAT supports analysis of OEM-developed software built using 
8086, 80286, and 80386 assemblers and compilers supplied by Intel and other vendors. 


o/^nr>rM ifr%r o\/c>tQmo 


(such as IBM * PC AT, PC XT, and PS/2* Model 80) to host iPAT control and graphic display 
software. Several means of access to the user’s prototype microprocessor system are 
supported. For the 80286 (real and protected mode), a 12.5 MHz iPAT-286 probe can be 
used with the iPATCORE system. For the 8086/88 (MAX MODE designs only), a 10 MHz 
iPAT-88 probe can be used with the iPATCORE system. iPATCORE systems also can be 
connected to sockets provided on the lCE™-286 and ICE-186 in-circuit emulators, or 
interfaced to IICE in-circuit emulators with probes supporting the 8086/88, 80186/188, or 
80286. The 20 MHz iPAP"'-386™ probe, also supported by the common iPATCORE system, 
can be operated either in “piggyback” fashion connected to an Intel ICE in-circuit emulator 
for the Intel386™ , or directly connected to a prototype system independent of an ICE. 
iPAT-386 supports all models of 80386 applications anywhere in the lowest 16 Megabytes of 
the 80386 linear address space. 

IPAT FEATURES 


Up to 20 MHz real-time analysis 
Histograms and analysis tables 
Performance profiles of up to 125 
partitions 


iny 


• Code execution coverage over up to 
252K 

• Hardware or software interrupt analysis 

• Simple use with function keys and 
graphics 

• Use with or without Intel ICEs 
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FEATURES 


MOST COMPLETE REAL-TIME ANALYSIS 
AVAILABLE TODAY 

iPAT Performance Analysis Tools use in-circuit probes 
containing proprietary chip technology to achieve full 
sampling in real-time non-intrusively. 

MEETS THE REAL-TIME DESIGNER’S 
NEEDS 

The iPAT products include support for interactions 
between real-time software and hardware interrupts, 
real-time operating systems, “idle time,” and full 
analysis of real-time process control systems. 

SPEED-TUNING YOUR SOFTWARE 

By examining iPAT histogram and tabular information 
about procedure usage (including or not including 
their interaction with other procedures, hardware, 
operating systems, or interrupt service routines) for 
critical functions, the software engineer can quickly 
pinpoint trouble spots. Armed with this information, 
bottlenecks can be eliminated by means such as 
changes to algorithms, recoding in assembler, or 
adjusting system interrupt priorities. Finally, iPAT can 
be used to prove the acceptibility of the developer’s 
results. 

EFFICIENCY AND EFFECTIVENESS IN 
TESTING 

With iPAT code execution coverage information, 
product evaluation with test suites can be performed 
more effectively and in less time. The evaluation team 
can quickly pinpoint areas of code that are executed 
or not executed under real-time conditions. By this 
means, the evaluation team can substantially remove 
the “black box” aspect of testing and assure 100% 
hits on the software under test. Coverage information 
can be used to document testing at the module, 
procedure, and line level. iPAT utilities also support 
generation of instruction-level code coverage 
information. 

ANALYSIS WITH OR WITHOUT 
SYMBOLICS 

If your application is developed with “debug” 
symbolics generated by Intel 8086, 80286, or 80386 
assemblers and compilers, iPAT can use them- 
automatically. Symbolic names also can be defined 
within the iPAT environment, or conversion tools 
supplied with the iPAT products can be used to 
create symbolic information from virtually any 
vendor’s map files for 8086, 80286, and 80836 
software tools. 

REAL OR PROTECTED MODE 

iPAT supports 80286 and 80386 protected mode 
symbolic information generated by Intel 80286 and 
80386 software tools. It can work with absolute 
addresses, as well as base-offset or selector-offset 
references to partitions in the prototype system’s 
execution address space. 


FROM ROM-LOADED TO OPERATING 
SYSTEM LOADED APPLICATIONS 

The software analysis provided by iPAT watches 
absolute execution addresses in-circuit in real time, 
but also supports use of various iPAT utilities to 
determine the load locations for load-time located 
software, such as applications running under iRMXII, 
DOS, Microsoft Windows*, or MS-* OS/2. 

USE STANDALONE OR WITH ICE 

The iPAT-386, iPAT-286, and iPAT-86/88 probes, 
together with an iPATCORE system, provide 
standalone software analysis independent of an ICE 
(in-circuit emulator) system. The iPATCORE system 
and DOS-hosted software also can be used together 
with ICE-386, ICE-286, and |2|CE-86/88, 186/188, or 
286 in-circuit emulators and DOS-hosted software. 
Under the latter scenario, the user can examine 
prototype software characteristics in real-time on one 
DOS host while another DOS host is used to supply 
input or test conditions to the protype through an 
ICE. It also is possible to use an iPATCORE and I^ICE 
system with integrated host software on a single Intel 
Series III or Series IV development system or on a 
DOS computer. 

UTILITIES FOR YOUR NEEDS 

Various utilities supplied with iPAT products support 
generation of symbolic information from map files 
associated with 3rd-party software tools, extended 
analysis of iPAT code execution coverage analysis 
data, and convenience in the working environment. 
For example, symbolics can be generated for maps 
produced by most software tools, instruction-level 
code execution information can be produced, and 
iRMXII-format disks can be read/written in DOS 
floppy drives to facilitate file transfer. 

WORLDWIDE SERVICE AND SUPPORT 

All iPAT Performance Analysis Tool products are 
supported by Intel’s worldwide service and support. 
Total hardware and software support is available, 
including a hotline number when the need is there. 
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FEATURES 


CONFIGURATION GUIDE 

For all of the following application requirements, the iPAT system is supported with iPAT 2.0 (or greater) or 
iPAT/IICE 1.2 (or greater) host software, as footnoted. 


Application Software 

Option 

iPAT Order Codes, 

Host System 

80386 Embedded 

#1 

iPAT386DOS1. iPATCORE 

DOS 

iRMKon 80386 

#1 

iPAT386DOS, iPATCORE 

DOS 

iRMXII CS-Loaded or Embedded on 
386 

#1 

iPAT386DOS, iPATCORE 

DOS 

OS/2-Loaded on 386 

#1 

iPAT386DOS, iPATCORE 

DOS 

iRMXII CS-Loaded or Embedded 

#1 

iPAT286DOS, iPATCORE 

DOS 

80286 Embedded 

#1 

iPAT286DOS, iPATCORE 

' DOS 


#2 

ICEPATKIT2 

DOS 


#3 

IICEPATKIT3 

DOS 


#4 

IIIPATD, iPATCORE3 

DOS4 


#5 

IIIPATB, iPATCORE3 

Series 1114 


#6 

IIIPATC, iPATCORE3 

Series IV4 

DCS CS-Loaded 80286 

#1 

iPAT286DOS, iPATCORE 

DOS 

OS/2 OS-Loaded , 80286 

#1 

iPAT286DOS, iPATCORE 

DOS 

80186/188 Embedded 

#1 

iCEPATKIT2 

DOS 


#2 

IICEPATKIT3 

DOS 


#3 

IIIPATD, iPATCORE3 

DOS4 


#4 

IIIPATB, iPATCORE3 

Series 1114 


#5 

IIIPATC, iPATCORE3 

Series IV4 

DOS OS-Loaded 8086/88 

#1 

iPAT88DOS, iPATCORE 

DOS 

8086/88 Embedded 

#1 

iPAT88DOS, iPATCORE 

DOS 


#2 

IICEPATKIT3 

DOS 


#3 

IIIPATD, iPATCORE3 

DOS4 


#4 

IIIPATB. iPATCORE3 

Series 1114 


#5 

IIIPATC, iPATCORE3 

Series IV4 


Notes: 


1 . 


Operable standalone or with ICE-386 (separate product; separate host). iPAT-386 probe connects directly to 
prototype system socket, or to optional 4 probe-to-socket hinge cable (order code TA386A), or to ICE-386 
probe socket. 

Requires IGE-186 or IGE-286 in-circuit emulator system. 

Requires IIGE in-circuit emulator system. 


IGE operation on one host, rather than in' parallel on two hosts (iPAT 2.0 or greater). 
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HOST COMPUTER REQUIREMENTS ELECTRICAL CONSIDERATIONS 


All iPAT Performance Analysis Tool products are 
hosted on IBM PC AT, PC XT, or PS/2 Model 80 
personal computers, or 100% compatibles, and use a 
serial link for hpst-to-iPAT communications. At least a 
PC AT class system is recommended. The DOS host 
system must meet the following minimum 
requirements: 

• 640K Bytes of Memory 

• 360K Byte or 1.2M Byte floppy disk drive 

• Fixed disk drive 

• A serial port (COM1 or COM2) supporting 9600 
baud data transfer 

• DOS 3.0 or later 

• IBM or 100% compatible BIOS 

PHYSICAL DESCRIPTIONS 

Width Height Length 


Unit 

Inches 

Cm. 

Inches 

Cm. 

Inches 

Cm. 

iPATCORE 

8.25 

21.0 

1.75 

4.5 

13.75 

35.0 

Power Supply 

7.75 

20.0 

4.25 

11.0 

11.0 

28.0 

i PAT-386 probe 

3.0 

7.6 

0.50 

1.3 

4.0 

10.1 

i PAT-286 probe 

4.0 

10.2 

1.12 

2.8 

6.0 

15.3 

i PAT-86 probe 
iPATCABLE (to 

4.0 

10.2 

1.12 

2.8 

6.0 

15.3 

ICE-186/286) 

1IIPATB,C,D 

4.0 

10.2 

.25 

.6 

36.0 

91.4 

(IICE board) 
Serial cables PC 

12.0 

30.5 

12.0 

30.5 

.5 

1.3 

AT/XT PS/2 





144.0 370.0 


The iPATCORE system power supply uses an AC 
power source at lOOV, 120V, 220V, or 240V over 47Hz 
to 63Hz. 2 amps (AC) at 100V or 120V; 1 amp at 220V 
or 240V. 

iPAT-386, iPAT-286 and iPAT-86/88 probes are 
externally powered, impose no power demands on 
the user’s prototype, and can thus be used to analyze 
software activity through power down and power up 
of a prototype system. For ICE-386, ICE-286, 

ICE-186, and IICE microprocessor probes, see the 
appropriate in-circuit emulator factsheets. 

ENVIRONMENTAL SPECIFICATIONS 

Operating Temperature: 10°C to 40°C (50°F to 
104°F) ambient 

Operating Humidity: Maximum of 85% relative 

humidity, non-condensing 
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VALIDATED ADA FOR UNIX*/386 



TARGET: UNIX V/386 ADA APPLICATIONS 

The UNIX* V.3/386 Ada toolset consists of an Ada compiler plus a set of related tools 
that allow a user to develop, manage, compile, optimize, link, load, and execute Ada 
application programs on an Intel386™ Microprocessor-based UNIX host. Supported hosts 
are Intel’s MULTIBUS® II Development Platform: the MDR and Intel386™ Microprocessor- 
based PC platforms; the 301 and 302 (plus 100% compatibles). 

Both the compiler and ihe object code it produces' run under the UNIX operating system, 
resulting in a user interface that is simple, consistent, and familiar to UNIX users. Intel’s 
UNIX/386 Ada toolset provides a flexible, price effective, project-oriented development 
environment for developing commercial, industrial, and military Ada applications. 

FEATURES: 

• complete Ada development environment 

• generated code is fast and efficient (over 5200 Dhrystones/second) 

• sophisticated, Ada-knowledgeable GLOBAL OPTIMIZER 

• ACVC validated configurations 

• worldwide support provided by Intel 
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TOOLSET COMPONENTS 



UNIX-targeted Ada Compiler 

Compiles Ada source (at a rate of approximately 1000 Ada source lines per CPU minute on an unloaded 
Intel MDP) while performing syntax checking, semantic analysis, external calls validation, and error 
reporting. The resultant “intermediate form,” along with optional debug information, is put into the project 
database. While processing source, the compiler automatically performs many "base level” optimizations, 
such as dead code elimination and register assignment for loops. 

Intelligent Linker 

The intelligent LINKER binds and links the user’s application with the Ada Execution Environment (AEE) 
to build an image that’s ready for execution or debugging under UNIX. To reduce final code size, the 
intelligent LINKER automatically includes only those modules from the user’s application and from the 
AEE that will actually be needed in the final configuration. The LINKER outputs object code in COFF 
format. 

Global Optimizer 

The GLOBAL OPTIMIZER is a powerful tool for decreasing code size and increasing execution speed of 
the code generated by the COMPILER. The GLOBAL OPTIMIZER is able to optimize single compilation 
units, groups of compilation units (known as collections), or the entire executable image. As a general 
rule. Globally Optimized systems are up to 30% faster and 30% smaller than their unoptimized forms. 

Source-level, Symbolic Ada Debugger 

The DEBUGGER provides an easy, clear, and interactive environment for examining the behavior of Ada 
programs during execution. The windowing feature of the DEBUGGER allows the user to split the 
debugger screen into two areas; a source window (where source can be viewed a page at a time), and a 
command line window. The DEBUGGER has extensive capabilities including: 

• breakpoint on execution 

• source level single step 

• call chain display 

• task status display 

• program I/O display 

• macro processor 
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ADA FOR UNIX/386. . . THE COMPLETE TOOLSET FROM INTEL 



AEE Ada Execution Environment (or “run-time 
system”) 

The AEE provides the environment for executing Ada 
programs on the UNIX host. The following Ada 
packages are provided with the productr 

• TEXT !Q 

• SEQUENTIALUO 

• DIRECT 10 

• UNCHECKED_CONVERSION 

• CALENDAR 

LANGUAGE TOOLS 

The following Ada Language Tools supplement the 
standard UNIX toolset and provide the developer with 
specific Ada capabilities to improve programmer 
productivity. 

• Ada Cross Referencer 

generates a listing of all symbolic names 
referenced within a compilation unit or 
collection and shows where they were 
declared, used, and referenced 


® Ada Source Dependency Lister 

reports dependencies among units and/or 
produces a valid compilation order 

• Ada Source Formatter (often referred to as a 

“pretty printer”) 

formiOtG Ada source text so that it’s easy to 
read and consistent in appearance 

• Ada Compiialion Order Tool 

. provides the user the ability to compile or 
re*compile systems with a single 
command 

LIBRARY MANAGEMENT TOOLS 

The LIBRARY MANAGER and LIBRARY TOOLSET 
are a powerful set of utilities for managing the Ada 
project database. The utilities work with the Ada 
database to provide: 

• library creation/deletion and listing 

• version control 

• configuration nnanagement 

• order of compilation rules 

• elaboration ordering 

• system builds 
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SYSTEM REQUIREMENTS 

System requirements are: 

• 4M-bytes RAM (bare minimum), 6M-bytes or more 
are recommended 

• 60M-byte hard disk or larger (Ada toolset takes up 
20M-bytes, UNIX takes up another 25M-bytes) 

• Va" cartridge tape drive 

• 80387 math co-processor is NOT required 

UNIX is bundled with the Intel MDP and is available 
for the 301 and 302 PC platforms by contacting Intel 
at (800) FOR-UNIX. The Ada toolset is delivered on a 
single Va" cartridge tape (“tar” format). 

VALIDATION 

The UNIX V/386 Self-Targeted Ada compilation 
system was validated by the Ada Joint Program 
Office (AJPO) according to the following criteria: 

Date of Issue: Sept. 29. 1988, ACVC V1.9 

Certificate #: 880529I1 .09137 

Host: Intel MDR MULTIBUS II (UNIX, 

Version V.3.0) (a derived validation 
was awarded for the 301) 

Target: Same as host 

ORDERING INFORMATION 

platform 

U386AdaSWS Intel’s MB-ll MDP 
U386AdaSPS Intel’s 301/302’s (plus 100% 
compatible 386 PCs) 

The codes listed above include the Ada toolset plus 
15-months of hot-line support and product upgrades. 


For more information or the number of your nearest 
Intel sales office, call 800-548-4725 (good in the U.S. 
and Canada). 


platform 

U386AdaSW Intel’s MB-ll MDP 

U386AdaSP Intel’s 301/302’s (plus 100% 

compatible 386 PCs) 

The codes listed above include the Ada toolset plus 
3-months of hot-line support and product upgrades. 

NOTE: Each copy of the Ada toolset is licensed for 
use on a single system. Multiple copies 
require multiple licenses. 

WORLDWIDE SERVICE AND SUPPORT 

The Ada toolset comes complete with either Intel’s 
standard 90-day warranty, or an extended 15-month 
maintenance plan. Follow-on support plans are also 
available from Intel. 
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ADA- 386 /iRMK^» INTERFACE LIBRARIES 



TARGET: REAL-TIME, EMBEDDED 386 "" DESIGNS 

The Ada-386/iRMK''’^ interface libraries allow users of Release 1.1 of Intel’s validated 
VAX/VMS* hosted Ada-386 toolset the ability to integrate iRMK’s features and benefits 
into their embedded, real-time Intel386™ microprocessor based Ada applications. 

Intel’s iRMK™ is a small, fast, configurable, 32-bit kernel designed for real-time 
applications that use the 386™ microprocessor. iRMK provides a tasking system 
(controlled by an interrupt-driven, deterministic, priority-based scheduler), intertask 
communication and synchronization primitives, fast memory management, and 
MULTIBUS® II message passing primitives. 

CHAT! IDCO. 

f kj-lf Wl 

• access to MULTIBUS® II resources through iRMK primitives (message passing, . . .), 

• iRMK tasking as an alternative to Ada tasking, 

• fast and flexible inter-iRMK-task communication (semaphores, mailboxes, . . .), and 

• high-level access to iRMK supported hardware drivers (interrupt controllers, timers, . . .). 
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ACCESSING /R/W/C ' FROM ADA-386 

All iRMKI.1 primitives are accessible from Acla-386 
programs (except for KNJnitialize which is 
automatically called from the Ada start-up code). 

To use iRMK in your Ada-386 application, simply add 
the appropriate Ada sub-library to your library list and 


use iRMK primitives as if they were Ada procedures 
or functions. Use Ada context clauses to identify the 
modules your application needs, just as you with 
other library units. Thus, accessing iRMK from 
Ada-386 is analogous to putting iRMK primitive calls 
in a C-386 or PL/M-386 program. 


KN_create_semaphore 



tested by Ada validation suites 


TASKING MODELS 

Ada-386 programs can either use the iRMK tasking 
model or the Ada tasking model (but not both). 

Using /RM/C” Tasking 

By using the iRMK tasking model, you gain access to 
an environment that can provide: 

• the ability to map Ada procedures and 
functions to iRMK tasks, 

• bounded interrupt latency, 

• fast and flexible inter-task communication, 

• no run-time degradation with increasing 
tasks, 

• fast memory allocation, and 

• . MULTIBUS® II message passing. 

If iRMK tasking is chosen, Ada task specifications 
and task bodies cannot be present in the software 
(these would invoke the Ada tasking environment). 
Because Ada tasks cannot be used, the Ada 
keywords: accept, select, and entry are not available. 


Using Ada Tasking 

If Ada tasking is chosen, a subset of iRMK primitives 
can still safely be used. These include: iRMK’s Device 
Management Module primitives. Memory 
Management Module primitives. Interconnect Space 
Support Module primitives, and Descriptor Table 
Management Module primitives. 

In addition, the Ada delay function maps directly onto 
the iRMK KN^sleep primitive, providing deterministic 
task awaken times. 

Other benefits provided are: 

• management of Ada’s heap space by iRMK’s 
fast memory manager, and, 

• a high-level interface to iRMK hardware 
drivers. 
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LIBRARY CONTENTS 

The Ada-386/iRMK interface libraries consist of 
Release 1.1 of the iRMK kernel, plus associated 
interface modules, that have been IMPORTed into 
Ada-386 sub-libraries. J\no Ada sub-libraries are 
provided: 

• RMK386: 

OPTIMIZED for maximum performance 
with minimum size, and 

• RMK_DBG; 

un-OPTlMIZED and un-SQUEEZED to be 
used for debugging and collective 
optimization with your application 

Each sub-library contains: 

• the iRMK basic and optional modules (in 
object form), ready to be LINKed with your 
Ada-386 application, 

• Ada specifications and bodies for the iRMK 
primitives, 

• Ada-to-iRMK interface modules (in object 
form), and 

• Ada-386 Run-Tirrie Environment modules (in 
ASM-386 source form) 

• environment code for MULTIBUS® I and 
MULTIBUS II boards, 

• initialization code for MULTIBUS® I and 
MULTIBUS II boards, and 

• Ada delay and timer code. 

Two Linker options files (configured for Intel’s 16 and 
20MHz 386/MB-l boards and Intel’s 16 and 20MHz 
386/MB-ll boards) and three sample Ada-386 
programs (in source form) are also included. The 
sample programs demonstrate: 

• iRMK Tasking 

ten tasks are created (using the 
KN^create task primitive) 

• Inter-Task Communication 

parameters are passed among three iRMK 
tasks via a FIFO mailbox 

• MULTIBUS II Message Passing 

this example demonstrates board-to-board 
communication. 


WORLDWIDE SERVICE AND SUPPORT 

The Ada portion of the Ada-386/iRMK interface 
libraries is covered, at no extra charge, by the 15- 
month Ada-386 maintenance plan. However, specific 
support for the iRMK kernel is not covered by the 
Ada-386 plan. Support for iRMK is available from 
Intel under a separate policy. Contact your local sales 
office for further information. 

ORDERING INFORMATION 

order code magnetic media 

MVVSAdaRMKRI.1 TK50 
VVSAdaRMKRI.1 7M600BPItape 

Both products are shipped in VMS BACKUP form.at. 

For more information or the number of your nearest 
Intel sales office, call 800-548-4725 (good in the U.S. 
and Canada). 
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i486™ MICROPROCESSOR DEVELOPMENT TOOLS 



COMPREHENSIVE DEVELOPMENT SUPPORT FOR THE / 486 ^" 
MICROPROCESSOR 

The perfect complement to the i486™ microprocessor is the optimum development 
solution. From a single source, Intel, comes a complete, synergistic hardware and 
software development toolset, delivering full access to the power of the i486 architecture 
in a way that only Intel can. 


Intel development tools are easy to use, yet powerful, with contemporary user interface 
techniques and productivity boosting features such as symbolic debugging. And you’ll 
find Intel first to market with the tools needed to start development, and with lasting 
product quality and comprehensive support to keep development on-track. 


If what interests you is getting the best product to market in as little time as possible, Intel 
is the choice. 


FEATURES 

• Comprehensive support for the full 32 
bit i486 architecture, including 
protected mode, 4 gigabyte physical 
memory addressing, and caching 

• Symbolics allow debugging in the 
context of the original program 

• Architectural extensions in Intel high- 
level languages provide for 
manipulating hardware directly without 
assembly language routines 


386™ software compatibility is assured 
at both object and source level 
ROM-able code is output directly from 
the language tools, significantly 
reducing the effort necessary to 
integrate software into the final target 
system 

Support for the i486 microprocessor on- 
chip numerics with numerics libraries 
Operation in DOS and VAX */VMS* 
environments 
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Figure 1. Intel i486™ Microprocessor Development Environment 


ASM-386/486 MACRO ASSEMBLER 

ASM-386/486 is a “high-level” macro assembler for 
the i486 microprocessor. ASM-386/486 offers many 
features normally found only in high-level languages. 
The macro facility in ASM-386/486 saves 
development time by allowing common program 
sequences to be coded only once. The assembly 
language is strongly typed, performing extensive 
checks on the usage of variables and labels. 

Other ASM-386/486 features include; 

• "High-level” assembler mnemonics to simplify the 
language 

• Structures and records for data representation 

® Support for Intel’s standard object code fornnat for 
symbolic debug, and for linking object modules 
from other Intel 386/486 languages. 


rL/fw-^joo/^oo K^umriLcn 

PL/M-386/486 is a structured high-level system 
implementation language for the i486 architecture. 
PL/M-386/486 supports the implementation of 
protected operating system software by providing 
built-in procedures and variables to access the i486 
architecture. 

For efficient code generation, PL/M-386/486 features 
four levels of optimization, a virtual symbol table, and 
four models of program size and memory usage. 

Other PL/M-386/486 features include: 

• The ability to define a procedure as an interrupt 
handler as well as facilities for generating interrupts 

• Direct support of byte, half-word, and word input 
and output from microprocessor ports 

• Support for Intel’s standard object code format for 
symbolic debug, and for linking object modules 
from other Intel 386/486 languages. 

PL/M-386/486 combines the benefits of a high-level 
language with the ability to access the i486 
architecture. For the development of systems 
software, PL/M-386/486 is a cost-effective alternative 
to assembly language programming. 


C-386/486 COMPILER 

C-386/486 is ideal for developing portable system 
applications based on the i486 architecture. For code 
efficiency, C-386/486 utilizes two levels of 
optimization, three models of program size and 
memory usage, and an extremely efficient register 
allocation scheme. In addition, C-386/486 allows full 
access to the 486 architecture through control of bit 
fields, pointers, addresses, and register allocation. 

The C-386/486 runtime library is implemented in 
layers. The upper layers include the standard I/O 
library (STDIO), memory management routines, 
conversion routines, and string manipulation routines. 
The lowest layer, operating system interface routines, 
is documented for adaptation to the target 
environment. 

FORTRAN COMPILER FOR THE / 486 ™ 
MICROPROCESSOR 

The Fortran-3S5 translator meets the /ANSI Fortran 77 
Language Subset Specification. This compatibility 
assures portability of existing Fortran programs and 
shortens the development process when moving 
Fortran databases off of mini or mainframe 
computers and onto i486 microprocessor-based 
systems. 

Fortran-386 provides extensive support for numeric 
processing tasks and applications, with features such 
as: 

• Support for floating-point data types including 
single, double, and double extended precision; 
complex and double complex data types; as well 
as integer, signed, and logical data types 

• Support for the proposed REALMATH IEEE 
floating point standard 

• Support for Fortran language extensions endorsed 
by the U.S. Department of Defense 

• Support of Intel’s standard object code format for 
symbolic debug, and for linking object modules 
from other lntel386/486 languages 
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SOFTWARE UTILITIES FOR THE / 486 ™ 
MICROPROCESSOR 

The RLL-386/486 software utilities are a cohesive set 
of software design aids for programming the i486^'’ 
microprocessor system. The package enables 
system programmers to design protected, multi-user 
and multi-tasking operating system software. 
RLL-386/486 provides for a variety of functions -from 
linking separate modules, building an object library, 
linking in floating point tasks, learning the i486 
architecture with a series of templates, or building a 
task to execute under protected mode. 

The RLL-386/486 software utilities package includes 
a program binder for linking separately compiled 
modules together, a system builder for configuring 
protected multiple-task systems, a floating point and 
numeric support library, a cross-reference mapper 
listing symbolic information, a program librarian; and 
a conversion utility to download hex format for PROM 
programming. 

ICD-486 IN-CIRCUIT DEBUGGER 

ICD-486 In-Circuit Debugger provides sophisticated 
real-time hardware and software debug capabilities 
for i486 microprocessor based designs. The user can 
run at the full speed of the i486 CPU, ensuring that 
the elusive timing bugs will be found. And because 
ICD-486 is completely non-intrusive, no modifications 
will be required in the final target system. 

ICD-486 is the first development tool which allows 
users to debug high speed cached applications at 
the full speed of the processor. ICD-486 embodies 
exclusive technology, providing symbolic access to 
internal processor states that would not be accessible 
in any other way. With Intel’s exclusive technology, 
users can be assured that the ICD-486 provides 
complete accuracy when debugging cached 
applications in real time. 

ICD-486 can be used by both hardware and real-time 
software developers, at any stage of development. 
Early in the development process, ICD-486 allows 
prototype development and software debugging. 
Later in the design cycle, the ICD-486 can be used 
when integrating hardware and software modules. 
With symbolic debugging, memory locations can be 
examined or modified using symbolic references to 
the original program, such as a procedure or variable 
name, line number, or program label. 



Figure 2. DB386 Screen Display 


DOS-RESIDENT SOFTWARE DEBUGGER 

DB386 is an on-host software execution environment 
with source-level symbolic debug capabilities for 
object modules produced by Intel’s ASM-386/486, 
C-386/486, PL/M-386/486, and Fortran-386 
translators. This software debug environment allows 
i486 software applications to be executed and 
debugged directly on a 386 or 386SX‘''- 
microprocessor based PC, without any additional 
target hardware required. With Intel’s standard 
windowed human interface, users can focus their 
efforts on finding bugs rather than spending time 
learning and manipulating the debug environment. 

• Supports key features of the i486 architecture. 

A run-time interface allows protected-mode 
programs to be executed directly on a 386- or 
386SX-based PC. 

• Ease of learning. Drop-down menus make the 
tool easy to learn for new or casual users. A 
command line interface is also provided for more 
complex problems. 

• Extensive debug modes. Watch windows (display 
user-specified variables), trace points, and 
breakpoints (including fixed, temporary, and 
conditional) can be set and modified as needed, 
even during a debug session. 

• See into the i486 microprocessor. The user can 
browse source and call stacks, observe processor 
registers, and access watch window variables by 
either the pull down menu or by a single keystroke 
using the function keys. An easy-to-use 
disassembler and single-line assembler can also 
speed the debug process. 

• Full debug symbolics for maximum 
productivity. The user need not know whether a 
variable is an unsigned integer, a real, or a 
structure. The debugger utilizes the wealth of 
typing information available in Intel languages to 
display program variables in their respective type 
formats. 
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SERVICE, SUPPORT, AND TRAINING 

To augment its development tools, Intel offers a full 
array of seminars, classes, and workshops, field 
application engineering expertise, hotline technical 
support, and on-site service. 

i486, Intel386, 386, 386SX, 376, ICE. and iSBC are trademarks of Intel 
Corporation, VAX and VMS are registered trademarks of Digital Equipment 
Corporation, 


ORDERING INFORMATION 

For direct information on Intel’s Development Tools, or 
for the number of your nearest sales office or 
distributor, call 800-874-6835 (U,S.). For information 
or literature on additional Intel products, call 
800-548-4725 (U.S. and Canada). 
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ICD-486 IN-CtRCUIT DEBUGGER 





i486” MICROPROCESSOR IN-CIRCUIT DEBUGGER 

Intel’s lCD-486, the in-circuit debugger for the i486™ microprocessor, represents a new 
generation of in-circuit emulation technology. From the inventor of the microprocessor 
comes a development tool that delivers complete access to the i486 architecture. 

ICD-486 is the first development tool which allows users to debug high speed cached 
applications at the full speed of the processor. ICD-486 embodies exclusive technology 
providing symbolic access to internal processor states that would not be accessible in 
any other way With Intel’s exclusive technology users can be assured that the ICD-486 
provides complete accuracy when debugging cached applications in real time. 


FEATURES 

• Real time emulation at the full speed of 
the i486 microprocessor 

• Full development and debug support 
for the i486 microprocessor on-chip 
caching and numerics 

• Programming support for the i486 
microprocessor real mode and native 
protected mode 

• Non-intrusive operation, allowing the 
target system to be debugged without 
modification 


• Ability to set up to 4 hardware and 16 
software breakpoints on execution 
addresses, data read, or data access 

• A sync-out line for hooking the ICD-486 
up to a high speed logic analyzer to 
provide trace information 

• Provides full symbolic information to 
display and modify all registers 
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FULL-SPEED DEBUG AND DEVELOPMENT 

The ICD-486 In-Circuit Debugger provides 
sophisticated real-time hardware and software debug 
capabilities for i486 microprocessor based designs. 
The user can run at the full speed of the i486 CPU, 
ensuring that the elusive timing bugs will be found. 
And because ICD-486 is non-intrusive, the target 
system being debugged can be the same as the final 
target system. 

DEBUG CACHED APPLICATIONS 

Until now it has been extremely difficult to accurately 
debug high speed cached microprocessor 
applications. However, by incorporating Intel’s 
exclusive technology, the ICD-486 allows users to 
debug applications which utilize the on-chip caching 
capabilities of the i486 microprocessor. This is not just 
a statistical reconstruction of the cache -the iCD-486 
provides complete accuracy when debugging 
applications regardless of whether cache is on or off. 

IDEAL FOR ALL STAGES OF 
DEVELOPMENT 

ICD-486 can be used by both hardware and real-time 
software developers, at any stage of development. 
Early in the development process, ICD-486 allows 
prototype development and software debugging. 
Later in the design cycle, the ICD-486 can be used 
when integrating hardware and software modules. 

SPEEDING DEVELOPMENT WITH 
SYMBOLICS 

With symbolic debugging, memory locations can be 
examined or modified using symbolic references to 
the original program, such as a procedure or variable 
name, line number, or program label. Microprocessor 
data structures, such as registers, .descriptor tables, 
and page tables, can also be examined and modified 
using symbolic names rather than via cumbersome 
linear or pfiysicai addresses. Optimal Symbolic 
debugging can be achieved when using the ICD-486 
with Intel languages, which produce not only address 
and memory locations but also variable and 
procedure typing information. 

THE COMPLETE STORY 

For advanced hardware debugging, the ICD-486 has 
been designed to work with high speed logic 
analyzers. The ICD-486 ships with a Logic Analyzer 
Interface board which provides the control signals to 
trigger the logic analyzer. With a user-supplied 
software interface, the ICD-486 and logic analyzer 
can work in combination to monitor or recognize bus 
activity and to gather execution trace. 

SOFTWARE COMPLETES THE SYSTEM 

Intel provides a comprehensive software 
development environment to complement the 
ICD-486, delivering the most complete 32-bit 
microprocessor development environment available 
from a single vendor. 


Intel’s i486 software development tools offer a broad 
choice of languages with object code compatibility so 
performance can be maximized by using different 
languages for specific tasks. Architectural extensions 
in the high level languages allow hardware features 
such as interrupts, I/O, or flags to be controlled 
directly, avoiding the tedium and overhead of 
assembly routines. 

Intel’s software environment includes a sophisticated 
software debugger and execution environment, 
allowing i486 software applications to be tested 
and debugged directly on a standard 386^'’ 
microprocessor- based PC. To provide full access to 
the power of the i486 architecture, the software 
portfolio incorporates a unique, sophisticated, and 
very powerful system builder, simplifying the 
generation of protected mode systems. To further 
reduce the task of integrating software into the final 
target configuration, Intel i486 microprocessor 
software tools produce code which can be directly 
downloaded in target system ROM or can be 
converted into standard hex code. 

THE RIGHT TOOL FOR THE JOB 

ICD-486, the new generation of in-circuit emulation 
technology, is the right tool to use when your product 
development schedules are tight and your product 
quality requirements are high. Intel’s exclusive 
technology allows you to debug cached applications, 
at the full speed of the i486 processor, and the 
symbolic debug information can vastly improve your 
productivity. 

WORLDWIDE, WORLD CLASS SERVICES 

Augmenting Intel’s i486 microprocessor development 
tools is a full array of seminars, classes, . and 
workshops; on-site consulting services; field 
application engineering expertise; telephone hotline 
support; and software and hardware maintenance 
contracts. 

ORDERING INFORMATION 

ICD48625D In-circuit debugger for the i486 

microprocessor. Operates to 25 
- MHz. Includes hardware debug 
module, power supply, isolation 
board, stand-alone self-test 
board, logic analyzer interface 
board, user documentation, and 
DOS host software and interface 
cable. 

ICD48625CON33D Identical to the ICD48625D, but 
also includes a guaranteed 
upgrade to 33 MHz i486 
microprocessor support when 
available. 

For direct information on Intel’s Development Tools, or 
for the nufTiber of your nearest sales office or 
distributor, call 800-874-6835 (U.S.). For information 
or literature on additional Intel products, call 
800-548-4725 (U.S. and Canada). 
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|2|CE^^ IN-CIRCUIT EMULATION SYSTEM 



IN-CIRCUIT EMULATOR FOR THE 8086/80186/80286 FAMILY OF 
MICROPROCESSORS 

The |2|CE™ In-Circuit Emulator is a high-performance, cost-effective debug environment 
for developing systems with the Intel 8086/80186/80286 family of microprocessors. With 
10 MHz emulation, a window-oriented user interface, and compatibility with Intel’s iPAT™ 
Performance Analysis Tool, the I^ICE Emulator gives you unmatched speed and control 
over all phases of hardware/software debug. 


FEATURES 

• Emulation speeds up to 10 MHz with 
' 8086/88, 80186/188 and 80286 

microprocessors 

• 8087 and 80287 numeric coprocessor 
support 

• Hosted on IBM PC AT*, AT BIOS, or 
compatibles 

• ICEVIEW™ window-oriented user 
interface with pull-down menus and 
context-sensitive help 

• Source and symbol display using all 
Intel languages 


• IK frame bus and execution trace buffer 
® Symbolic debugging for flexible access 

to memory location and program 
variables 

® Flexible breakpointing for quick 
problem isolation 

® Memory expandable to 288K with zero 
wait states 

• Worldwide service and support 

® iPAT option for software speed tuning 




® Intel Corporation 1989 
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Plate 1. An example of the ICEVIEW™ user interface showing source, 
memory, watch, and trace. 


ONE TOOL FOR THE ENTIRE 
DEVELOPMENT PROCESS 

The !2|CE Emulator allows hardware and software 
design to proceed simultaneously, so you can 
develop software even before prototype hardware is 
available. With 32K of zero wait-state mappable 
memory (and an additional 256K with optional 
memory boards), you can use the PICE Emulator to 
debug at any stage of the development, cycle: 
hardware development, software development, 
system integration or system test. 

HIGH-SPEED, REAL-TIME EMULATION 

The PICE Emulator delivers full-speed, real-time 
emuiaiion al speeds up to 10 Tvlrlz. Based on Intel’s 
exclusive microprocessor technology, the PICE 
Emulator matches each chip’s electrical and timing 
characteristics without memory or interrupt intrusions, 
ensuring design accuracy and eliminating surprises. 
The performance of your prototype is the 
performance you can expect from your final product. 

EASY-TO-USE ICEVlEyr^ INTERFACE 

The ICEVIEW interface makes the PICE Emulator 
easy to learn and use by providing easy access to 
application information and ICE functions. Pull-down 
menus and windows boost productivity for both new 
and experienced users. Multiple on-screen windows 
allow you to access the source display, execution 
trace, register, and other important information, all at 
the same time. You can watch the information change 
as you modify and step through your program. You 
can even customize window size and screen 
positions. 

A command line interface is also available with syntax 
checking and context-sensitive prompts. ICEVIEW 
works with monochrome, CGA and the latest EGA 
color displays. 


SYMBOLIC DEBUG SPEEDS 
DEVELOPMENT 

The extensive debug symbolics generated by the 
Intel 8086 and 80286 assemblers and compilers can 
increase your development productivity. Symbolics 
with automatic formatting are available for all primitive 
types, regardless of whether the variables are 
globals, locals (stack-resident) or pointers. The virtual 
symbol table supports all symbolics, even in very 
large programs. Aliasing can be used to reduce 
keystrokes and save time. 

POWERFUL BREAK AND TRACE 
CAPABILITY FOR FAST PROBLEM 
ISOLATION 

The PICE Emulator allows up to eight simultaneous 
break/trace conditions to be set (four execution, four 
bus), a timesaver when solving hardware/software 
integration problems. Break and trace points can be 
set on specified line numbers, on procedures, or on 
symbolic data events, such as writing a variable to a 
value or range of values. You can break or trace on 
specific hardware events, such as a read or write to a 
specific address, data or I/O port, or on a 
combination of events. 

MULTIPROCESSOR, PROTECTED MODE, 
AND COPROCESSOR SUPPORT 

Up to four PICE systems can be linked and controlled 
simultaneously from one PC host, enabling you to 
debug multiprocessor systems. The PICE Emulator 
with an 80286 probe supports all 80286 protected 
mode capabilities. It also supports the 8087 and 
80287 numeric coprocessors. 
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ELECTRICAL CHARACTERISTICS 


iPAr^ FOR SOFTWARE PERFORMANCE 
AND CODE COVERAGE ANALYSIS 

The |2|CE Emulator interfaces to Intel’s iPAT 
Performance Analysis Tool for examining software 
execution speeds and code coverage in real time. 
iPAT displays critical performance data about your 
code in easy-to-understand histograms and tables. 
Elusive bottlenecks are readily seen, allowing you to 
focus your attention to get the most performance out ' 
of your product. 

iPAT also performs code execution coverage, letting 
you perform product evaluations faster and more 
effectively. iPAT pinpoints areas in your code either 
executed or not executed according to specific 
conditions, taking the guesswork out of software 
evaluations. 

EASY INTERFACE TO EXTERNAL 
INSTRUMENTS 

The |2|CE system includes external emulation clips 
and software support for setting breakpoints, 
tracepoints and arm/disarm conditions on external 
events, making it easy to connect external logic 
analyzers and signal generators. You can debug 
complex hardware/software interactions with a high 
level of productivity. 

WORLDWIDE SERVICE AND SUPPORT 

The |2|CE Emulator is supported by Intel’s worldwide 
service and support organization. In addition to an 
extended warranty, you can choose from hotline 
support, on-site systems engineering assistance, and 
a variety of hands- on training workshops. 

SPECIFICATIONS 

HOST REQUIREMENTS 

IBM PC/AT or 100% PC AT BIOS compatible 

DOS 3.1 or later 

640K bytes of memory 

360K bytes or 1.2 MB floppy disk drive 

Hard disk drive 

Monochrome, CGA or EGA monitor (EGA 
recommended) 

PHYSICAL DESCRIPTION 


90-132 V or 180-264 V (selectable) 

47-63 Hz 
12 amps (AC) 

ENVIRONMENTAL SPECIFICATIONS 

Operating temperature: 0-40 °C (32-104° F) ambient 
Operating humidity: Maximum of 85% relative 
humidity, non-condensing 

ORDERING INFORMATION 

Kit Code Contents 

plllOIOKlTD |2|CE system 10 MHz 8086/8088 

support kit for IBM PC host. 
Includes probe, chassis, and host 
interface module and software, 
plin 1 1 KITD |2|CE system 1 0 MHz 801 86 
support kit for IBM PC host. 
Includes probe, chassis, host 
interface module and software. 
Note: For 80188 support, the 
nil 98 option below must also be 
ordered. 

nil 98 10 MHz 80188 support 

conversion kit to convert 80186 
' probe to 80188 probe. 

pni212KITD |2|CE system, 10 MHz 80286 
support kit for IBM PC AT host. 
Includes probe, chassis, host 
interface module and software. 
11101 0PATC86D |2|CE system 10 MHz 8086/8088 

support kit with iPAT Performance 
Analysis Tool for PC AT host. 
Includes I 2 ICE probe, chassis, 
host interface module, iPAT tool 
option, cables and software. Also 
includes iC-86 compiler, 86 Macro 
Assembler, utilities, and AEDIT 
text editor. 

nil 1 1 PATC86D As above for 10 MHz 80186 
support. 

11121 2PATC86D As above for 10 MHz 80286 

support. Note: C-286 and 
RLL-286 and ASM-286 must be 
ordered separately. 

954D |2|CE PC AT host software. 

Includes ICEVIEW'“ windowed 
human interface. 

Note: |2|CE probes, chassis, software, cables and 
iPAT options are available separately. 



Width 1 

Height 

Len 

gth 

Unit 

cm 

in 

cm 

in 

cm 

in 

|2|CE 

chassis 

43.2 

17.0 

21.0 

8.25 

61.3 

24.13 

Probe 

base 

21.6 

8.5 

7.6 

3.0 

25.4 

10.0 


Host/chassis cable 15 ft. (4.6 m) 
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ICE™ -186 IN-CIRCUIT EMULATOR 



HIGH PERFORMANCE REAL-TIME EMULATION 

Intel’s ICE-186 emulator delivers real-time emulation for the 80C186 microprocessor at 
speeds up to 12.5 MHz. The in-circuit emulator is a versatile and efficient tool for 
developing, debugging and testing products designed with the Intel 80C186 
microprocessor. The ICE-186 emulator provides real time, full speed emulation in a user’s 
system. Popular features such as symbolic debug, 2K bytes trace memory, and single- 
step program execution are standard on the ICE-186 emulator. Intel provides a complete 
development environment using assembler (ASm 86) as well as high-level languages such 
as Intel’s iC86, PL/M86, Pascal 86 and Fortran 86 to accelerate development schedules. 

The ICE-186 emulator supports a subset of the 80C186 features at 12.5 MHz and at the 
TTL level characteristics of the component. The emulator is hosted on IBM’s Personal 
Computer AT already available as a standard development solution in most of today’s 
engineering environments. The ICE-186 emulator operates in prototype or standalone 
mode, allowing software development and debug before a prototype system is available. 
The ICE-186 emulator is ideally suited for developing real-time applications such as 
industrial automation, computer peripherals, communications, office automation, or other 
applications requiring the full power of the 12.5 MHz 80C186 microprocessor. 

/CE™-t86 FEATURES 

• Full 12.5 MHz Emulation Speed 

• 2K Frames Deep Trace Memory 

• Two- Level Breakpoints with Occurrence 
Counters 

• Single-Step Capability 

• 128K Bytes Zero Wait-State Mapped 
Memory 

• Supports DRAM Refresh 

• High-Level Language Support 


• Symbolic Debug 

• RS-232-C and GPIB Communication 
Links 

• Crystal Power Accessory 

• Interface for Intel Performance Analysis 
Tool (iPAT) 

• Interface for Optional General Purpose 
Logic Analyzer 

• Tutorial Software 

• Complete Intel Service and Support 


iny 
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HIGHEST EMULATION SPEED AVAILABLE 
TODAY 

The ICE-186 emulator supports development and 
debug of time-critical hardware and software using 
Intel’s 12.5 MHz 80C186 microprocessor. 

RETRACE SOFTWARE TRACKS 

This emulator captures up to 2,048 frames of 
processor activity, including both execution and data 
bus activity. With this trace memory, large blocks of 
program code can be traced in real time and viewed 
for program flow and behavior characteristics. 

HARDWARE BREAKPOINTS FOR 
COMPLEX DEBUG 

User-defined “TIL-THEN” breakpoint statements stop 
emulation at specific execution addresses or bus 
events. During the hardware and software integration 
phase, breakpoint statements can be defined as 
execution addresses and/or bus addresses and/or 
bus access types such as memory and I/O reads or 
writes. Additionally, event counters provide another 
level of breakpoint control for sophisticated state 
machine constructs used to specify emulation 
breakpoints/tracepoints. 

SMALL OR LARGE STEPS 

A stepping command can be used to view program 
execution one instruction at a time or in preset 
instruction blocks. When used in conjunction with 
symbolic debug, code execution can be monitored 
quickly and precisely. 

DEBUG CODE WITHOUT A PROTOTYPE 

Even before prototype hardware is available, the 
ICE-186 emulator working in conjunction with the 
Crystal Power Accessory (CPA) creates a “virtual” 
application environment. 128K bytes of zero wait-state 
memory is available for mapped memory and I/O 
resource addressing in 4K increments. The CPA 
provides emulator diagnostics as well as the ability to 
use the emulator without a prototype. 

DON J LOSE MEMORY 

The ICE-186 emulator continues DRAM refresh 
signals even when emulation has been halted, thus 
ensuring DRAM memory will not be lost. During 
interrogation mode the ICE-186 emulator will keep the 
timers functioning and correctly respond to interrupts 
in real-time. 

HIGH LEVEL LANGUAGE SUPPORT 
OPTIMIZED FOR INTEL TOOLS 

The ICE-186 supports emulation for programs written 
in Intel’s ASM86 or any of Intel’s high-level languages: 

PL/M-86 Fortran-86 

Pascal-86 C-86 

These languages are optimized for the Intel 
80186/80188 component architectures to deliver a 
tightly integrated, high performance development 
environment. 


USER-FRIENDLY SYMBOLICS AID IN 
DEBUG 

Symbolics allow access to program symbols by name 
rather than cumbersome physical addresses. 
Symbolic debug speeds the debugging process by 
reducing reliance on memory maps. In a dynamic 
development process, user variables can be used as 
parameters for ICE-186 commands resulting in a 
consistent debug environment. 

SUPPORTS FAST BREAKS 

“Fastbreaks” is a feature which allows the emulation 
processor to halt, access memory, and return to 
emulation as quickly as possible. A fastbreak never 
takes more than 5625 clock cycles (most types of 
fastbreaks are considerably less). This feature is 
particularly useful in embedded applications. 

MULTIPLE HIGH-SPEED COMMUNICATION 
LINKS 

Two communication links are available for use in 
conjunction with the host IBM PC AT. The ICE-186 
emulator uses either serial (RS-232-C) or a parallel 
(GPIB) link. A user supplied National Instruments 
(IEEE-488) GPIB communication board provides 
parallel transfers at rates up to 300K bytes per 
second. 

SOFTWARE ANALYSIS (iPAT) 

Intel’s Performance Analysis Tool (iPAT) is designed to 
increase team productivity with features like interrupt 
latency measurement, code coverage analysis and 
software module performance analysis. These 
features enable the user to design reliable, high 
performance embedded control products. The 
ICE-186 emulator has an external 60 pin connector 
for iPAT. 

BUILT-IN SUPPORT FOR LOGIC ANALYSIS 

General-purpose logic analyzers can be used in 
conjunction with the ICE-186 to provide detailed 
timing of specific events. The ICE-186 emulator 
provides an external sync signal for triggering logic 
analysis, making complex trigger sequence 
programming easy. An additional 60 pin connector is 
included for the logic analyzer. 

WORLDWIDE SERVICE AND SUPPORT 

The ICE-186 emulator is supported by Intel’s 
worldwide service and support organization. Total 
hardware and software support is available including 
a hotline number when the need is there. 

Note: This emulator does not support use of the 
8087. 
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SPECIFICATIONS 


PERSONAL COMPUTER REQUIREMENTS 

The ICE-186 emulator is hosted on an IBM PC AT. The 
emulator has been tested and evaluated on an IBM 
PC AT The PC AT must meet the following minimum 
requirements: 

• 640K Bytes of Memory 

• Intel Above Board with at Least 1M Byte of 
Expansion Memory 

• One 360K Bytes or One 1.2M Bytes floppy Disk 
Drive 

• One 20M Bytes Fixed-Disk Drive 

• PC DOS 3.2 or Later 

• A serial Port (COM1 or COM2) Supporting 
Minimally at 9600 Baud Data Transfers, or a 
National Instruments GPIB-PC2A board. 

• IBM PC AT BIOS 

PHYSICAL DESCRIPTION AND 
CHARACTERISTICS 

The ICE-186 Emulator consists of the following 
components: 



Width 

Height 

Length 

Unit 

Inches Cm. 

Inches Cm. 

Inches Cm. 

Emulator 
Control Unit 

10.40 26.40 

1.70 4.30 

20.70 52.60 

Power Supply 

7.60 19.00 

4.15 10.70 

11.00 27.90 

User Probe 

3.70 9.40 

.65 1.60 

7.00 

17.80 

User Cable/ 
Pico 

Hinge Cable 
Crystal Power 
Accessory 

4.30 10.90 

.60 1.50 

22.00 55.90 

3.40 8.60 

6.70 17.00 

CPA Power 
Cable 



9.00 

22.90 


ELECTRICAL CONSIDERATIONS 

Icc 1050mA 
liH 70^A Max. 
liL -1.5mA Max 
Iqh -TOmA Max. 

TIMING CONSIDERATIONS 


ICE‘186 User AC Differences 




COMPONENT 

ICE-186 



SPEC 

SPEC 

Svmbol Parameter 

Min. 

Max. 

Min. 

Max. 

TDvcl 

Data in Setup 






(A/D) 

T5 


OA 


TArych 

Async Ready 
(ARDY) 
Resolution 
Transition Setup 
Time 

15 


23 


TSrycl 

Synchronous 
Ready (SRDY) 
Transition Setup 
Time 

15 


25 


THvcl 

HOLD Setup 

15 


32 


TInvch 

NMI 

15 


32 



/TEST 

15 


31 



INTR.TIMERIN 
Setup Time 

15 


17 


TInVCL 

DRQO, DRQI, 
Setup Time 

15 


19 


TClaz 

Address Float 






Delay 

READ Cycles 

TClax 

25 

5 

36 


INTA cycles 

TCuax 

25 

0 

25 


HLDA 

TClax 

25 

10 

50 

TLhll 

ALE Width (min) 

TClcl'^O 


TCucl-32 


TChlh 

ALE Active 
Delay* 


25 


42 

(N/A) 

CLKOUT Low to 
ALE Active** 


(N/A) 


19 

TChll 

ALE Inactive 
Delay 


25 


40 

TLlax 

Address Hold to 
ALE Inactive 
(min) 

TChcl'"! 5 


TChcl‘28 


TC..C- 

Control Inactive 
Delay 

5 

37 

1 

40 

TAzrl 

Address Float to 
/RD Active 

0 


-30 


TAvll 

Address VAlid to 
ALE Low (min) 

TClch'15 


TClch'^S 


TChqsv 

Que Status 
Delay 


28 


35 

TDxdl 

/DEN Inactive to 
DT /R Low 

0 


-7 


TC|co 

CLKIN to 
CLKOUT Skew 


21 


37 


Consult User Guide for Additional Specifications. 


‘Applies only when the ALEMODE variable is set to START. 
“Applies only when the ALEMODE variable is set to END. 
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ENVIRONMENTAL SPECIFICATIONS 

Operating Temperature 10°C to 40°C Ambient 
Storage Temperature -40°C to 70°C 


ORDERING INFORMATION 

ICE1 86 ICE-1 86 System including ICE 

software (Requires DOS 3. XX PC AT 
with Above Board) 

ICE 186AB ICE 186 with Above Board included 

ICE186IPAT ICE-186 System including ICE S/W 
packages and the iPAT system 
(Requires DOS 3.XX PC AT with 
Above Board) 

D86ASM86NL 86 macro assembler 86 builder/ 

binder/mapper utilities for DOS 3.XX. 

D86C86NL 86 C compiler and run time libraries 
for DOS 3.XX. 

D86PAS86NL 86 Pascal Compiler for DOS 3.XX. 

D86PLM86NL 86 PL/M compiler for DOS 3.XX. 

D86FOR86NL 86 Fortran compiler for DOS 3.XX. 

ICEPAT KIT iPAT Kit (Performance Analysis Tool) 

for ICE 186 

ICEXONCE Adapter for on-circuit emulation 

ICEXLCC Adapter for LCC component 

ICEXPGA Adapter for PGA component 
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ICE™ -188 IN-CIRCUIT EMULATOR 



HIGH PERFORMANCE REAL-TIME EMULATION 

Intel’s ICE-188 emulator delivers real-time emulation for the 80C188 microprocessor at 
speeds up to 12.5 MHz. The in-circuit emulator is a versatile and efficient tool for 
developing, debugging and testing products designed with the Intel 80C188 
microprocessor. The ICE-188 emulator provides real time, full speed emulation in a user’s 
system. Popular features such as symbolic debug, 2K bytes trace memory, and single- 
step program execution are standard on the ICE-188 emulator. Intel provides a complete 
development environment using assembler (ASM86) as well as high-level languages such 
as Intel’s iC86, PL/M86, Pascal 86 and Fortran 86 to accelerate development schedules. 

The iCE-1S8 emulator supports a subset of the S0C1SS features at 12.5 MHz and at thn 
TTL level characteristics of the component. The emulator is hosted on IBM’s Personal 
Computer AT, already available as a standard development solution in most of today’s 
engineering environments. The ICE-188 emulator operates in prototype or standalone 
mode, allowing software development and debug before a prototype system is available. 
The ICE-188 emulator is ideally suited for developing real-time applications such as 
industrial automation, computer peripherals, communications, office automation, or other 
applications requiring the full power of the 12.5 MHz 80C188 microprocessor. 


/CE™-788 FEATURES 

• Full 12.5 MHz Emulation Speed 

• 2K Frames Deep Trace Memory 

• Two- Level Breakpoints with Occurrence 
Counters 

• Single-Step Capability 

• 128K Bytes Zero Wait-State Mapped 
Memory 

• Supports DRAM Refresh 

• High-Level Language Support 


• Symbolic Debug 

• RS-232-C and QPIB Communication 
Links 

• Crystal Power Accessory 

• Interface for Intel Performance Analysis 
Tool (iPAT) 

• Interface for Optional General Purpose 
Logic Analyzer 

• Tutorial Software 

• Complete Intel Service and Support 


inter 
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HIGHEST EMULATION SPEED AVAILABLE 
TODAY 

The ICE-188 emulator supports development and 
debug of time-critical hardware and software using 
Intel’s 12.5 MHz 80C188 microprocessor. . 

RETRACE SOFTWARE TRACKS 

This emulator captures up to 2,048 frames of 
processor activity, including both execution and data 
bus activity. With this trace memory large blocks of 
program code can be traced in real time and viewed 
for program flow and behavior characteristics. 

HARDWARE BREAKPOINTS FOR 
COMPLEX DEBUG 

User-defined “TIL-THEN” breakpoint statements stop 
emulation at specific execution addresses or bus 
events. During the hardware and software integration 
phase, breakpoint statements can be defined as 
execution addresses and/or bus addresses and/or 
bus access types such as memory and I/O reads or 
writes. Additionally, event counters provide another 
level of breakpoint control for sophisticated state 
machine constructs used to specify emulation 
breakpoints/tracepoints. 

SMALL OR LARGE STEPS 

A stepping command can be used to view program 
execution one instruction at a time or in preset 
instruction blocks. When used in conjunction with 
symbolic debug, code execution can be monitored 
quickly and precisely 

DEBUG CODE WITHOUT A PROTOTYPE 

Even before prototype hardware is available, the 
ICE-188 emulator working in conjunction with the 
Crystal Power Accessory (CPA) creates a “virtual” ^ 
application environment. 128K bytes of zero wait-state 
memory is available for mapped memory and I/O 
resource addressing in 4K increments. The CPA 
provides emulator diagnostics as well as the ability to 
use the emulator without a prototype. 

DONT LOSE MEMORY 

The ICE-188 emulator continues DRAM refresh 
signals even when emulation has been halted, thus 
ensuring DRAM memory will not be lost. During 
interrogation mode the ICE-188 emulator will keep the 
timers functioning and correctly respond to interrupts 
in real-time. 

HIGH LEVEL LANGUAGE SUPPORT 
OPTIMIZED FOR INTEL TOOLS 

The ICE-188 supports emulation for programs written 
in Intel’s ASM86 or any of Intel’s high-level languages: 

PL7M-86 Fortran-86 

Pascal-86 C-86 


USER-FRIENDLY SYMBOLICS AID IN 
DEBUG 

Symbolics allow access to program symbols by name 
rather than cumbersome physical addresses. 
Symbolic debug speeds the debugging process by 
reducing reliance on memory maps. In a dynamic 
development process, user variables can be used as 
parameters for ICE-188 commands resulting in a 
consistent debug environment. 

SUPPORTS FAST BREAKS 

“Fastbreaks” is a feature which allows the emulation 
processor to halt, access memory, and return to 
emulation as quickly as possible. A fastbreak never 
takes more than 5625 clock cycles (most types of 
fastbreaks are considerably less). This feature is 
particularly useful in embedded applications. 

MULTIPLE HIGH-SPEED COMMUNICATION 
LINKS 

Two communication links are available for use in 
conjunction with the host IBM PC AT. The ICE-188 
emulator uses either serial (RS-232-C) or a parallel 
(GPIB) link. A user supplied National Instruments 
(IEEE-488) GPIB communication board provides 
parallel transfers at rates up to 300K bytes per 
second. 

SOFTWARE ANALYSIS (iPAT) 

Intel’s Performance Analysis Tool (iPAT) is designed to 
increase team productivity with features like interrupt 
latency measurement, code coverage analysis and 
software module performance analysis. These 
features enable the user to design reliable, high 
performance embedded control products. The 
ICE-188 emulator has an external 60 pin connector 
for iPAT. 

BUILT-IN SUPPORT FOR LOGIC ANALYSIS 

General-purpose logic analyzers can be used in 
conjunction with the ICE-188 to provide detailed 
timing of specific events. The ICE-188 emulator 
provides an external sync signal for triggering logic 
analysis, making complex trigger sequence 
programming easy. An additional 60 pin connector is 
included for the logic analyzer. 

WORLDWIDE SERVICE AND SUPPORT 

The ICE-188 emulator is supported by Intel’s 
worldwide service and support organization. Total 
hardware and software support is available including 
a hotline number when the need is there. 

Note: This emulator does not support use of the 
8087. 


These languages are optimized for the Intel 
80186/80188 component architectures to deliver a 
tightly integrated, high performance development 
environment. 
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SPECIFICATIONS 


PERSONAL COMPUTER REQUIREMENTS 

The ICE-188 emulator is hosted on an IBM PC AT The 
emulator has been tested and evaluated on an IBM 
PC AT The PC AT must meet the following minimum 
requirements: 

• 640 K Bytes of Memory 

• Intel Above Board with at Least 1M Byte of 
Expansion Memory 

• One 360K Bytes or One 1.2M Bytes floppy Disk 
Drive 

• One 20M Bytes Fixed-Disk Drive 

• PC DOS 3.2 or Later 

« A serial Port (COM1 or COM2) Supporting 
Minimally at 9600 Baud Data Transfers, or a 
National Instruments GPIB-PC2A board. 

• IBM PC AT BIOS 

PHYSICAL DESCRIPTION AND 
CHARACTERISTICS 

The ICE-188 Emulator consists of the following 
components: 



Width 

Height 

Length 

Unit 

inches 

Cm. 

Inches 

Cm. 

Inches 

Cm. 

Emulator 
Control Unit 

10.40 

26.40 

1.70 

4.30 

20.70 

52.60 

Power Supply 

7.60 

19.00 

4.15 

10.70 

11.00 

27.90 

User Probe 

3.70 

9.40 

.65 

1.60 

7.00 

17.80 

User Cable/ 
PIcc 

Hinge Cable 
Crystal Power 
Accessory 

4.30 

10.90 

.60 

1.50 

22.00 

3.40 

6.70 

55.90 

8.60 

17.00 

CPA Power 
Cable 





9.00 

22.90 


ELECTRICAL CONSIDERATIONS 

Icc 1050mA 
liH 70/iA Max. 

Iii_ -1.5mA Max 
Iqh -1.0mA Max. 

TIMING CONSIDERATIONS 


fCE-788 User AC Differences 




COMPONENT 

ICE-188 



SPEC 

SPEC 

Symbol Parameter 

Min. 

Max. 

Min. 

Max. 

TDvcl 

Data in Setup 
(A/D) 

15 


24 


TArych 

Async Ready 
(ARDY) 
Resolution 
Transition Setup 
Time 

15 


23 


"I^RYCL 

Synchronous 
Ready (SRDY) 
Transition Setup 
Time 

15 


25 


THvcl 

HOLD Setup 

15 


32 


TInvch 

NMI 

15 


32 



/TEST 

15 


31 



INTR.TIMERIN 
Setup Time 

15 


17 


TInvcl 

DRQO, DRQ1, 
Setup Time 

15 


19 


TClaz 

Address Float 
Delay 

READ Cycles 

TClax 

25 

5 

36 


INTA cycles 

TCIlax 

25 

0 

25 


HLDA 

TClax 

25 

10 

50 

^HLL 

ALE Width (min) 



TClcl'32 


TChlh 

ALE Active 
Delay* 


25 


42 

(N/A) 

CLKOUT Low to 
ALE Active** 


(N/A) 


19 

TChll 

ALE Inactive 
Delay 


25 


40 

TLlax 

Address Hold to 

TChcl'^5 


TChcl'28 



ALE Inartivp 





• '-'VCTX 

(min) 

Centre! Inactiv® 
Delay 

5 

37 

1 

40 

TAzrl 

Address Float to 
/RD Active 

0 


-30 


TAvll 

Address VAlid to 
ALE Low (min) 

0 

1 

cn 


TClch‘19 


TChqsv 

Que Status 
Delay 


28 


35 

TT^xdl 

/DEN Inactive to 
DT /R Low 

0 


-7 


TC|co 

CLKIN to 
CLKOUT Skew 


21 


37 


Consult User Guide for Additional Specifications. 


‘Applies only when the ALEMODE variable is set to START. 
* ‘Applies only when the ALEMODE variable is set to END. 
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ALE Signal START/END Timing 


I T4 T1 I T2 I ' T3 1 T4 I 



(D Tcmu, (ALE Aetlw* (May) 

9 

9 Tomi, (ALE iMCUv* (May) 

9 aJMUT tow to ALE high for ALEUOOE - END 
9 VirtaMa Width ALE ramalna high during Tn,a< Voa >CC aecaaaaa 

ORDERING INFORMATION 

ICE188 ICE-188 System including ICE 

software (Requires DOS 3. XX PC AT 
with Above Board) 

ICE 188AB ICE 188 with Above Board included 

D86ASM86NL 86 macro assembler 86 builder/ 

binder/mapper utilities for DOS 3.XX. 

D86C86NL 86 C compiler and run time libraries < 
for DOS 3.XX. 

D86PAS86NL 86 Pascal Compiler for DOS 3.XX. 

D86PLM86NL 86 PL/M compiler for DOS 3.XX. 

D86FOR86NL 86 Fortran compiler for DOS 3.XX. 

ICEPAT KIT iPAT Kit (Performance Analysis Tool) 
for ICE 188 

ICEXONCE Adapter for on-circuit emulation 

ICEXLCC Adapter for LCC component 

ICEXPGA Adapter for PGA component 

DPI 88 User probe to convert ICE-1 86 to 

support 80C188 component 


ENVIRONMENTAL SPECIFICATIONS 

Operating Temperature 10°C to 40°C Ambient 
Storage Temperature -40°C to 70°C 


For direct information on Intel’s Development Tools, or 
for the number of your nearest sales office or 
distributor, call 800-874-6835 (U.S.). For information 
or literature on additional Intel products, call 
800-548-4725 (U.S. and Canada). 
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ICE-2 86 IN-CIRCUIT EMULATOR 



HIGH PERFORMANCE REAL-TIME EMULATION 

Intel’s ICE-286 emulator delivers real-time emulation for the 80286 microprocessor at 
speeds up to 12.5 MHz. The in-circuit emulator is a versatile and efficient tool for 
developing, debugging and testing products designed with the Intel 80286 
microprocessor. The ICE-286 emulator provides real time, full speed emulation in a users 
system. Popular features such as symbolic debug, 2K bytes trace memory, and single- 
step program execution are standard on the ICE-286 emulator. Intel provides a complete 
development environment using assembler (ASM-286) as well as high-level languages 
such as Intel’s iC286, PL/M-286 or Fortran 286 to accelerate development schedules. 


Intel’s ICE-286 emulator ia hnated on IBM’s Personal Computer AT already available as a 
standard development solution in most of today’s engineering environments. The ICE-286 
emulator operates in prototype or standalone mode allowing software development and 
debug before a prototype system is available. The ICE-286 emulator is ideally suited for . 
developing real time applications such as process control, machine control, 
communications, or other applications requiring the full power of the 12.5 MHz 80286 
microprocessor. 


ICE-286 FEATURES 

• Full 12.5 MHz Emulation Speed 

• 2K Bytes Deep Trace Memory 

• Two- Level Breakpoints with Occurrence 
Counters 

• Single-Step Capability 

• 128K Bytes Zero Wait-State Mapped 
Memory 

• Support For Protected and Real Modes 

• High-Level Language Support 

• Symbolic Debug 


Numeric Processor Extension Support 
RS-232-C and GPIB Communication 
Links 

Crystal Power Accessory 

Interface for Intel Performance Analysis 

Tool (iPAT) 

Interface for Optional General Purpose 
Logic Analyzer 
Tutorial Software 

Complete Intel Service and Support 


inU 
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HIGHEST EMULATION SPEED AVAILABLE 
TODAY 

The ICE-286 emulator supports development and 
debug of time-critical hardware and software using 
Intel’s 12.5 MHz 80286 microprocessor. 

RETRACE SOFTWARE TRACKS 

This emulator captures up to 2048 frames of 
processor activity, including both execution and data 
bus activity With this trace memory large blocks of 
program code can be traced in real time and viewed 
for program flow and behavior characteristics. 

HARDWARE BREAKPOINTS FOR 
COMPLEX DEBUG 

User-defined “TIL-THEN” breakpoint statements stop 
emulation at specific execution addresses or bus 
events. During the hardware and software integration 
phase, breakpoint statements can be defined as 
execution addresses and/or bus addresses and/or 
bus access types, such as memory and I/O reads or 
writes. Additionally event counters provide another 
level of breakpoint control for sophisticated state 
machine constructs used to specify emulation 
breakpoints/tracepoints. 

SMALL OR LARGE STEPS 

A stepping command can be used to view program 
execution one frame at a time or in preset frame 
blocks. When used in conjunction with symbolic 
debug, code execution can be monitored quickly and 
precisely 

DEBUG CODE WITHOUT A PROTOTYPE 

Even before prototype hardware is available, the 
ICE-286 emulator working in conjunction with the 
Crystal Power Accessory (CPA) creates a “virtual” 
application environment. 128K bytes of zero wait-state 
memory is available for mapped memory and I/O 
resource addressing in 4K increments. The CPA 
provides emulator diagnostics as well as the ability to, 
use the emulator without a prototype. 

PROTECTED AND REAL MODES 

The ICE-286 emulator has full access to all protected- 
mode registers and permits modification of register 
contents. Protected mode of execution if beneficial 
for secure, multitasking applications. 

HIGH-LEVEL LANGUAGE SUPPORT 
OPTIMIZED FOR INTEL TOOLS 

The ICE-286 supports emulation for programs written 
in Intel’s ASM 286 and ASM 86 or any of the Intel 
high-level languages: 

PL/M-286/86 Fortran-286/86 

Pascal-286/86 C-286/86 

These languages are optimized for Intel component 
architectures to deliver a tightly integrated, high 
performance development environment. 


USER-FRIENDLY SYMBOLICS AID IN 
DEBUG 

Symbolics allow access to program symbols by name 
rather than cumbersome physical addresses. 
Symbolic debug speeds the debugging process by 
reducing reliance on memory maps. In a dynamic 
development process, user variables can be used as 
parameters for ICE-286 commands resulting in a 
consistent debug environment. 

80287 NUMERICS SUPPORT 

The ICE-286 emulator provides emulation support for 
the 80287 numerics processor. 80287 registers can 
be displayed and modified allowing full debug 
support for numerics. 

MULTIPLE HIGH-SPEED COMMUNICATION 
LINKS 

Two communication links are available for use in 
conjunction with the host IBM PC AT The ICE-286 
emulator uses either serial (RS-232-C) or a parallel 
(GPIB) link. A user supplied National Instruments 
(IEEE-488) GPIB communication board provides 
parallel transfers at rates up to 300K bytes per 
second. 

SOFTWARE ANALYSIS (iPAT) 

Intel’s Performance Analysis Tool (iPAT) is designed to 
increase team productivity with features like interrupt 
latency measurement, code coverage analysis and 
software module performance analysis. These 
features enable the user to design reliable, high 
performance embedded control products. The 
iCE-286 emulator has an external 60 pin connector 
for iPAT. 

BUILT-IN SUPPORT FOR LOGIC ANALYSIS 

General-purpose logic analyzers can be used in 
conjunction with the ICE-286 to provide detailed 
timing of specific events. The ICE-286 emulator 
provides an external sync signal for triggering logic 
analysis, making complex trigger sequence 
programming easy. An additional 60 pin connector is 
included for the logic analyzer. 

WORLDWIDE SERVICE AND SUPPORT 

The ICE-286 emulator is supported by Intel’s 
worldwide service and support organization. Total 
hardware and software support is available including 
a hotline number when the need is there. 
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PERSONAL COMPUTER REQUIREMENTS 

The ICE-286 emulator is hosted on an IBM PC AT. 
The emulator has been tested and evaluated on an 
IBM PC AT The PC AT must meet the following 
minimum requirements; 

• 640K Bytes of Memory 

• Intel Above Board with at Least 1M Byte of 
Expansion Memory 

• One 360K Bytes or One 1.2M Bytes Floppy Disk 
Drive 

• One 20M Bytes Fixed-Disk Drive 

• PC-DOS 3.2 or Later 

• A Serial Port (COM1 or COM2) Supporting 
Minimally at 9600 Baud Data Transfers, or a 
National Instruments GPIB-PC2A Board. 

• IBM PC AT BIOS 

ELECTRICAL CONSIDERATIONS 


PHYSICAL DESCRIPTION AND 
CHARACTERISTICS 

The ICE-286 Emulator consists of the following 
components: 



Width 

Heic 

Jht 

Len( 

3th 

Unit 

Inches 

Cm. 

Inches 

Cm. 

Inches 

Cm. 

Emulator 
Control Unit 

10.40 

26.40 

1.70 

4.30 

20.70 

52.60 

Power Supply 

7 60 

19 00 

4 15 

10 70 

11 00 

27 90 

User Probe 

3.70 

9 40 

.65 

1 60 

7.00 

17.80 

User Cable/ 
PIcc 

Hiiiyt! Cable 
Crystal Power 
Accessory 

4.30 

10.90 

,60 

1.50 

22.00 

3 40 

6 70 

55.90' 

8.60 

17.00 

CPA Power 
Cable 





9,00 

22 90 


Icc 1050mA 


ENVIRONMENTAL SPECIFICATIONS 

Temperature 10°C to 40°C Ambient 
Storage Temperature -40°C to 70°C 

TIMING/DC CONSIDERATIONS 


ORDERING INFORMATION 

ICE286 ICE-286 NMOS System including 

ICE S/W packages (Requires DOS 
3. XX PC AT with Above Board) 

ICE286AB ICE-286 NMOS System including 

ICE S/W packages and Intel’s 2M 

Byte Above Board (PCMB 4125) 
(Requires DOS3.XX PC-AT) 

ICE286PAT ICE-286 NMOS System including 

ICE S/W Packages and the iPAT 

system (Requires DOS 3. XX PC AT 
with Above Board) 

D86ASM286NL 286 macro assembler 286 builder/ 
binder/mapper utilities for DOS 
3.XX. 

D86C286NL 286 C compiler and run time 

libraries for DOS 3. XX. 

D86PLM286NL 286 PL/M compiler for DOS 3.XX. 


ICE^-286 USER PIN DIFFERENCES | 



COMPONENT 

ICE-286 



SPEC. 

SPEC. 


PARAMETER 

Min 

Max 

Min 

Max 

2 

System (CLK) low 
time 

11 

237 

14 

236 

3 

System (CLK) high 
time 

13 

239 

14 

236 

8 

Read Data Setup 

5 


7 


10 

/Ready Setup 

22 


24 


12a 

Status/peak # active 
delay 

3 

18 

3 

20 

12b 

Status/peak # 
inactive delay 

3 

20 

3 

22 

13 

Address valid delay 

1 

32 

1 

34 

14 

Write data valid 
delay 

0 

30 

0 

33 

15 

Address/status/data 

float 

0 

32 

0 

34 

Consult User Guide for additional specifications | 
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INTEL386™ FAMILY IN-CIRCUIT EMULATORS 



ACCURATE AND SOPHISTICATED EMULATION FOR THE INTEL38S^^ 
FAMILY OF MICROPROCESSORS 

Intel386™ In-Circuit Emulators are the cornerstone of the optimum development solution 
for the Intel386 family of microprocessors. From the inventor of the microprocessor 
comes a development tool that delivers absolute access to the sophistication of the 
architecture in a way that only Intel can. 

Productivity boosting features such as symbolic debugging make Intel386 emulators 
easy to use and powerful. Intel product quality and world class technical support and 
service minimizes the “downtime” incurred in resolving problems. And your investment in 
development tools is protected via interchangeable probes for the 386™, 386SX™, and 
376™ processors. 

Maximize your productivity with Intel development tools. Reduced time to market and 
increased market acceptance for your microprocessor-based product are the benefits 
when Intel is the choice. 

FEATURES 

• Exclusive technology giving access to 
internal processor states provides 
absolutely accurate emulation history 

• Unparalleled support of all of the 
Intel386 operating modes opens the 
door to the full potential of the Intel386 
architecture 

• N on-intrusive emulation to processor 
speeds of 25MHz 

• Versatile event recognition makes short 
work of uncovering complex bugs 


Dynamic trace display of bus and 
execution information during emulation 
A comprehensive software development 
system creates the most complete 
development environment available 
from a single vendor 
A companion performance analysis tool 
provides analysis of software for 
optimized performance and reliability 


Intel Corporation 1989 


6-51 


October, 1989 
Order Number. 280850-001' 



FEATURES 


ABSOLUTELY ACCURATE EMULATION 

Intel386 Family in-circuit emulators embody exclusive 
technology that accesses internal processor states 
that are otherwise invisible. Intel386 microprocessors 
fetch and execute instructions in parallel; fetched 
instructions are not necessarily executed. Because of 
this, an emulator without this capability is prone to 
error in determining what actually occurred inside the 
microprocessor, With Intel’s exclusive technology, an 
Intel386 emulator displays execution history with one 
hundred percent accuracy. 

OPENING THE DOOR TO PROTECTED 
MODE 

Intel386 emulators open the door to the full potential 
of the architecture with unparalleled support of 
protected mode. Not only does the emulator display 
and modify task state segments and global, local, 
and interrupt descriptor tables (with symbolic access 
to all descriptor components like privilege level and 
segment type), but emulator functions are sensitive to 
the operating mode of the processor, greatly 
improving ease of use. 

Intel386 emulators support all aspects of protected 
mode addressing, including paged virtual memory. 
Processor tables are used to automatically translate 
virtual addresses to linear and physical addresses. 
Physical addresses can be translated to symbolic 
references to indicate the module, procedure, or data 
segment accessed. And when debugging a memory 
management system, components of the page table 
and directory can be displayed and modified. 

FLEXIBLE AND VERSATILE EVENT 
RECOGNITION 

Flexibility and versatility in event recognition makes 
short work of uncovering the most complex bugs. 

Bus event recognition circuitry may be used to trigger 
on specific or masked data input, output, read, 
written, or fetched at a physical address or range of 
addresses. Or on-chip debug registers may be used 
to trigger on virtual, linear, or symbolic addresses 
being executed, accessed, or written. 

Versatility shows in other triggering options- upon a 
task switch, an external signal from another emulator 
or a logic analyzer, multiple occurrences of an event, 
a full trace buffer, halt or shutdown cycles, or interrupt 
acknowledge. And up to four sequential event 
triggers can be combined with a high-level construct. 

Intel386 emulators continuously capture all bus 
activity, and optionally execution information, into a 
trace buffer of 4096 frames with PRE, POST, and 
CENTERED collection modes. The contents of the 
trace buffer can be displayed during full speed 
emulation in either execution cycle or machine-level 
instruction formats. Symbolic information can 
optionally be included in the trace display. A third 
trace display, the current chain of procedure calls, 
can be displayed when emulating high-level 
language programs. 


SPEEDING DEVELOPMENT WITH 
SYMBOLICS 

Intel386 processor data structures, such as registers, 
descriptor tables, and page tables, can be examined 
and modified using symbolic names. And with the 
symbolic debugging information that is a feature of 
Intel languages, memory locations can be accessed 
using symbolic references to the source program 
(such as a procedure and variable names, line 
numbers, or program labels) rather than via 
cumbersome virtual, linear, or physical addresses. 
The type information of variables (such as byte, word, 
record, or array) can also be displayed. 

ACCESSING THE POWER 

The power of the lntel386 emulator is reflected in the 
sophisticated user interface. Refined for ease of use, 
the command line interface contains many features to 
boost productivity and customize functionality. 

On-line help, a syntax menu, command line editing, 
command history, and error message query promote 
ease of learning and use. I/O redirection and the 
ability to escape to the host operating system provide 
versatility for the power user. Customized procedures 
with variables and literal definitions can be created to 
assist in debugging or for manufacturing test or field 
service applications. 

SYSTEM CONNECTIVITY AND 
CONFIGURATION 

The Intel386 emulator can be combined with a 
variety of devices. I/O lines synchronize emulation 
starts and triggers with external tools such as a logic 
analyzer or another emulator. An optional time tag 
board synchronizes multiple Intel386 emulators and 
records timestamp information in the trace buffer with 
20 nanosecond resolution. An optional clips pod 
supplements two general purpose input lines with 
eight data lines captured and displayed in the trace. 
The bus isolation board buffers the emulation 
processor from faults in an untested target. And with 
the stand-alone/self-test board the emulator can be 
used to debug software before the target system is 
functional, as well as execute confidence tests. 

THE INVESTMENT PICTURE 

As designs move from one Intel386 Family processor 
to another, the reinvestment cost is limited to probes 
that adapt the emulator base to the specific 
processor. Beside cost savings, migration from one 
processor to another is accomplished with minimum 
disruption in the engineering environment, as the 
same command language applies to the entire 
emulator family. 
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FEATURES 


SOFTWARE COMPLETES THE SYSTEM 

Intel wraps a comprehensive software development 
system around the emulator to deliver the most 
complete development environment available from a 
single vendor. Like the emulator, Intel’s software 
development system supports every aspect of the 
Intel386 architecture. 

Overlooked at times is that a significant part of 
developing a system is making sure the code works. 
Intel languages integrate seamlessly with the Intel386 
emulator and provide the symbolics so important for 
efficient debugging. Only by using Intel languages 
with the Intel386 emulator can the full power of Intel 
development solution be utilized. 

The software development system offers a broad 
choice of languages with object code compatibility so 
performance can be maximized by using different 
languages for specialized, performance critical 
modules. Architectural extensions in the high-level 
languages allows hardware features such as 
interrupts, input/output, or flags to be controlled 
directly, avoiding the tediousness of coding assembly 
language routines. 

Intel’s software portfolio includes a unique, 
sophisticated, and very powerful system builder, 
simplifying the generation of protected mode 
systems. To further reduce the effort necessary to 
integrate software into the final target configuration, 
Intel tools produce ROM-able code directly from the 
development system. 


OPTIMIZING PERFORMANCE AND 
RELIABILITY 

A companion performance analysis tool, iPAT™-386, 
provides analysis of real-time software executing on 
80386-based target systems. With i PAT-386, it is 
possible to speed-tune applications, optimize use of 
operating systems, determine response 
characteristics, and identify code execution coverage. 
And iPAT-386 can be used in conjunction with an 
Intel386 in-circuit emulator to control test conditions. 

WORLD CLASS, WORLDWIDE SERVICES 

Augmenting the Intel386 Family development tools is 
a full array of seminars, classes and workshops: on- 
site consulting services: field application engineering 
expertise: telephone hotline support: and software 
and hardware maintenance contracts. 

No one can match Intel’s motivation to supply you 
with the absolute best in microprocessor 
development tools. When the heart of your design is 
an Intel microprocessor, Intel development tools help 
to insure we both enjoy continued success. 


ORDERING INFORMATION 


ICE376D 


1CE376DAB 

ICE386SXD 


ICE386SXDAB 


In-circuit emulator for 80376 
component. Operates to 
16MHz. Includes control unit, 
power supply, 376 processor 
module with PQFP adaptor, 
stand-alone self-test board, 
isolation board, and DOS host 
software and interface cable. 

Identical to ICE376D with 
PC/AT® compatible 2MB 
Above Board. 

In-circuit emulator for 80386SX 
component. Operates to 
16MHz. Includes control unit, 
power supply, 386SX processor 
module with PQFP adaptor, 
stand-alone self-test board, 
isolation board, and DOS host 
software and interface cable. 

Identical to ICE386SXD with 
PC/AT compatible 2MB Above 
Board. 


ICE38625D In-circuit emulator for 80386 

component. Operates to 
25MHz. Includes control unit, 
power supply, 386 processor 
module with 132 pin PGA 
adaptor, stand-alone self-test 
board, isolation board, and DOS 
host software and interface 
cable. 


ICE38625DAB Identical to ICE38625D with 

PC/AT compatible 2MB Above 
Board. 


ICE376T0386SXD Conversion kit to adapt ICE376D 
to support the 80386SX 
component. Operates to 
16MHz. Includes 386SX 
processor module and DOS 
host software. 

ICE376T0386D Conversion kit to adapt ICE376D 
to support the 80386 
component. Operates to 
25MHz. Includes 386 processor 
module and DOS host software. 
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ORDERING INFORMATION 


ICE386SXT0376D 

Conversion kit to adapt 
ICE386SXD to support the 
80376 component. Operates to 
16MHz. Includes 376 processor 
module and DOS host software. 

ICE386SXT0386D 

Conversion kit to adapt 
ICE386SXD to support the 
80386 component. Operates to 
25MHz. Includes 386 processor 
module and DOS host software. 

ICE386T0376D 

Conversion kit to adapt 

ir'croococrv +.-s 
iv..yi_ouu£.OL./ ivj 1 u ic 

80376 component. Operates to 
16MFIZ. Includes 376 processor 
module and DOS host software. 

ICE386T0386SXD 

Conversion kit to adapt 
ICE38625D to support the 
80386SX component. Operates 
to 16MHz. Includes 386SX 
processor module and DOS 
host software. 

88PGAADAPT 

Adaptor for ICE376D to support 
88 pin PGA component 
packaging. 

ICE3XXCPO 

Clips Pod Option for ICE376D, 
ICE386SXD, and ICE38625D. 

ICE3XXTTB 

Time Tag Board Option for 
ICE376D, ICE386SXD, and 
ICE38625D. 


For more information on Intel’s Development Tools, or 
for the number of your nearest sales office or 
distributor, call 800-874-6835 (U.S.). For information 
or literature on additional Intel products, call 
800-548-4725 (U.S. and Canada). 


iPAT, Intel386, 386, 386SX, and 376 are trademarks of Intel Corporation. 

PC/AT is a registered trademark of International Business Machines Corporation. 
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ICE”- 386 SX SPECIFICATIONS AND REQUIREMENTS 


HOST SYSTEM REQUIREMENTS 

The user supplied host system can be either an IBM® PC/AT® or Personal System/2® Model 60. Host system 


requirements to run the emulator include the following: 

• DOS version 3.2 

• 640K bytes of RAM in conventional memory 

• An Above™ board with 1 megabyte of RAM 
configured in expanded memory mode, EMM.SYS 
software version 3.2 

• A 20 MB hard disk 


• A serial port or the National Instruments GPIB- 
PCII™, GPIB-PCIIA™, or MC-GPIB™ board 

• A math coprocessor if either the optional time tag 
board is used or if a math coprocessor resides on 
the target system 


ELECTRICAL CHARACTERISTICS ENVIRONMENTAL CHARACTERISTICS 


100-120V or 220-240V selectable 
50-60 Hz 

2 amps (AC max) @ 120V 
1 amp (AC max) @ 240V 


Operating temperature: -flOCto -f40C 
(50 to 104 F) 

Operating Humidity: Maximum of 85% relative 
humidity, non-condensing 


The EmuiatoKs Physical Characteristics 


Unit 

Width 

inches 

cm 

Height 

inches 

cm 

inches 

Length 

cm 

Base Unit 

13.4 

34.0 

4.6 

11.7 

11.0 

27.9 

Processor Module 

3.8 

9.7 

0.7 

1.8 

, 4.4 

11.2 

Optional Isolation Board 

3.8 

9.7 

0.5 

1.3 

4.4 

11.2 

Power Supply 

7.7 

19.6 

4.1 

10.4 

11.0 

27.9 

User Cable 

1.9 

4.8 



17.3 

43.9 

Target-Adapter Cable 

2.3 

5.3 

0.5 

1.3 

5.1 

13.0 

Serial Cable 





144 

366 

Optional Clips Pod 

3.3 

8.4 

0.8 

2.0 

6.0 

15.2 


The Processor Module and BIB Dimensions 



ELECTRICAL SPECIFICATIONS 



The synchronization input lines must be valid for at 
least four CLK2 cycles as they are only sampled on 
every other cycle. These input lines are standard TTL 
inputs. The synchronization output lines are driven by 
TTL open 


collector outputs that have 4.7K-ohm pull-up resistors. 
The synchronization input and output signals on the 
optional clips pod are standard TTL input and 
outputs. 


AC Specifications With the Bus isolation Board Installed. 


Symbol 

Parameter 

Minimum 

Maximum 

Notes 

t1 

CLK2 period 

50 nS 

t1 Max 


t2a 

CLK2 nigh time 

t2a Min-j-2 nS 


@2V 

t3b 

CLK2 low time 

t3b Min -1-2 nS 


@ 0.8v 

t6 

A1-A23 valid delay 

t6 Min -1-3.5 nS 

t6 Max + 24.6 nS 

CL=120 pF 

t7 

A1-A23 float delay 

t14 Min-»-5.5 nS 

t14 Max + 37.6 nS 


t8 

BLE#, BHE# LOCK# valid delay 

t8 Min-t-3.5 nS 

t8 Max + 24.6 

CL = 75pF 

t9 

BLE#, BHE# LOCK# float delay 

t14 Min + 5.5 nS 

t14 Max + 37.6 


tio 

W/R#, M/IO#, D/C#, ADS# valid delay 

tio Min + 3.5 nS 

tio Min + 24.6 

CL = 75 pF 

t11 

W/R#, M/IO#, D/C#, ADS# float delay 

t14 Min + 5.5 nS 

t14 Max + 37.6 


t12 

D0-D15 write data valid delay 

t12 Min + 4.5 nS 

t12 Max + 20.6 

CL=120 pF 

t13 

D0-D15 write data float delay 

7.5 nS 

45.6 nS 


t14 

HLDA valid delay 

t14 Min = 3 nS 

t14 Max + 21. 2 nS 


t16 

NA# hold time 

t16 Min + 10.6 nS 



t20 

READY# hold time 

t20 Min + 10.6 nS 



t21 

D0-D15 read setup time 

t21 Min + 8.5 nS 



t22 

D0-D15 read hold time 

t22 Min + 7.6 nS 



t24 

HOLD hold time 

t24 Min + 10.6 nS 



t25 

RESET setup time 

t25 Min + 2.1 nS 



t26 

RESET hold time 

t26 Min + 2.1 nS. 



t28 

NMI, INTR hold time 

t28 Min + 10.6 nS 



t30 

PEREQ, ERROR#, BUSY# hold time 

t30 Min + 10.6 nS 
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SPECIFICATIONS 




Emulator Capacitance Specifications 
With the Target’Adapter Cable Installed 


Symbol 

Description 

Typical 
(Note 1) 

C|N 

Input Capacitance 



CLK2 

55pF 


READY#, ERROR# 

HOLD, BUSY#, PEREO, NA#, 

35pF 


INTR, NMI 

20pF 


RESET 

30pF 

CoUT 

Output or I/O Capacitance 



D15-D0 

50pF 


A15-A1, BLE# 

40pF 


A23-A16, BHE#, D/C# 

30pF 


HLDA, W/R# 

55dF 


ADS#, M/IO#, LOCK# 

35pF 


Note 1: Not tested. These specifications include the 
80386SX component and all additional emulator loading. 


Emulator DC Specifications 
Without the BIB Installed 


Item 

Description 

Max. 

Notes 

PM-lcc 

Processor Module Supply Current 

386SX-lcc-t- 


I.H 

Input High Leakage Current 

A23-A1, BLE#, BHE#, D/C#, HLDA 

940 mA 

0.02 mA 

1 


D15-D0 

0.06 mA 

1 


ADS#, M/IO#, LOCK#, READY#, 
ERROR# 

0,01 mA 

1 


W/R# 

0.03 mA . 

1 


CLK2 

0.04 mA 

1 


RESET 

0.06 mA 

2 

l,L 

Input Low Leakage Current 

A23-A1, BLE#, BHE#, D/C# 

0.6 mA 

1 


D15-D0 

0.06 mA 

1 


ADS#, M/IO#, LOCK#, READY#, 
ERROR# 

0.01 mA 

1 


W/R# 

0.51 mA 

1 


CLK2 

0.62 mA 

1 


RESET 

0.6 mA 

2 


HLDA 

0.02 mA 

1 


Note 1: This specification is the DC input loading of the 
emulator circuitry only and does not include any 
80386SX leakage current. 


Note 2; This specification replaces the 80386SX 
specification for this signal. 

Emulator DC Specifications 


Item 

Description 

Min. 

Max. 

BIB-lcc 

BIB Supply Current 


PM-lcc + 




350 mA 

VoL 

Output Low Voltage (Iol = 48 mA) 




A23-A1, BLE#, BHE#, D/C#, ADS# 


0.5 V 


D15-D0, M/IO#, LOCK#, W/R# 


0.5 V 


. HLDA(Iol = 24 mA) 


0.44 V 

I 

o 

> 

Output High Voltage (Iqh = 3 mA) 




A23-A1, BLE#, BHE#, D/C#, ADS# 

2.4 V 



D15-D0, M/IO#, LOCK#, W/R# 

2.4 V 



HLDA(Ioh = 24 mA) 

38 V 


l,H 

Input High Current 




CLK2, RESET 


1.0 ^A 

- 

■READY# 


25 mA 

I,L 

Input Low Current 




CLK2, RESET 


1.0 


READY# j 


250 ilk 

lio 

Output Leakage Current 




A23-A1, BLE#, BHE#, D/C#, ADS# 


±20 ilk 


D15-D0, M/IO#, LOCK#, W/R# 


± 20 ilk 


PROCESSOR MODULE INTERFACE 
CONSIDERATIONS 

With the processor module directly attached to the 
target system without using the bus isolation board 
(BIB), the target system must meet the following 
requirements: 

• The user bus controller must only drive the data 
bus during a valid read cycle of the emulator 
processor or while the emulator processor is in a 
hold state (the emulator processor uses the data 
bus to communicate with the emulator hardware). 

• Before driving the address bus, the user system 
must gam control by asserting HOLD and 
receiving HLDA. 

• The user reset signal is disabled during the 
interrogation mode. It is enabled in emulation, but 
is delayed by 2 or 4 CLK2 cycles. 

• The user system must be able to drive one 
additional TTL load on all signals that go to the 
emulation processor. 

When the target system does not satisfy the first two 
restrictions, the bus isolation board is used to isolate 
the emulation processor from the target system. With 
the isolation board installed, the processor CLK2 is 
restricted'to running at 20 MHz. 

The processor module derives its DC power from the 
target system through the 80386SX socket. It requires 
1400mA, including the 80386SX current. The isolation 
board requires an additional 350mA. 

The processor must be socketed, for example using 
Textool 2-0100-07243-000 or AMP 821949-4 sockets. 

The printed circuit board design should locate the 
processor socket at the physical, ends of the printed 
circuit board traces that connect the processor to the 
other logic of the target system. This reduces 
transmission line noise. Additionally, it the target 
system is enclosed in a box, pin one of the processor 
socket should be oriented away from the target 
system’s box opening to make connecting the target- 
adapter cable easier. 

Above, ICE, Intel386, 386, 386SX, and 376 are trademarks of 
Intel Corporation. GPIB-PCII, GPIB-PCIIA, and MC-GPIB are 
trademarks of National Instruments Corporation. IBM, PC/AT, 
and Personal System/2 are registered trademarks- of 
International Business Machines Corporation. 

For direct information on Intel’s Development Tools, or 
for the number of your nearest sales office or 
distributor, call 800-874-6835 (U.S.). For information 
or literature on additional Intel products, call 
800-548-4725 (U.S. and Canada). 
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ICE™-376 SPECIFICATIONS AND REQUIREMENTS 


HOST SYSTEM REQUIREMENTS 

The user supplied host system can be either an IBM® PC/AT® or Personal System/2® Model 60. Host system 


requirements to run the emulator include the following; 

• DOS version 3.2 

• 640K bytes of RAM in conventional memory 

• An Above™ board with 1 megabyte of RAM 
configured in expanded memory mode, EMM. SYS 
software version 3.2 

• A 20 MB hard disk 


• A serial port or the National Instruments GPIB- 
PCII™, GPIB-PCIIA™, or MC-GPIB™ board 

• A math coprocessor if either the optional time tag 
board is used or if a math coprocessor resides on 
the target system 


ELECTRICAL CHARACTERISTICS ENVIRONMENTAL CHARACTERISTICS 


100-120V or 220-240V selectable 
50-60 Hz 

2 amps (AC max) @ 120V 
1 amp (AC max) @ 240V 


Operating temperature: -i-IOCto -f40C 
(50 to 104 F) 

Operating Humidity: Maximum of 85% relative 
humidity, non-condensing 


The Emulator’s Physical Characteristics 


Unit 

Width 

inches 

cm 

Height 

inches cm 

inches 

Length 

cm 

Base Unit 

13.4 

34.0 

4,6 

11,7 

11.0 

27.9 

Processor Module 

3.8 

9.7 

0.7 

1.8 

4.4 

11.2 

Optional Isolation Board 

3.8 

9.7 

0.5 

1.3 

4.4 

11.2 

Power Supply 

User Cable 

7.7 

19.6 

4.1 

10.4 

11.0 

27.9 

1.9 

4.8 



17.3 

43.9 

1 00-Pin Target-Adapter Cable 

2.3 

5.3 

0.5 

1.3 

5.1 

13.0 

88-Pin Target-Adapter Cable 

Serial Cable 

2.3 

5.3 

0.5 

1.3 

5.8 

144 

14.7 

366 

Optional Clips Pod 

3.3 

8.4 

0.8 

2.0 

6.0 

'15.2 


The Processor Modu le and BIB Dimensions 
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ELECTRICAL SPECIFICATIONS 
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The synchronization input lines must be valid for at 
least four CLK2 cycles as they are only sampled on 
every other cycle. These input lines are standard TTL 
inputs. The synchronization output lines are driven by 
TTL open 


collector outputs that have 4.7K-ohm pull-up resistors. 
The synchronization input and output signals on the 
optional clips pod are standard TTL input and 
outputs. 


AC Specifications With the Bus Isolation Board Installed. 


Symbol 

Parameter 

Minimum 

Maximum 

Notes 

t1 

CLK2 period 

50 nS 

t1 Max 


t2a 

CLK2 nigh time 

t2a Min-t-2 nS 


@2V 

t3b 

CLK2 low time 

t3b Min + 2 nS 


@ 0.8v 

t6 

A1-A23 valid delay 

t6 Min -t- 3.5 nS 

t6 Max + 24.6 nS 

CL=120 pF 

t7 

A1-A23 float delay 

t14 Min -t- 5.5 nS 

t14 Max + 37.6 nS 


t8 

BLE#, BHE# LOCK# valid delay 

t8 Min -H 3. 5 nS 

t8 Max + 24.6 

CL = 75pF 

t9 

BLE#, BHE# LOCK# float delay 

t14 Min -f 5.5 nS 

t14 Max + 37.6 


tio 

W/R#, M/IO#, D/C#, ADS# valid delay 

tio Min -1-3.5 nS 

tio Min + 24.6 

CL = 75 pF 

til 

W/R#, M/IO#, D/C#, ADS# float delay 

t14 Min -f 5.5 nS 

t14 Max + 37.6 


t12 

D0-D15 write data valid delay 

t12 Min + 4.5 nS 

t12 Max + 20.6 

CL=120 pF 

t13 

D0-D15 write data float delay 

7.5 nS 

45.6 nS 


t14 

HLDA valid delay 

t14 Min = 3 nS 

t14 Max + 21.2 nS 


t16 

NA# hold time 

t16 Min + 10.6 nS 



t20 

READY# hold time 

t20 Min + 10.6 nS 



t21 

D0-D15 read setup time 

t21 Min + 8.5 nS 



t22 

D0-D15 read hold time 

t22 Min + 7.6 nS 



t24 

HOLD hold time 

t24 Min + 10.6 nS 



t25 

RESET setup time 

t25 Min + 2.1 nS 



t26 

RESET hold time 

t26 Min + 2.1 nS 



t28 

NMI, INTR hold time 

t28Min + 10.6nS 



t30 

PEREQ, ERROR#, BUSY# hold time 

t30 Min + 10.6 nS 
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SPECIFICATIONS 


Emulator Capacitance Specifications 
With Target'Adapter Cable Installed 


Symbol 

Description 

Typical 
(Note 1) 

C|N 

Input Capacitance 



CLK2 

55pF 


READY#, ERROR# 

HOLD. BUSY#, PEREQ, NA#, 

35pF 


INTR, NMI 

20pF 


RESET 

30pF 

CoUT 

Output or I/O Capacitance 



D15-D0 

50pF 


A15-A1. BLE# 

40pF 


A23-A16, BHE#, D/C# 

30pF 


HLDA W/.R# 

55pF 


ADS#’’ M/IO#, LOCK# 

35pF 


Note 1: Not tested. These specifications include the 80376 
component and all additional emulator loading. 


Emulator DC Specifications 
Without the BIB Installed 


Item 

Description 

Max. 

Notes 

PM-lcc 

(|H ' 

Processor Module Supply Current 

Input High Leakage Current 

376-lc0 + 

940 mA 



A23-A1, BLE#, BHE#, D/C#, HLDA 

, 0.02 mA 

1 


D15-D0 

Ads#, m/io#,' lock#, ready#, 

0.06 mA 

1 


ERROR# 

0.01 mA 

1 


W/R# 

0.03 mA 

1 


CLK2 

0.04 mA 

1 


RESET 

0.06 mA 

2 

l|L 

Input Low Leakage Current 




A23-A1, BLE#, BHE#, D/C# 

0.6 mA 

1 


D15-D0 

ADS#, M/IO#, LOCK#, READY#, 

0.06 mA 

1 


ERROR# 

0.01 mA . 

1 


W/R# 

0.51 mA 

1 


CLK2 

0.62 mA 

1 


RESET 

0.6 mA 

2 


HLDA 

0.02 rriA 

1 


Note 1; This specification is the DC input loading of the 
emulator circuitry only and does not include any 
80376 leakage current. 


Note 2: This specification replaces the 80376 specification 
for this signal. 


Emulator DC Specifications 
With the BIB instaiied 


Item 

Description 

Min. 

Max. 

BIB-lcc 

BIB Supply Current 


PM-lcc + 




350 mA 

VoL ■ 

Output Low Voltage (Iol = 48 mA) 




A23-A1, BLE#, BHE#, D/C#, ADS# 


0.5 V 


D15-D0, M/IO#, LOCK#, W/R# 


0.5 V 


HLDA(Iol= 24 mA) 


0.44 V 

I 

o 

> 

Output High Voltage {Ioh = 3 nnA) 




A23-A1, BLE#, BHE#, D/C#, ADS# 

2.4 V 



D15-D0, M/IO#, LOCK#, W/R# 

2.4 V 



HLDA(Ioh = 24 mA) 

3.8 V 


l|H 

Input High Current 




CLK2, RESET 


1.0 ^A 


READY# 


25 fiA 

l,L 

Input Low Current 




CLK2. RESET 


1.0 mA 


READY# 


250 fiA 

l|0 

Output Leakage Current 




A23-A1, BLE#, BHE#, D/C#, ADS# 


+ 20 /iA 


D15-D0, M/IO#, LOCK#, W/R# 


±20 fiA 


PROCESSOR MODULE INTERFACE 
CONSIDERATIONS 

With the processor module directly attached to the 
target system without using the bus isolation board 
(BIB), the target system must meet the following 
requirements: 

• The user bus controller must only drive the data 
bus during a valid read cycle of the emulator 
processor or while the emulator processor is in a 
hold state (the emulator processor uses the data 
bus to communicate with the emulator hardware). 

• Before driving the address bus, the user system 
must gain control by asserting HOLD and 
receiving HLDA. 

• The user reset signal is disabled during the 
interrogation mode. It is enabled in emulation, but 
Is delayed by 2 or 4 CLK2 cycles. 

• The user system must be able to drive one 
additional TTL load on all signals that go to the 
emulation processor. 

When the target system does not satisfy the first two 
restrictions, the bus isolation board is used to isolate 
the emulation processor from the target system. With 
the isolation board installed, the processor CLK2 is 
restricted to running at 20 MHz. 

The processor module derives its DC power from the 
target system through the 80376 socket. It requires 
1400mA, including the 80376 current. The isolation 
board requires an additional 350mA. 

The processor must be socketed, for example using' 
Textool 2-0100-07243-000 or AMP 821949-4 sockets. 

The printed circuit board design should locate the 
processor socket at the physical ends of the printed 
circuit board traces that connect the processor to the 
other logic of the target system. This reduces 
transmission line noise. Additionally, if the target 
oyot 0 rri jo 0 nciosed in a box, pi.n o.ne of the processor 
socket should be oriented away from the target 
system’s box opening to make connecting the target- 
adapter cable easier. 

Above, ICE, Intel386, 386, 386SX, and 376 are trademarks of 
Intel Corporation. GPIB-PCII, GPIB-PCIIA, and MC-GPIB are 
trademarks of National Instruments Corporation. IBM, PC/AT, 
and Personal System/2 are registered trademarks of 
International Business Machines Corporation. 

For direct information on Intel’s Development Tools, or 
for the number of your nearest sales office or 
distributor, call 800-874-6835 (U.S.). For information 
or literature on additional Intel products, call 
800-548-4725 (U.S. and Canada). 
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ICE™-386/25 SPECIFICATIONS AND REQUIREMENTS 


HOST SYSTEM REQUIREMENTS 

The user supplied host system can be either an IBM® PC/AT® or Personal System/2® Model 60. Host system 


requirements to run the emulator include the following; 

• DOS version 3.2 

• 640K bytes of RAM in conventional memory 

• An Above"'" board with 1 megabyte of RAM 
configured in expanded memory mode. EMM. SYS 
software version 3.2 

• A 20 MB hard disk 


• A serial port or the National Instruments GPIB- 
PCir, GPIB-PCIIA™, or MC-GPIB""" board 

• A math coprocessor if either the optional time tag 
board is used or if a math coprocessor resides on 
the target system 


ELECTRICAL CHARACTERISTICS ENVIRONMENTAL CHARACTERISTICS 


100-120V or 220-240V selectable 
50-60 Hz 

2 amps (AC max) @ 120V 
1 amp (AC max) @ 240V 


Operating temperature: -f 10 C to +40 C 
(50 to 104 F) 

Operating Humidity: Maximum of 85% relative 
humidity, non-condensing 


The Emulator’s Physical Characteristics 


Unit 

Width 

inches 

cnn 

Height 

inches 

cm 

inches 

Length 

cm 

Base Unit 

13.4 

34.0 

4.6 

11.7 

11.0 

27.9 

Processor Module 

3.8 

9.7 

0.7 

1.8 

4.4 

11.2 

Optional Isolation Board 

3.8 

9.7 

0.5 

1.3 

4.4 

11.2 

Power Supply 

7.7 

19.6 

4.1 

10.4 

11.0 

27.9 

User Cable 

1.9 

4.8 



17.3 

43.9 

Target-Adapter Cable 

2.3 

5.3 

0.5 

1.3 

5.8 

14.7 

Serial Cable i 





144 

366 

Optional Clips Pod 

3.3 

8.4 

0.8 

2.0 

6.0 

15.2 


The Processor Module and BIB Dimensions 




ELECTRICAL SPECIFICATIONS 


The synchronization input lines must be valid for at 
least four CLK2 cycles as they are only sampled on 
every other cycle. These input lines are standard TTL 
inputs. The synchronization output lines are driven by 
TTL open 


collector outputs that have 4.7K-ohm pull-up resistors. 
The synchronization input and output signals on the 
optional clips pod are standard TTL input and 
outputs. 


AC Specifications With the Bus Isolation Board Installed. 


Symbol 

Parameter 

Minimum 

Maximum ' 

Notes 

t1 

CLK2 period 

40 nS 

t1 Max 


t2a 

CLK2 nigh time 

t2a Min-H2 nS 


@ 2V 

t3b 

CLK2 low time 

t3b Min-f2 nS 


@ 0.8v 

t6 

A2-A31 valid delay 

t6 Min-f 3.5 nS 

t6 Max + 24.6 nS 

CL=120 pF 

t7 

A2-A31 float delay 

t14 Min -1-5.5 nS 

t14 Max + 32.6 nS 


t8 

BE0#-BE3#, LOCK# valid delay 

t8 Min -f- 3.5 nS 

t8 Max + 24.6 

CL = 75pF 

t9 

BE0#-BE3#, LOCK# float delay 

t14 Min-t-5.5 nS 

t14 Max + 32.6 


tio 

W/R#, M/IO#, D/C#, ADS# valid delay 

tio Min + 3.5 nS 

tio Min + 24.6 

CL = 75 pF 

til 

W/R#, M/IO#, D/C#, ADS# float delay 

t14 Min + 5.5 nS 

t14 Max + 32.6 


t12 

D0-D31 write data valid delay 

t12 Min + 4.5 nS 

t12 Max + 20.6 

CL=120 pF 

t13 

D0-D31 write data float delay 

7.5 nS 

41.6 nS 


t14 

HLDA valid delay 

t14Min = 3nS . 

t14 Max + 21.2 nS 


t16 

NA# hold time 

t16 Min + 10.6 nS 



t18 

BS16# hold time 

t18 Min + 10.6 nS 



t20 

READY# hold time 

t20 Min + 10.6 nS 



t21 

D0-D31 read setup time 

t21 Min + 8.5 nS 



t22 

D0-D31 read hold time . 

t22 Min + 7.6 nS 



t24 

HOLD hold time 

t24 Min + 10.6 nS 



t25 

RESET setup time 

t25 Min + 2.1 nS 



t26 

RESET hold time 

t26 Min + 2.1 nS 



t28 

NMI, INTR hold time 

t28 Min + 10.6 nS 



t30 

PEREQ, ERROR#, BUSY# hold time 

t30 Min + 10.6 nS 
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SPECIFICATIONS 


Emulator Capacitance Specifications 


Symbol 

Description 

Typical 

TAG Installed 

C|N 

Input Capacitance 

CLK2 

35pF 

45pF 


READY#, NMI, BS16# 

25pF 

35pF 


HOLD, BUSY#, PEREQ, 

NA#, INTR,- ERROR# 

10pF 

20pF 


RESET 

20pF 

30pF 

Cqui 

Output or I/O Capacitance 
D0-D31 

40pF 

50pF 


A2-A31, BE0#-BE3# 

30pF 

40pF 


D/C# 

35pF 

45pF 


W/R# 

40pF 

50pF 


ADS#, M/IO#, LOCK#, 

25pF 

35pF 


HLDA 




Note 1; Not tested. These specifications include the 80386 
component and all additional emulator loading. 

Note 2: The target-adapter cable adds a propagation delay 
of O.SnS. 


Emulator DC Specifications 
Without the BIB Installed 


Item 

Description 

Max. 

Notes 

PM-lcc 

Processor Module Supply Current 

386-Iqq + 

• 1.5 A 


l|H 

Input High Leakage Current 

A2-A31, BE0#-BE3#, D0-D31 

20/iA 

1 


HLDA, NMI, BS16# 

lO^A 

1 


ADS#, M/IO#, LOCK#, READY# 


1 


W/R#, D/C# 

30/xA 

1 


CLK2 

15/iA 

1 


RESET 

5/iA 

2 

l|L 

Input Low Leakage Current 




A2-A31, BE0#-BE3#, D0-D31 

eoo^A 

1 


HLDA, NMI, BS16# 

10/iA 

1 


ADS#, M/IO#, LOCK#, READY# 

10,xA 

1 


W/R# 

110/xA 

1 


D/C# 

eiOfxA 

1 


CLK2 

15/iA 

1 


RESET 

5/xA 

2 


Note 1; This specification is the DC input loading of the 
emulator circuitry only and does not include any 
80386 leakage current. 


Note 2; This specification replaces the 80386 specification 
fnr thip; qinnal 

Emulator DC Specifications 
With the BIB installed 


Item 

Description 

Min. 

Max. 

BIB-lcc 

BIB Supply Current 


PM-lcc + 
475 mA 

Voi 

Output Low Voltage (Iql = 48 mA) 




A2-A31, BE0#-BE3#, D/C#, ADS# 


0.5 V 


D0-D31, M/IO#, LOCK#, W/R# 


0.5 V 


HLDA(Iol= 24 mA) 


0.44 V 

VoH 

Output High Voltage (Ioh = 3 mA) 




A2-A31, BE0#-BE3#, D/C#, ADS# 

2.4 V 



DO D31, M/IO#, LOCK#, W/R# 

2.4 V 



HLDA(Ioh = 24 mA) 

3.8 V 


l,H 

Input High Current 




CLK2, RESET 


1.0 nA 


READY# 


25 fxA 

III 

Input Low Current 




CLK2, RESET 


1.0 fiA 


READY# 


250 fiA 

lio 

Output Leakage Current 




A2-A31, BE0#-BE3#, D/C#, ADS# 


+ 20 fiA 


D0-D31 , M/IO#, LOCK#, W/R# 


±20 tiA 


PROCESSOR MODULE INTERFACE 
CONSIDERATIONS 

With the processor module directly attached to the 
target system without using the bus isolation board 
(BIB), the target system must meet the following 
requirements: 

• The user bus controller must only drive the data 
bus during a valid read cycle of the emulator 
processor or while the emulator processor is in a 
hold state (the emulator processor uses the data 
bus to communicate with the emulator hardware). 

• Before driving the address bus. the user system' 
must gam control by asserting HOLD and 
receiving HLDA. 

• The user reset signal is disabled during the 
interrogation mode. It is enabled in emulation, but, 
is delayed by 2 or 4 CLK2 cycles. 

• The user system must be able to drive one 
additional TTL load on all signals that go to the 
emulation processor. 

When the target system does not satisfy the first two 
restrictions, the bus isolation board is used to isolate 
the emulation processor from the target system. With 
the isolation board installed, the processor CLK2 is 
restricted to running at 25 MHz. 

Jhe processor module derives its DC power from the 
target system through the 80386 socket. It requires 
1500mA, including the 80386 current. The isolation 
board requires an additional 475mA. 

The processor must be socketed. The printed circuit 
board design should locate the processor socket at 
the physical ends of the printed circuit board traces 
that connect the processor to the other logic of the 
target system. This reduces transmission line noise. 
Additionally, if the target system is enclosed in a box, 
pin one of the processor socket should be oriented to 
make connecting the processor module or target- 
adapter cable (TAG) easier. 

The emulator uses the 386 microprocessor’s pins C7, 
E13, and F13. The 80386 High Performance 32-Bit 
Microprocessor With Integrated Memory 
Management data sheet specifies these pins as “N/C” 
(no connect). If the target system uses any of these 
pins, you must do one of the following: , 

• Use the bus isolation board. 

• Use the target-adapter cable (TAG). 

• Build an adapter to disconnect pins C7, E13, and 
F13 (i.e., a socket with these pins removed). 

Above, ICE, Intel386, 386, 386SX, and 376 are trademarks of 
Intel Corporation. GPIB-PCII, GPIB-PCIIA, and MC-GPIB are 
trademarks of National Instruments Corporation. IBM, PC/AT, 
and Personal System/2 are registered trademarks of 
International Business Machines Corporation. 

For direct information on Intel’s Development Tools, or 
for the number of your nearest sales office or 
distributor, call 800-874-6835 (U.S.). For information 
or literature on additional Intel products, call 
800-548-4725 (U.S. and Canada). 
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Suite 116 

Canoga Park 91303 
Tel: (818) 704-8500 
FAX: (818) 340-1144 

tintel Corp. 

2250 E. Imperial Highway 
Suite 218 
El Segundo 90245 
Tel: (213) 640-6040 
FAX: (213) 640-7133 

Intel Corp. 

1510 Arden Way 
Suite 101 

Sacramento 95815 
Tel: (916) 920-8096 
FAX: (916) 920-8253 

tintel Corp. 

9665 Chesapeake Dr. 

Suite 325 
San Diego 95123 
Tel: (619) 292-8086 
FAX: (619) 292-0628 

tintel Corp.* 

400 N. Tustin Avenue 
Suite 450 
Santa Ana 92705 
Tel: (714) 835-9642 
TWX: 910-595-1114 
FAX: (714) 541-9157 

tintel Corp.* 

San Tomas 4 

2700 San Tomas Expressway 

2nd Floor 

Santa Clara 95051 

Tel: (408) 986-8086 

TWX: 910-338-0255 

FAX: (408) 727-2620 

COLORADO 

Intel Corp. 

4445 Northpark Drive 
Suite 100 

Colorado Springs 80907 
Tel: (719) 594-6622 
FAX: (303) 594-0720 

tintel Corp.* 

650 S. Cherry St. 

Suite 915 
Denver 80222 
Tel: (303) 321-8086 
TWX: 910-931-2289 
FAX: (303) 322-8670 


DOMESTIC SALES OFFICES 


CONNECTICUT 

tintel Cora. 

301 Lee Farm Corporate Park 
83 Wooster Heights Rd. 
Danbury 06810 
Tel: (203) 748-3130 
FAX: (203) 794-0339 

FLORIDA 

tintel Corp. 

6363 N.W. 6th Way 
Suite 100 

Ft. Lauderdale 33309 
Tel: (305) 771-0600 
TWX: 510-956-9407 
FAX: (305) 772-8193 

tintel Corp. 

5850 T.G. Lee Blvd. 

Suite 340 
Orlando 32822 
Tel: (407) 240-8000 
FAX: (407) 240-8097 

Intel Corp. 

11300 4th Street North 
Suite 170 

St. Petersburg 33716 
Tel: (813) 577-2413 
FAX: (813) 578-1607 

GEORGIA 

Intel Corp. 

20 Technology Parkway, N.W. 
Suite 150 
Norcross 30092 
Tel: (404) 449-0541 
FAX: (404) 605-9762 

ILLINOIS 

tintel Corp.* 

300 N. Martingale Road 
Suite 400 

Schaumburg 60173 
Tel: (312) 605-8031 
FAX: (312) 706-9762 

INDIANA 

tintel Corp. 

8777 Purdue Road 
Suite 125 
Indianapolis 46268 
Tel: (317) 875-0623 
FAX: (317) 875-8938 

IOWA 
Intel Corp. 

1930 St. Andrews Drive N.E. 
2nd Fioor 

Cedar Rapids 52402 
Tei: (319) 393-1294 

KANSAS 

tintel Corp. 

10985 Cody St. 

Suite 140, Bldg. D 
Overland Park 66210 
Tel: (913) 345-2727 
FAX: (913) 345-2076 

MARYLAND 

tintel Corp.* 

10010 Junction Dr. 

Suite 200 

Annapolis Junction 20701 
Tel: (301) 206-2860 
FAX: (301) 206-3677 
(301) 206-3678 


MASSACHUSETTS 

tintel Corp.* 

Westford Corp. Center 
3 Carlisle Road 
2nd Floor 
Westford 01886 
Tel: (508) 692-3222 
TWX: 710-343-6333 
FAX: (508) 692-7867 

MICHIGAN 
tintel Corp. 

7071 Orchard Lake Road 
Suite 100 

West Bloomfield 48322 
Tel: (313) 851-8096 
FAX: (313) 851-8770 

MINNESOTA 

tintel Corp. 

3500 W. 80th St. 

Suite 360 

Bloomington 55431 ' 

Tel: (612) 835-6722 
TWX: 910-576-2867 
FAX: (612) 831-6497 

MISSOURI 
tintel Corp. 

4203 Earth City Expressway 
Suite 131 
Earth City 63045 
Tel: (314) 291-1990 
FAX: (314) 291-4341 

NEW JERSEY 
tintel Corp.* 

Parkway 109 Office Center 
328 Newman Springs Road 
Red Bank 07701 
Tel: (201) 747-2233 
FAX: (201) 747-0983 
tinte! Corp. 

280 Corporate Center 
75 Livingston Avenue 
First Floor 
Roseland 07068 
Tel: (201) 740-0111 
FAX: (201) 740-0626 

NEW YORK 
Intel Corp.* 

850 Cross Keys Office Park 
Fairport 14450 
Tel: (716) 425-2750 
TWX: 510-253-7391 
FAX: (716) 223-2561 

tintel Corp.* 

2950 Expressway Dr., South 
Suite 130 
Islandia 11722 
Tel: (516) 231-3300 
TWX: 510-227-6236 
FAX: (516) 348-7939 

tintel Corp. 

Wastage Business Center 
Bldg. 300, Route 9 
Fishkill 12524 
Tel: (914) 897-3860 
FAX: (914) 897-3125 

NORTH CAROLINA 
tintel Corp. 

5800 Executive Center Dr. 
Suite 105 
Charlotte 28212 
Tel: (704) 568-8966 
FAX: (704) 535-2236 


Intel Corp. 

5540 Centerview Dr. 

Suite 215 
Raleigh 27606 
Tel: (919) 851-9537 
FAX: (919) 851-8974 

OHIO 

tintel Corp.* 

3401 Park Center Drive 
Suite 220 
Dayton 45414 
Tel: (513) 890-5350 
TWX: 810-450-2528 
FAX: (513) 890-8658 

tintel Corp.* 

25700 Science Park Dr. 

Suite 100 
Beachwood 44122 
Tel: (216) 464-2736 
TWX: 810-427-9298 
FAX: (804) 282-0673 

OKLAHOMA 

Intel Corp. 

6801 N. Broadway 
Suite 115 

Oklahoma City 73162 
Tel: (405) 848-8086 
FAX: (405) 840-9819 

OREGON 
tintel Corp. 

15254 N.W. Greenbrier Parkway 

Building B 

Beaverton 97005 

Tel: (503) 645-8051 

TWX: 910-467-8741 

FAX: (503) 645-8181 

PENNSYLVANIA 

tintel Corp.* 

455 Pennsylvania Avenue 
Suite 230 

Fort Washington 19034 
Tel: (215) 641-1000 
TWX: 510-661-2077 
FAX: (215) 641-0785 

tintel Corp.* 

400 Penn Center Blvd. 

Suite 610 
Pittsburgh 15235 
Tel: (412) 823-4970 
FAX: (412) 829-7578 

PUERTO RICO 

tintel Corp. 

South Industrial Park 
P.O. Box 910 
Las Piedras 00671 
Tel: (809) 733-8616 


TEXAS 

Intel Corp. 

891 1 Capital of Texas Hwy. 
Austin 78759 
Tel: (512) 794-8086 
FAX: (512) 338-9335 

tintel Corp.* 

12000 Ford Road 
Suite 400 
Dallas 75234 
Tel: (214) 241-8087 
FAX: (214) 484-1180 


tintel Corp.* 

7322 S.W. Freeway 
Suite 1490 
Houston 77074 
Tel: (713) 988-8086 
TWX: 910-881-2490 
FAX: (713) 988-3660 

UTAH 

tintel Corp. 

428 East 6400 South 
Suite 104 
Murray 84107 
Tel: (801) 263-8051 
FAX: (801) 268-1457 

VIRGINIA 

tintel Corp. 

1504 Santa Rosa Road 
Suite 108 
Richmond 23288 
Tel: (804) 282-5668 
FAX: (216) 464-2270 

WASHINGTON 

tintel Corp. 

155 108th Avenue N.E. 
Suite 386 
Bellevue 98004 
Tel: (206) 453-8086 
TWX: 910-443-3002 
FAX: (206) 451-9556 
Intel Corp. 

408 N. Mullan Road 
Suite 102 
Spokane 99206 
Tel: (509) 928-8086 
FAX: (509) 928-9467 

WISCONSIN 

Intel Corp. 

330 S. Executive Dr. 
Suite 102 
Brookfield 53005 
Tel: (414) 784-8087 
FAX: (414) 796-2115 

CANADA 


BRITISH COLUMBIA 

Intel Semiconductor of 
Canada, Ltd. 

4585 Canada Way 
Suite 202 
Burnaby V5G 4L6 
Tel: (604) 298-0387 
FAX: (604) 298-8234 


ONTARIO 


tintel Semiconductor of 
Canada, Ltd. 

2650 Queensview Drive 
Suite 250 
Ottawa K2B 8H6 
Tel: (613) 829-9714 
FAX: (613) 820-5936 


tintel Semiconductor of 
Canada, Ltd. 

1 90 Attwell Drive 
Suite 500 
Rexdale M9W 6H8 
Tel: (416) 675-2105 
FAX: (416) 675-2438 


QUEBEC 

Intel Semiconductor of 
Canada, Ltd. 

620 St. Jean Boulevard 
Pointe Claire H9R 3K2 
Tel: (514) 694-9130 
FAX: 514-694-0064 


tSales and Service Office 
*Field Application Location 


Intel 


ALABAMA 

Arrow Electronics, Inc. 

1015 Henderson Road 
Huntsville 35805 
Tel: (205) 837-6955 

tHamilton/Avnet Electronics 
4940 Research Drive 
Huntsville 35805 
Tel: (205) 837-7210 
TWX: 810-726-2162 

Pioneer/T echnologies Group, Inc. 
4825 University Square 

Tel:’ (205) 837-9300 
TWX: 810-726-2197 

ARIZONA 

tHamilton/Avnet Electronics 
505 S. Madison Drive 
Tempe 85281 
Tel: (602) 231-5140 
TWX: 910-950-0077 

Hamilton/Avnet Electronics 
30 South McKiemy 
Chandler 85226 
Tel: (602) 961-6669 
TWX: 910-950-0077 

Arrow Electronics, Inc. 

4134 E. Wood Street 
Phoenix 85040 
Tel: (602) 437-0750 
TWX: 910-951-1550 

Wyle Distribution Group 
17855 N. Black Canyon Hwy. 
Phoenix 85023 
Tel: (602) 249-2232 
TWX: 910-951-4282 

CALIFORNIA 

Arrow Electronics, Inc. 

10824 Hope Street 
Cypress 90630 
Tel: (714) 220-6300 

Arrow Electronics, Inc. 

19748 Dearborn Street 
Chatsworth 91311 
Tel: (213) 701-7500 
TWX: 910-493-2086 

tArow Electronics, Inc. 

521 Weddell Drive 
Sunnyvale 94086 
Tel: (408) 745-6600 
TWX: 910-339-9371 

Arrow Electronics, Inc. 

951 1 Ridgehaven Court 
San Diego 92123 
Tel: (619) 565-4800 
TWX: 888-064 

tArrow Electronics, Inc. 

2961 Dow Avenue 
Tustin 92680 
Tel: (714) 838-5422 
TWX: 910-595-2860 

tAvnet Electronics 
350 McCormick Avenue 
Costa Mesa 92626 
Tel: (714) 754-6071 
TWX: 910-595-1928 

tHamilton/Avnet Electronics 
1175 Bordeaux Drive 
Sunnyvale 940S6 
Tel: (408) 743-3300 
TWX: 910-339-9332 

tHamilton/Avnet Electronics 
4545 Ridgeview Avenue 
San Diego 92123 
Tel: (619) 571-7500 
TWX: 910-595-2638 

tHamilton/Avnet Electronics 
9650 Desoto Avenue 
Chatsworth 91311 
Tel: (818) 700-1161 


DOMESTIC DISTRIBUTORS 


tHamilton Electro Sales 
10950 W. Washington Blvd. 
Culver City 20230 
Tel: (213) 558-2458 
TWX: 910-340-6364 

Hamilton Electro Sales 
1361B West 190th Street 
Gardena 90248 
Tel: (213) 217-6700 

tHamilton/Avnet Electronics 
3002 ‘G’ Street 
Ontario 91 761 

TaI. it'iAS 


tAvnet Electronics 
20501 Plummer 
Chatsworth 91351 
Tel: (213) 700-6271 
TWX: 910-494-2207 

tHamilton Electro Sales 
3170 Pullman Street 
Costa Mesa 92626 
Tel: (714) 641-4150 
TWX: 910-595-2638 

tHamilton/Avnet Electronics 
4103 Northgate Blvd. 
Sacramento 95834 
Tel: (916) 920-3150 

Wyle Distribution Group 
124 Maryland Street 
El Segundo 90254 
Tel: (213) 322-8100 

Wyle Distribution Group 
7382 Lampson Ave. 

Garden Grove 92641 
Tel: (714) 891-1717 
TWX: 910-348-7140 or 71 1 1 

Wyle Distribution Group 
11151 Sun Center Drive 
Rancho Cordova 95670 
Tel: (916) 638-5282 

tWyle Distribution Group 
9525 Chesapeake Drive 
San Diego 92123 
Tel: (619) 565-9171 
TWX: 910-335-1590 

tWyle Distribution Group 
3000 Bowers Avenue 
Santa Clara 95051 
Tel: (408) 727-2500 
TWX: 910-338-0296 

tWyle Distribution Group 
17872 Cowan Avenue 
Irvine <1P714 
Tel: (714) 863-9953 
TWX: 910-595-1572 

Wyle Distribution Group 
26677 W. Agoura Rd. 
Calabasas 91302 
Tel: (818) 880-9000 
TWX: 372-0232 


COLORADO 

Arrow Electronics, Inc. 

7060 South Tucson Way 
Englewood 80112 
Tel: (303) 790-4444 

tHamilton/Avnet Electronics 
8765 E. Orchard Road 
Suite 708 
Englewood 801 1 1 
Tel: (303) 740-1017 
TWX: 910-935-0787 


tWyle Distribution Group 
451 E. 124th Avenue 
Thornton 80241 
Tel: (303) 457-9953 
TWX: 910-936-0770 


CONNECTICUT 

tArrow Electronics, Inc. 

12 Beaumont Road 
Wallingford 06492 
Tel: (203) 265-7741 
TWX: 710-476-0162 

Hamilton/Avnet Electronics 
Commerce Industrial Park 
Commerce Drive 
Danbury 06810 
Tel: (203) 797-2800 
TWX: 710-456-9974 

tPioneer Electronics 
112 Main Street 
Norwalk 06851 
Tel: (203) 853-1515 
TWX: 710-468-3373 


FLORIDA 

tArrow Electronics, Inc. 
400 Fairway Drive 
Suite 102 

Deerfield Beach 33441 
Tel: (305) 429-8200 
TWX: 510-955-9456 


Arrow Electronics, Inc. 
37 Skyline Drive 
Suite 3101 
Uke Marv 32746 
Tel: (407) 323-0252 
TWX: 510-959-6337 


tHamilton/Avnet Electronics 
6801 N.W. 15th Way 
Ft. Lauderdale 33309 
Tel: (305) 971-2900 
TWX: 510-956-3097 

tHamilton/Avnet Electronics 
3197 Tech Drive North 
St. Petersburg 33702 
Tel: (813) 576-3930 
TWX: 810-863-0374 

tHamilton/Avnet Electronics 
6947 University Boulevard 
Winter Park 32792 
Tel: (305) 628-3888 
TWX: 810-853-0322 

tPioneer/Technologies Group, Inc. 
337 S. Lake Blvd. 

Alta Monte Springs 32701 
Tel: (407) 834-9090 
TWX: 810-853-0284 

Pioneer/Technologies Group, Inc. 

Deetield Beach 33442 
Tel: (305) 428-8877 
TWX: 510-955-9653 


GEORGIA 

tArrow Electronics, Inc. 

3155 Northwoods Parkway 
Suite A 

Norcross 30071 
Tel: (404) 449-8252 
TWX: 810-766-0439 

tHamilton/Avnet Electronics 
5825 D Peachtree Corners 
Norcross 30092 
Tel: (404) 447-7500 
TWX: 810-766-0432 

Pioneer/Technoiogies Group, Inc. 
3100 F Northwoods Place 
Norcross 30071 
Tel: (404) 448-1711 
TWX: 810-766-4515 

ILLINOIS 

Arrow Electronics, Inc. 

1140 W. Thorndale 
Itasca 60143 
Tel: (312) 250-0500 
TWX: 312-250-0916 


tHamilton/Avnet Electronics 
1130 Thorndale Avenue 
Bensenville 60106 
Tel: (312) 860-7780 
TWX: 910-227-0060 

MTI Systems Sales 
1100 W. Thorndale 
Itasca 60143 
Tel: (312) 773-2300 

tPioneer Electronics 
1551 Carmen Drive 
Elk Grove Village 60007 
Tel: (312) 437-9680 
TWX: 910-222-1834 


INDIANA 

tArrow Electronics, Inc. 

2495 Directors Row, Suite H 
Indianapolis 46241 
Tel: (317) 243-9353 
TWX: 810-341-3119 

Hamilton/Avnet Electronics 
485 Gradle Drive 
Carmel 46032 
Tel: (317) 844-9333 
TWX: 810-260-3966 

tPioneer Electronics 
6408 Castleplace Drive 
Indianapolis 46250 
Tel: (317) 849-7300 
TWX: 810-260-1794 


IOWA 

Hamilton/Avnet Electronics 
915 33rd Avenue, S.W. 
Cedar Rapids 52404 
Tel: (319) 362-4757 

KANSAS 

Arrow Electronics 
8208 Melrose Dr., Suite 210 
Lenexa 66214 
Tel: (913) 541-9542 

tHamilton/Avnet Electronics 
9219 Quivera Road 
Overland Park 66215 
Tel: (913) 888-8900 
TV’^X: 910-743-0005 

Pioneer/Tec Gr. 

10551 Lockman Rd. 

Lenexa 66215 
Tel: (913) 492-0500 

KENTUCKY 

Hamilton/AvnAt Electronics 
1051 D. Newton Park 
Lexington 4051 1 
Tel: (606) 259-1475 

MARYLAND 

Arrow Electronics, Inc. 

8300 Guilford. Drive 
Suite H, River Center 
Columbia 21046 
Tel: (301) 995-0003 
TWX: 710-236-9005 

Hamilton/Avnet Electronics 
6822 Oak Hall Lane 
Columbia 21045 
Tel: (301) 995-3500 
TWX: 710-862-1861 


Arrow Electronics, Inc. 

7524 Standish Place 
Rockville 20855 
Tel: 301-424-0244 

MASSACHUSETTS 

Arrow Electronics, Inc. 

25 Upton Dr. 

Wilmington 01887 
Tel: (617) 935-5134 
tHamilton/Avnet Electronics 
10D Centennial Drive 
Peabody 01960 
Tfti- r6i7i .‘tni.7A.'^n 
TWX; 710-393-0382 
MTI Systems Sales 
83 Cambridge St. 

Burlington 01813 
Pioneer Electronics 
44 Hartwell Avenue 
Lexington 02173 
Tel; (617) 861-9200 
TWX: 710-326-6617 

MICHIGAN 

Arrow Electronics, Inc. 

755 Phoenix Drive 
Ann Arbor 48104 
Tel: (313) 971-8220 
TWX; 810-223-6020 
Hamilton/Avnet Electronics 
2215 29th Street S.E. 

Space A5 

Grand Rapids 49508 
Tel: (616) 243-8805 
TWX: 810-274-6921 
Pioneer Electronics 
4504 Broadmoor S.E. 

Grand Rapids 49508 
FAX: 616-698-1831 
tHamilton/Avnet Electronics 
32487 Schoolcraft Road 
Uvonia 48150 
Tel: (313) 522-4700 
TWX: 810-282-8775 
tPioneer/Michigan 
13485 Stamford 
Livonia 48150 
Tel: (313) 525-1800 
TWX: 810-242-3271 

MINNESOTA 
tArrow Electronics, Inc. 
5230 W. 73rd Street 


ineuiiiiiuii/Avimi Eieoironics 
12400 Whitewater Drive 
Minnetonka 55434 
Tel: (S12) 332-0600 
tPioneer Electronics 
7625 Golden Triange Dr. 
Suite G 

Eden Prairi 55343 
Tel: (612) 944-3355 

MISSOURI 

tArrow Electronics, Inc. 
2380 Schuetz 
St. Louis 63141 
Tel: (314) 567-6888 
TWX: 910-764-0882 
tHamilton/Avnet Electronics 
13743 Shoreline Court 
Earth City 63045 
Tel: (314) 344-1200 
TWX: 910-762-0684 


Edina 55435 
Tel; (612) 830-18 
TWX; 910-576-31 


tMesa Technology Corp. 

9720 Patuxent Woods Dr. 
Columbia 21046 
Tel: (301) 290-8150 
TWX: 710-828-9702 

tPioneer/Technologies Group, Inc. 
9100 Gaither Road 
Gaithersburg 20877 
Tel: (301) 921-0660 
TWX: 710-828-0545 


NEW HAMPSHIRE 

tArrow Electronics, Inc. 

3 Perimeter Road 
Manchester 03103 
Tel; (603) 668-6968 
TWX: 710-220-1684 
tHamilton/Avnet Electronics 
444 E. Industrial Drive 
Manchester 03103 
Tel: (603) 624-9400 


tMicrocomputef System Technical Distributor Center 



inter 

DOMESTIC DISTRIBUTORS (Contd.) 


NEW JERSEY 

tArrow Electronics, Inc. 
Four East Stow Road 
Unit 1 1 

Marlton 08053 
Tel: (609) 596-8000 
TWX: 710-897-0829 

tArrow Electronics 
6 Century Drive 
Parsipanny 07054 
Tel: (201) 538-0900 

tHamilton/Avnet Electronics 
1 Keystone Ave., Bldg. 36 
Cherry Hill 08003 
Tel: (609) 424-0110 
TWX: 710-940-0262 

tHamilton/Avnet Electronics 
10 Industrial 
Fairfield 07006 
Tel: (201) 575-5300 
TWX: 710-734-4388 

tMTI Systems Sales 
37 Kulick Rd. 

Fairfield 07006 
Tel: (201) 227-5552 

tPioneer Electronics 
45 Route 46 
Pinebrook 07058 
Tel: (201) 575-3510 
TWX: 710-734-4382 


NEW MEXICO 

Alliance Electronics Inc. 
11030 Cochiti S.E. 
Albuquerque 87123 
Tel: (505) 292-3360 
TWX: 910-989-1151 

Hamilton/Avnet Electronics 
2524 Baylor Drive S.E. 
Albuquerque 87106 
Tel: (505) 765-1500 
TWX: 910-989-0614 


NEW YORK 


tArrow Electronics, Inc. 
3375 Brighton Henrietta 
Townline Rd. 

Rochester 14623 
Tel: (716) 275-0300 
TWX: 510-253-4766 

Arrow Electronics, Inc. 
20 Oser Avenue 
Hauppauge 11788 
Tel: (516) 231-1000 
TWX: 510-227-6623 

Hamilton/Avnet 
933 Motor Parkway 
Hauppauge 11788 
Tel: (516) 231-9800 
TWX: 510-224-6166 


tHamilton/Avnet Electronics 
333 Metro Park 
Rochester 14623 
Tel: (716) 475-9130 
TWX: 510-253-5470 


tHamilton/Avnet Electronics 
103 Twin Oaks Drive 
Syracuse 13206 
Tel: (315) 437-0288 
TWX: 710-541-1560 


tMTI Systems Sales 
38 Harbor Park Drive 
Port Washington 1 1 050 
Tel: (516) 621-6200 


tPioneer Electronics 
68 Corporate Drive 
Binghamton 13904 
Tel: (607) 722-9300 
TWX: 510-252-0893 

Pioneer Electronics 
40 Oser Avenue 
Hauppauge 11787 
Tel: (516) 231-9200 

tPioneer Electronics 
60 Crossway Park West 
Woodbury, Long Island 11797 
Tel: (516) 921-8700 
TWX: 510-221-2184 

tPioneer Electronics 
840 Fairport Park 
Fairport 14450 
Tel: (716) 381-7070 
TWX: 510-253-7001 

NORTH CAROLINA 

tArrow Electronics, Inc. 

5240 Greensdairy Road 
Raleigh 27604 
Tel: (919) 876-3132 
TWX: 510-928-1856 

tHamilton/Avnet Electronics 
3510 Spring Forest Drive 
Raleigh 27604 
Tel: (919) 878-0819 
TWX: 510-928-1836 

Pioneer/Technologies Group, Inc. 
9801 A-Southern Pine Blvd. 
Charlotte 28210 
Tel: (919) 527-8188 
TWX: 810-621-0366 


OHIO 

Arrow Electronics, Inc. 

7620 McEwen Road 
Centerville 45459 
Tel: (513) 435-5563 
TWX: 810-459-1611 

tArrow Electronics, Inc. 

6238 Cochran Road 
Solon 44139 
Tel: (216) 248-3990 
TWX: 810-427-9409 

tHamilton/Avnet Electronics 
954 Senate Drive 
Dayton 45459 
Tel: (513) 439-6733 
TWX: 810-450-2531 

Hamilton/Avnet Electronics 
4588 Emery Industrial Pkwy. 
Warrensville Heights 44128 
Tel: (216) 349-5100 
TWX: 810-427-9452 

tHamilton/Avnet Electronics 
777 Brooksedge Blvd. 
Westerville 43081 
Tel: (614) 882-7004 

tPioneer Electronics 
4433 Interpoint Boulevard 
Dayton 45424 
Tel: (513) 236-9900 
TWX: 810-459-1622 

tPioneer Electronics 
4800 E. 131st Street 
Cleveland 44105 
Tel: (216) 587-3600 
TWX: 810-422-2211 


OKLAHOMA 

Arrow Electronics, Inc. 
1211 E. 51st St., Suite 101 
Tulsa 74146 
Tel: (918) 252-7537 


tHamilton/Avnet Electronics 
12121 E. 51st St., Suite 102A 
Tulsa 74146 
Tel: (918) 252-7297 


OREGON 

tAlmac Electronics Corp. 

1885 N.W. 169th Place 
Beaverton 97005 
Tel: (503) 629-8090 
TWX: 910-467-8746 

tHamilton/Avnet Electronics 
6024 S.W. Jean Road 
Bldg. C, Suite 10 
Lake Oswego 97034 
Tel: (503) 635-7848 
TWX: 910-455-8179 

Wyle Distribution Group 

5250 N.E. Elam Young Parkway 

Suite 600 

Hillsboro 97124 

Tel: (503) 640-6000 

TWX: 910-460-2203 


PENNSYLVANIA 

Arrow Electronics, Inc. 

650 Seco Road 
Monroeville 15146 
Tel: (412) 856-7000 

Hamilton/Avnet Electronics 
2800 Liberty Ave. 

Pittsburgh 15238 
Tel: (412) 281-4150 

Pioneer Electronics 
259 Kappa Drive 
Pittsburgh 15238 
Tel: (412) 782-2300 
TWX: 710-795-3122 

tPioneer/Technologies Group, Inc. 

Delaware Valley 

261 Gibralter Road 

Horsham 19044 

Tel: (215) 674-4000 

TWX: 510-665-6778 


TEXAS 

tArrow Electronics, Inc. 
3220 Commander Drive 
Carrollton 75006 
Tel: (214) 380-6464 
TWX: 910-860-5377 

tArrow Electronics, Inc. 
10899 Kinghurst 
Suite 100 
Houston 77099 
Tel: (713) 530-4700 
TWX: 910-880-4439 

tArrow Electronics, Inc. 
2227 W. Braker Lane 
Austin 78758 
Tel: (512) 835-4180 
TWX: 910-874-1348 

tHamilton/Avnet Electronics 
1807 W. Braker Une 
Austin 78758 
Tel: (512) 837-8911 
TWX: 910-874-1319 

tHamilton/Avnet Electronics 
2111 W. Walnut Hill Une 
Inring 75038 
Tel: (214) 550-6111 
TWX: 910-860-5929 

tHamilton/Avnet Electronics 
4850 Wright Rd., Suite 190 
Stafford 77477 
Tel: (713) 240-7733 
TWX: 910-881-5523 


tPioneer Electronics 
1 8260 Kramer 
Austin 78758 
Tel: (512) 835-4000 
TWX: 910-874-1323 

tPioneer Electronics 
13710 Omega Road 
Dallas 75234 
Tel: (214) 386-7300 
TWX: 910-850-5563 

tPioneer Electronics 
5853 Point West Drive 
Houston 77036 
Tel: (713) 988-5555 
TWX: 910-881-1606 

Wyle Distribution Group 
1810 Greenville Avenue 
Richardson 75081 
Tel: (214) 235-9953 

UTAH 

Arrow Electronics 
1946 Parkway Blvd. 

Salt Uke City 84119 
Tel: (801) 973-6913 

tHamilton/Avnet Electronics 
1585 West 2100 South 
Salt Uke City 84119 
Tel: (801) 972-2800 
TWX: 910-925-4018 

Wyle Distribution Group 
1325 West 2200 South 
Suite E 

West Valley 84119 
Tel: (801) 974-9953 

WASHINGTON 

tAlmac Electronics Corp. 
14360 S.E. Eastgate Way 
Bellevue 98007 
Tel: (206) 643-9992 
TWX: 910-444-2067 

Arrow Electronics, Inc. 
19540 68th Ave. South 
Kent 98032 
Tel: (206) 575-4420 

tHamilton/Avnet Electronics 
14212 N.E. 21st Street 
Bellevue 98005 
Tel: (206) 643-3950 
TWX: 910-443-2469 

Wyle Distribution Group 
15385 N.E. 90th Street 
Redmond 98052 
Tel: (206) 881-1150 


WISCONSIN 

Arrow Electronics, Inc. 

200 N. Patrick Blvd., Ste. 100 
Brookfield 53005 
Tel: (414) 767-6600 
TWX: 910-262-1193 

Hamilton/Avnet Electronics 
2975 Moorland Road 
New Berlin 53151 
Tel: (414) 784-4510 
TWX: 910-262-1182 


CANADA 


ALBERTA 

Hamilton/Avnet Electronics 
2816 21st Street N.E. 
Calgary T2E 6Z3 
Tel: (403) 230-3586 
TWX: 03-827-642 


Zentronics 
Bay No. 1 

3300 14th Avenue N.E. 
Calgary T2A 6J4 
Tel: (403) 272-1021 

BRITISH COLUMBIA 

tHamilton/Avnet Electronics 
105-2550 Boundary 
Burmalay V5M 3Z3 
Tel: (604) 437-6667 
Zentronics 

108-11400 Bridgeport Road 
Richmond V6X 1T2 
Tel: (604) 273-5575 
TWX: 04-5077-89 

MANITOBA 

Zentronics 

60-1313 Border Unit 60 
Winnipeg R3H 0X4 
Tel: (204) 694-1957 

ONTARIO 

Arrow Electronics, Inc. 

36 Antares Dr. 

Nepean K2E 7W5 
Tel: (613) 226-6903 
Arrow Electronics, Inc. 

1093 Meyerside 
Mississauga L5T 1 M4 
Tel: (416) 673-7769 
TWX: 06-218213 
tHamilton/Avnet Electronics 
6845 Rexwood Road 
Units 3-4-5 
Mississauga L4T 1 R2 
Tel: (416) 677-7432 
TWX: 610-492-8867 
Hamilton/Avnet Electronics 
6845 Rexwood Rd., Unit 6 
Mississauga L4T 1 R2 
Tel: (416) 277-0484 
tHamilton/Avnet Electronics 
190 Colonnade Road South 
Nepean K2E 7L5 
Tel: (613) 226-1700 
TWX: 05-349-71 
tZentronics 
8 Tilbury Court 
Brampton L6T 3T4 
Tel: (416) 451-9600 
TWX: 06-976-78 
tZentronics 
155 Colonnade Road 
Unit 17 

Nepean K2E 7K1 
Tel: (613) 226-8840 
Zentronics 
60-1313 Border St. 

Winnipeg R3H 014 
Tel: (204) 694-7957 

QUEBEC 

tArrow Electronics Inc. 

4050 Jean Talon Quest 
Montreal H4P 1W1 
Tel: (514) 735-5511 
TWX: 05-25590 
Arrow Electronics, Inc. 

500 Avenue St-Jean Baptiste 

Suite 280 

Quebec G2E 5R9 

Tel: (418) 871-7500 

FAX: 418-871-6816 

Hamilton/Avnet Electronics 

2795 Halpern 

St. Uurent H2E 7K1 

Tel: (514) 335-1000 

TWX: 610-421-3731 

Zentronics 

817 McCaffrey 

St. Uurent H4T 1M3 

Tel: (514) 737-9700 

TWX: 05-827-535 


tMicrocomputer System Technical Distributor Center 



EUROPEAN SALES OFFICES 


DENMARK 


WEST GERMANY ISRAEL 


NORWAY 


SWITZERLAND 


Intel Denmark A/S 
Glentevej 61 , 3rd Floor 
2400 Copenhagen NV 
Tel; (45) (31) 19 80 33 
TLX: 19567 


FINLAND 

Intel Finland OY 
Ruosilantie 2 
00390 Helsinki 
Tei: (358) 0 544 644 

TLX; 10Q002 


FRANCE 

intel Corporation S.A.R.L 
1 , Rue Edison-BP 303 
78054 St. Quentin-en-Yvelines 
Cedex 

Tei: (33) (1) 30 57 70 00 
TLX: 699016 


Intel Semiconductor GmbH* 

Intel Semiconductor Ltd.* 


Dornacher Strasse 1 

Atidim Industrial Park-Neve Sharet 

Hvamveien 4-PO Box 92 

8016 Feidkirchen bei Muenchen 

P.O. Box 43202 

2013 Skjetten 

Tel: (49) 089/90992-0 

Tel-Aviv 61430 

Tel: (47)' (6) 842 420 

TLX: 5-23177 

Tel: (972) 03-498080 

TLX: ‘7801 8 

Intel Semiconductor GmbH 
Hohenzollern Strasse 5 

TLX: 371215 

ITALY 

SPAIN 

3000 Hannover 1 

Tel: (49) 0511/344081 

Intel Corporation Italia S.p.A.* 

Intel Iberia S.A. 

TLX; 9-23625 

Milanofiori Palazzo E 

Zurbaran, 28 


20090 Assago 

28010 Madrid 

Intel Semiconductor GmbH 

Milano 

Toi* /34N 303.25.52 

Abraham Lincoln Strasse 16-18 

Tel: (39) (02) 89200950 

TLX; 46880 

6200 Wiesbaden 

TLX: 341286 

Tel: (49) 06121/7605-0 

TLX: 4-186183 

NETHERLANDS 

SWEDEN 

Intel Semiconductor GmbH 

Intel Semiconductor B.V.* 

Intel Sweden A.B.* 

Zettachring 10A 

Postbus 84130 

Dalvagen 24 

7000 Stuttgart 80 

3099 CC Rotterdam 

171 36 Solna 

Tel; (49) 0711/7287-280 

TLX: 7-254826 

Tel: (31) 10.407.11.11 

Tel: (46) 8 734 01 00 

TLX: 22283 

TLX: 12261 


Intel Semiconductor A.G. 
Zuerichstrasse 

8185 Winkel-Rueti bei Zuerich 
Tel: (41) 01/860 62 62 
TLX: 825977 


UNITED KINGDOM 

Intel Corporation (U.K.) Ltd.* 
Pipers Way 

Swindon, Wiltshire SN3 1 RJ 
761; (44) (07S3) SSoGCC 
TLX: 444447/8 


EUROPEAN DISTRIBUTORS/REPRESENTATIVES 


AUSTRIA 

Bacher Electronics G.m.b.H. 
Rotenmuehlgasse 26 
1120 Wien 

Tei: (43) (0222) 83 56 46 
TLX; 31532 

BELGIUM 

Inelco Belgium S.A. 

Av. des Croix de Guerre 94 
1120 Bruxelies 
Ooriogskruiseniaan, 94 
1120 Brussel 
Tel; (32) (02) 216 01 60 
TLX: 64475 or 22090 

DENMARK 

ITT-Multikomponent 
Naverland 29 
2600 Glostrup 
Tel: (45) (0) 2 45 66 45 
TLX: 33 355 

FINLAND 

OY Fintronic AB 
Melkonkatu 24A 
nn?in HpiQinWi 
Tel: (358) (0) 6926022 
TLX; 124224 

FRANCE 

/Mmex 

Zone industrielle d’Antony 
48, rue de I’Aubepine 
BP 102 

92164 Antony cedex 
Tel: (33) (1) 46 66 21 12 
TLX: 250067 

Jermyn-Generim 
60, rue des Gemeaux 
Silic 580 

94653 Rungis cedex 
Tel: (33) (1) 49 78 49 78 
TLX; 261585 

Metroiogie 
Tour d’Asnieres 
4, av. Laurent-Cely 
92606 Asnieres Cedex 
Tel: (33) (1) 47 90 62 40 
TLX: 611448 


Tekelec-Airtronic 
Cite des Bruyeres 
Rue Carle Vernet - BP 2 
92310 Sevres 
Tel: (33) (1) 45 34 75 35 
TLX: 204552 

WEST GERMANY 

Electronic 2000 AG 
Stahlgruberring 12 
8000 Muenchen 82 
Tei: (49) 089/42001-0 
TLX: 522561 

ITT Multikomponent GmbH 
Postfach 1265 
Bahnhofstrasse 44 
7141 Moeglingen 
Tel: (49) 07141/4879 
TLX: 7264472 

Jermyn GmbH 
Im Dachsstueck 9 
6250 Limburg 
Tel: (49) 06431/508-0 
TLX: 415257-0 

Metroiogie GmbH 
Meglingerstrasse 49 
8000 Muenchfin 71 
Tel: (49) 089/78042-0 
TLX; 5213189 

Proeieciron venrieos GmoM 
Max Planck Strasse 1-3 
6072 Dreieich 
Tel: (49) 06103/30434-3 
TLX: 417903 

IRELAND 

Micro Marketing Ltd. 
Glenageary Office Park 
Glenageary 
Co. Dublin 

Tel: (21) (353) (01) 85 63 25 
TLX: 31584 

ISRAEL 

Eastronics Ltd. 

1 1 Rozanis Street 
P.O.B. 39300 
Tel-Aviv 61392 
Tel: (972) 03-475151 
TLX: 33638 


ITALY 

Intesi 

Divisione ITT Industries GmbH 
Viale Milanofiori 
Palazzo E/5 
20090 Assago (Ml) 

Tel: (39) 02^24701 
TLX: 311351 

Lasi Elettronica S.p.A. 

V. le Fulvio Testi, 126 
20092 Cinisello Balsamo (Ml) 

Tel: (39) 02/2440012 
TLX: 352040 

Telcom S.r.l. 

Via M. Civitali 75 
20148 Milano 
Tel: (39) 02/4049046 
TLX: 335654 

ITT Multicomponents 
Viale Milanofiori E/5 
20090 /^sago (Ml) 

Tel: (39) 02/824701 
TLX: 311351 

Silverstar 

Via Dei Gracchi 20 
20146 Milano 

TpI- r.‘^Q^ nOMQQfil 

TLX: 332189 ” 

NETHERLANDS 

Koning en Hartman Elektrotechniek 
B.V. 

Energieweg 1 
2627 AP Delft 
Tel: (31) (0) 15/609906 
TLX: 38250 

NORWAY 

Nordisk Elektronikk (Norge) A/S 
Postboks 123 
Smedsvingen 4 
1364 Hvalstad 
Tel: (47) (02) 84 62 10 
TLX: 77546 

PORTUGAL 

ATD Portugal LDA 

Rua Dos Lusiados, 5 Sala B 

1300 Usboa 

Tel; (35) (1) 64 80 91 

TLX; 61562 


Ditram 

Avenida Miguel Bombarda, 133 
1000 Lisboa 
Tei: (35) (1) 54 53 13 
TLX: 14182 

SPAIN 

ATD Eiectronica, S.A. 

Plaza Ciudad de Viena, 6 
28040 Madrid 
Tel: (34) (1) 234 40 00 
TLX: 42477 

ITT-SESA 

Calle Miguel Angel, 21-3 
28010 Madrid 
Tei: (34) (1) 419 09 57 
TLX: 27461 

Metroiogia Iberica, S.A. 

Ctra. de Fuencarral, n.80 
28100 Alcobendas (Madrid) 

Tel: (34) (1) 653 86 11 

SWEDEN ' 

Nordisk Elektronik AB 
Torshamnsgatan 39 
Box 36 

IfUQnkicta 

Tel: (46) 08-03 46 30 ' 

TLX; 105 47 

SWITZERLAND 

Industrade A.G. 

Hertistrasse 31 
8304 Wallisellen 
Tel: (41) (01) 8328111 
TLX: 56788 

TURKEY 

EMPA Electronic 
Lindwurmstrasse 95A 
8000 Muenchen 2 
Tel: (49) 089/53 80 570 
TLX: 528573 

UNITED KINGDOM 

Accent Electronic Components Ltd. 
Jubilee House, Jubilee Road 
Letchworth, Herts SG6 1TL 
Tel: (44) (0462) 686666 
TLX; 826293 


Bytech-Comway Systems 
3 The Western Centre 
Western Road 
Bracknell RG12 1RW 
Tel: (44) (0344) 55333 
TLX: 847201 

Jermyn 
Vestry Estate 
Otford Road 
Sevenoaks 
KentTN14 5EU 
Tel: (44) (0732) 450144 
TLX; 95142 

MMD 

Unit 8 Southview Park 

Caversham 

Reading 

Berkshire RG4 OAF 
Tel: (44) (0734) 481666 
TLX: 846669 

Rapid Siiicon 
Rapid House 
Denmark Street 
High Wycombe 
Buckinghamshire HP1 1 2ER 
Tel: (44) (0494) 442266 
TLX: 837931 

Rapid Systems 
Rapid House 
Denmark Street 
High Wycombe 
Buckinghamshire HP11 2ER 
Tel: (44) (0494) 450244 
TLX: 837931 


YUGOSLAVIA 

H.R. Microelectronics Corp. 
2005 de la Cruz Blvd., Ste. 223 
Santa Clara, CA 95050 
U.S.A. 

Tel: (1) (408) 988-0286 
TLX: 387452 

Rapido Electronic Comoonents 
S.p.a. 

Via C. Beccaria, 8 
34133 Trieste 
Italia 


Tel: (39) 040/360555 
TLX: 460461 




INTERNATIONAL SALES OFFICES 


AUSTRALIA 

Intel Australia Pty. Ltd.* 

Spectrum Building 
200 Pacific Hwy., Level 6 
Crows Nest, NSE, 2065 
Tel: 612-957-2744 
FAX: 612-923-2632 

BRAZIL 

Intel Semicondutores do Brazil LTDA 
Av. Paulista, 1159-CJS 404/405 
01311 - Sao Paulo - S.P. 

Tel: 55-11-287-5899 
TLX: 3911153146 ISDB 
FAX: 55-11-287-5119 

CHINA/HONG KONG 

Intel PRC Corporation 
15/F, Office 1, Citic Bldg. 

Jian Guo Men Wai Street 
Beijing, PRC 
Tel: (1) 500-4850 
TLX: 22947 INTEL CN 
FAX: (1) 500-2953 

Intel Semiconductor Ltd.* 

10/F East Tower 
Bond Center 
Queensway, Central 
Hong Kong 
Tel: (5) 8444-555 
TLX: 63869 ISHLHK HX 
FAX: (5) 8681-989 


INDIA 


Intel Asia Electronics, Inc. 
4/2, Samrah Plaza 
St. Mark's Road 
Bangalore 560001 
Tel: 011-91-812-215065 
TLX: 9538452875 DCBY 
FAX: 091-812-215067 


JAPAN 


Intel Japan K.K. 

5-6 Tokodai, Tsukuba-shi 
Ibaraki, 300-26 
Tel: 0298-47-8511 
TLX: 3656-160 
FAX: 029747-8450 


Intel Japan K.K.* 
Daiichi Mitsugi Bldg. 

1 -8889 Fuchu-cho 
-Fuchu-shi, Tokyo 183 
Tel: 0423-60-7871 
FAX: 0423-60-0315 


Intel Japan K.K.* 

Bldg. Kumagaya 
2-69 Hon-cho 

Kumagaya-shi, Saitama 360 
Tel: 0485-24-6871 
FAX: 0485-24-7518 


Intel jMan K.K.* 

Mitsui-Seimei Musashi-kosugi Bldg. 
915 Shinmaruko, Nakahara-ku 
Kawasaki-shi, Kanagawa 21 1 
Tel: 044-733-701 1 
FAX: 044-733-7010 

Intel Japan K.K. 

Nihon Seimei Atsugi Bldg. 

1- 2-1 /Vsahi-machi 
Atsugi-shi, Kanagawa 243 
Tel: 0462-29-3731 

FAX: 0462-29-3781 

Intel Japan K.K.* 

Ryokuchi-Eki Bldg. 

2- 4-1 Terauchi 
Toyonaka-shi, Osaka 560 
Tel: 06-863-1091 

FAX: 06-863-1084 

Intel Japan K.K. 

Shinmaru Bldg. 

1-5-1 Marunouchi 
Chiyoda-ku, Tokyo 100 
Tel: 03-201-3621 
FAX: 03-201-6850 

Intel Japan K.K. 

Green Bldg. 

1-16-20 Nishiki 
Naka-ku, Nagoya-shi 
/ychi 450 
Tel: 052-204-1261 
FAX: 052-204-1285 


KOREA 

Intel Technology Asia, Ltd. 

16th Floor, Life Bldg. 

61 Yoido-dong, Youngdeungpo-Ku 
Seoul 150-010 

Tel: (2) 784-8186, 8286, 8386 
TLX: K29312 INTELKO 
FAX: (2) 784-8096 


SINGAPORE 

Intel Singapore Technology, Ltd. 

101 Thomson Road #21-05/06 

United Square 

Singapore 1130 

Tel: 250-781 1 

TLX: 39921 INTEL 

FAX: 250-9256 


TAIWAN 

Intel Technology Far East Ltd. 
8th Floor, No. 205 
Bank Tower Bldg. 

Tung Hua N. Road 
Taipei 

Tel: 886-2-716-9660 
FAX: 886-2-717-2455 


INTERNATIONAL DISTRIBUTORS/REPRESENTATIVES 


ARGENTINA 


INDIA 


DAFSYS S.R.L. 
Chacabuco, 90-6 PISO 
1069-Buenos Aires 
Tel: 54-1-334-7726 
FAX: 54-1-334-1871 

AUSTRALIA 

Email Electronics 
15-17 Hume Street 
Huntingdale, 3166 
Tel: 011-61-3-544-8244 
TLX: AA 30895 
FAX: 011-61-3-543-8179 

NSD-Australia 
205 Middleborough Rd. 
Box Hill, Victoria 3128 
Tel: 03 8900970 
FAX: 03 8990819 


BRAZIL 

Elebra Microelectron ica S.A. 

Rua Geraldo Flausina Gomes, 78 
10th Floor 

04575 - Sao Paulo - S.P. 

Tel: 55-11-534-9641 
TLX: 55-11-54593/54591 
FAX: 55-11-534-9424 


CHILE 

DIN Instruments 
Suecia 2323 
Casilla 6055, Correo 22 
Santiago 

Tel: 56-2-225-8139 
TLX: 240.846 RUD 


CHINA/HONG KONG 

Novel Precision Machinery Co., Ltd. 

Flat D, 20 Kingsford Ind. Bldg. 

Phase 1 , 26 Kwai Hei Street 

N.T., Kowloon 

Hong Kong 

Tel: 852-0-4223222 

TWX: 39114 JINMI HX 

FAX: 852-0-4261602 


Micronic Devices 
Arun Complex 
No. 65 D.V.G. Road 
Basavanagudi 
Bangalore 560 004 
Tel: 011-91-812-600-631 
011-91-812-611-365 
TLX: 9538458332 MDBG 

Micronic Devices 
No. 516 5th Floor 
Swastik Chambers 
Sion, Trombay Road 
Chembur 
Bombay 400 071 
TLX: 9531 171447 MDEV 

Micronic Devices 
25/8, 1st Floor 
Bada Bazaar Marg 
Old Rajinder Nagar 
New Delhi 110 060 
Tel: 011-91-11-5723509 
011-91-11-589771 
TLX: 031-63253 MDND IN 

Micronic Devices 

6-3-348/1 2A Dwarakapuri Colony 

Hyderabad 500 482 

Tel: 011-91-842-226748 

S&S Corporation 
1587 Kooser Road 
San Jose, CA 95118 
Tel: (408) 978-6216 
TLX: 820281 
FAX: (408) 978-8635 

JAPAN 

Asahi Electronics Co. Ltd. 

KMM Bldg. 2-14-1 Asano 
Kokurakita-ku 
Kitakyushu-shi 802 
Tel: 093-511-6471 
FAX: 093-551-7861 

C. Itoh Techno-Science Co., Ltd. 
4-8-1 Dobashi, Miyamae-ku 
Kawasaki-shi, Kanagawa 213 • 
Tel: 044-852-5121 
FAX: 044-877-4268 


Dia Semicon Systems, Inc. 

Flower Hill Shinmachi Higashi-kan 

1- 23-9 Shinmachi, Setagaya-ku 
Tokyo 154 

Tel: 03-439-1600 
FAX: 03-439-1601 

Okaya Koki 

2- 4-18 Sakae 
Naka-ku, Nagoya-shi 460 
Tel: 052-204-2916 

FAX: 052-204-2901 

Ryoyo Electro Corp. 

Konwa Bldg. 

1-12-22 Tsukiji 
Chuo-ku, Tokyo 104 
Tel: 03-546-5011 
FAX: 03-546-5044 

KOREA 


PSI de Mexico 
Francisco Villas Esq. Ajusto 
Cuernavaca- Morelos -CEP 62130 
Tel: 52-73-13-9412 
FAX: 52-73-17-5333 

NEW ZEALAND 

Email Electronics 
36 Olive Road 
Penrose, Auckland 
Tel: 011-64-9-591-155 
FAX: 011-64-9-592-681 

SINGAPORE 

Electronic Resources Re, Ltd. 

17 Harvey Road #04-01 
Singapore 1336 
Tel: 283-0888 
TWX: 56541 ERS 
FAX: 2895327 


J-Tek Corporation 

6th Floor, Government Pension Bldg. 

24-3 Yoido-dong 

Youngdeungpo-ku 

Seoul 150-010 

Tel: 82-2-780-8039 

TLX: 25299 KODIGIT 

FAX: 82-2-784-8391 


SOUTH AFRICA 

Electronic Building Elements 
1 78 Erasmus Street (off Watermeyet Street) 
Meyerspark, Pretoria, 0184 
Tel: 011-2712-803-7680 
FAX: 011-2712-803-8294 

TAIWAN 


Samsung Electronics 
150 Taepyungro-2 KA 
Chungku, Seoul 100-102 
Tel: 82-2-751-3985 
TLX: 27970 KORSST 
FAX: 82-2-753-0967 


MEXICO 


SSB Electronics, Inc. 

675 Palomar Street, Bldg. 4, Suite A 
Chula Vista, CA 92011 
Tel: (619) 585-3253 
TLX: 287751 CBALL UR 
F/\X: (619) 585-8322 


Dicopel S.A. 

Tochtli 368 Fracc. Ind. San Antonio 

/\zcapotzalco 

C.P. 02760-Mexico, D.F. 

Tel: 52-5-561-3211 
TLX: 177 3790 Dicome 
FAX: 52-5-561-1279 


Micro Electronics Corporation 
5/F 587, Ming Shen East Rd. 
Taipei, R.O.C. 

Tel: 886-2-501-8231 
FAX: 886-2-505-6609 
Sertek 

15/F 135, Section 2 
Chien Juo North Rd. 

Taipei 10479, R.O.C. 

Tel: (02) 5010055 
FAX: (02) 5012521 
(02) 5058414 

VENEZUELA 

P. Benavides S.A. 

Avilanes a Rio 
Residencia Kamarata 
Locales 4 AL 7 
La Candelaria, Caracas 
Tei: 58-2-574-6338 
TLX: 28450 
FAX: 58-2-572-3321 


*Field Application Location 




DOMESTIC SERVICE OFFICES 


ALABAMA 

*lntel Corp. 

5015 Bradford Dr., Suite 2 
Huntsville 35805 
Tel: (205) 830-4010 


ALASKA 

Intel Corp. 

c/o TransAlaska Data Systems 
300 Old Steese Hwy. 
Fairbanks 99701-3120 
Tel: (907) 452-4401 

Intel Cotp. 

c/o TransAlaska Data Systems 
1551 Lore Road 
Anchorage 99507 
Tel: (907) 522-1776 


ARIZONA 

*lntel Corp. 

11225 N. 28th Dr. 

Suite D-214 
Phoenix 85029 
Tel: (602) 869-4980 

‘Intel Corp. 

500 E. Fry Blvd., Suite M-15 
Sierra Vista 85635 
Tol: (602) 459-5010 


CALIFORNIA 

tintel Corp. 

21515 Vanowen St., Ste. 116 
Canoga Park 91303 
Tel: (818) 704-8500 

‘Intel Corp. 

2250 E. Imperial Hwy., Ste. ^18 
El Segundo 90245 
Tel: (213) 640-6040 

‘Intel Corp. 

1900 Prairie City Rd. 

Folsom 95630-9597 
Tel: (916) 351-6143 
1-800-468-3548 

Intel Corp. 

9665 Cheasapeake Dr., Suite 325 
San Diego 92123-1326 
Tel: (619) 292-8086 

“Intel Corp. 

400 N. Tustin Avenue 
Suite 450 
Santa Ana 92705 
Tel: (714) 835-9642 


“tintel Corp. 

San Tomas 4 

2700 San Tomas Exp., 2nd Floor 
Santa Clara 95051 
Tel: (408) 986-8086 
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Intel invented the microprocessor in 1971. 
Since that time we have continued our 
technological lead with faster and more 
capable products for microcomputing. 

And, as more and more functions are 
integrated on a single VLSI device, the 
resulting system requires less power, 
produces less heat and requires fewer 
mechanical connections — resulting in 
greater system reliability. 

This handbook contains extensive 
information on the 8086, 80286 and 386 
microprocessor families as well as memory 
controllers, floppy disk and hard disk 
controllers. An entire section is devoted to 
development tools for the 805 1 , 8096, 
8086/186/188, 80286 and 386 
microprocessors. 

Data sheets and applications notes offer 
many comprehensive charts, diagrams and 
instructions. Functional descriptions 
illuminate this exciting technology and 
make this book a “must have” for the 
systems designer. 
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